out with the new, in with the old. css_clip is pretty unreliable in my tests, go back to using ie_behaviors in browser autopwn

git-svn-id: file:///home/svn/framework3/trunk@12663 4d416f70-5f16-0410-b530-b9f4589650da

modules/exploits/windows/browser/ms10_018_ie_behaviors.rb

@@ -34,17 +34,17 @@ class Metasploit3 < Msf::Exploit::Remote
 	include Msf::Exploit::Remote::HttpServer::HTML
 
 	#
-	# Superceded by ms10_090_ie_css_clip, disable for BrowserAutopwn
+	# ms10_090_ie_css_clip is newer but *much* less reliable
 	#
-	#include Msf::Exploit::Remote::BrowserAutopwn
-	#autopwn_info({
-	#	:ua_name    => HttpClients::IE,
-	#	:ua_minver  => "6.0",
-	#	:ua_maxver  => "7.0",
-	#	:javascript => true,
-	#	:os_name    => OperatingSystems::WINDOWS,
-	#	:vuln_test  => nil, # no way to test without just trying it
-	#})
+	include Msf::Exploit::Remote::BrowserAutopwn
+	autopwn_info({
+		:ua_name    => HttpClients::IE,
+		:ua_minver  => "6.0",
+		:ua_maxver  => "7.0",
+		:javascript => true,
+		:os_name    => OperatingSystems::WINDOWS,
+		:vuln_test  => nil, # no way to test without just trying it
+	})
 
 	def initialize(info = {})
 		super(update_info(info,
@@ -87,7 +87,7 @@ class Metasploit3 < Msf::Exploit::Remote
 			'DefaultOptions' =>
 				{
 					'EXITFUNC' => 'process',
-					'InitialAutoRunScript' => 'migrate -f',
+					#'InitialAutoRunScript' => 'migrate -f',
 				},
 			'Payload'        =>
 				{

modules/exploits/windows/browser/ms10_090_ie_css_clip.rb

@@ -15,15 +15,16 @@ class Metasploit3 < Msf::Exploit::Remote
 	Rank = GoodRanking
 
 	include Msf::Exploit::Remote::HttpServer::HTML
-	include Msf::Exploit::Remote::BrowserAutopwn
-	autopwn_info({
-		:ua_name    => HttpClients::IE,
-		:ua_minver  => "6.0",
-		:ua_maxver  => "7.0",
-		:javascript => true,
-		:os_name    => OperatingSystems::WINDOWS,
-		:vuln_test  => nil, # no way to test without just trying it
-	})
+	# Unreliable
+	#include Msf::Exploit::Remote::BrowserAutopwn
+	#autopwn_info({
+	#	:ua_name    => HttpClients::IE,
+	#	:ua_minver  => "6.0",
+	#	:ua_maxver  => "7.0",
+	#	:javascript => true,
+	#	:os_name    => OperatingSystems::WINDOWS,
+	#	:vuln_test  => nil, # no way to test without just trying it
+	#})
 
 	def initialize(info = {})
 		super(update_info(info,