Skip to content

Commit 08575d0

Browse files
committed
Land rapid7#19176, Add missing Arch parameter
Adding Arch parameter to dnn_cookie_deserialization_rce module
2 parents 5992dce + 29307b1 commit 08575d0

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

modules/exploits/windows/http/dnn_cookie_deserialization_rce.rb

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,7 @@ def initialize(info = {})
5959
[ 'URL', 'https://github.com/pwntester/ysoserial.net']
6060
],
6161
'Platform' => 'win',
62+
'Arch' => [ARCH_X86, ARCH_X64],
6263
'Targets' => [
6364
[ 'Automatic', { 'auto' => true } ],
6465
[ 'v5.0 - v9.0.0', { 'ReqEncrypt' => false, 'ReqSession' => false } ],
@@ -227,11 +228,11 @@ def exploit
227228

228229
if @encrypted
229230
# Requires either supplied key and IV, or verification code and plaintext
230-
if (!key.blank? && !iv.blank?)
231+
if !key.blank? && !iv.blank?
231232
@passphrase = key + iv
232233
# Key and IV were supplied, don't try and decrypt.
233234
@try_decrypt = false
234-
elsif (!@verification_codes.empty? && !@kpt.blank?)
235+
elsif !@verification_codes.empty? && !@kpt.blank?
235236
@try_decrypt = true
236237
else
237238
fail_with(Failure::BadConfig, 'You must provide either (VERIFICATION_CODE and VERIFICATION_PLAIN) or (KEY and IV).')

0 commit comments

Comments
 (0)