Skip to content

Commit 5784235

Browse files
committed
Another update
1 parent 562063c commit 5784235

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/auxiliary/gather/ie_uxss_injection.rb

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,9 @@ def initialize(info={})
1414
'Name' => "Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection",
1515
'Description' => %q{
1616
This module exploits a universal cross-site scripting (UXSS) vulnerability found in Internet
17-
Explorer 10 and 11. It will steal the cookie of a specific webiste (set by the TARGET_URI
18-
datastore option). You will also most likely need to configure the URIHOST if you are behind NAT.
19-
If CUSTOMJS isn't specified, a default cookie stealer will kick in.
17+
Explorer 10 and 11. By default, you will steal the cookie of a specific website (set by the
18+
TARGET_URI datastore option), but you can use your own custom JavaScript by setting the
19+
CUSTOMJS option. You might need to configure the URIHOST option if you are behind NAT.
2020
},
2121
'License' => MSF_LICENSE,
2222
'Author' =>

0 commit comments

Comments
 (0)