sinn3r d3e57ffc46 Add OSVDB-93754: Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow ...

This module exploits a vulnerability found in Synactis' PDF In-The-Box ActiveX
component, specifically PDF_IN_1.ocx.  When a long string of data is given
to the ConnectToSynactis function, which is meant to be used for the ldCmdLine
argument of a WinExec call, a strcpy routine can end up overwriting a TRegistry
class pointer saved on the stack, and results in arbitrary code execution under the
context of the user.

2013-06-06 20:05:08 -05:00

..

auxiliary

Land #1909 - Novell Zenworks Mobile Device Managment exploit & auxiliary

2013-06-05 02:45:45 -05:00

encoders

Landing #1713 - add_sub encoder for x86 payloads

2013-05-31 18:49:08 -05:00

exploits

Add OSVDB-93754: Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow

2013-06-06 20:05:08 -05:00

nops

Inline unit tests are so last decade

2013-05-23 12:41:14 -05:00

payloads

Land #1886, awk bind shell

2013-06-05 09:05:37 -05:00

post

Land #1903 - Add decryptioin for firefox_creds

2013-06-04 11:38:03 -05:00