Skip to content

Commit e4e5edc

Browse files
committed
Looks like we don't need to check MD5, let's keep it that way then.
1 parent 8ab90e6 commit e4e5edc

File tree

1 file changed

+2
-25
lines changed

1 file changed

+2
-25
lines changed

modules/auxiliary/scanner/http/cold_fusion_version.rb

Lines changed: 2 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -29,28 +29,6 @@ def initialize
2929
)
3030
end
3131

32-
33-
#
34-
# Checks loginbackground.jpg for Cold Fusion 10. This is a patch to be able to detect
35-
# Cold Fusion 10 correctly. We haven't been able to replace fingerprint(), because we
36-
# don't have all the MD5s for loginbackground.jpg, not to mention some versions don't
37-
# actually have it.
38-
#
39-
def cf10?
40-
res = send_request_cgi({
41-
'uri' => '/CFIDE/administrator/images/loginbackground.jpg',
42-
'method' => 'GET'
43-
})
44-
45-
# Not the response we want at all, then let's assume it's not cf10
46-
return false if not res or res.code.to_i != 200
47-
48-
jpg_md5 = Rex::Text.md5(res.body)
49-
return true if jpg_md5 == 'a4c81b7a6289b2fc9b36848fa0cae83c'
50-
51-
false
52-
end
53-
5432
def fingerprint(response)
5533

5634
if(response.headers.has_key?('Server') )
@@ -75,16 +53,15 @@ def fingerprint(response)
7553
out = nil
7654

7755

78-
7956
if(response.body =~ />\s*Version:\s*(.*)<\/strong\><br\s\//)
8057
v = $1
8158
out = (v =~ /^6/) ? "Adobe ColdFusion MX6 #{v}" : "Adobe ColdFusion MX7 #{v}"
8259
elsif(response.body =~ /<meta name=\"Author\" content=\"Copyright 1995\-2012 Adobe/ and response.body =~ /Administrator requires a browser that supports frames/ )
8360
out = "Adobe ColdFusion MX7"
8461
elsif(response.body =~ /<meta name=\"Author\" content=\"Copyright \(c\) 1995\-2006 Adobe/)
8562
out = "Adobe ColdFusion 8"
86-
elsif cf10?
87-
# Must check for Cold Fusion 10 before 9 to avoid FP
63+
elsif(response.body =~ /<meta name=\"Author\" content=\"Copyright \(c\) 1995\-2010 Adobe/ and
64+
response.body =~ /1997\-2012 Adobe Systems Incorporated and its licensors/)
8865
out = "Adobe ColdFusion 10"
8966
elsif(response.body =~ /<meta name=\"Author\" content=\"Copyright \(c\) 1995\-2010 Adobe/ or
9067
response.body =~ /<meta name=\"Author\" content=\"Copyright \(c\) 1995\-2009 Adobe Systems\, Inc\. All rights reserved/)

0 commit comments

Comments
 (0)