Oh, I see what you are saying. Good catch.


On Wed, Apr 2, 2014 at 4:02 PM, Brandon Perry <bperry.volatile@gmail.com>wrote:

> Not sure. You can download alienvault ossim and install on your own box,
> so I think it is safe to assume so.
>
>
> On Wed, Apr 2, 2014 at 4:01 PM, Christian Mehlmauer <
> notifications@github.com> wrote:
>
>> In modules/auxiliary/gather/alienvault_iso27001_sqli.rb:
>>
>> > +    post = {
>> > +      'embed' => '',
>> > +      'bookmark_string' => '',
>> > +      'user' => datastore['USERNAME'],
>> > +      'passu' => datastore['PASSWORD'],
>> > +      'pass' => Rex::Text.encode_base64(datastore['PASSWORD'])
>> > +    }
>> > +
>> > +    res = send_request_cgi({
>> > +      'uri' => normalize_uri(target_uri.path, 'ossim', 'session', 'login.php'),
>> > +      'method' => 'POST',
>> > +      'vars_post' => post,
>> > +      'cookie' => cookie
>> > +    })
>> > +
>> > +    if res.headers['Location'] != '/ossim/'
>>
>> Do we need to append the TARGET_URI here?
>>
>> --
>> Reply to this email directly or view it on GitHub<https://github.com/rapid7/metasploit-framework/pull/3179/files#r11227516>
>> .
>>
>
>
>
> --
> http://volatile-minds.blogspot.com -- blog
> http://www.volatileminds.net -- website
>



-- 
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website