infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Dont allow invalid config file characters 

Also only save cert when it is present
GSoC/Meterpreter_Web_Console
James Barnett 2018-08-29 12:49:03 -05:00
parent f7ecd4436d
commit 133892629e
No known key found for this signature in database
GPG Key ID: 647983861A4EC5EA
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/msf/ui/console/command_dispatcher/db.rb
View File

@ -1903,21 +1903,29 @@ class Db
Msf::Config.delete_group("#{DB_CONFIG_PATH}/#{name}")
print_line "Successfully deleted data service: #{name}"
else
begin
save_db_to_config(framework.db, name)
Msf::Config.save(DB_CONFIG_PATH => { 'default_db' => name }) if default
print_line "Successfully saved data service: #{name}"
rescue ArgumentError
print_error "Database name contains an invalid character."
end
end
end
def save_db_to_config(database, database_name)
if database_name =~ /\/|\[|\]/
raise ArgumentError, "Database name contains an invalid character."
end
config_path = "#{DB_CONFIG_PATH}/#{database_name}"
config_opts = {}
if !database.is_local?
begin
config_opts['url'] = database.endpoint
if database.https_opts
config_opts['cert'] = database.https_opts[:cert]
config_opts['cert'] = database.https_opts[:cert] if database.https_opts[:cert]
config_opts['skip_verify'] = true if database.https_opts[:skip_verify]
end
if database.api_token