Commit c87c568c by Laurent Meirlaen

netgear multi devices password disclosure: fix check method too restrictive

parent 27ca5b19
...@@ -115,8 +115,9 @@ class Exploit(exploits.Exploit): ...@@ -115,8 +115,9 @@ class Exploit(exploits.Exploit):
response = http_request(method="GET", url=url) response = http_request(method="GET", url=url)
if response is not None and response.status_code == 200: if response is not None:
if response.headers.get('WWW-Authenticate') is not None: header = response.headers.get('WWW-Authenticate')
return 'unauth.cgi?id=' in response.text # target is vulnerable if header is not None and 'NETGEAR' in header.upper():
return True # target is vulnerable
return False # target is not vulnerable return False # target is not vulnerable
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment