Skip to content

Commit 835ff44

Browse files
committed
store loot as application/octet-stream if its not ASCII
1 parent 7617a53 commit 835ff44

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

modules/auxiliary/gather/solarwinds_servu_fileread_cve_2024_28995.rb

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -141,7 +141,14 @@ def run
141141
if datastore['STORE_LOOT'] == true
142142
print_status('Storing the file data to loot...')
143143

144-
store_loot(internal_file, 'text/plain', datastore['RHOST'], res.body, datastore['TARGETFILE'], 'File read from SolarWinds Serv-U server')
144+
store_loot(
145+
internal_file,
146+
res.body.ascii_only? ? 'text/plain' : 'application/octet-stream',
147+
datastore['RHOST'],
148+
res.body,
149+
datastore['TARGETFILE'],
150+
'File read from SolarWinds Serv-U server'
151+
)
145152
else
146153
print_line(res.body)
147154
end

0 commit comments

Comments
 (0)