Skip to content

Commit f8c81e6

Browse files
author
Tod Beardsley
committed
Land rapid7#4710 for real.
This isn't a proper merge commit. Will need to figure out what I did to wang up the last landing -- I'm guessing I didn't fetch enough first. This should fix rapid7#4710.
1 parent 0a587c9 commit f8c81e6

File tree

1 file changed

+0
-13
lines changed

1 file changed

+0
-13
lines changed

modules/auxiliary/gather/ie_uxss_injection.rb

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -14,16 +14,10 @@ def initialize(info={})
1414
'Name' => "Microsoft Internet Explorer 10 and 11 Cross-Domain JavaScript Injection",
1515
'Description' => %q{
1616
This module exploits a universal cross-site scripting (UXSS) vulnerability found in Internet
17-
<<<<<<< HEAD
18-
Explorer 10 and 11. It will steal the cookie of a specific webiste (set by the TARGET_URI
19-
datastore option). You will also most likely need to configure the URIHOST if you are behind NAT.
20-
If CUSTOMJS isn't specified, a default cookie stealer will kick in.
21-
=======
2217
Explorer 10 and 11. By default, you will steal the cookie from TARGET_URI (which cannot
2318
have X-Frame-Options or it will fail). You can also have your own custom JavaScript
2419
by setting the CUSTOMJS option. Lastly, you might need to configure the URIHOST option if
2520
you are behind NAT.
26-
>>>>>>> upstream/pr/4710
2721
},
2822
'License' => MSF_LICENSE,
2923
'Author' =>
@@ -35,20 +29,13 @@ def initialize(info={})
3529
],
3630
'References' =>
3731
[
38-
<<<<<<< HEAD
39-
=======
4032
[ 'OSVDB', '117876' ],
41-
>>>>>>> upstream/pr/4710
4233
[ 'URL', 'http://www.deusen.co.uk/items/insider3show.3362009741042107/'],
4334
[ 'URL', 'http://innerht.ml/blog/ie-uxss.html' ],
4435
[ 'URL', 'http://seclists.org/fulldisclosure/2015/Feb/10' ]
4536
],
4637
'Platform' => 'win',
47-
<<<<<<< HEAD
48-
'DisclosureDate' => "Feb 2 2015"
49-
=======
5038
'DisclosureDate' => "Feb 1 2015"
51-
>>>>>>> upstream/pr/4710
5239
))
5340

5441
register_options(

0 commit comments

Comments
 (0)