Be less strict on hostname matching for ccache credentials

rapid7 · Sep 18, 2023 · 6000677 · 6000677
1 parent c1a44c8
commit 6000677
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/msf/core/exploit/remote/kerberos/service_authenticator/base.rb b/lib/msf/core/exploit/remote/kerberos/service_authenticator/base.rb
@@ -1030,7 +1030,7 @@ def load_credential_from_file(file_path, options = {})
         next
       end
 
-      unless !sname_hostname || sname_hostname.to_s.casecmp?(credential.server.components[1])
+      unless !sname_hostname || sname_hostname.to_s.downcase.ends_with?(credential.server.components[1])
         wlog("Filtered credential #{file_path} ##{index} reason: SPN (#{sname_hostname}) hostname does not match (spn: #{credential.server.components.snapshot.join('/')})")
         next
       end