Skip to content

Commit 025c077

Browse files
committed
Have exploit call check. Have check report_vuln
1 parent f521e7d commit 025c077

File tree

1 file changed

+10
-1
lines changed

1 file changed

+10
-1
lines changed

modules/exploits/unix/webapp/actualanalyzer_ant_cookie_exec.rb

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,15 @@ def check
8181
return Exploit::CheckCode::Unknown
8282
elsif res.code == 200 && /title="ActualAnalyzer Lite \(free\) (?<version>[\d\.]+)"/ =~ res.body
8383
vprint_status("#{peer} - Found version: #{version}")
84-
return Exploit::CheckCode::Vulnerable if Gem::Version.new(version) <= Gem::Version.new('2.81')
84+
if Gem::Version.new(version) <= Gem::Version.new('2.81')
85+
report_vuln(
86+
host: rhost,
87+
name: self.name,
88+
info: "Module #{fullname} detected ActualAnalyzer #{version}",
89+
refs: references,
90+
)
91+
return Exploit::CheckCode::Vulnerable
92+
end
8593
return Exploit::CheckCode::Detected
8694
elsif res.code == 200 && res.body =~ /ActualAnalyzer Lite/
8795
return Exploit::CheckCode::Detected
@@ -235,6 +243,7 @@ def execute_command(cmd, opts = { analytics_host: vhost })
235243
end
236244

237245
def exploit
246+
return unless check == Exploit::CheckCode::Vulnerable
238247
analytics_hosts = []
239248
if datastore['ANALYZER_HOST'].blank?
240249
analytics_hosts << get_analytics_host_code

0 commit comments

Comments
 (0)