adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
aea63130a440c874801c8a4ce87a87f9cefc4e14
metasploit-gs/modules/exploits/windows/browser
T
History
sinn3r aea63130a4 Use RopDb for ie_cbutton_uaf. 
All targets tested except for Vista. Will need additional testing
during review.
2013-10-07 14:03:07 -05:00
..
adobe_cooltype_sing.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flash_mp4_cprt.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flash_otf_font.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flash_rtmp.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flash_sps.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flashplayer_arrayindexing.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flashplayer_avm.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flashplayer_flash10o.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flashplayer_newfunction.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_flatedecode_predictor02.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_geticon.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_jbig2decode.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_media_newplayer.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_shockwave_rcsl_corruption.rb
Retab modules
2013-08-30 16:28:54 -05:00
adobe_utilprintf.rb
Retab modules
2013-08-30 16:28:54 -05:00
aim_goaway.rb
Retab modules
2013-08-30 16:28:54 -05:00
aladdin_choosefilepath_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
amaya_bdo.rb
Retab modules
2013-08-30 16:28:54 -05:00
aol_ampx_convertfile.rb
Retab modules
2013-08-30 16:28:54 -05:00
aol_icq_downloadagent.rb
Retab modules
2013-08-30 16:28:54 -05:00
apple_itunes_playlist.rb
Retab modules
2013-08-30 16:28:54 -05:00
apple_quicktime_marshaled_punk.rb
Retab modules
2013-08-30 16:28:54 -05:00
apple_quicktime_mime_type.rb
Retab modules
2013-08-30 16:28:54 -05:00
apple_quicktime_rdrf.rb
Use RopDb msvcrt ROP chain. Tested all targets.
2013-10-07 12:27:43 -05:00
apple_quicktime_rtsp.rb
Retab modules
2013-08-30 16:28:54 -05:00
apple_quicktime_smil_debug.rb
Retab modules
2013-08-30 16:28:54 -05:00
apple_quicktime_texml_font_table.rb
Retab modules
2013-08-30 16:28:54 -05:00
ask_shortformat.rb
Retab modules
2013-08-30 16:28:54 -05:00
asus_net4switch_ipswcom.rb
Retab modules
2013-08-30 16:28:54 -05:00
athocgov_completeinstallation.rb
Retab modules
2013-08-30 16:28:54 -05:00
autodesk_idrop.rb
Retab modules
2013-08-30 16:28:54 -05:00
aventail_epi_activex.rb
Retab modules
2013-08-30 16:28:54 -05:00
awingsoft_web3d_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
awingsoft_winds3d_sceneurl.rb
Retab modules
2013-08-30 16:28:54 -05:00
baofeng_storm_onbeforevideodownload.rb
Retab modules
2013-08-30 16:28:54 -05:00
barcode_ax49.rb
Retab modules
2013-08-30 16:28:54 -05:00
blackice_downloadimagefileurl.rb
Retab modules
2013-08-30 16:28:54 -05:00
c6_messenger_downloaderactivex.rb
Retab modules
2013-08-30 16:28:54 -05:00
ca_brightstor_addcolumn.rb
Retab modules
2013-08-30 16:28:54 -05:00
chilkat_crypt_writefile.rb
Retab modules
2013-08-30 16:28:54 -05:00
cisco_anyconnect_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
cisco_playerpt_setsource_surl.rb
Retab modules
2013-08-30 16:28:54 -05:00
cisco_playerpt_setsource.rb
Retab modules
2013-08-30 16:28:54 -05:00
citrix_gateway_actx.rb
Retab modules
2013-08-30 16:28:54 -05:00
clear_quest_cqole.rb
Retab modules
2013-08-30 16:28:54 -05:00
communicrypt_mail_activex.rb
Retab modules
2013-08-30 16:28:54 -05:00
creative_software_cachefolder.rb
Retab modules
2013-08-30 16:28:54 -05:00
crystal_reports_printcontrol.rb
Retab modules
2013-08-30 16:28:54 -05:00
dell_webcam_crazytalk.rb
Retab modules
2013-08-30 16:28:54 -05:00
dxstudio_player_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
ea_checkrequirements.rb
Retab modules
2013-08-30 16:28:54 -05:00
ebook_flipviewer_fviewerloading.rb
Retab modules
2013-08-30 16:28:54 -05:00
