diff --git a/lib/msf/core/exploit/browser/server.rb b/lib/msf/core/exploit/browser/server.rb index b46108b682..ff1da4244f 100644 --- a/lib/msf/core/exploit/browser/server.rb +++ b/lib/msf/core/exploit/browser/server.rb @@ -20,30 +20,7 @@ module Msf def initialize(info={}) super - # Profile structure: - # { - # 'cookie' => - # { - # :os_name => 'Windows', - # :os_flavor => 'something' - # ...... etc ...... - # } - # } - # A profile should at least have info about the following: - # tag : Hash key. This is either an actual cookie, or a MD5 hash of target IP + user-agent - # :source : The data source. Either from 'script', or 'headers'. The 'script' source - # should be more accureate in some scenarios like browser compatibility mode - # :ua_name : The name of the browser - # :ua_ver : The version of the browser - # :os_name : The name of the OS - # :language: The system's language - # :arch : The system's arch - # :proxy : Indicates whether proxy is used - # - # For more info about what the actual value might be for each key, see HttpServer. - # - # If the source is 'script', the profile might have even more information about plugins: - # 'office' : The version of Microsoft Office (IE only) + # See get_profile's documenation to understand what @target_profiles stores @target_profiles = [] # Requirements are conditions that the browser must have in order to be exploited. @@ -124,7 +101,30 @@ module Msf end # - # Returns the target profile based on the tag + # Returns the target profile based on the tag. Each profile has the following structure: + # { + # 'cookie' => + # { + # :os_name => 'Windows', + # :os_flavor => 'something' + # ...... etc ...... + # } + # } + # A profile should at least have info about the following: + # tag : Hash key. This is either an actual cookie, or a MD5 hash of target IP + user-agent + # :source : The data source. Either from 'script', or 'headers'. The 'script' source + # should be more accureate in some scenarios like browser compatibility mode + # :ua_name : The name of the browser + # :ua_ver : The version of the browser + # :os_name : The name of the OS + # :language: The system's language + # :arch : The system's arch + # :proxy : Indicates whether proxy is used + # + # For more info about what the actual value might be for each key, see HttpServer. + # + # If the source is 'script', the profile might have even more information about plugins: + # 'office' : The version of Microsoft Office (IE only) # # @param tag [String] Either a cookie or IP + User-Agent # @return [Hash] The profile found. If not found, returns nil