Commit d8f5cedf by Laurent Meirlaen

netgear multi devices password disclosure: fix check method too restrictive

parent 40ea29f9
......@@ -133,6 +133,7 @@ class Exploit(exploits.Exploit):
if response is not None:
header = response.headers.get('WWW-Authenticate')
return header is not None and 'NETGEAR' in header.upper() # target is vulnerable
token = self.extract_token(response.text)
return header is not None and 'NETGEAR' in header.upper() and token is not False # target is vulnerable
return False # target is not vulnerable
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment