How to run javascript exploit?
May be this question is already answered here - but I can't find it.. may be I'm not using right keyword to search....
My goal is to run them under msfconsole.. so, as far as my knowledge goes, I have to convert java to ruby and save it in appropriate folder... It would be fantastic if a simple one line command can be found to use in BT konsole. Otherwise, I can use ther OS ummmmmm........ like M$ windows... there is a tool out there (Web Code Converter - v4.02), however the demo version can't convert java to ruby (damn it!)...
If you can't explain it simply, you don't understand it well enough -- Albert Einstein
Javascript is vastly different to Java, try not to get them confused or you will end up with a mass of issues.
You could try basing the exploits off of the code available to you already in the modules directory, but I usually just fire up a http daemon and use the multi-handler in msfconsole - this could be your best bet (and easiest), so long as the payload connects back to metasploit as it should you will retrieve the connection.
Still not underestimating the power...
There is no such thing as bad information - There is truth in the data, so you sift it all, even the crap stuff.
Sorted... thanks for pointing me to the right direction. Cheers
If you can't explain it simply, you don't understand it well enough -- Albert Einstein
Posting Permissions
