api/Msf/Exploit/ViewState.html

<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>
  Module: Msf::Exploit::ViewState
  
    &mdash; Documentation by YARD 0.9.37
  
</title>

  <link rel="stylesheet" href="../../css/style.css" type="text/css" />

  <link rel="stylesheet" href="../../css/common.css" type="text/css" />

<script type="text/javascript">
  pathId = "Msf::Exploit::ViewState";
  relpath = '../../';
</script>


  <script type="text/javascript" charset="utf-8" src="../../js/jquery.js"></script>

  <script type="text/javascript" charset="utf-8" src="../../js/app.js"></script>


  </head>
  <body>
    <div class="nav_wrap">
      <iframe id="nav" src="../../class_list.html?1"></iframe>
      <div id="resizer"></div>
    </div>

    <div id="main" tabindex="-1">
      <div id="header">
        <div id="menu">
  
    <a href="../../_index.html">Index (V)</a> &raquo;
    <span class='title'><span class='object_link'><a href="../../Msf.html" title="Msf (module)">Msf</a></span></span> &raquo; <span class='title'><span class='object_link'><a href="../Exploit.html" title="Msf::Exploit (class)">Exploit</a></span></span>
     &raquo; 
    <span class="title">ViewState</span>
  
</div>

        <div id="search">
  
    <a class="full_list_link" id="class_list_link"
        href="../../class_list.html">

        <svg width="24" height="24">
          <rect x="0" y="4" width="24" height="4" rx="1" ry="1"></rect>
          <rect x="0" y="12" width="24" height="4" rx="1" ry="1"></rect>
          <rect x="0" y="20" width="24" height="4" rx="1" ry="1"></rect>
        </svg>
    </a>
  
</div>
        <div class="clear"></div>
      </div>

      <div id="content"><h1>Module: Msf::Exploit::ViewState
  
  
</h1>
<div class="box_info">
  

  <dl>
    <dt>Included in:</dt>
    <dd><span class='object_link'><a href="Remote/HTTP/Sharepoint.html" title="Msf::Exploit::Remote::HTTP::Sharepoint (module)">Remote::HTTP::Sharepoint</a></span></dd>
  </dl>
  

  <dl>
    <dt>Defined in:</dt>
    <dd>lib/msf/core/exploit/view_state.rb</dd>
  </dl>
  
</div>


    <h2>
      Instance Method Summary
      <small><a href="#" class="summary_toggle">collapse</a></small>
    </h2>

    <ul class="summary">
      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#can_sign_viewstate%3F-instance_method" title="#can_sign_viewstate? (instance method)">#<strong>can_sign_viewstate?</strong>(encoded_viewstate, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; Boolean </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'></div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#decode_viewstate-instance_method" title="#decode_viewstate (instance method)">#<strong>decode_viewstate</strong>(encoded_viewstate, algo: &#39;sha1&#39;)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'></div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#extract_viewstate-instance_method" title="#extract_viewstate (instance method)">#<strong>extract_viewstate</strong>(html)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'>
<p>Extract __VIEWSTATE from HTML.</p>
</div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#extract_viewstate_generator-instance_method" title="#extract_viewstate_generator (instance method)">#<strong>extract_viewstate_generator</strong>(html)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'>
<p>Extract __VIEWSTATEGENERATOR from HTML.</p>
</div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#extract_viewstate_validation_key-instance_method" title="#extract_viewstate_validation_key (instance method)">#<strong>extract_viewstate_validation_key</strong>(web_config)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'>
<p>Extract validationKey from web.config.</p>
</div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#generate_viewstate-instance_method" title="#generate_viewstate (instance method)">#<strong>generate_viewstate</strong>(data, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'></div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#generate_viewstate_hmac-instance_method" title="#generate_viewstate_hmac (instance method)">#<strong>generate_viewstate_hmac</strong>(data, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'></div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#generate_viewstate_payload-instance_method" title="#generate_viewstate_payload (instance method)">#<strong>generate_viewstate_payload</strong>(cmd, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'></div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#initialize-instance_method" title="#initialize (instance method)">#<strong>initialize</strong>(info = {})  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'></div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#pack_viewstate_generator-instance_method" title="#pack_viewstate_generator (instance method)">#<strong>pack_viewstate_generator</strong>(hex_generator)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'>
<p>Convenience method to convert __VIEWSTATEGENERATOR to binary.</p>
</div></span>
  
