From f158cfaadde837ff3ef495643ffc6afc23d89618 Mon Sep 17 00:00:00 2001 From: Jan Rude Date: Tue, 13 Dec 2022 16:05:56 +0100 Subject: [PATCH] Update modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com> --- modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb b/modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb index 9900a92873..c4e30363c4 100644 --- a/modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb +++ b/modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb @@ -111,10 +111,9 @@ class MetasploitModule < Msf::Exploit::Remote # After login, the application should give us a new token # session_token is actually just base64(MM/dd/yyyy HH:mm:ss) at the time of the login json_res = res.get_json_document - token = json_res['session_token'] - if token.present? + @token = json_res['session_token'] + if @token.present? vprint_good("#{peer} - Login successful") - datastore['TOKEN'] = token else fail_with(Failure::NoAccess, "#{peer} - Invalid credentials!") end