Skip to content

Commit 159446c

Browse files
committed
Ensure http_login scanner module saves passwds.
Fixes rapid7#6983. When the auxiliary/scanner/http/http_login module discovers a successful basic auth user+password combination, make sure we properly store the password by specifically telling the credentials gem that the private data we're storing is a :password.
1 parent 6e1b6e9 commit 159446c

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

modules/auxiliary/scanner/http/http_login.rb

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -181,6 +181,7 @@ def run_host(ip)
181181
case result.status
182182
when Metasploit::Model::Login::Status::SUCCESSFUL
183183
print_brute :level => :good, :ip => ip, :msg => "Success: '#{result.credential}'"
184+
credential_data[:private_type] = :password
184185
credential_core = create_credential(credential_data)
185186
credential_data[:core] = credential_core
186187
create_credential_login(credential_data)

0 commit comments

Comments
 (0)