Land #8558, Fix AMT scanner when parsing mangled HTML

bug/bundler_fix
Brent Cook 2017-06-15 20:42:33 -05:00
commit 53253bfa37
No known key found for this signature in database
GPG Key ID: 1FFAA0B24B708F96
1 changed files with 2 additions and 2 deletions

View File

@ -76,7 +76,7 @@ class MetasploitModule < Msf::Auxiliary
proof = res.body.to_s
proof_hash = nil
info_keys = res.body.scan(/<td class=r1><p>([^\<]+)<\/p>/).map{|x| x.first.to_s.gsub("&#x2F;", "/") }
info_keys = res.body.scan(/<td class=r1><p>([^\<]+)(?:<\/p>)?/).map{|x| x.first.to_s.gsub("&#x2F;", "/") }
if info_keys.length > 0
proof_hash = {}
proof = ""
@ -106,7 +106,7 @@ class MetasploitModule < Msf::Auxiliary
:proto => 'tcp',
:name => "Intel AMT Digest Authentication Bypass",
:refs => self.references,
:proof => proof
:info => proof
})
rescue ::Timeout::Error, ::Errno::EPIPE