Skip to content

Commit ec32b76

Browse files
committed
The RPORT we register as an option should be 22, not 80. We can also remove the DefaultOptions, RPORT is covered and SSL does not make sense here.
1 parent 0d7efca commit ec32b76

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

modules/auxiliary/gather/progress_moveit_sftp_fileread_cve_2024_5806.rb

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -35,10 +35,6 @@ def initialize(info = {})
3535
['URL', 'https://attackerkb.com/topics/44EZLG2xgL/cve-2024-5806/rapid7-analysis'] # AttackerKB Rapid7 Analysis.
3636
],
3737
'DisclosureDate' => '2024-06-25',
38-
'DefaultOptions' => {
39-
'RPORT' => 22,
40-
'SSL' => true
41-
},
4238
'Notes' => {
4339
'Stability' => [CRASH_SAFE],
4440
'SideEffects' => [IOC_IN_LOGS],
@@ -50,7 +46,7 @@ def initialize(info = {})
5046
register_options(
5147
[
5248
Opt::RHOST,
53-
Opt::RPORT(80),
49+
Opt::RPORT(22),
5450
OptBool.new('STORE_LOOT', [false, 'Store the target file as loot', true]),
5551
OptString.new('TARGETUSER', [true, 'A valid username to authenticate as.', nil]),
5652
OptString.new('TARGETFILE', [true, 'The full path of a target file or directory to read.', '/'])

0 commit comments

Comments
 (0)