Skip to content

Commit ec35f4b

Browse files
committed
some bugs for sinn3r
1 parent d6f397a commit ec35f4b

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

modules/exploits/linux/http/lifesize_uvc_ping_rce.rb

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,8 @@ def initialize(info={})
4848

4949
register_options(
5050
[
51+
Opt::RPORT(443),
52+
OptBool.new('SSL', [true, 'Use SSL', true]),
5153
OptString.new('TARGETURI', [true, 'The URI of the vulnerable instance', '/']),
5254
OptString.new('USERNAME', [true, 'The username to authenticate with', 'administrator']),
5355
OptString.new('PASSWORD', [true, 'The password to authenticate with', 'admin123'])
@@ -63,6 +65,10 @@ def exploit
6365
fail_with("Server did not respond in an expected way")
6466
end
6567

68+
if res.code != 200
69+
fail_with("Did not get a 200 response, perhaps the server isn't on an SSL port")
70+
end
71+
6672
token = /name='csrfmiddlewaretoken' value='(.*)'/.match(res.body)
6773

6874
token = token[1]

0 commit comments

Comments
 (0)