PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-20 22:49:01 +00:00
Code Issues Projects Releases Wiki Activity

Converts the login check from a negative test to a positive one (Apache Axis2)

Browse Source
This commit is contained in:
nnposter
2017-04-25 23:06:38 +00:00
parent 2a07563f1d
commit c324237cf0
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
nselib/data/http-default-accounts-fingerprints.lua
View File

@@ -474,9 +474,10 @@ table.insert(fingerprints, {
{username = "admin", password = "axis2"} {username = "admin", password = "axis2"}
}, },
login_check = function (host, port, path, user, pass) login_check = function (host, port, path, user, pass)
return try_http_post_login(host, port, path, "login", local resp = http_post_simple(host, port, url.absolute(path, "login"), nil,
"%sname%s*=%s*(['\"]?)password%1[%s>]", {userName=user,password=pass,submit=" Login "})
{submit=" Login ", userName=user, password=pass}) return resp.status == 200
and (resp.body or ""):lower():find("<a%s+href%s*=%s*(['\"])axis2%-admin/logout%1")
end end
}) })