diff --git a/modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb b/modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb index 9900a92873..c4e30363c4 100644 --- a/modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb +++ b/modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb @@ -111,10 +111,9 @@ class MetasploitModule < Msf::Exploit::Remote # After login, the application should give us a new token # session_token is actually just base64(MM/dd/yyyy HH:mm:ss) at the time of the login json_res = res.get_json_document - token = json_res['session_token'] - if token.present? + @token = json_res['session_token'] + if @token.present? vprint_good("#{peer} - Login successful") - datastore['TOKEN'] = token else fail_with(Failure::NoAccess, "#{peer} - Invalid credentials!") end