Reboot gh-pages

2026-05-08 17:08:43 +00:00
commit c3f5bd3de2
3540 changed files with 2281201 additions and 0 deletions
@@ -0,0 +1,842 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>
+  Module: Msf::Exploit::ViewState
+  
+    &mdash; Documentation by YARD 0.9.37
+  
+</title>
+
+  <link rel="stylesheet" href="../../css/style.css" type="text/css" />
+
+  <link rel="stylesheet" href="../../css/common.css" type="text/css" />
+
+<script type="text/javascript">
+  pathId = "Msf::Exploit::ViewState";
+  relpath = '../../';
+</script>
+
+
+  <script type="text/javascript" charset="utf-8" src="../../js/jquery.js"></script>
+
+  <script type="text/javascript" charset="utf-8" src="../../js/app.js"></script>
+
+
+  </head>
+  <body>
+    <div class="nav_wrap">
+      <iframe id="nav" src="../../class_list.html?1"></iframe>
+      <div id="resizer"></div>
+    </div>
+
+    <div id="main" tabindex="-1">
+      <div id="header">
+        <div id="menu">
+  
+    <a href="../../_index.html">Index (V)</a> &raquo;
+    <span class='title'><span class='object_link'><a href="../../Msf.html" title="Msf (module)">Msf</a></span></span> &raquo; <span class='title'><span class='object_link'><a href="../Exploit.html" title="Msf::Exploit (class)">Exploit</a></span></span>
+     &raquo; 
+    <span class="title">ViewState</span>
+  
+</div>
+
+        <div id="search">
+  
+    <a class="full_list_link" id="class_list_link"
+        href="../../class_list.html">
+
+        <svg width="24" height="24">
+          <rect x="0" y="4" width="24" height="4" rx="1" ry="1"></rect>
+          <rect x="0" y="12" width="24" height="4" rx="1" ry="1"></rect>
+          <rect x="0" y="20" width="24" height="4" rx="1" ry="1"></rect>
+        </svg>
+    </a>
+  
+</div>
+        <div class="clear"></div>
+      </div>
+
+      <div id="content"><h1>Module: Msf::Exploit::ViewState
+  
+  
+  
+</h1>
+<div class="box_info">
+  
+
+  
+  
+  
+  
+  
+
+  
+  <dl>
+    <dt>Included in:</dt>
+    <dd><span class='object_link'><a href="Remote/HTTP/Sharepoint.html" title="Msf::Exploit::Remote::HTTP::Sharepoint (module)">Remote::HTTP::Sharepoint</a></span></dd>
+  </dl>
+  
+
+  
+  <dl>
+    <dt>Defined in:</dt>
+    <dd>lib/msf/core/exploit/view_state.rb</dd>
+  </dl>
+  
+</div>
+
+
+
+
+
+
+
+
+  
+    <h2>
+      Instance Method Summary
+      <small><a href="#" class="summary_toggle">collapse</a></small>
+    </h2>
+
+    <ul class="summary">
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#can_sign_viewstate%3F-instance_method" title="#can_sign_viewstate? (instance method)">#<strong>can_sign_viewstate?</strong>(encoded_viewstate, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; Boolean </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'></div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#decode_viewstate-instance_method" title="#decode_viewstate (instance method)">#<strong>decode_viewstate</strong>(encoded_viewstate, algo: &#39;sha1&#39;)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'></div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#extract_viewstate-instance_method" title="#extract_viewstate (instance method)">#<strong>extract_viewstate</strong>(html)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'>
+<p>Extract __VIEWSTATE from HTML.</p>
+</div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#extract_viewstate_generator-instance_method" title="#extract_viewstate_generator (instance method)">#<strong>extract_viewstate_generator</strong>(html)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'>
+<p>Extract __VIEWSTATEGENERATOR from HTML.</p>
+</div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#extract_viewstate_validation_key-instance_method" title="#extract_viewstate_validation_key (instance method)">#<strong>extract_viewstate_validation_key</strong>(web_config)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'>
+<p>Extract validationKey from web.config.</p>
+</div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#generate_viewstate-instance_method" title="#generate_viewstate (instance method)">#<strong>generate_viewstate</strong>(data, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'></div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#generate_viewstate_hmac-instance_method" title="#generate_viewstate_hmac (instance method)">#<strong>generate_viewstate_hmac</strong>(data, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'></div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#generate_viewstate_payload-instance_method" title="#generate_viewstate_payload (instance method)">#<strong>generate_viewstate_payload</strong>(cmd, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'></div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#initialize-instance_method" title="#initialize (instance method)">#<strong>initialize</strong>(info = {})  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'></div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#pack_viewstate_generator-instance_method" title="#pack_viewstate_generator (instance method)">#<strong>pack_viewstate_generator</strong>(hex_generator)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'>