enjoysapgui_comp_download.rb
Retab modules
2013-08-30 16:28:54 -05:00
enjoysapgui_preparetoposthtml.rb
Retab modules
2013-08-30 16:28:54 -05:00
facebook_extractiptc.rb
Retab modules
2013-08-30 16:28:54 -05:00
foxit_reader_plugin_url_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
gom_openurl.rb
Retab modules
2013-08-30 16:28:54 -05:00
greendam_url.rb
Retab modules
2013-08-30 16:28:54 -05:00
honeywell_hscremotedeploy_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
honeywell_tema_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
hp_alm_xgo_setshapenodetype_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
hp_easy_printer_care_xmlcachemgr.rb
Retab modules
2013-08-30 16:28:54 -05:00
hp_easy_printer_care_xmlsimpleaccessor.rb
Retab modules
2013-08-30 16:28:54 -05:00
hp_loadrunner_addfile.rb
Retab modules
2013-08-30 16:28:54 -05:00
hp_loadrunner_addfolder.rb
Retab modules
2013-08-30 16:28:54 -05:00
hp_loadrunner_writefilebinary.rb
Retab modules
2013-08-30 16:28:54 -05:00
hp_loadrunner_writefilestring.rb
Retab modules
2013-08-30 16:28:54 -05:00
hpmqc_progcolor.rb
Retab modules
2013-08-30 16:28:54 -05:00
hyleos_chemviewx_activex.rb
Retab modules
2013-08-30 16:28:54 -05:00
ibm_spss_c1sizer.rb
Retab modules
2013-08-30 16:28:54 -05:00
ibm_tivoli_pme_activex_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
ibmegath_getxmlvalue.rb
Retab modules
2013-08-30 16:28:54 -05:00
ibmlotusdomino_dwa_uploadmodule.rb
Retab modules
2013-08-30 16:28:54 -05:00
ie_cbutton_uaf.rb
Use RopDb for ie_cbutton_uaf.
2013-10-07 14:03:07 -05:00
ie_cgenericelement_uaf.rb
Retab modules
2013-08-30 16:28:54 -05:00
ie_createobject.rb
Retab modules
2013-08-30 16:28:54 -05:00
ie_execcommand_uaf.rb
Retab modules
2013-08-30 16:28:54 -05:00
ie_iscomponentinstalled.rb
Retab modules
2013-08-30 16:28:54 -05:00
ie_setmousecapture_uaf.rb
Typo on Microsoft
2013-10-03 12:20:47 -05:00
ie_unsafe_scripting.rb
Retab new material
2013-09-03 11:47:26 -05:00
imgeviewer_tifmergemultifiles.rb
Retab modules
2013-08-30 16:28:54 -05:00
indusoft_issymbol_internationalseparator.rb
Retab modules
2013-08-30 16:28:54 -05:00
inotes_dwa85w_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
intrust_annotatex_add.rb
Retab modules
2013-08-30 16:28:54 -05:00
java_basicservice_impl.rb
Prefer Ruby style for single word collections
2013-09-24 12:33:31 -05:00
java_cmm.rb
Prefer Ruby style for single word collections
2013-09-24 12:33:31 -05:00
java_codebase_trust.rb
Remove misleading comment
2013-09-24 11:42:31 -05:00
java_docbase_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
java_mixer_sequencer.rb
Retab modules
2013-08-30 16:28:54 -05:00
java_ws_arginject_altjvm.rb
Retab modules
2013-08-30 16:28:54 -05:00
java_ws_double_quote.rb
Retab modules
2013-08-30 16:28:54 -05:00
java_ws_vmargs.rb
Retab modules
2013-08-30 16:28:54 -05:00
juniper_sslvpn_ive_setupdll.rb
Retab modules
2013-08-30 16:28:54 -05:00
kazaa_altnet_heap.rb
Retab modules
2013-08-30 16:28:54 -05:00
keyhelp_launchtripane_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
logitechvideocall_start.rb
Retab modules
2013-08-30 16:28:54 -05:00
lpviewer_url.rb
Retab modules
2013-08-30 16:28:54 -05:00
macrovision_downloadandexecute.rb
Retab modules
2013-08-30 16:28:54 -05:00
macrovision_unsafe.rb
Retab modules
2013-08-30 16:28:54 -05:00
maxthon_history_xcs.rb
Retab modules
2013-08-30 16:28:54 -05:00
mcafee_mcsubmgr_vsprintf.rb
Retab modules
2013-08-30 16:28:54 -05:00
mcafee_mvt_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
mcafeevisualtrace_tracetarget.rb
Retab modules
2013-08-30 16:28:54 -05:00
mirc_irc_url.rb
Retab modules
2013-08-30 16:28:54 -05:00
mozilla_attribchildremoved.rb
Retab modules
2013-08-30 16:28:54 -05:00
mozilla_firefox_onreadystatechange.rb
Retab modules
2013-08-30 16:28:54 -05:00
mozilla_firefox_xmlserializer.rb
Retab new material
2013-09-03 11:47:26 -05:00
mozilla_interleaved_write.rb
Retab modules
2013-08-30 16:28:54 -05:00
