From c324237cf0d25fddb4e2133b2111de220f30506a Mon Sep 17 00:00:00 2001 From: nnposter Date: Tue, 25 Apr 2017 23:06:38 +0000 Subject: [PATCH] Converts the login check from a negative test to a positive one (Apache Axis2) --- nselib/data/http-default-accounts-fingerprints.lua | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/nselib/data/http-default-accounts-fingerprints.lua b/nselib/data/http-default-accounts-fingerprints.lua index 45889f874..b1f98862d 100644 --- a/nselib/data/http-default-accounts-fingerprints.lua +++ b/nselib/data/http-default-accounts-fingerprints.lua @@ -474,9 +474,10 @@ table.insert(fingerprints, { {username = "admin", password = "axis2"} }, login_check = function (host, port, path, user, pass) - return try_http_post_login(host, port, path, "login", - "%sname%s*=%s*(['\"]?)password%1[%s>]", - {submit=" Login ", userName=user, password=pass}) + local resp = http_post_simple(host, port, url.absolute(path, "login"), nil, + {userName=user,password=pass,submit=" Login "}) + return resp.status == 200 + and (resp.body or ""):lower():find("