tweak pw generation

bperry-zos · bperry-zos · commit 353d2f79cc3f · 2014-10-16T12:06:19.000-07:00
diff --git a/modules/exploits/multi/http/drupal_drupageddon.rb b/modules/exploits/multi/http/drupal_drupageddon.rb
@@ -111,7 +111,7 @@ def generate_password_hash(pass)
     }
     md5_base64 = phpass_encode64(md5, md5.length)
     md5_stripped = md5_base64[0...22]
-    pass = "$P$#{iter_char}#{salt}#{md5_stripped}"
+    pass = "$P\\$" + iter_char + salt + md5_stripped
     vprint_debug("#{peer} - password hash: #{pass}")
 
     return pass

Original file line number	Diff line number	Diff line change
`@@ -111,7 +111,7 @@ def generate_password_hash(pass)`
`111`	`111`	`}`
`112`	`112`	`md5_base64 = phpass_encode64(md5, md5.length)`
`113`	`113`	`md5_stripped = md5_base64[0...22]`
`114`		`- pass = "$P$#{iter_char}#{salt}#{md5_stripped}"`
	`114`	`+ pass = "$P\\$" + iter_char + salt + md5_stripped`
`115`	`115`	`vprint_debug("#{peer} - password hash: #{pass}")`
`116`	`116`
`117`	`117`	`return pass`