We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent f4ffade commit 49d998fCopy full SHA for 49d998f
modules/exploits/multi/http/jenkins_script_console.rb
@@ -155,12 +155,15 @@ def exploit
155
@crumb = nil
156
if res.code != 200
157
if datastore['API_TOKEN']
158
- print_status('Authenticating and requesting crumb...')
+ print_status('Authenticating with token...')
159
res = send_request_cgi({
160
'method' => 'GET',
161
'uri' => normalize_uri(@uri.path, "crumbIssuer/api/json"),
162
'authorization' => basic_auth(datastore['USERNAME'], datastore['API_TOKEN'])
163
})
164
+ if (res and res.code == 401)
165
+ fail_with(Failure::NoAccess, 'Login failed')
166
+ end
167
else
168
print_status('Logging in...')
169
0 commit comments