Skip to content

Commit f08cf97

Browse files
committed
Check method implemented
1 parent 6de0c95 commit f08cf97

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

modules/exploits/unix/webapp/bolt_file_upload.rb

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,15 @@ def initialize(info = {})
4545
end
4646

4747
def check
48+
res = send_request_cgi(
49+
'method' => 'GET',
50+
'uri' => normalize_uri(target_uri.path, 'bolt', 'bolt', 'login')
51+
)
4852

53+
if res && res.code == 200 && res.body.include?('Cookies are required to log on to Bolt')
54+
return Exploit::CheckCode::Appears
55+
end
56+
Exploit::CheckCode::Safe
4957
end
5058

5159
def username
@@ -81,8 +89,7 @@ def bolt_login(user, pass)
8189
)
8290

8391
if res && res.code == 302 && res.redirection.to_s.include?('/bolt/bolt')
84-
session_cookie = res.get_cookies
85-
return session_cookie
92+
return res.get_cookies
8693
end
8794
nil
8895
end

0 commit comments

Comments
 (0)