Land #9611, Fix bug causing all OWA logins to appear valid

2018-02-22 11:55:36 -06:00 · 2018-02-22 11:55:36 -06:00 · 65b0d9555f
parent 0f0270b144 e531dbc976
commit 65b0d9555f
1 changed files with 1 additions and 1 deletions
--- a/modules/auxiliary/scanner/http/owa_login.rb
+++ b/modules/auxiliary/scanner/http/owa_login.rb
@ -232,7 +232,7 @@ class MetasploitModule < Msf::Auxiliary
      # No password change required moving on.
      # Check for valid login but no mailbox setup
      print_good("server type: #{res.headers["X-FEServer"]}")
-      if res.headers['location'] =~ /owa/
+      if res.headers['location'] =~ /owa/ and res.headers['location'] !~ /reason/
        print_good("#{msg} SUCCESSFUL LOGIN. #{elapsed_time} '#{user}' : '#{pass}'")
        report_cred(
          ip: res.peerinfo['addr'],