+<p>Convenience method to convert __VIEWSTATEGENERATOR to binary.</p>
+</div></span>
+  
+</li>
+
+      
+        <li class="public ">
+  <span class="summary_signature">
+    
+      <a href="#pack_viewstate_validation_key-instance_method" title="#pack_viewstate_validation_key (instance method)">#<strong>pack_viewstate_validation_key</strong>(hex_key)  &#x21d2; Object </a>
+    
+
+    
+  </span>
+  
+  
+  
+  
+  
+  
+  
+
+  
+    <span class="summary_desc"><div class='inline'>
+<p>Convenience method to convert validationKey to binary.</p>
+</div></span>
+  
+</li>
+
+      
+    </ul>
+  
+
+
+
+  <div id="instance_method_details" class="method_details_list">
+    <h2>Instance Method Details</h2>
+
+    
+      <div class="method_details first">
+  <h3 class="signature first" id="can_sign_viewstate?-instance_method">
+  
+    #<strong>can_sign_viewstate?</strong>(encoded_viewstate, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; <tt>Boolean</tt> 
+  
+
+  
+
+  
+</h3><div class="docstring">
+  <div class="discussion">
+    
+
+  </div>
+</div>
+<div class="tags">
+  
+<p class="tag_title">Returns:</p>
+<ul class="return">
+  
+    <li>
+      
+      
+        <span class='type'>(<tt>Boolean</tt>)</span>
+      
+      
+      
+    </li>
+  
+</ul>
+
+</div><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+72
+73
+74
+75
+76
+77</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 72</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_can_sign_viewstate?'>can_sign_viewstate?</span><span class='lparen'>(</span><span class='id identifier rubyid_encoded_viewstate'>encoded_viewstate</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>key:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
+  <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='period'>.</span><span class='id identifier rubyid_can_sign_viewstate?'>can_sign_viewstate?</span><span class='lparen'>(</span><span class='id identifier rubyid_encoded_viewstate'>encoded_viewstate</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='id identifier rubyid_extra'>extra</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='comma'>,</span> <span class='label'>key:</span> <span class='id identifier rubyid_key'>key</span><span class='rparen'>)</span>
+<span class='kw'>rescue</span> <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState/Error.html" title="Rex::Exploit::ViewState::Error (class)">Error</a></span></span> <span class='op'>=&gt;</span> <span class='id identifier rubyid_error'>error</span>
+  <span class='id identifier rubyid_vprint_error'>vprint_error</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&quot;</span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_error'>error</span><span class='period'>.</span><span class='id identifier rubyid_class'>class</span><span class='period'>.</span><span class='id identifier rubyid_name'>name</span><span class='embexpr_end'>}</span><span class='tstring_content'>: </span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_error'>error</span><span class='period'>.</span><span class='id identifier rubyid_message'>message</span><span class='embexpr_end'>}</span><span class='tstring_end'>&quot;</span></span><span class='rparen'>)</span>
+  <span class='kw'>return</span> <span class='kw'>false</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="decode_viewstate-instance_method">
+  
+    #<strong>decode_viewstate</strong>(encoded_viewstate, algo: &#39;sha1&#39;)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+61
+62
+63
+64
+65
+66
+67
+68
+69
+70</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 61</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_decode_viewstate'>decode_viewstate</span><span class='lparen'>(</span><span class='id identifier rubyid_encoded_viewstate'>encoded_viewstate</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
+  <span class='id identifier rubyid_decoded'>decoded</span> <span class='op'>=</span> <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='period'>.</span><span class='id identifier rubyid_decode_viewstate'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html#decode_viewstate-class_method" title="Rex::Exploit::ViewState.decode_viewstate (method)">decode_viewstate</a></span></span><span class='lparen'>(</span><span class='id identifier rubyid_encoded_viewstate'>encoded_viewstate</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='rparen'>)</span>
+
+  <span class='id identifier rubyid_vprint_error'>vprint_error</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>Could not parse ViewState data</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span> <span class='kw'>unless</span> <span class='id identifier rubyid_decoded'>decoded</span><span class='lbracket'>[</span><span class='symbol'>:data</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_present?'>present?</span>
+  <span class='id identifier rubyid_vprint_error'>vprint_error</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>Could not parse ViewState HMAC</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span> <span class='kw'>unless</span> <span class='id identifier rubyid_decoded'>decoded</span><span class='lbracket'>[</span><span class='symbol'>:hmac</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_present?'>present?</span>
