File tree Expand file tree Collapse file tree 1 file changed +7
-3
lines changed
modules/exploits/multi/http Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Original file line number Diff line number Diff line change @@ -47,13 +47,17 @@ def initialize(info = {})
47
47
end
48
48
49
49
def check
50
+ cookie = bolt_login ( username , password )
51
+ return Exploit ::CheckCode ::Detected unless cookie
52
+
50
53
res = send_request_cgi (
51
54
'method' => 'GET' ,
52
- 'uri' => normalize_uri ( target_uri . path , 'bolt' , 'login' )
55
+ 'uri' => normalize_uri ( target_uri . path , 'bolt' ) ,
56
+ 'cookie' => cookie
53
57
)
54
58
55
- if res && res . code == 200 && res . body . include? ( 'Cookies are required to log on to Bolt ' )
56
- return Exploit ::CheckCode ::Appears
59
+ if res && res . code == 200 && res . body . include? ( 'Bolt 2.2.4</b>: Sophisticated, lightweight & simple CMS ' )
60
+ return Exploit ::CheckCode ::Vulnerable
57
61
end
58
62
Exploit ::CheckCode ::Safe
59
63
end
You can’t perform that action at this time.
0 commit comments