Land #7432, Fix erroneous cred reporting in SonicWALL exploit

2016-10-12 22:39:15 -05:00 · 2016-10-12 22:39:15 -05:00 · 2014b2d2ab
parent a2a1d6c28a e78d3d6bf0
commit 2014b2d2ab
1 changed files with 2 additions and 2 deletions
--- a/modules/exploits/multi/http/sonicwall_scrutinizer_methoddetail_sqli.rb
+++ b/modules/exploits/multi/http/sonicwall_scrutinizer_methoddetail_sqli.rb
@ -180,10 +180,10 @@ class MetasploitModule < Msf::Exploit::Remote
      fail_with(Failure::NoAccess, "Username '#{datastore['USERNAME']}' is incorrect.")
    elsif res['loginfailed']
      fail_with(Failure::NoAccess, "Password '#{datastore['PASSWORD']}' is incorrect.")
+    elsif res['sessionid']
+      report_cred(datastore['USERNAME'], datastore['PASSWORD'])
    end

-    report_cred(datastore['USERNAME'], datastore['PASSWORD'])
-
    res
  end