Fixing false positive for DLink DVG N5402SP Path Traversal (threat9#220)

transzero · Apr 1, 2017 · e670169 · e670169
1 parent 25fccd8
commit e670169
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/routersploit/modules/exploits/dlink/dvg_n5402sp_path_traversal.py b/routersploit/modules/exploits/dlink/dvg_n5402sp_path_traversal.py
@@ -82,10 +82,8 @@ def check(self):
 
         # connection
         response = http_request(method="POST", url=url, data=data)
-        if response is None:
-            return False  # target is not vulnerable
 
-        if "root" in response.text:
+        if response is not None and "root:" in response.text:
             return True  # target vulnerable
 
         return False  # target not vulnerable