Add comment to explain the applet delivery methods

jvazquez-r7 · jvazquez-r7 · commit 79bfdf3ca687 · 2013-06-07T14:20:21.000-05:00
diff --git a/modules/exploits/multi/browser/java_jre17_driver_manager.rb b/modules/exploits/multi/browser/java_jre17_driver_manager.rb
@@ -166,6 +166,8 @@ def on_request_uri(cli, request)
 	def generate_html
 		jnlp_uri = "#{get_uri}/#{@jnlp_name}.jnlp"
 
+		# When the browser is IE, the ActvX is used in order to load the malicious JNLP, allowing click2play bypass
+		# Else an <applet> tag is used to load the malicious applet, this time there isn't click2play bypass
 		html = %Q|
 		<html>
 		<body>
