More accurate description.
This commit is contained in:
@@ -1,13 +1,9 @@
|
||||
# ./sdk/tools/android and install Android 4.1.2 or below
|
||||
#
|
||||
|
||||
##
|
||||
# This module requires Metasploit: http//metasploit.com/download
|
||||
# Current source: https://github.com/rapid7/metasploit-framework
|
||||
##
|
||||
|
||||
require 'msf/core'
|
||||
# require 'rex/proto/proxy/http'
|
||||
|
||||
class Metasploit3 < Msf::Exploit::Remote
|
||||
|
||||
@@ -27,6 +23,9 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||
served by metasploit into an affected Webview on the target device. There
|
||||
are a number of ways to do this (DNS spoofing, rogue HTTP proxy, XSS injection, etc).
|
||||
|
||||
This module can also get a shell on some versions of the Android Browser for
|
||||
Android < 4.2, where the vendor has added an addJavascriptInterface wrapper.
|
||||
|
||||
Note: Adding a .js to the URL will return plain javascript (no HTML markup).
|
||||
},
|
||||
'License' => MSF_LICENSE,
|
||||
|
||||
Reference in New Issue
Block a user