mozilla_mchannel.rb
Retab modules
2013-08-30 16:28:54 -05:00
mozilla_nssvgvalue.rb
Retab modules
2013-08-30 16:28:54 -05:00
mozilla_nstreerange.rb
Retab modules
2013-08-30 16:28:54 -05:00
mozilla_reduceright.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms03_020_ie_objecttype.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms05_054_onload.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms06_001_wmf_setabortproc.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms06_013_createtextrange.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms06_055_vml_method.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms06_057_webview_setslice.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms06_067_keyframe.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms06_071_xml_core.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms07_017_ani_loadimage_chunksize.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms08_041_snapshotviewer.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms08_053_mediaencoder.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms08_070_visual_studio_msmask.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms08_078_xml_corruption.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms09_002_memory_corruption.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms09_043_owc_htmlurl.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms09_043_owc_msdso.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms09_072_style_object.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_002_aurora.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_002_ie_object.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_018_ie_behaviors.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_018_ie_tabular_activex.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_022_ie_vbscript_winhlp32.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_026_avi_nsamplespersec.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_042_helpctr_xss_cmd_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_046_shortcut_icon_dllloader.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms10_090_ie_css_clip.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms11_003_ie_css_import.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms11_050_mshtml_cobjectelement.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms11_081_option.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms11_093_ole32.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms12_004_midi.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms12_037_ie_colspan.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms12_037_same_id.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms13_009_ie_slayoutrun_uaf.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms13_037_svg_dashstyle.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms13_055_canchor.rb
Update information about original discovery
2013-09-13 10:42:11 -05:00
ms13_059_cflatmarkuppointer.rb
Retab modules
2013-08-30 16:28:54 -05:00
ms13_069_caret.rb
Not actually a typo
2013-09-24 15:55:52 -05:00
msvidctl_mpeg2.rb
Retab modules
2013-08-30 16:28:54 -05:00
mswhale_checkforupdates.rb
Retab modules
2013-08-30 16:28:54 -05:00
msxml_get_definition_code_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
nctaudiofile2_setformatlikesample.rb
Retab modules
2013-08-30 16:28:54 -05:00
nis2004_antispam.rb
Retab modules
2013-08-30 16:28:54 -05:00
nis2004_get.rb
Retab modules
2013-08-30 16:28:54 -05:00
notes_handler_cmdinject.rb
Retab modules
2013-08-30 16:28:54 -05:00
novell_groupwise_gwcls1_actvx.rb
Retab modules
2013-08-30 16:28:54 -05:00
novelliprint_callbackurl.rb
Retab modules
2013-08-30 16:28:54 -05:00
novelliprint_datetime.rb
Retab modules
2013-08-30 16:28:54 -05:00
novelliprint_executerequest_dbg.rb
Retab modules
2013-08-30 16:28:54 -05:00
novelliprint_executerequest.rb
Retab modules
