Commit c87c568c by Laurent Meirlaen

netgear multi devices password disclosure: fix check method too restrictive

parent 27ca5b19
......@@ -115,8 +115,9 @@ class Exploit(exploits.Exploit):
response = http_request(method="GET", url=url)
if response is not None and response.status_code == 200:
if response.headers.get('WWW-Authenticate') is not None:
return 'unauth.cgi?id=' in response.text # target is vulnerable
if response is not None:
header = response.headers.get('WWW-Authenticate')
if header is not None and 'NETGEAR' in header.upper():
return True # target is vulnerable
return False # target is not vulnerable
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment