From 35fdf1473ba667acf6e6309e86ecd1a9dfd79fee Mon Sep 17 00:00:00 2001 From: Jin Qian Date: Fri, 2 Dec 2016 18:07:18 -0600 Subject: [PATCH] Fixed issue #7650 where etherpad_duo_login module may crash Add check for presence of Server header. --- modules/auxiliary/scanner/http/etherpad_duo_login.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/auxiliary/scanner/http/etherpad_duo_login.rb b/modules/auxiliary/scanner/http/etherpad_duo_login.rb index a4daa7af24..a002bd5415 100644 --- a/modules/auxiliary/scanner/http/etherpad_duo_login.rb +++ b/modules/auxiliary/scanner/http/etherpad_duo_login.rb @@ -58,7 +58,7 @@ class MetasploitModule < Msf::Auxiliary return false end - if (res and res.code == 200 and res.headers['Server'].include?("EtherPAD") and res.body.include?("EtherPAD Duo")) + if (res and res.code == 200 and res.headers['Server'] and res.headers['Server'].include?("EtherPAD") and res.body.include?("EtherPAD Duo")) vprint_good("Running EtherPAD Duo application ...") return true else