diff --git a/bbot/modules/telerik.py b/bbot/modules/telerik.py index bf2cb54d92..3cd0c8eed9 100644 --- a/bbot/modules/telerik.py +++ b/bbot/modules/telerik.py @@ -204,7 +204,7 @@ async def handle_event(self, event): webresource = "Telerik.Web.UI.WebResource.axd?type=rau" result, _ = await self.test_detector(base_url, webresource) if result: - if "RadAsyncUpload handler is registered successfully" in result.text: + if "RadAsyncUpload handler is registered succesfully" in result.text: self.verbose("Detected Telerik instance (Telerik.Web.UI.WebResource.axd?type=rau)") probe_data = { @@ -263,6 +263,11 @@ async def handle_event(self, event): str(root_tool_path / "testfile.txt"), result.url, ] + + # Add proxy if set in the scan config + if self.scan.http_proxy: + command.append(self.scan.http_proxy) + output = await self.run_process(command) description = f"[CVE-2017-11317] [{str(version)}] {webresource}" if "fileInfo" in output.stdout: diff --git a/bbot/test/test_step_2/module_tests/test_module_telerik.py b/bbot/test/test_step_2/module_tests/test_module_telerik.py index 390e196731..c401100bbe 100644 --- a/bbot/test/test_step_2/module_tests/test_module_telerik.py +++ b/bbot/test/test_step_2/module_tests/test_module_telerik.py @@ -11,7 +11,7 @@ async def setup_before_prep(self, module_test): # Simulate Telerik.Web.UI.WebResource.axd?type=rau detection expect_args = {"method": "GET", "uri": "/Telerik.Web.UI.WebResource.axd", "query_string": "type=rau"} respond_args = { - "response_data": '{ "message" : "RadAsyncUpload handler is registered successfully, however, it may not be accessed directly." }' + "response_data": '{ "message" : "RadAsyncUpload handler is registered succesfully, however, it may not be accessed directly." }' } module_test.set_expect_requests(expect_args=expect_args, respond_args=respond_args)