Skip to content

Commit 3248f02

Browse files
committed
These exploits use :activex, so I update the usage for them
1 parent 2900f57 commit 3248f02

7 files changed

+42
-13
lines changed

modules/exploits/windows/browser/adobe_flash_filters_type_confusion.rb

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,8 +51,12 @@ def initialize(info={})
5151
'BrowserRequirements' =>
5252
{
5353
:source => /script|headers/i,
54-
:clsid => "{D27CDB6E-AE6D-11cf-96B8-444553540000}",
55-
:method => "LoadMovie",
54+
:activex => [
55+
{
56+
:clsid => '{D27CDB6E-AE6D-11cf-96B8-444553540000}',
57+
:method => 'LoadMovie'
58+
}
59+
],
5660
:os_name => OperatingSystems::Match::WINDOWS,
5761
:ua_name => Msf::HttpClients::IE,
5862
:flash => lambda { |ver| ver =~ /^11\.[7|8|9]/ && ver < '11.9.900.170' }

modules/exploits/windows/browser/adobe_flash_pcre.rb

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,8 +46,12 @@ def initialize(info={})
4646
'BrowserRequirements' =>
4747
{
4848
:source => /script|headers/i,
49-
:clsid => "{#{CLASSID}}",
50-
:method => "LoadMovie",
49+
:activex => [
50+
{
51+
:clsid => "{#{CLASSID}}",
52+
:method => "LoadMovie"
53+
}
54+
],
5155
:os_name => OperatingSystems::Match::WINDOWS_7,
5256
:ua_name => Msf::HttpClients::IE,
5357
# Ohter versions are vulnerable but .235 is the one that works for me pretty well

modules/exploits/windows/browser/adobe_flash_regex_value.rb

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -55,8 +55,12 @@ def initialize(info={})
5555
'BrowserRequirements' =>
5656
{
5757
:source => /script|headers/i,
58-
:clsid => "{D27CDB6E-AE6D-11cf-96B8-444553540000}",
59-
:method => "LoadMovie",
58+
:activex => [
59+
{
60+
:clsid => "{D27CDB6E-AE6D-11cf-96B8-444553540000}",
61+
:method => "LoadMovie"
62+
}
63+
],
6064
:os_name => OperatingSystems::Match::WINDOWS,
6165
:ua_name => Msf::HttpClients::IE,
6266
:flash => lambda { |ver| ver =~ /^11\.5/ && ver < '11.5.502.149' }

modules/exploits/windows/browser/advantech_webaccess_dvs_getcolor.rb

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -43,8 +43,12 @@ def initialize(info = {})
4343
:os_name => OperatingSystems::Match::WINDOWS,
4444
:ua_name => /MSIE/i,
4545
:ua_ver => lambda { |ver| Gem::Version.new(ver) < Gem::Version.new('10') },
46-
:clsid => "{5CE92A27-9F6A-11D2-9D3D-000001155641}",
47-
:method => "GetColor"
46+
:activex => [
47+
{
48+
:clsid => "{5CE92A27-9F6A-11D2-9D3D-000001155641}",
49+
:method => "GetColor"
50+
}
51+
]
4852
},
4953
'Payload' =>
5054
{

modules/exploits/windows/browser/aladdin_choosefilepath_bof.rb

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,8 +45,12 @@ def initialize(info={})
4545
'BrowserRequirements' =>
4646
{
4747
:source => /script|headers/i,
48-
:clsid => "{09F68A41-2FBE-11D3-8C9D-0008C7D901B6}",
49-
:method => "ChooseFilePath",
48+
:activex => [
49+
{
50+
:clsid => "{09F68A41-2FBE-11D3-8C9D-0008C7D901B6}",
51+
:method => "ChooseFilePath"
52+
}
53+
],
5054
:os_name => OperatingSystems::Match::WINDOWS,
5155
},
5256
'Targets' =>

modules/exploits/windows/browser/ms13_090_cardspacesigninhelper.rb

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,8 +73,12 @@ def initialize(info={})
7373
'BrowserRequirements' =>
7474
{
7575
:source => /script|headers/i,
76-
:clsid => "{19916E01-B44E-4E31-94A4-4696DF46157B}",
77-
:method => "requiredClaims",
76+
:activex => [
77+
{
78+
:clsid => "{19916E01-B44E-4E31-94A4-4696DF46157B}",
79+
:method => "requiredClaims"
80+
}
81+
],
7882
:os_name => OperatingSystems::Match::WINDOWS_XP
7983
},
8084
'Targets' =>

modules/exploits/windows/browser/x360_video_player_set_text_bof.rb

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,12 @@ def initialize(info={})
4444
'BrowserRequirements' =>
4545
{
4646
:source => /script|headers/i,
47-
:clsid => "{4B3476C6-185A-4D19-BB09-718B565FA67B}",
47+
:activex => [
48+
{
49+
:clsid => "{4B3476C6-185A-4D19-BB09-718B565FA67B}",
50+
:method => "ConvertFile"
51+
}
52+
],
4853
:os_name => OperatingSystems::Match::WINDOWS,
4954
:ua_name => Msf::HttpClients::IE,
5055
:ua_ver => '10.0'

0 commit comments

Comments
 (0)