 David Rude
|
31a659e55a
|
Fixed this up to use the new JS obfuscation hotness thanks to egyp7s rkelly fu!
git-svn-id: file:///home/svn/framework3/trunk@12871 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-06 19:49:33 +00:00 |
|
|
Steve Tornio
|
377a18030a
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12869 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-06 19:06:18 +00:00 |
|
|
David Rude
|
3d7715ce60
|
Added Cisco AnyConnect VPN Client ActiveX download and execute exploit
git-svn-id: file:///home/svn/framework3/trunk@12868 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-06 18:52:26 +00:00 |
|
|
James Lee
|
bee19278d7
|
add a new javascript obfuscation engine using rkelly for parsing. use it in browser_autopwn and ms10_018_ie_behaviors. see #1003
git-svn-id: file:///home/svn/framework3/trunk@12839 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-03 00:36:26 +00:00 |
|
|
James Lee
|
36983436db
|
play a little nicer with browser autopwn by not spraying the heap if creating the vulnerable object failed
git-svn-id: file:///home/svn/framework3/trunk@12667 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-19 19:45:14 +00:00 |
|
|
James Lee
|
0b88468617
|
out with the new, in with the old. css_clip is pretty unreliable in my tests, go back to using ie_behaviors in browser autopwn
git-svn-id: file:///home/svn/framework3/trunk@12663 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-19 16:33:55 +00:00 |
|
|
Wei Chen
|
f9c49ef9ce
|
Comment update (this is still for the egghunter fix: bug #4552)
git-svn-id: file:///home/svn/framework3/trunk@12657 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-18 19:50:22 +00:00 |
|
|
Wei Chen
|
6345fec06c
|
checksum support for egghunter disabled, because not enough room for it. See r4552.
git-svn-id: file:///home/svn/framework3/trunk@12656 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-18 19:48:06 +00:00 |
|
|
Wei Chen
|
40894c3726
|
Moving Iconics webhmi activeX exploit from browser to scada directory
git-svn-id: file:///home/svn/framework3/trunk@12584 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-11 20:45:54 +00:00 |
|
|
Steve Tornio
|
b84df80983
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12576 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-10 19:16:07 +00:00 |
|
|
Wei Chen
|
105b5799af
|
Added ICONICS WebHMI ActiveX SetActiveXGuid bof
git-svn-id: file:///home/svn/framework3/trunk@12573 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-10 18:07:15 +00:00 |
|
|
Wei Chen
|
8d78a47e45
|
get_resource() added to 'src' parameter
git-svn-id: file:///home/svn/framework3/trunk@12543 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-05 22:10:30 +00:00 |
|
|
David Rude
|
a8b6c43636
|
reverting the disclosure dates for now need to clean up the patch
git-svn-id: file:///home/svn/framework3/trunk@12540 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-04 20:43:19 +00:00 |
|
|
David Rude
|
3b7ea08f6a
|
Fixes a ton of Disclosure Date discrepencies in various modules, thanks a ton to Michael Baker for spending the time to ensure accuracy
git-svn-id: file:///home/svn/framework3/trunk@12539 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-04 19:17:31 +00:00 |
|
|
Wei Chen
|
c5d51cf810
|
Disclosure date change
git-svn-id: file:///home/svn/framework3/trunk@12391 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-21 15:45:07 +00:00 |
|
|
Mario Ceballos
|
31f2afc033
|
fix date
git-svn-id: file:///home/svn/framework3/trunk@12388 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-21 11:12:34 +00:00 |
|
|
Wei Chen
|
cb491e35d2
|
Changed disclosure date
git-svn-id: file:///home/svn/framework3/trunk@12384 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-21 02:10:40 +00:00 |
|
|
Wei Chen
|
458d8cccb8
|
Modified heap spray routine. Added IE 8 target for XP SP3.
git-svn-id: file:///home/svn/framework3/trunk@12383 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-20 21:55:33 +00:00 |
|
|
Wei Chen
|
c28e7259ac
|
Added CVE-2011-0611 Adobe Flash 0day
git-svn-id: file:///home/svn/framework3/trunk@12330 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-16 02:09:33 +00:00 |
|
|
Wei Chen
|
ffe6868d22
|
Updated vbs stager temp var
git-svn-id: file:///home/svn/framework3/trunk@12286 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-09 18:24:43 +00:00 |
|
|
Steve Tornio
|
a8947662db
|
old file hanging around
git-svn-id: file:///home/svn/framework3/trunk@12280 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-08 13:28:57 +00:00 |
|
|
Steve Tornio
|
bb26593da7
|
add osvdb ref. rename file to correct typo
git-svn-id: file:///home/svn/framework3/trunk@12279 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-08 12:41:18 +00:00 |
|
|
Wei Chen
|
717fb83fc9
|
Added RealNetworks RealGames ActiveX exec arbitrary code execution
git-svn-id: file:///home/svn/framework3/trunk@12276 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-08 02:39:11 +00:00 |
|
|
Wei Chen
|
b90d6fc16f
|
Modified the heap spraying function. Each block size should be more consistent now.
