File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -14,9 +14,9 @@ def initialize(info={})
14
14
'Name' => "Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection" ,
15
15
'Description' => %q{
16
16
This module exploits a universal cross-site scripting (UXSS) vulnerability found in Internet
17
- Explorer 10 and 11. It will steal the cookie of a specific webiste (set by the TARGET_URI
18
- datastore option). You will also most likely need to configure the URIHOST if you are behind NAT.
19
- If CUSTOMJS isn't specified, a default cookie stealer will kick in .
17
+ Explorer 10 and 11. By default, you will steal the cookie of a specific website (set by the
18
+ TARGET_URI datastore option), but you can use your own custom JavaScript by setting the
19
+ CUSTOMJS option. You might need to configure the URIHOST option if you are behind NAT .
20
20
} ,
21
21
'License' => MSF_LICENSE ,
22
22
'Author' =>
You can’t perform that action at this time.
0 commit comments