Improve 200 fail_with in wp_phpmailer_host_header

One. last. commit. Noticed this in the response body.
2017-05-16 22:38:36 -05:00 · 2017-05-16 22:38:36 -05:00 · 1f4ff30adb
parent 21e741b530
commit 1f4ff30adb
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/unix/webapp/wp_phpmailer_host_header.rb
+++ b/modules/exploits/unix/webapp/wp_phpmailer_host_header.rb
@ -137,7 +137,7 @@ class MetasploitModule < Msf::Exploit::Remote
    )

    if res && !res.redirect?
-      if res.code == 200
+      if res.code == 200 && res.body.include?('login_error')
        fail_with(Failure::NoAccess, 'WordPress username may be incorrect')
      elsif res.code == 400 && res.headers['Server'] =~ /^Apache/
        fail_with(Failure::NotVulnerable, 'HttpProtocolOptions may be Strict')