git-svn-id: file:///home/svn/framework3/trunk@12264 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-07 07:27:38 +00:00 |
|
|
Joshua Drake
|
0882f18ec0
|
add fix commit diff and fix broken cve reference
git-svn-id: file:///home/svn/framework3/trunk@12166 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-28 03:04:54 +00:00 |
|
|
Joshua Drake
|
24fd896bfb
|
add OSVDB reference back, conflict handling fail!
git-svn-id: file:///home/svn/framework3/trunk@12165 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-28 03:02:46 +00:00 |
|
|
Wei Chen
|
214751379f
|
Updated: using get_resource() instead of datastore['URIPATH']
git-svn-id: file:///home/svn/framework3/trunk@12156 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-27 03:56:45 +00:00 |
|
|
Wei Chen
|
25ca59b56f
|
Added Win Vista and debug target
git-svn-id: file:///home/svn/framework3/trunk@12153 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 23:22:51 +00:00 |
|
|
David Rude
|
349512f48d
|
Updated exploit ranking and description to reflect the new ranking
git-svn-id: file:///home/svn/framework3/trunk@12151 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 19:33:38 +00:00 |
|
|
Steve Tornio
|
81fae13258
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12147 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 12:05:48 +00:00 |
|
|
David Rude
|
ff3659aa37
|
Lots of work to make this a lot more reliable =)
git-svn-id: file:///home/svn/framework3/trunk@12146 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 06:35:28 +00:00 |
|
|
Wei Chen
|
eb7df0be8e
|
Updated how the trigger file should be loaded... the proper way.
git-svn-id: file:///home/svn/framework3/trunk@12140 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 00:07:36 +00:00 |
|
|
Wei Chen
|
77ceadc6ad
|
Updated description and how the trigger file loads
git-svn-id: file:///home/svn/framework3/trunk@12139 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-25 22:49:11 +00:00 |
|
|
Wei Chen
|
08f210ac52
|
Added CVE-2010-3275 (VLC AMV vulnerability)
git-svn-id: file:///home/svn/framework3/trunk@12137 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-25 21:03:12 +00:00 |
|
|
Steve Tornio
|
89ec6ab5da
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12092 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-23 11:19:45 +00:00 |
|
|
David Rude
|
8233030184
|
opps removed mixin require as well
git-svn-id: file:///home/svn/framework3/trunk@12091 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-23 04:41:48 +00:00 |
|
|
David Rude
|
f8534f06dd
|
opps removed mixin reference =)
git-svn-id: file:///home/svn/framework3/trunk@12090 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-23 04:40:38 +00:00 |
|
|
David Rude
|
d7266b6551
|
Add CVE-2011-0609 exploit for Adobe Flash
git-svn-id: file:///home/svn/framework3/trunk@12089 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-23 04:31:48 +00:00 |
|
|
Joshua Drake
|
586c1f9305
|
oops, broke the LIBPATH option
git-svn-id: file:///home/svn/framework3/trunk@12015 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-18 01:18:18 +00:00 |
|
|
Joshua Drake
|
f4fe3f11b0
|
enable bind payloads, thx hdm :)
git-svn-id: file:///home/svn/framework3/trunk@12014 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-18 00:52:58 +00:00 |
|
|
Steve Tornio
|
4992deed21
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12013 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-18 00:16:06 +00:00 |
|
|
Joshua Drake
|
fb6107ffb5
|
enable java payloads, currently via one-off method
git-svn-id: file:///home/svn/framework3/trunk@12012 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-17 23:57:11 +00:00 |
|
|
David Rude
|
36b83cde6f
|
Added exploit for CVE-2010-3747 RealPlayer CDDA URI Code Execution
git-svn-id: file:///home/svn/framework3/trunk@12009 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-17 15:42:28 +00:00 |
|
|
David Rude
|
382e63e16e
|
fixed a typo in javascript
git-svn-id: file:///home/svn/framework3/trunk@12007 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-17 04:40:36 +00:00 |
|
|
Joshua Drake
|
4a1e59be8d
|
oops =D
git-svn-id: file:///home/svn/framework3/trunk@11983 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-16 05:01:29 +00:00 |
|
|
Joshua Drake
|
4644110962
|
add exploit for cve-2010-4452, currently windows only and no payloads :(
git-svn-id: file:///home/svn/framework3/trunk@11982 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-16 04:50:25 +00:00 |
|
|
David Rude
|
695963dde7
|
Fixed references
git-svn-id: file:///home/svn/framework3/trunk@11888 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-07 02:28:15 +00:00 |
|
|
David Rude
|
b51c9f8397
|
oops forgot a , =)
git-svn-id: file:///home/svn/framework3/trunk@11887 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-06 20:42:37 +00:00 |
|
|
David Rude
|
6dc0596870
|
Added Novell iPrint GetDriverSettings <= 5.52 exploit from mr_me thanks
git-svn-id: file:///home/svn/framework3/trunk@11886 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-06 20:27:06 +00:00 |
|
|
Joshua Drake
|
8ef05017b8
|
style compliance fixes, naughty naughty
git-svn-id: file:///home/svn/framework3/trunk@11796 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-02-22 20:49:44 +00:00 |
|