2013-08-30 16:28:54 -05:00
novelliprint_getdriversettings_2.rb
Retab modules
2013-08-30 16:28:54 -05:00
novelliprint_getdriversettings.rb
Retab modules
2013-08-30 16:28:54 -05:00
novelliprint_target_frame.rb
Retab modules
2013-08-30 16:28:54 -05:00
ntr_activex_check_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
ntr_activex_stopmodule.rb
Retab modules
2013-08-30 16:28:54 -05:00
oracle_autovue_setmarkupmode.rb
Retab modules
2013-08-30 16:28:54 -05:00
oracle_dc_submittoexpress.rb
Retab modules
2013-08-30 16:28:54 -05:00
oracle_webcenter_checkoutandopen.rb
Retab modules
2013-08-30 16:28:54 -05:00
orbit_connecting.rb
Retab modules
2013-08-30 16:28:54 -05:00
ovftool_format_string.rb
Retab modules
2013-08-30 16:28:54 -05:00
pcvue_func.rb
Retab modules
2013-08-30 16:28:54 -05:00
persits_xupload_traversal.rb
Retab modules
2013-08-30 16:28:54 -05:00
quickr_qp2_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
real_arcade_installerdlg.rb
Retab modules
2013-08-30 16:28:54 -05:00
realplayer_cdda_uri.rb
Retab modules
2013-08-30 16:28:54 -05:00
realplayer_console.rb
Retab modules
2013-08-30 16:28:54 -05:00
realplayer_import.rb
Retab modules
2013-08-30 16:28:54 -05:00
realplayer_qcp.rb
Retab modules
2013-08-30 16:28:54 -05:00
realplayer_smil.rb
Retab modules
2013-08-30 16:28:54 -05:00
roxio_cineplayer.rb
Retab modules
2013-08-30 16:28:54 -05:00
safari_xslt_output.rb
Retab modules
2013-08-30 16:28:54 -05:00
samsung_neti_wiewer_backuptoavi_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
sapgui_saveviewtosessionfile.rb
Retab modules
2013-08-30 16:28:54 -05:00
siemens_solid_edge_selistctrlx.rb
Add module for OSVDB 93696
2013-10-01 11:42:36 -05:00
softartisans_getdrivename.rb
Retab modules
2013-08-30 16:28:54 -05:00
sonicwall_addrouteentry.rb
Retab modules
2013-08-30 16:28:54 -05:00
symantec_altirisdeployment_downloadandinstall.rb
Retab modules
2013-08-30 16:28:54 -05:00
symantec_altirisdeployment_runcmd.rb
Retab modules
2013-08-30 16:28:54 -05:00
symantec_appstream_unsafe.rb
Retab modules
2013-08-30 16:28:54 -05:00
symantec_backupexec_pvcalendar.rb
Retab modules
2013-08-30 16:28:54 -05:00
symantec_consoleutilities_browseandsavefile.rb
Retab modules
2013-08-30 16:28:54 -05:00
synactis_connecttosynactis_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
systemrequirementslab_unsafe.rb
Retab modules
2013-08-30 16:28:54 -05:00
teechart_pro.rb
Retab modules
2013-08-30 16:28:54 -05:00
tom_sawyer_tsgetx71ex552.rb
Retab modules
2013-08-30 16:28:54 -05:00
trendmicro_extsetowner.rb
Retab modules
2013-08-30 16:28:54 -05:00
trendmicro_officescan.rb
Retab modules
2013-08-30 16:28:54 -05:00
tumbleweed_filetransfer.rb
Retab modules
2013-08-30 16:28:54 -05:00
ubisoft_uplay_cmd_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00
ultramjcam_openfiledig_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
ultraoffice_httpupload.rb
Retab modules
2013-08-30 16:28:54 -05:00
verypdf_pdfview.rb
Retab modules
2013-08-30 16:28:54 -05:00
viscom_movieplayer_drawtext.rb
Retab modules
2013-08-30 16:28:54 -05:00
vlc_amv.rb
Retab modules
2013-08-30 16:28:54 -05:00
vlc_mms_bof.rb
Retab modules
2013-08-30 16:28:54 -05:00
webdav_dll_hijacker.rb
Retab modules
2013-08-30 16:28:54 -05:00
webex_ucf_newobject.rb
Retab modules
2013-08-30 16:28:54 -05:00
winamp_playlist_unc.rb
Retab modules
2013-08-30 16:28:54 -05:00
winamp_ultravox.rb
Retab modules
2013-08-30 16:28:54 -05:00
windvd7_applicationtype.rb
Retab modules
2013-08-30 16:28:54 -05:00
winzip_fileview.rb
Retab modules
2013-08-30 16:28:54 -05:00
wmi_admintools.rb
Retab modules
2013-08-30 16:28:54 -05:00
xmplay_asx.rb
Retab modules
2013-08-30 16:28:54 -05:00
yahoomessenger_fvcom.rb
Retab modules
2013-08-30 16:28:54 -05:00
yahoomessenger_server.rb
Retab modules
2013-08-30 16:28:54 -05:00
zenturiprogramchecker_unsafe.rb
Retab modules
2013-08-30 16:28:54 -05:00
zenworks_helplauncher_exec.rb
Retab modules
2013-08-30 16:28:54 -05:00