</li>

      
        <li class="public ">
  <span class="summary_signature">
    
      <a href="#pack_viewstate_validation_key-instance_method" title="#pack_viewstate_validation_key (instance method)">#<strong>pack_viewstate_validation_key</strong>(hex_key)  &#x21d2; Object </a>
    

  </span>
  
  
    <span class="summary_desc"><div class='inline'>
<p>Convenience method to convert validationKey to binary.</p>
</div></span>
  
</li>

      
    </ul>
  

  <div id="instance_method_details" class="method_details_list">
    <h2>Instance Method Details</h2>

    
      <div class="method_details first">
  <h3 class="signature first" id="can_sign_viewstate?-instance_method">
  
    #<strong>can_sign_viewstate?</strong>(encoded_viewstate, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; <tt>Boolean</tt> 
  

</h3><div class="docstring">
  <div class="discussion">
    

  </div>
</div>
<div class="tags">
  
<p class="tag_title">Returns:</p>
<ul class="return">
  
    <li>
      
      
        <span class='type'>(<tt>Boolean</tt>)</span>
      
      
    </li>
  
</ul>

</div><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


72
73
74
75
76
77</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 72</span>

<span class='kw'>def</span> <span class='id identifier rubyid_can_sign_viewstate?'>can_sign_viewstate?</span><span class='lparen'>(</span><span class='id identifier rubyid_encoded_viewstate'>encoded_viewstate</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>key:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
  <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='period'>.</span><span class='id identifier rubyid_can_sign_viewstate?'>can_sign_viewstate?</span><span class='lparen'>(</span><span class='id identifier rubyid_encoded_viewstate'>encoded_viewstate</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='id identifier rubyid_extra'>extra</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='comma'>,</span> <span class='label'>key:</span> <span class='id identifier rubyid_key'>key</span><span class='rparen'>)</span>
<span class='kw'>rescue</span> <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState/Error.html" title="Rex::Exploit::ViewState::Error (class)">Error</a></span></span> <span class='op'>=&gt;</span> <span class='id identifier rubyid_error'>error</span>
  <span class='id identifier rubyid_vprint_error'>vprint_error</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&quot;</span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_error'>error</span><span class='period'>.</span><span class='id identifier rubyid_class'>class</span><span class='period'>.</span><span class='id identifier rubyid_name'>name</span><span class='embexpr_end'>}</span><span class='tstring_content'>: </span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_error'>error</span><span class='period'>.</span><span class='id identifier rubyid_message'>message</span><span class='embexpr_end'>}</span><span class='tstring_end'>&quot;</span></span><span class='rparen'>)</span>
  <span class='kw'>return</span> <span class='kw'>false</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="decode_viewstate-instance_method">
  
    #<strong>decode_viewstate</strong>(encoded_viewstate, algo: &#39;sha1&#39;)  &#x21d2; <tt>Object</tt> 
  

</h3><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


61
62
63
64
65
66
67
68
69
70</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 61</span>

<span class='kw'>def</span> <span class='id identifier rubyid_decode_viewstate'>decode_viewstate</span><span class='lparen'>(</span><span class='id identifier rubyid_encoded_viewstate'>encoded_viewstate</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
  <span class='id identifier rubyid_decoded'>decoded</span> <span class='op'>=</span> <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='period'>.</span><span class='id identifier rubyid_decode_viewstate'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html#decode_viewstate-class_method" title="Rex::Exploit::ViewState.decode_viewstate (method)">decode_viewstate</a></span></span><span class='lparen'>(</span><span class='id identifier rubyid_encoded_viewstate'>encoded_viewstate</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='rparen'>)</span>

