infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

username and password flipped 

we reported the username as the password
and vice versa
bug/bundler_fix
David Maloney 2014-06-09 13:45:12 -05:00
parent a4e96d8f59
commit 8e35f5fa12
No known key found for this signature in database
GPG Key ID: DEDBA9DC3A913DB2
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/exploits/multi/http/tomcat_mgr_deploy.rb
View File

@ -312,8 +312,8 @@ class Metasploit3 < Msf::Exploit::Remote
origin_type: :service,
module_fullname: self.fullname,
private_type: :password,
private_data: datastore['USERNAME'],
username: datastore['PASSWORD'].downcase
private_data: datastore['PASSWORD'].downcase,
username: datastore['USERNAME']
}
credential_data.merge!(service_data)

4
modules/exploits/multi/http/tomcat_mgr_upload.rb
View File

@ -420,8 +420,8 @@ class Metasploit3 < Msf::Exploit::Remote
origin_type: :service,
module_fullname: self.fullname,
private_type: :password,
private_data: datastore['USERNAME'],
username: datastore['PASSWORD'].downcase
private_data: datastore['PASSWORD'].downcase,
username: datastore['USERNAME']
}
credential_data.merge!(service_data)