From 2804d04d36d28fbf727df58340dab71cc7389f5b Mon Sep 17 00:00:00 2001
From: nnposter <nnposter@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Mon, 15 Aug 2016 15:56:54 +0000
Subject: [PATCH] Fixes Xplico fingerprint to account for non-default base path

---
 nselib/data/http-default-accounts-fingerprints.lua | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nselib/data/http-default-accounts-fingerprints.lua b/nselib/data/http-default-accounts-fingerprints.lua
index 828cef774..7f859d5e6 100644
--- a/nselib/data/http-default-accounts-fingerprints.lua
+++ b/nselib/data/http-default-accounts-fingerprints.lua
@@ -128,7 +128,7 @@ table.insert(fingerprints, {
     -- harvest all hidden fields from the login form
     local req1 = http.get(host, port, path, {no_cache=true, redirect_ok = false})
     if req1.status ~= 200 then return false end
-    local html = req1.body and req1.body:match('<form%s+action%s*=%s*"/users/login".->(.-)</form>')
+    local html = req1.body and req1.body:match('<form%s+action%s*=%s*"[^"]*/users/login".->(.-)</form>')
     if not html then return false end
     local form = {}
     for n, v in html:gmatch('<input%s+type%s*=%s*"hidden"%s+name%s*=%s*"(.-)"%s+value%s*=%s*"(.-)"') do