+  <span class='id identifier rubyid_decoded'>decoded</span>
+<span class='kw'>rescue</span> <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState/Error.html" title="Rex::Exploit::ViewState::Error (class)">Error</a></span></span> <span class='op'>=&gt;</span> <span class='id identifier rubyid_error'>error</span>
+  <span class='id identifier rubyid_vprint_error'>vprint_error</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&quot;</span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_error'>error</span><span class='period'>.</span><span class='id identifier rubyid_class'>class</span><span class='period'>.</span><span class='id identifier rubyid_name'>name</span><span class='embexpr_end'>}</span><span class='tstring_content'>: </span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_error'>error</span><span class='period'>.</span><span class='id identifier rubyid_message'>message</span><span class='embexpr_end'>}</span><span class='tstring_end'>&quot;</span></span><span class='rparen'>)</span>
+  <span class='kw'>return</span> <span class='lbrace'>{</span> <span class='label'>data:</span> <span class='kw'>nil</span><span class='comma'>,</span> <span class='label'>hmac:</span> <span class='kw'>nil</span> <span class='rbrace'>}</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="extract_viewstate-instance_method">
+  
+    #<strong>extract_viewstate</strong>(html)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><div class="docstring">
+  <div class="discussion">
+    
+<p>Extract __VIEWSTATE from HTML</p>
+
+
+  </div>
+</div>
+<div class="tags">
+  
+
+</div><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+80
+81
+82</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 80</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_extract_viewstate'>extract_viewstate</span><span class='lparen'>(</span><span class='id identifier rubyid_html'>html</span><span class='rparen'>)</span>
+  <span class='id identifier rubyid_html'>html</span><span class='period'>.</span><span class='id identifier rubyid_at'>at</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>//input[@id = &quot;__VIEWSTATE&quot;]/@value</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span><span class='op'>&amp;.</span><span class='id identifier rubyid_text'>text</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="extract_viewstate_generator-instance_method">
+  
+    #<strong>extract_viewstate_generator</strong>(html)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><div class="docstring">
+  <div class="discussion">
+    
+<p>Extract __VIEWSTATEGENERATOR from HTML</p>
+
+
+  </div>
+</div>
+<div class="tags">
+  
+
+</div><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+85
+86
+87</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 85</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_extract_viewstate_generator'>extract_viewstate_generator</span><span class='lparen'>(</span><span class='id identifier rubyid_html'>html</span><span class='rparen'>)</span>
+  <span class='id identifier rubyid_html'>html</span><span class='period'>.</span><span class='id identifier rubyid_at'>at</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>//input[@id = &quot;__VIEWSTATEGENERATOR&quot;]/@value</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span><span class='op'>&amp;.</span><span class='id identifier rubyid_text'>text</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="extract_viewstate_validation_key-instance_method">
+  
+    #<strong>extract_viewstate_validation_key</strong>(web_config)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><div class="docstring">
+  <div class="discussion">
+    
+<p>Extract validationKey from web.config</p>
+
+
+  </div>
+</div>
+<div class="tags">
+  
+
+</div><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+90
+91
+92</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 90</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_extract_viewstate_validation_key'>extract_viewstate_validation_key</span><span class='lparen'>(</span><span class='id identifier rubyid_web_config'>web_config</span><span class='rparen'>)</span>
+  <span class='id identifier rubyid_web_config'>web_config</span><span class='period'>.</span><span class='id identifier rubyid_at'>at</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>//machineKey/@validationKey</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span><span class='op'>&amp;.</span><span class='id identifier rubyid_text'>text</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="generate_viewstate-instance_method">
+  
+    #<strong>generate_viewstate</strong>(data, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+53
+54
+55</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 53</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_generate_viewstate'>generate_viewstate</span><span class='lparen'>(</span><span class='id identifier rubyid_data'>data</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>key:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