  <span class='id identifier rubyid_vprint_error'>vprint_error</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>Could not parse ViewState data</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span> <span class='kw'>unless</span> <span class='id identifier rubyid_decoded'>decoded</span><span class='lbracket'>[</span><span class='symbol'>:data</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_present?'>present?</span>
  <span class='id identifier rubyid_vprint_error'>vprint_error</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>Could not parse ViewState HMAC</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span> <span class='kw'>unless</span> <span class='id identifier rubyid_decoded'>decoded</span><span class='lbracket'>[</span><span class='symbol'>:hmac</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_present?'>present?</span>
  <span class='id identifier rubyid_decoded'>decoded</span>
<span class='kw'>rescue</span> <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState/Error.html" title="Rex::Exploit::ViewState::Error (class)">Error</a></span></span> <span class='op'>=&gt;</span> <span class='id identifier rubyid_error'>error</span>
  <span class='id identifier rubyid_vprint_error'>vprint_error</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&quot;</span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_error'>error</span><span class='period'>.</span><span class='id identifier rubyid_class'>class</span><span class='period'>.</span><span class='id identifier rubyid_name'>name</span><span class='embexpr_end'>}</span><span class='tstring_content'>: </span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_error'>error</span><span class='period'>.</span><span class='id identifier rubyid_message'>message</span><span class='embexpr_end'>}</span><span class='tstring_end'>&quot;</span></span><span class='rparen'>)</span>
  <span class='kw'>return</span> <span class='lbrace'>{</span> <span class='label'>data:</span> <span class='kw'>nil</span><span class='comma'>,</span> <span class='label'>hmac:</span> <span class='kw'>nil</span> <span class='rbrace'>}</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="extract_viewstate-instance_method">
  
    #<strong>extract_viewstate</strong>(html)  &#x21d2; <tt>Object</tt> 
  

</h3><div class="docstring">
  <div class="discussion">
    
<p>Extract __VIEWSTATE from HTML</p>


  </div>
</div>
<div class="tags">
  

</div><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


80
81
82</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 80</span>

<span class='kw'>def</span> <span class='id identifier rubyid_extract_viewstate'>extract_viewstate</span><span class='lparen'>(</span><span class='id identifier rubyid_html'>html</span><span class='rparen'>)</span>
  <span class='id identifier rubyid_html'>html</span><span class='period'>.</span><span class='id identifier rubyid_at'>at</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>//input[@id = &quot;__VIEWSTATE&quot;]/@value</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span><span class='op'>&amp;.</span><span class='id identifier rubyid_text'>text</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="extract_viewstate_generator-instance_method">
  
    #<strong>extract_viewstate_generator</strong>(html)  &#x21d2; <tt>Object</tt> 
  

</h3><div class="docstring">
  <div class="discussion">
    
<p>Extract __VIEWSTATEGENERATOR from HTML</p>


  </div>
</div>
<div class="tags">
  

</div><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


85
86
87</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 85</span>

<span class='kw'>def</span> <span class='id identifier rubyid_extract_viewstate_generator'>extract_viewstate_generator</span><span class='lparen'>(</span><span class='id identifier rubyid_html'>html</span><span class='rparen'>)</span>
  <span class='id identifier rubyid_html'>html</span><span class='period'>.</span><span class='id identifier rubyid_at'>at</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>//input[@id = &quot;__VIEWSTATEGENERATOR&quot;]/@value</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span><span class='op'>&amp;.</span><span class='id identifier rubyid_text'>text</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="extract_viewstate_validation_key-instance_method">
  
    #<strong>extract_viewstate_validation_key</strong>(web_config)  &#x21d2; <tt>Object</tt> 
  

</h3><div class="docstring">
  <div class="discussion">
    
<p>Extract validationKey from web.config</p>


  </div>
</div>
<div class="tags">
  

</div><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


90
91
92</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 90</span>

<span class='kw'>def</span> <span class='id identifier rubyid_extract_viewstate_validation_key'>extract_viewstate_validation_key</span><span class='lparen'>(</span><span class='id identifier rubyid_web_config'>web_config</span><span class='rparen'>)</span>
  <span class='id identifier rubyid_web_config'>web_config</span><span class='period'>.</span><span class='id identifier rubyid_at'>at</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>//machineKey/@validationKey</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span><span class='op'>&amp;.</span><span class='id identifier rubyid_text'>text</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="generate_viewstate-instance_method">
  
