a bit better error message if injection works but no file

2014-03-13 13:38:43 -07:00 · 2014-03-13 13:38:43 -07:00 · a01dd48640
parent b0688e0fca
commit a01dd48640
1 changed files with 4 additions and 0 deletions
--- a/modules/auxiliary/gather/joomla_weblinks_sqli.rb
+++ b/modules/auxiliary/gather/joomla_weblinks_sqli.rb
@ -98,6 +98,10 @@ class Metasploit3 < Msf::Auxiliary
    file = file[1].gsub(front_marker, '').gsub(back_marker, '')
    file = [file].pack("H*")

+    if file == '' or file == "\x00"
+      fail_with("Either the file didn't exist or the database user does not have LOAD_FILE permissions")
+    end
+
    path = store_loot("joomla.file", "text/plain", datastore['RHOST'], file, datastore['FILEPATH'])

    if path and path != ''