From cb3c39beb8aa4f613852570ac9f04386d112c577 Mon Sep 17 00:00:00 2001 From: byt3bl33d3r Date: Thu, 21 Jul 2016 05:40:10 -0600 Subject: [PATCH] Fixed logic bug with password file if brute forcing --- cme/connection.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/cme/connection.py b/cme/connection.py index 36b7bc420..49d2ed6d1 100644 --- a/cme/connection.py +++ b/cme/connection.py @@ -176,6 +176,7 @@ def login(self): elif type(ntlm_hash) is file: for f_hash in ntlm_hash: if self.hash_login(usr.strip(), f_hash.strip()): return + ntlm_hash.seek(0) elif self.args.password: for password in self.args.password: @@ -185,6 +186,7 @@ def login(self): elif type(password) is file: for f_pass in password: if self.plaintext_login(usr.strip(), f_pass.strip()): return + password.seek(0) elif type(user) is not file: @@ -196,6 +198,7 @@ def login(self): elif type(ntlm_hash) is file: for f_hash in ntlm_hash: if self.hash_login(user, f_hash.strip()): return + ntlm_hash.seek(0) elif self.args.password: for password in self.args.password: @@ -205,6 +208,7 @@ def login(self): elif type(password) is file: for f_pass in password: if self.plaintext_login(user, f_pass.strip()): return + password.seek(0) def execute(self, payload, get_output=False, methods=None):