+  <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='period'>.</span><span class='id identifier rubyid_generate_viewstate'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html#generate_viewstate-class_method" title="Rex::Exploit::ViewState.generate_viewstate (method)">generate_viewstate</a></span></span><span class='lparen'>(</span><span class='id identifier rubyid_data'>data</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='id identifier rubyid_extra'>extra</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='comma'>,</span> <span class='label'>key:</span> <span class='id identifier rubyid_key'>key</span><span class='rparen'>)</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="generate_viewstate_hmac-instance_method">
+  
+    #<strong>generate_viewstate_hmac</strong>(data, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+57
+58
+59</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 57</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_generate_viewstate_hmac'>generate_viewstate_hmac</span><span class='lparen'>(</span><span class='id identifier rubyid_data'>data</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>key:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
+  <span class='const'><span class='object_link'><a href="../../Rex.html" title="Rex (module)">Rex</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit.html" title="Rex::Exploit (module)">Exploit</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html" title="Rex::Exploit::ViewState (class)">ViewState</a></span></span><span class='period'>.</span><span class='id identifier rubyid_generate_viewstate_hmac'><span class='object_link'><a href="../../Rex/Exploit/ViewState.html#generate_viewstate_hmac-class_method" title="Rex::Exploit::ViewState.generate_viewstate_hmac (method)">generate_viewstate_hmac</a></span></span><span class='lparen'>(</span><span class='id identifier rubyid_data'>data</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='comma'>,</span> <span class='label'>key:</span> <span class='id identifier rubyid_key'>key</span><span class='rparen'>)</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="generate_viewstate_payload-instance_method">
+  
+    #<strong>generate_viewstate_payload</strong>(cmd, extra: &#39;&#39;, algo: &#39;sha1&#39;, key: &#39;&#39;)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+43
+44
+45
+46
+47
+48
+49
+50
+51</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 43</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_generate_viewstate_payload'>generate_viewstate_payload</span><span class='lparen'>(</span><span class='id identifier rubyid_cmd'>cmd</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>sha1</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span> <span class='label'>key:</span> <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
+  <span class='id identifier rubyid_serialized_payload'>serialized_payload</span> <span class='op'>=</span> <span class='const'><span class='object_link'><a href="../../Msf.html" title="Msf (module)">Msf</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Util.html" title="Msf::Util (module)">Util</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Util/DotNetDeserialization.html" title="Msf::Util::DotNetDeserialization (module)">DotNetDeserialization</a></span></span><span class='period'>.</span><span class='id identifier rubyid_generate'><span class='object_link'><a href="../Util/DotNetDeserialization.html#generate-class_method" title="Msf::Util::DotNetDeserialization.generate (method)">generate</a></span></span><span class='lparen'>(</span>
+    <span class='id identifier rubyid_cmd'>cmd</span><span class='comma'>,</span>
+    <span class='label'>gadget_chain:</span> <span class='id identifier rubyid_datastore'>datastore</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>DotNetGadgetChain</span><span class='tstring_end'>&#39;</span></span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_to_sym'>to_sym</span><span class='comma'>,</span>
+    <span class='label'>formatter:</span> <span class='symbol'>:LosFormatter</span>
+  <span class='rparen'>)</span>
+
+  <span class='id identifier rubyid_generate_viewstate'>generate_viewstate</span><span class='lparen'>(</span><span class='id identifier rubyid_serialized_payload'>serialized_payload</span><span class='comma'>,</span> <span class='label'>extra:</span> <span class='id identifier rubyid_extra'>extra</span><span class='comma'>,</span> <span class='label'>algo:</span> <span class='id identifier rubyid_algo'>algo</span><span class='comma'>,</span> <span class='label'>key:</span> <span class='id identifier rubyid_key'>key</span><span class='rparen'>)</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="initialize-instance_method">
+  
+    #<strong>initialize</strong>(info = {})  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+27
+28
+29
+30
+31
+32
+33
+34
+35
+36
+37
+38
+39
+40
