Juan, that means it has been patched. I have an older version of an OVA
that isn't patched. I can bring it by the offices today if you don't mind.

A pcap is OK as well. What do you think?

Will look at your PR here shortly.


On Thu, Apr 3, 2014 at 11:52 PM, Christian Mehlmauer <
notifications@github.com> wrote:

> In modules/auxiliary/gather/alienvault_iso27001_sqli.rb:
>
> > +        'date_to' => '2014-03-30'
> > +      }
> > +
> > +      res = send_request_cgi({
> > +        'uri' => normalize_uri(target_uri.path, 'ossim', 'report', 'BusinessAndComplianceISOPCI', 'ISO27001Bar1.php'),
> > +        'cookie' => cookie,
> > +        'vars_get' => get
> > +      })
> > +
> > +      if !res or !res.body
> > +        fail_with("Server did not respond in an expected way")
> > +      end
> > +
> > +      file = /#{left_marker}(.*)#{right_marker}/.match(res.body)
> > +
> > +      file = file[1]
>
> can we add the same check as here
> https://github.com/rapid7/metasploit-framework/pull/3180/files ?
>
> --
> Reply to this email directly or view it on GitHub<https://github.com/rapid7/metasploit-framework/pull/3179/files#r11283052>
> .
>



-- 
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website