infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add IP to testing results 

When specifying multiple hosts the resulting output is useless because you don't know which bypass goes to what IP address
bug/bundler_fix
Jake Yamaki 2015-09-30 15:22:24 -04:00
parent 838bba14b3
commit 1bfa087518
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/auxiliary/scanner/http/verb_auth_bypass.rb
View File

@ -77,10 +77,10 @@ class Metasploit3 < Msf::Auxiliary
next if not resauth next if not resauth
print_status("Testing verb #{tv}, resp code: [#{resauth.code}]") print_status("[#{ip}] Testing verb #{tv}, resp code: [#{resauth.code}]")
if resauth.code != auth_code and resauth.code <= 302 if resauth.code != auth_code and resauth.code <= 302
print_status("Possible authentication bypass with verb #{tv} code #{resauth.code}") print_good("[#{ip}] Possible authentication bypass with verb #{tv} code #{resauth.code}")
# Unable to use report_web_vuln as method is not in list of allowed methods. # Unable to use report_web_vuln as method is not in list of allowed methods.