From 9c3bd126136bd2fab3784896546023e26e3791ec Mon Sep 17 00:00:00 2001 From: sinn3r Date: Wed, 19 Jun 2013 02:32:30 -0500 Subject: [PATCH] If I can't write, I want to know. It's possible that the upload directory doesn't allow write, the module should be aware of that. Other reasons may be possible. --- modules/exploits/unix/webapp/havalite_upload_exec.rb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/modules/exploits/unix/webapp/havalite_upload_exec.rb b/modules/exploits/unix/webapp/havalite_upload_exec.rb index 5260d304a7..a5fd672dd3 100644 --- a/modules/exploits/unix/webapp/havalite_upload_exec.rb +++ b/modules/exploits/unix/webapp/havalite_upload_exec.rb @@ -107,6 +107,8 @@ class Metasploit3 < Msf::Exploit::Remote fail_with(Exploit::Failure::Unknown, "#{peer} - Request timed out while uploading") elsif res.code.to_i == 404 fail_with(Exploit::Failure::NotFound, "#{peer} - No upload.php found") + elsif res.body =~ /"error"\:"abort"/ + fail_with(Exploit::Failure::Unknown, "#{peer} - Unable to write #{fname}") end return fname