infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Auxiliary::Web::Analysis::Differential 

Removed payload option from #process_vulnerability call
unstable
Tasos Laskos 2013-01-22 23:41:36 +02:00
parent 0d564c1ce8
commit 6b5c6c3a0c
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/msf/core/auxiliary/web/analysis/differential.rb
View File

@ -101,7 +101,7 @@ module Analysis::Differential
# save the response and some data for analysis # save the response and some data for analysis
responses[:good][elem.altered] << { responses[:good][elem.altered] << {
'res' => res, 'res' => res,
'elem' => elem 'elem' => elem.dup
} }
end end
end end
@ -122,8 +122,7 @@ module Analysis::Differential
http.if_not_custom_404( action, res['res'].body ) do http.if_not_custom_404( action, res['res'].body ) do
# if this isn't a custom 404 page then it means that # if this isn't a custom 404 page then it means that
# the element is vulnerable, so go ahead and log the issue # the element is vulnerable, so go ahead and log the issue
fuzzer.process_vulnerability( res['elem'], 'Boolean manipulation.', fuzzer.process_vulnerability( res['elem'], 'Boolean manipulation.' )
:payload => res['elem'].altered_value )
end end
end end
end end