Module: Msf::Exploit::Format::Webarchive

Defined in:

lib/msf/core/exploit/format/webarchive.rb

Instance Method Summary

• #apple_extension_url ⇒ Object
• #backend_url ⇒ String

  Formatted http/https URL of the listener.

• #collect_data_uri ⇒ String

  The path to send data back to.

• #default_files ⇒ Object
• #escape_xml(input) ⇒ String

  Input with dangerous chars replaced with xml entities.

• #iframes_container_html ⇒ String

  Mark up for embedding the iframes for each URL in a place that is invisible to the user.

• #initialize(info = {}) ⇒ Object
• #injected_js_helpers ⇒ String

  Javascript code, wrapped in script tag, that adds a helper function called "sendData()" that passes the arguments up to the parent frame, where it is sent out to the listener.

• #install_extension ⇒ Object
• #message ⇒ String

  HTML content that is rendered in the of the webarchive.

• #should_steal_files? ⇒ Boolean
• #steal_default_files ⇒ Object
• #steal_files ⇒ String

  Javascript code, wrapped in a script tag, that steals local files and sends them back to the listener.

• #urls ⇒ Array<String>

  Of URLs provided by the user.

• #webarchive_download_url ⇒ String

  URL that serves the malicious webarchive.

• #webarchive_footer ⇒ String

  The closing chunk of the webarchive XML code.

• #webarchive_header ⇒ String

  The first chunk of the webarchive file, containing the WebMainResource.

• #webarchive_xml ⇒ String

  Contents of webarchive as an XML document.

• #wrap_with_doc(&blk) ⇒ Object

  Wraps the result of the block in an HTML5 document and body.

• #wrap_with_script(&blk) ⇒ Object

  Wraps the result of the block with