[framework] console with arguments

Jerome Athias jerome.athias at free.fr
Fri May 4 15:07:14 CDT 2007


Thanks HD (i didn't reported it as bug as it's just a 'new option')

For Bill:
you should also take in consideration the

window.parent.openConsoleWindowExploit(cid) JavaScript function
See:
application.js

And look in the source of the page to correctly set the URL parameters:
&eopt_RHOST=
&eopt_RPORT=
...


Btw, it seems tricky out of the context, even with use of an XSS :p
http://127.0.0.1:55555/exploits/config?refname=windows%3Ahttp%3Anavicopa_get_overflow&payload=16&step=config&target=0&eopt_RHOST=127.0.0.1&eopt_RPORT=80&popt_CMD=calc.exe&eopt_CHOST="<script>openConsoleWindowExploit(0);</script>

/JA

H D Moore a écrit :
> I will file a bug for this that allows either a name or id to be passed.



More information about the framework mailing list