Skip to content

Commit f13e56a

Browse files
committed
Handle bracketed and unbracketed results, add more useful logging
1 parent 14db112 commit f13e56a

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

modules/exploits/multi/elasticsearch/script_mvel_rce.rb

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,13 @@ def vulnerable?
120120
end
121121

122122
def parse_result(res)
123-
unless res && res.code == 200 && res.body
123+
unless res
124+
vprint_error("#{peer} no response")
125+
return nil
126+
end
127+
128+
unless res.code == 200 && res.body
129+
vprint_error("#{peer} responded with HTTP code #{res.code} (with#{res.body ? '' : 'out'} a body)")
124130
return nil
125131
end
126132

@@ -136,7 +142,7 @@ def parse_result(res)
136142
return nil
137143
end
138144

139-
result
145+
result.is_a?(::Array) ? result.first : result
140146
end
141147

142148
def java_sum(summands)

0 commit comments

Comments
 (0)