Skip to content

Commit 0a587c9

Browse files
author
Tod Beardsley
committed
Land rapid7#4710, really
Looks like my publish script ended up rebasing wchen-r7/aux_ie_uxss and didn't catch the file rename correctly. Conflicts: modules/auxiliary/gather/ie_uxss_injection.rb
2 parents be20714 + d16cc84 commit 0a587c9

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

modules/auxiliary/gather/ie_uxss_injection.rb

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,16 @@ def initialize(info={})
1414
'Name' => "Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection",
1515
'Description' => %q{
1616
This module exploits a universal cross-site scripting (UXSS) vulnerability found in Internet
17+
<<<<<<< HEAD
1718
Explorer 10 and 11. It will steal the cookie of a specific webiste (set by the TARGET_URI
1819
datastore option). You will also most likely need to configure the URIHOST if you are behind NAT.
1920
If CUSTOMJS isn't specified, a default cookie stealer will kick in.
21+
=======
22+
Explorer 10 and 11. By default, you will steal the cookie from TARGET_URI (which cannot
23+
have X-Frame-Options or it will fail). You can also have your own custom JavaScript
24+
by setting the CUSTOMJS option. Lastly, you might need to configure the URIHOST option if
25+
you are behind NAT.
26+
>>>>>>> upstream/pr/4710
2027
},
2128
'License' => MSF_LICENSE,
2229
'Author' =>
@@ -28,12 +35,20 @@ def initialize(info={})
2835
],
2936
'References' =>
3037
[
38+
<<<<<<< HEAD
39+
=======
40+
[ 'OSVDB', '117876' ],
41+
>>>>>>> upstream/pr/4710
3142
[ 'URL', 'http://www.deusen.co.uk/items/insider3show.3362009741042107/'],
3243
[ 'URL', 'http://innerht.ml/blog/ie-uxss.html' ],
3344
[ 'URL', 'http://seclists.org/fulldisclosure/2015/Feb/10' ]
3445
],
3546
'Platform' => 'win',
47+
<<<<<<< HEAD
3648
'DisclosureDate' => "Feb 2 2015"
49+
=======
50+
'DisclosureDate' => "Feb 1 2015"
51+
>>>>>>> upstream/pr/4710
3752
))
3853

3954
register_options(

0 commit comments

Comments
 (0)