Skip to content

Commit 04171c4

Browse files
committed
more updates to sevone.rb. hopefully all is covered.
1 parent 74bddcf commit 04171c4

File tree

1 file changed

+13
-7
lines changed

1 file changed

+13
-7
lines changed

modules/auxiliary/scanner/http/sevone_enum.rb

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -25,15 +25,14 @@ def initialize(info={})
2525
[
2626
'Karn Ganeshen <KarnGaneshen[at]gmail.com>',
2727
],
28-
'DisclosureDate' => 'June 07, 2013',
28+
'DisclosureDate' => 'Jun 07, 2013',
2929
'License' => MSF_LICENSE
3030
))
3131
register_options(
3232
[
33-
Opt::RPORT(8443),
33+
Opt::RPORT(80),
3434
OptString.new('USERNAME', [false, 'A specific username to authenticate as', 'admin']),
35-
OptString.new('PASSWORD', [false, 'A specific password to authenticate with', 'SevOne']),
36-
OptString.new('STOP_ON_SUCCESS', [true, 'Stop guessing when a credential works for a host', true])
35+
OptString.new('PASSWORD', [false, 'A specific password to authenticate with', 'SevOne'])
3736
], self.class)
3837
end
3938

@@ -61,7 +60,7 @@ def is_app_sevone?
6160

6261
if (res and res.code.to_i == 200 and res.headers['Set-Cookie'].include?('SEVONE'))
6362
version_key = /Version: <strong>(.+)<\/strong>/
64-
version = res.body.scan(version_key).flatten
63+
version = res.body.scan(version).flatten
6564
print_good("Application confirmed to be SevOne Network Performance Management System version #{version}")
6665
success = true
6766
end
@@ -75,8 +74,15 @@ def do_login(user, pass)
7574
begin
7675
res = send_request_cgi(
7776
{
78-
'uri' => "/doms/login/processLogin.php?login=#{user}&passwd=#{pass}&tzOffset=-25200&tzString=Thur+May+05+1983+05:05:00+GMT+0700+",
79-
'method' => 'GET'
77+
'uri' => "/doms/login/processLogin.php",
78+
'method' => 'GET',
79+
vars_get =>
80+
{
81+
'login' = user,
82+
'passwd' = pass,
83+
'tzOffset' = '-25200',
84+
'tzString' = 'Thur+May+05+1983+05:05:00+GMT+0700+'
85+
}
8086
})
8187

8288
check_key = "The user has logged in successfully."

0 commit comments

Comments
 (0)