Fix #4304 - Blank password is tried when it shouldn't happen

Fix #4304
2014-12-04 12:59:51 -06:00 · 2014-12-04 12:59:51 -06:00 · 9cc04e59eb
parent 8f2e444aca
commit 9cc04e59eb
1 changed files with 1 additions and 1 deletions
--- a/lib/metasploit/framework/credential_collection.rb
+++ b/lib/metasploit/framework/credential_collection.rb
@ -107,7 +107,7 @@ class Metasploit::Framework::CredentialCollection
      File.open(user_file, 'r:binary') do |user_fd|
        user_fd.each_line do |user_from_file|
          user_from_file.chomp!
-          if password
+          if password.present?
            yield Metasploit::Framework::Credential.new(public: user_from_file, private: password, realm: realm, private_type: private_type(password) )
          end
          if user_as_pass