Unverified Commit b292f4e5 by Marcin Bury Committed by GitHub

Fixing wordlist creds parsing (#609)

* Fixing wordlist creds parsing

* Pinning requests package because of URL normalization in new version
parent e781f498
future
requests
requests==2.21.0
paramiko
pysnmp==4.4.6
pycryptodome
......
......@@ -48,7 +48,7 @@ class Exploit(HTTPClient):
def target_function(self, running, creds):
while running.is_set():
try:
username, password = creds.next().split(":")
username, password = creds.next().split(":", 1)
data = {
"LOGIN_ACCOUNT": username,
......
......@@ -48,7 +48,7 @@ class Exploit(HTTPClient):
def target_function(self, running, creds):
while running.is_set():
try:
username, password = creds.next().split(":")
username, password = creds.next().split(":", 1)
data = {
"Auth.Username": username,
......
......@@ -49,7 +49,7 @@ class Exploit(FTPClient):
def target_function(self, running, data):
while running.is_set():
try:
username, password = data.next().split(":")
username, password = data.next().split(":", 1)
except StopIteration:
break
else:
......
......@@ -56,7 +56,7 @@ class Exploit(HTTPClient):
def target_function(self, running, data):
while running.is_set():
try:
username, password = data.next().split(":")
username, password = data.next().split(":", 1)
if self.auth_type == "digest":
auth = HTTPDigestAuth(username, password)
......
......@@ -50,7 +50,7 @@ class Exploit(SSHClient):
def target_function(self, running, data):
while running.is_set():
try:
username, password = data.next().split(":")
username, password = data.next().split(":", 1)
ssh_client = self.ssh_create()
if ssh_client.login(username, password):
if self.stop_on_success:
......
......@@ -50,7 +50,7 @@ class Exploit(TelnetClient):
def target_function(self, running, data):
while running.is_set():
try:
username, password = data.next().split(":")
username, password = data.next().split(":", 1)
telnet_client = self.telnet_create()
if telnet_client.login(username, password, retries=3):
if self.stop_on_success:
......
......@@ -47,7 +47,7 @@ class Exploit(TCPClient):
def target_function(self, running, creds):
while running.is_set():
try:
username, password = creds.next().split(":")
username, password = creds.next().split(":", 1)
tcp_client = self.tcp_create()
tcp_sock = tcp_client.connect()
......
......@@ -45,7 +45,7 @@ class Exploit(HTTPClient):
print_error("Credentials not found")
def target_function(self, data):
username, password = data.split(":")
username, password = data.split(":", 1)
def check(self):
response = self.http_request(
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment