PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-07 13:11:28 +00:00
Code Issues Projects Releases Wiki Activity

Make sure there's some data to read. See #689

Browse Source
This commit is contained in:
dmiller
2017-02-27 16:42:50 +00:00
parent f0e26cb709
commit d8942b360b
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
scripts/rmi-vuln-classloader.nse
View File

@@ -105,6 +105,10 @@ Default configuration of RMI registry allows loading classes from remote URLs wh
-- 0x51 : Returndata -- 0x51 : Returndata
return false, "No return data received from server"; return false, "No return data received from server";
end end
-- Need to make sure we get a good chunk of data. It's going to be a java
-- stack trace. But if we don't get enough, I guess we can check with
-- whatever we get.
registry.out.dis:canRead(256)
local data = registry.out.dis.bReader.readBuffer; local data = registry.out.dis.bReader.readBuffer;
if string.find(data, "RMI class loader disabled") == nil then if string.find(data, "RMI class loader disabled") == nil then