+41</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 27</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_initialize'>initialize</span><span class='lparen'>(</span><span class='id identifier rubyid_info'>info</span> <span class='op'>=</span> <span class='lbrace'>{</span><span class='rbrace'>}</span><span class='rparen'>)</span>
+  <span class='kw'>super</span>
+
+  <span class='id identifier rubyid_register_advanced_options'>register_advanced_options</span><span class='lparen'>(</span><span class='lbracket'>[</span>
+    <span class='const'><span class='object_link'><a href="../OptEnum.html" title="Msf::OptEnum (class)">OptEnum</a></span></span><span class='period'>.</span><span class='id identifier rubyid_new'><span class='object_link'><a href="../OptEnum.html#initialize-instance_method" title="Msf::OptEnum#initialize (method)">new</a></span></span><span class='lparen'>(</span>
+      <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>DotNetGadgetChain</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span>
+      <span class='lbracket'>[</span>
+        <span class='kw'>true</span><span class='comma'>,</span>
+        <span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>.NET gadget chain to use in ViewState</span><span class='tstring_end'>&#39;</span></span><span class='comma'>,</span>
+        <span class='symbol'>:TextFormattingRunProperties</span><span class='comma'>,</span>
+        <span class='const'><span class='object_link'><a href="../../Msf.html" title="Msf (module)">Msf</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Util.html" title="Msf::Util (module)">Util</a></span></span><span class='op'>::</span><span class='const'><span class='object_link'><a href="../Util/DotNetDeserialization.html" title="Msf::Util::DotNetDeserialization (module)">DotNetDeserialization</a></span></span><span class='period'>.</span><span class='id identifier rubyid_formatter_compatible_gadget_chains'><span class='object_link'><a href="../Util/DotNetDeserialization.html#formatter_compatible_gadget_chains-class_method" title="Msf::Util::DotNetDeserialization.formatter_compatible_gadget_chains (method)">formatter_compatible_gadget_chains</a></span></span><span class='lparen'>(</span><span class='symbol'>:LosFormatter</span><span class='rparen'>)</span>
+      <span class='rbracket'>]</span>
+    <span class='rparen'>)</span>
+  <span class='rbracket'>]</span><span class='rparen'>)</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="pack_viewstate_generator-instance_method">
+  
+    #<strong>pack_viewstate_generator</strong>(hex_generator)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><div class="docstring">
+  <div class="discussion">
+    
+<p>Convenience method to convert __VIEWSTATEGENERATOR to binary</p>
+
+
+  </div>
+</div>
+<div class="tags">
+  
+
+</div><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+95
+96
+97</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 95</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_pack_viewstate_generator'>pack_viewstate_generator</span><span class='lparen'>(</span><span class='id identifier rubyid_hex_generator'>hex_generator</span><span class='rparen'>)</span>
+  <span class='lbracket'>[</span><span class='id identifier rubyid_hex_generator'>hex_generator</span><span class='period'>.</span><span class='id identifier rubyid_to_i'>to_i</span><span class='lparen'>(</span><span class='int'>16</span><span class='rparen'>)</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_pack'>pack</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>V</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+      <div class="method_details ">
+  <h3 class="signature " id="pack_viewstate_validation_key-instance_method">
+  
+    #<strong>pack_viewstate_validation_key</strong>(hex_key)  &#x21d2; <tt>Object</tt> 
+  
+
+  
+
+  
+</h3><div class="docstring">
+  <div class="discussion">
+    
+<p>Convenience method to convert validationKey to binary</p>
+
+
+  </div>
+</div>
+<div class="tags">
+  
+
+</div><table class="source_code">
+  <tr>
+    <td>
+      <pre class="lines">
+
+
+100
+101
+102</pre>
+    </td>
+    <td>
+      <pre class="code"><span class="info file"># File 'lib/msf/core/exploit/view_state.rb', line 100</span>
+
+<span class='kw'>def</span> <span class='id identifier rubyid_pack_viewstate_validation_key'>pack_viewstate_validation_key</span><span class='lparen'>(</span><span class='id identifier rubyid_hex_key'>hex_key</span><span class='rparen'>)</span>
+  <span class='lbracket'>[</span><span class='id identifier rubyid_hex_key'>hex_key</span><span class='rbracket'>]</span><span class='period'>.</span><span class='id identifier rubyid_pack'>pack</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>&#39;</span><span class='tstring_content'>H*</span><span class='tstring_end'>&#39;</span></span><span class='rparen'>)</span>
+<span class='kw'>end</span></pre>
+    </td>
+  </tr>
+</table>
+</div>
+    
+  </div>
+
+</div>
+
+      <div id="footer">
+  Generated on Fri May  8 17:01:25 2026 by
+  <a href="https://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
+  0.9.37 (ruby-3.1.5).
+</div>
+
+    </div>
+  </body>
+</html>