PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 20:51:30 +00:00
Code Issues Projects Releases Wiki Activity

[NSE] Refactored get_admin_cookie method in http-adobe-coldfusion-apsa1301. Patch by nnposter.

Browse Source
This commit is contained in:
sophron
2014-08-30 15:48:12 +00:00
parent 667be96764
commit ced66e5b3f
1 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
scripts/http-adobe-coldfusion-apsa1301.nse
View File

@@ -24,6 +24,7 @@ local http = require "http"
local shortport = require "shortport" local shortport = require "shortport"
local stdnse = require "stdnse" local stdnse = require "stdnse"
local string = require "string" local string = require "string"
local url = require "url"
portrule = shortport.http portrule = shortport.http
local DEFAULT_PATH = "/CFIDE/adminapi/" local DEFAULT_PATH = "/CFIDE/adminapi/"
@@ -32,13 +33,13 @@ local MAGIC_URI = "administrator.cfc?method=login&adminpassword=&rdsPasswordAllo
-- Extracts the admin cookie by reading CFAUTHORIZATION_cfadmin from the header 'set-cookie' -- Extracts the admin cookie by reading CFAUTHORIZATION_cfadmin from the header 'set-cookie'
-- --
local function get_admin_cookie(host, port, basepath) local function get_admin_cookie(host, port, basepath)
local req = http.get(host, port, basepath..MAGIC_URI) local req = http.get(host, port, url.absolute(basepath, MAGIC_URI))
if req.header['set-cookie'] then if not req then return nil end
stdnse.debug1("Header 'set-cookie' detected in response.") for _, ck in ipairs(req.cookies or {}) do
local _, _, admin_cookie = string.find(req.header['set-cookie'], ";path=/, CFAUTHORIZATION_cfadmin=(.*);path=/") stdnse.debug2("Set-Cookie for %q detected in response.", ck.name)
if admin_cookie and admin_cookie:len() > 79 then if ck.name == "CFAUTHORIZATION_cfadmin" and ck.value:len() > 79 then
stdnse.debug1("Extracted cookie:%s", admin_cookie) stdnse.debug1("Extracted cookie:%s", ck.value)
return admin_cookie return ck.value
end end
end end
return nil return nil