 sinn3r
|
95d639ccf7
|
Change target index and names. Also retested on XP all the way to Win 7, IE 6 to IE8.
|
2011-11-20 01:44:52 -06:00 |
|
|
sinn3r
|
9c2fab0921
|
Add CVE-2010-0356 (Viscom Movie Player Pro) by tecr0c
|
2011-11-19 20:40:04 -06:00 |
|
|
sinn3r
|
fea42dbdee
|
Add feature #5872
|
2011-11-16 12:26:54 -06:00 |
|
|
sinn3r
|
170c4f5451
|
Fix author email format
|
2011-11-12 01:53:25 -06:00 |
|
|
Wei Chen
|
e767214411
|
Fix: whitespaces, svn propset, author e-mail format
git-svn-id: file:///home/svn/framework3/trunk@14175 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-11-06 22:02:26 +00:00 |
|
|
Joshua Drake
|
7bfa29ace4
|
clean up exploit HTML print_status
git-svn-id: file:///home/svn/framework3/trunk@14036 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-23 14:21:57 +00:00 |
|
|
Joshua Drake
|
62c8c6ea9f
|
big msftidy pass, ping me if there are issues
git-svn-id: file:///home/svn/framework3/trunk@14034 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-23 11:56:13 +00:00 |
|
|
Wei Chen
|
0f1ba8dcf1
|
Change user agent check
git-svn-id: file:///home/svn/framework3/trunk@13993 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-18 15:48:03 +00:00 |
|
|
Wei Chen
|
8e4f4a2672
|
Add CVE-2011-1774 (Safari libxslt arbitrary file creation)
git-svn-id: file:///home/svn/framework3/trunk@13987 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-18 07:39:50 +00:00 |
|
|
Wei Chen
|
fbbec1fa92
|
This exploit falls between NormalRanking to GoodRanking. I'll class it as Normal for now.
git-svn-id: file:///home/svn/framework3/trunk@13984 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-18 03:48:10 +00:00 |
|
|
Tod Beardsley
|
c336d063da
|
Mostly file format (unix linefeeds) and File.open() calls using binary. Fixed ranking for mozilla_nstreerange and disclosure and BID # for tugzip.
git-svn-id: file:///home/svn/framework3/trunk@13971 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-17 04:20:53 +00:00 |
|
|
Tod Beardsley
|
3c36b0c975
|
Msftidy: knocking out all those trailing spaces. Screw those guys.
git-svn-id: file:///home/svn/framework3/trunk@13967 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-17 03:49:49 +00:00 |
|
|
Wei Chen
|
39a4488da5
|
Patch #5740 for Firefox Array.reduceRight() exploit
git-svn-id: file:///home/svn/framework3/trunk@13958 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-16 20:28:15 +00:00 |
|
|
HD Moore
|
cf8524b1b4
|
Fixes #5414 by applying Joshua Taylor's patch that corrects bad reference types
git-svn-id: file:///home/svn/framework3/trunk@13949 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-16 09:53:53 +00:00 |
|
|
Tod Beardsley
|
020abd926b
|
A handful of rankings changes, also converting whitespace.
git-svn-id: file:///home/svn/framework3/trunk@13941 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-15 22:58:20 +00:00 |
|
|
Wei Chen
|
14d7db1641
|
Add disclosure dates to all the exploit modules that didn't have one
git-svn-id: file:///home/svn/framework3/trunk@13938 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-15 21:09:17 +00:00 |
|
|
Wei Chen
|
1adb31747d
|
This module is missing a ranking. Adding one.
git-svn-id: file:///home/svn/framework3/trunk@13936 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-15 20:35:18 +00:00 |
|
|
Wei Chen
|
4f4c0bc0be
|
Add CVE-2011-2371 Firefox Array.reduceRight() vuln
git-svn-id: file:///home/svn/framework3/trunk@13909 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-13 03:16:15 +00:00 |
|
|
Wei Chen
|
90a426cec6
|
Add PcVue 10 LoadObject/SaveObject vuln (Feature #5647)
git-svn-id: file:///home/svn/framework3/trunk@13889 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-12 10:57:31 +00:00 |
|
|
Wei Chen
|
2b3a277124
|
Found an instance that causes the win 7 target to fail. This fix corrects it.
git-svn-id: file:///home/svn/framework3/trunk@13797 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-27 08:55:07 +00:00 |
|
|
Wei Chen
|
ec6f290fbd
|
Add Windows 7 target and all kinds of stuff.
git-svn-id: file:///home/svn/framework3/trunk@13775 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-22 17:40:35 +00:00 |
|
|
Wei Chen
|
5d4f68a6f2
|
Fix JS
git-svn-id: file:///home/svn/framework3/trunk@13767 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-21 03:13:45 +00:00 |
|
|
James Lee
|
f4be092ac1
|
include the CVE with more details that definitely applies to this bug, in addition to the ambiguous one that may or may not
git-svn-id: file:///home/svn/framework3/trunk@13751 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-18 03:57:27 +00:00 |
|
|
Tod Beardsley
|
10c76f66ba
|
Adding an extra print line to adobe_cooltype_sing that clearly displays the user-agent.
git-svn-id: file:///home/svn/framework3/trunk@13748 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-17 20:12:51 +00:00 |
|
|
Wei Chen
|
56025609f0
|
Add fix commit url to reference. Thx jduck!
