Skip to content

Commit 2ac15f2

Browse files
David MaloneyDavid Maloney
authored andcommitted
some fixes based on Christruncer's feedback
fixed some stuff i borked, back to you chris
1 parent cd3cdc5 commit 2ac15f2

File tree

2 files changed

+9
-3
lines changed

2 files changed

+9
-3
lines changed

lib/metasploit/framework/login_scanner/ipboard.rb

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,13 @@ def attempt_login(credential)
4040
if nonce_response.body =~ /name='auth_key'\s+value='.*?((?:[a-z0-9]*))'/i
4141
server_nonce = $1
4242

43-
auth_uri = "#{uri}/index.php?app=core&module=global&section=login&do=process"
43+
if uri.end_with? '/'
44+
base_uri = uri.gsub(/\/$/, '')
45+
else
46+
base_uri = uri
47+
end
48+
49+
auth_uri = "#{base_uri}/index.php?app=core&module=global&section=login&do=process"
4450

4551
request = http_client.request_cgi(
4652
'uri' => auth_uri,
@@ -54,7 +60,7 @@ def attempt_login(credential)
5460

5561
response = http_client.send_recv(request)
5662

57-
if response && response.code == 200 && response.get_cookies.include?('ipsconnect') && response.get_cookies.include?('coppa')
63+
if response && response.get_cookies.include?('ipsconnect') && response.get_cookies.include?('coppa')
5864
result_opts.merge!(status: Metasploit::Model::Login::Status::SUCCESSFUL, proof: response)
5965
else
6066
result_opts.merge!(status: Metasploit::Model::Login::Status::INCORRECT, proof: response)

modules/auxiliary/scanner/http/ipboard_login.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ def run_host(ip)
6666
invalidate_login(credential_data)
6767
:abort
6868
when Metasploit::Model::Login::Status::INCORRECT
69-
print_brute :level => :verror, :ip => ip, :msg => "Failed: '#{result.credential}' #{result.proof}"
69+
print_brute :level => :verror, :ip => ip, :msg => "Failed: '#{result.credential}'"
7070
invalidate_login(credential_data)
7171
end
7272
end

0 commit comments

Comments
 (0)