theinfinitenigma/wXf — comment on commit 0c9d9cc24a5e23f5efb7cca9facc41077e67c9e3
File:  line 0
By theinfinitenigma:

Sure, I can make those changes. Now that I'm aware of the output conventions, ill use those in other modules I write.

This module will actually exploit the vulnerability and test for the presence of the alert dialog, which should only be returned if it's vulnerable. I'm open to tweaking this as the signature could be made stronger.

If you would prefer a detection module, I can write that as well.

Let me know what you think

Thanks,

theinfinitenigma

Ken Johnson wrote:

@theinfinitenigma - Thanks! Hey, do you think it would be possible to make the following changes? In modules/exploit/resinxss.rb - LN 41 - change FROM $stdout.puts("Exploit was successful!\r\n") TO prnt_plus("Exploit was successful!) ...and LN 42, 43- change FROM else $stdout.puts("Unable to verify success...\r\n") $stdout.puts(res.body) TO else prnt_err("Unable to verify success...") prnt_gen("Body of Response") final_print("#{res.body}") Also, since this is testing and not exploiting (or so I think), should we put this under Auxiliary as a check for this vulnerability? Thanks again! --- Reply to this email directly or view it on GitHub: https://github.com/theinfinitenigma/wXf/commit/0c9d9cc24a5e23f5efb7cca9facc41077e67c9e3#commitcomment-790198