infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

more updates to sevone.rb. hopefully all is covered.

unstable
KarnGaneshen 2013-06-10 21:47:56 +05:30
parent 74bddcf339
commit 04171c46ec
1 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
modules/auxiliary/scanner/http/sevone_enum.rb
View File

@ -25,15 +25,14 @@ class Metasploit3 < Msf::Auxiliary
[ [
'Karn Ganeshen <KarnGaneshen[at]gmail.com>', 'Karn Ganeshen <KarnGaneshen[at]gmail.com>',
], ],
'DisclosureDate' => 'June 07, 2013', 'DisclosureDate' => 'Jun 07, 2013',
'License' => MSF_LICENSE 'License' => MSF_LICENSE
)) ))
register_options( register_options(
[ [
Opt::RPORT(8443), Opt::RPORT(80),
OptString.new('USERNAME', [false, 'A specific username to authenticate as', 'admin']), OptString.new('USERNAME', [false, 'A specific username to authenticate as', 'admin']),
OptString.new('PASSWORD', [false, 'A specific password to authenticate with', 'SevOne']), OptString.new('PASSWORD', [false, 'A specific password to authenticate with', 'SevOne'])
OptString.new('STOP_ON_SUCCESS', [true, 'Stop guessing when a credential works for a host', true])
], self.class) ], self.class)
end end
@ -61,7 +60,7 @@ class Metasploit3 < Msf::Auxiliary
if (res and res.code.to_i == 200 and res.headers['Set-Cookie'].include?('SEVONE')) if (res and res.code.to_i == 200 and res.headers['Set-Cookie'].include?('SEVONE'))
version_key = /Version: <strong>(.+)<\/strong>/ version_key = /Version: <strong>(.+)<\/strong>/
version = res.body.scan(version_key).flatten version = res.body.scan(version).flatten
print_good("Application confirmed to be SevOne Network Performance Management System version #{version}") print_good("Application confirmed to be SevOne Network Performance Management System version #{version}")
success = true success = true
end end
@ -75,8 +74,15 @@ class Metasploit3 < Msf::Auxiliary
begin begin
res = send_request_cgi( res = send_request_cgi(
{ {
'uri' => "/doms/login/processLogin.php?login=#{user}&passwd=#{pass}&tzOffset=-25200&tzString=Thur+May+05+1983+05:05:00+GMT+0700+", 'uri' => "/doms/login/processLogin.php",
'method' => 'GET' 'method' => 'GET',
vars_get =>
{
'login' = user,
'passwd' = pass,
'tzOffset' = '-25200',
'tzString' = 'Thur+May+05+1983+05:05:00+GMT+0700+'
}
}) })
check_key = "The user has logged in successfully." check_key = "The user has logged in successfully."