Skip to content

Commit 4cb19c7

Browse files
committed
Enhance the module and add version check
1 parent bb4db6b commit 4cb19c7

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

modules/auxiliary/scanner/http/wordpress_xmlrpc_login.rb

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ def initialize(info = {})
2727
'Author' =>
2828
[
2929
'Cenk Kalpakoglu <cenk.kalpakoglu[at]gmail.com>',
30-
'Sabri', #@KINGSABRI
30+
'KingSabri <King.Sabri[at]gmail.com>' ,
3131
'William <WCoppola[at]Lares.com>'
3232
],
3333
'License' => MSF_LICENSE,
@@ -71,6 +71,7 @@ def check_setup
7171
print_error("#{peer}:#{rport}#{wordpress_url_xmlrpc} does not enable XMLRPC")
7272
false
7373
elsif Gem::Version.new(version) >= Gem::Version.new('4.4.1')
74+
print_error("#{peer}:#{rport}#{wordpress_url_xmlrpc} Target's version (#{version}) is not vulnerable to this attack.")
7475
false
7576
else
7677
print_status("Target #{peer} is running Wordpress")
@@ -82,7 +83,7 @@ def run_host(ip)
8283
if check_setup
8384
print_status("XMLRPC enabled, Hello message received!")
8485
else
85-
print_error("XMLRPC is not enabled! Aborting")
86+
print_error("Abborting the attack.")
8687
return
8788
end
8889

0 commit comments

Comments
 (0)