git-svn-id: file:///home/svn/framework3/trunk@13745 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-17 06:48:33 +00:00 |
|
|
Wei Chen
|
2ebef435a0
|
Add CVE-2011-2950 Real Player heap overflow
git-svn-id: file:///home/svn/framework3/trunk@13738 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-16 19:22:29 +00:00 |
|
|
Wei Chen
|
7569cad178
|
Correct variable use in heap spray js function
git-svn-id: file:///home/svn/framework3/trunk@13735 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-15 22:37:13 +00:00 |
|
|
Wei Chen
|
70fa0e630b
|
Add Windows 7 + IE 8 target. Also use a different approach to get code execution.
git-svn-id: file:///home/svn/framework3/trunk@13734 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-15 20:51:01 +00:00 |
|
|
Wei Chen
|
819e673b88
|
Mention about the RSA attack in the description, also add a reference for it
git-svn-id: file:///home/svn/framework3/trunk@13697 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-06 17:22:00 +00:00 |
|
|
David Rude
|
8a070b81a2
|
Add the noobfuscation arg to the heaplib call
git-svn-id: file:///home/svn/framework3/trunk@13675 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-01 09:00:20 +00:00 |
|
|
Wei Chen
|
22dc0ed551
|
Fix disclosure date
git-svn-id: file:///home/svn/framework3/trunk@13670 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-31 00:15:46 +00:00 |
|
|
David Rude
|
c5fe6ed503
|
Reset the target to allow for multiple client connections
git-svn-id: file:///home/svn/framework3/trunk@13669 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-30 22:29:14 +00:00 |
|
|
David Rude
|
70dffd6afb
|
Adds Citrix Gateway ActiveX Stack Based Buffer Overflow module
git-svn-id: file:///home/svn/framework3/trunk@13666 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-30 22:22:32 +00:00 |
|
|
David Rude
|
b331073851
|
cleaned up some column width issues, added on_new_session clean up code to remove files
git-svn-id: file:///home/svn/framework3/trunk@13599 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-20 17:47:03 +00:00 |
|
|
Wei Chen
|
6723c7fb3e
|
Minor metadata format fix
git-svn-id: file:///home/svn/framework3/trunk@13593 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-20 00:11:22 +00:00 |
|
|
Wei Chen
|
8fbd81a0f0
|
Add HP Easy Printer xmlsimpleaccessor exploit
git-svn-id: file:///home/svn/framework3/trunk@13592 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-19 23:49:45 +00:00 |
|
|
Wei Chen
|
fe53151324
|
fix tabs
git-svn-id: file:///home/svn/framework3/trunk@13590 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-19 16:58:50 +00:00 |
|
|
Wei Chen
|
056adf7063
|
Add Win 7 target
git-svn-id: file:///home/svn/framework3/trunk@13589 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-19 16:57:19 +00:00 |
|
|
Wei Chen
|
6c58dad979
|
ugh, why the extra spaces
git-svn-id: file:///home/svn/framework3/trunk@13566 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-15 15:34:49 +00:00 |
|
|
Wei Chen
|
eaa5cf6b5d
|
Use heaplib on IE 8, allow obfuscation as an option
git-svn-id: file:///home/svn/framework3/trunk@13565 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-15 15:32:17 +00:00 |
|
|
Wei Chen
|
55d60a1af2
|
Allow JavaScript obfuscation as an option
git-svn-id: file:///home/svn/framework3/trunk@13556 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-13 02:28:49 +00:00 |
|
|
Wei Chen
|
c29a4d5ea3
|
Specify UUID offset for the custom .Net binary
git-svn-id: file:///home/svn/framework3/trunk@13555 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-13 02:15:05 +00:00 |
|
|
Wei Chen
|
f8bf910fbb
|
missing var
git-svn-id: file:///home/svn/framework3/trunk@13554 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-13 02:05:08 +00:00 |
|
|
Wei Chen
|
8bf7a9990b
|
Improve javascript obfuscation, and allow it as an option
git-svn-id: file:///home/svn/framework3/trunk@13553 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-12 23:03:11 +00:00 |
|
|
Wei Chen
|
20f4280d9f
|
Exploit is much more reliable than before, it gets a promotion
git-svn-id: file:///home/svn/framework3/trunk@13549 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-12 19:17:23 +00:00 |
|
|
Wei Chen
|
bfc59e4c62
|
Add MS10-026 exploit
git-svn-id: file:///home/svn/framework3/trunk@13547 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-12 19:04:25 +00:00 |
|
|
Wei Chen
|
3b04e7bd9e
|
Add routine to check target before exploiting it
git-svn-id: file:///home/svn/framework3/trunk@13535 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-11 23:05:45 +00:00 |
|
|
Wei Chen
|
0d9908435a
|
Allow JavaScript obfuscation as an option
git-svn-id: file:///home/svn/framework3/trunk@13533 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-11 22:18:25 +00:00 |
|
|
Wei Chen
|
456aeeb90b
|
Allow JavaScript obfuscation as an option
git-svn-id: file:///home/svn/framework3/trunk@13530 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-11 18:47:21 +00:00 |
|
|
Wei Chen
|
4ac431948a
|
Allow JavaScript obfuscation as an option
git-svn-id: file:///home/svn/framework3/trunk@13524 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-11 15:50:43 +00:00 |
|