    #<strong>generate_viewstate</strong>(data, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; <tt>Object</tt> 
  

</h3><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


53
54
55</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 53</span>

<span class='kw'>def</span> <span class='id identifier rubyid_generate_viewstate'>generate_viewstate</span><span class='lparen'>(</span><span class='id identifier rubyid_data'>data</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>key:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
  <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='period'>.</span><span class='id identifier rubyid_generate_viewstate'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html#generate_viewstate-class_method" title="Rex::Exploit::ViewState.generate_viewstate (method)">generate_viewstate</a></span></span><span class='lparen'>(</span><span class='id identifier rubyid_data'>data</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='id identifier rubyid_extra'>extra</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='comma'>,</span> <span class='label'>key:</span> <span class='id identifier rubyid_key'>key</span><span class='rparen'>)</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="generate_viewstate_hmac-instance_method">
  
    #<strong>generate_viewstate_hmac</strong>(data, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; <tt>Object</tt> 
  

</h3><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


57
58
59</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 57</span>

<span class='kw'>def</span> <span class='id identifier rubyid_generate_viewstate_hmac'>generate_viewstate_hmac</span><span class='lparen'>(</span><span class='id identifier rubyid_data'>data</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>key:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
  <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='period'>.</span><span class='id identifier rubyid_generate_viewstate_hmac'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html#generate_viewstate_hmac-class_method" title="Rex::Exploit::ViewState.generate_viewstate_hmac (method)">generate_viewstate_hmac</a></span></span><span class='lparen'>(</span><span class='id identifier rubyid_data'>data</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='comma'>,</span> <span class='label'>key:</span> <span class='id identifier rubyid_key'>key</span><span class='rparen'>)</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="generate_viewstate_payload-instance_method">
  
    #<strong>generate_viewstate_payload</strong>(cmd, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; <tt>Object</tt> 
  

</h3><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


43
44
45
46
47
48
49
50
51</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 43</span>

<span class='kw'>def</span> <span class='id identifier rubyid_generate_viewstate_payload'>generate_viewstate_payload</span><span class='lparen'>(</span><span class='id identifier rubyid_cmd'>cmd</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>key:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
  <span class='id identifier rubyid_serialized_payload'>serialized_payload</span> <span class='op'>=</span> <span class='const'><span class='object_link'><a href="../../Msf.html" title="Msf (module)">Msf</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Util.html" title="Msf::Util (module)">Util</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Util/DotNetDeserialization.html" title="Msf::Util::DotNetDeserialization (module)">DotNetDeserialization</a></span></span><span class='period'>.</span><span class='id identifier rubyid_generate'><span class='object_link'><a href="../Util/DotNetDeserialization.html#generate-class_method" title="Msf::Util::DotNetDeserialization.generate (method)">generate</a></span></span><span class='lparen'>(</span>
    <span class='id identifier rubyid_cmd'>cmd</span><span class='comma'>,</span>
    <span class='label'>gadget_chain:</span> <span class='id identifier rubyid_datastore'>datastore</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>DotNetGadgetChain</span><span class='tstring_end'>&#39;</span></span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_to_sym'>to_sym</span><span class='comma'>,</span>
    <span class='label'>formatter:</span> <span class='symbol'>:LosFormatter</span>
  <span class='rparen'>)</span>

  <span class='id identifier rubyid_generate_viewstate'>generate_viewstate</span><span class='lparen'>(</span><span class='id identifier rubyid_serialized_payload'>serialized_payload</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='id identifier rubyid_extra'>extra</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='comma'>,</span> <span class='label'>key:</span> <span class='id identifier rubyid_key'>key</span><span class='rparen'>)</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="initialize-instance_method">
  
    #<strong>initialize</strong>(info = {})  &#x21d2; <tt>Object</tt> 
  

</h3><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


27
28
29
30
31
32
33
34
35
36
37
38
39
40
41</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 27</span>

<span class='kw'>def</span> <span class='id identifier rubyid_initialize'>initialize</span><span class='lparen'>(</span><span class='id identifier rubyid_info'>info</span> <span class='op'>=</span> <span class='lbrace'>{</span><span class='rbrace'>}</span><span class='rparen'>)</span>
  <span class='kw'>super</span>

