mmmm I've the feeling a better solution would be to check the res.code for the vulnerable application.

On the other hand, this thing: 

```
if res.code == 302
    return Exploit::CheckCode::Unknown
end
```

Can apply to a lot (if not all) the HTTP modules, because all (or nearby all) of them could be affected by HTTP->HTTPS redirections or  rewriting configurations...