Skip to content

Commit fa64376

Browse files
committed
Adds comments for login function
1 parent a8e97e0 commit fa64376

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

lib/msf/core/exploit/remote/http/sitecore_xp.rb

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,10 @@ def initialize(info = {})
1010
super
1111
register_options([OptString.new('IDENTITY_VHOST', [true, 'Hostname of Sitecore identity server']) ])
1212
end
13-
13+
14+
#
15+
# Identifies against identity server. The Sitecore XP uses separate vhost to authenticate and gain session cookies.
16+
#
1417
def login_identitysrv(username, password)
1518
res = send_request_cgi({
1619
'uri' => normalize_uri(target_uri.path, 'Account', 'Login'),
@@ -98,7 +101,7 @@ def get_identity_cookies
98101

99102
res&.code == 302 && res.headers.fetch('Location', nil)&.include?('sitecore/admin')
100103
end
101-
104+
102105
def get_version
103106
res = send_request_cgi({
104107
'uri' => normalize_uri('sitecore', 'shell', 'sitecore.version.xml'),

0 commit comments

Comments
 (0)