  <span class='id identifier rubyid_register_advanced_options'>register_advanced_options</span><span class='lparen'>(</span><span class='lbracket'>[</span>
    <span class='const'><span class='object_link'><a href="../OptEnum.html" title="Msf::OptEnum (class)">OptEnum</a></span></span><span class='period'>.</span><span class='id identifier rubyid_new'><span class='object_link'><a href="../OptEnum.html#initialize-instance_method" title="Msf::OptEnum#initialize (method)">new</a></span></span><span class='lparen'>(</span>
      <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>DotNetGadgetChain</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span>
      <span class='lbracket'>[</span>
        <span class='kw'>true</span><span class='comma'>,</span>
        <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>.NET gadget chain to use in ViewState</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span>
        <span class='symbol'>:TextFormattingRunProperties</span><span class='comma'>,</span>
        <span class='const'><span class='object_link'><a href="../../Msf.html" title="Msf (module)">Msf</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Util.html" title="Msf::Util (module)">Util</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Util/DotNetDeserialization.html" title="Msf::Util::DotNetDeserialization (module)">DotNetDeserialization</a></span></span><span class='period'>.</span><span class='id identifier rubyid_formatter_compatible_gadget_chains'><span class='object_link'><a href="../Util/DotNetDeserialization.html#formatter_compatible_gadget_chains-class_method" title="Msf::Util::DotNetDeserialization.formatter_compatible_gadget_chains (method)">formatter_compatible_gadget_chains</a></span></span><span class='lparen'>(</span><span class='symbol'>:LosFormatter</span><span class='rparen'>)</span>
      <span class='rbracket'>]</span>
    <span class='rparen'>)</span>
  <span class='rbracket'>]</span><span class='rparen'>)</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="pack_viewstate_generator-instance_method">
  
    #<strong>pack_viewstate_generator</strong>(hex_generator)  &#x21d2; <tt>Object</tt> 
  

</h3><div class="docstring">
  <div class="discussion">
    
<p>Convenience method to convert __VIEWSTATEGENERATOR to binary</p>


  </div>
</div>
<div class="tags">
  

</div><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


95
96
97</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 95</span>

<span class='kw'>def</span> <span class='id identifier rubyid_pack_viewstate_generator'>pack_viewstate_generator</span><span class='lparen'>(</span><span class='id identifier rubyid_hex_generator'>hex_generator</span><span class='rparen'>)</span>
  <span class='lbracket'>[</span><span class='id identifier rubyid_hex_generator'>hex_generator</span><span class='period'>.</span><span class='id identifier rubyid_to_i'>to_i</span><span class='lparen'>(</span><span class='int'>16</span><span class='rparen'>)</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_pack'>pack</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>V</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
      <div class="method_details ">
  <h3 class="signature " id="pack_viewstate_validation_key-instance_method">
  
    #<strong>pack_viewstate_validation_key</strong>(hex_key)  &#x21d2; <tt>Object</tt> 
  

</h3><div class="docstring">
  <div class="discussion">
    
<p>Convenience method to convert validationKey to binary</p>


  </div>
</div>
<div class="tags">
  

</div><table class="source_code">
  <tr>
    <td>
      <pre class="lines">


100
101
102</pre>
    </td>
    <td>
      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 100</span>

<span class='kw'>def</span> <span class='id identifier rubyid_pack_viewstate_validation_key'>pack_viewstate_validation_key</span><span class='lparen'>(</span><span class='id identifier rubyid_hex_key'>hex_key</span><span class='rparen'>)</span>
  <span class='lbracket'>[</span><span class='id identifier rubyid_hex_key'>hex_key</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_pack'>pack</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>H*</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
<span class='kw'>end</span></pre>
    </td>
  </tr>
</table>
</div>
    
  </div>

</div>

      <div id="footer">
  Generated on Fri May  8 17:01:25 2026 by
  <a href="https://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
  0.9.37 (ruby-3.1.5).
</div>

    </div>
  </body>
</html>