Skip to content

Commit

Permalink
Limit terminal output
Browse files Browse the repository at this point in the history
Use TICKETSTODUMP instead of n characters
  • Loading branch information
h4x-x0r committed Sep 26, 2024
1 parent e80c66d commit abddaf5
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions modules/auxiliary/gather/solarwinds_webhelpdesk_backdoor.rb
Original file line number Diff line number Diff line change
Expand Up @@ -83,11 +83,12 @@ def run
)

jbody = JSON.parse(body)
print_good('Successfully authenticated and tickets retrieved. The first 1000 characters are displayed below:')
print_good(JSON.pretty_generate(jbody).slice(0, 1000))
print_good("Successfully authenticated and tickets retrieved. Displaying the first #{datastore['TICKETSTODUMP']} tickets retrieved:")
tickets_to_display = jbody.first(datastore['TICKETSTODUMP'])
print_good(JSON.pretty_generate(tickets_to_display))

file = store_loot('solarwinds_webhelpdesk.json', 'text/json', datastore['USER'], jbody)
print_good("Saved tickets to #{file}")
print_good("Saved #{jbody.length} tickets to #{file}")

report_vuln(
host: rhost,
Expand Down

0 comments on commit abddaf5

Please sign in to comment.