This patch fixes a problem with OptRegexp. The OptRegexp class is always forcing the value to be converted to a string first, which causes the EXCLUDE option in browser_autopwn to kick in and match every found autopwn module, so it ignores all of them and you load nothing (#4616). It is important to understand that nil actually represents an option not being set, which is a completely different behavior than having an empty value (technically "" is still a value, and if there's a value, it means the option is set). We need to watcher for these scenarios. I am restoring the #default method to avoid forcing a to_s, which should fix the browser autopwn loading problem. And then I changed scraper.rb's default value for datastore option PATTERN to a string, because still fixes #3798. The way I see it, #3798 is actually a module-specific issue. Fix #4616 Fix #3798bug/bundler_fix
parent
01bcd72e1c
commit
f3a2d6663f
|
@ -528,7 +528,7 @@ class OptRegexp < OptBase
|
|||
end
|
||||
|
||||
def default
|
||||
@default.to_s
|
||||
@default
|
||||
end
|
||||
|
||||
def display_value(value)
|
||||
|
|
|
@ -27,7 +27,7 @@ class Metasploit3 < Msf::Auxiliary
|
|||
register_options(
|
||||
[
|
||||
OptString.new('PATH', [ true, "The test path to the page to analize", '/']),
|
||||
OptRegexp.new('PATTERN', [ true, "The regex to use (default regex is a sample to grab page title)", %r{<title>(.*)</title>}i])
|
||||
OptRegexp.new('PATTERN', [ true, "The regex to use (default regex is a sample to grab page title)", '<title>(.*)</title>'])
|
||||
|
||||
], self.class)
|
||||
|
||||
|
|
Loading…
Reference in New Issue