Wei Chen
|
23cc89482b
|
CVE correction, thanks Kurt.
git-svn-id: file:///home/svn/framework3/trunk@12961 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-17 00:56:11 +00:00 |
|
Wei Chen
|
eae350b88b
|
CVE-2011-1260 seems to be the right one
git-svn-id: file:///home/svn/framework3/trunk@12959 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-16 22:27:10 +00:00 |
|
Wei Chen
|
0a04835138
|
Added MS11-050 by d0c_s4vage
git-svn-id: file:///home/svn/framework3/trunk@12956 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-16 21:19:12 +00:00 |
David Rude
|
b9e398c706
|
adds support for SSL
git-svn-id: file:///home/svn/framework3/trunk@12872 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-06 20:15:51 +00:00 |
|
David Rude
|
31a659e55a
|
Fixed this up to use the new JS obfuscation hotness thanks to egyp7s rkelly fu!
git-svn-id: file:///home/svn/framework3/trunk@12871 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-06 19:49:33 +00:00 |
Steve Tornio
|
377a18030a
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12869 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-06 19:06:18 +00:00 |
|
David Rude
|
3d7715ce60
|
Added Cisco AnyConnect VPN Client ActiveX download and execute exploit
git-svn-id: file:///home/svn/framework3/trunk@12868 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-06 18:52:26 +00:00 |
James Lee
|
bee19278d7
|
add a new javascript obfuscation engine using rkelly for parsing. use it in browser_autopwn and ms10_018_ie_behaviors. see #1003
git-svn-id: file:///home/svn/framework3/trunk@12839 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-03 00:36:26 +00:00 |
|
James Lee
|
36983436db
|
play a little nicer with browser autopwn by not spraying the heap if creating the vulnerable object failed
git-svn-id: file:///home/svn/framework3/trunk@12667 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-19 19:45:14 +00:00 |
|
James Lee
|
0b88468617
|
out with the new, in with the old. css_clip is pretty unreliable in my tests, go back to using ie_behaviors in browser autopwn
git-svn-id: file:///home/svn/framework3/trunk@12663 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-19 16:33:55 +00:00 |
|
Wei Chen
|
f9c49ef9ce
|
Comment update (this is still for the egghunter fix: bug #4552)
git-svn-id: file:///home/svn/framework3/trunk@12657 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-18 19:50:22 +00:00 |
|
Wei Chen
|
6345fec06c
|
checksum support for egghunter disabled, because not enough room for it. See r4552.
git-svn-id: file:///home/svn/framework3/trunk@12656 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-18 19:48:06 +00:00 |
|
Wei Chen
|
40894c3726
|
Moving Iconics webhmi activeX exploit from browser to scada directory
git-svn-id: file:///home/svn/framework3/trunk@12584 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-11 20:45:54 +00:00 |
|
Steve Tornio
|
b84df80983
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12576 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-10 19:16:07 +00:00 |
|
Wei Chen
|
105b5799af
|
Added ICONICS WebHMI ActiveX SetActiveXGuid bof
git-svn-id: file:///home/svn/framework3/trunk@12573 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-10 18:07:15 +00:00 |
|
Wei Chen
|
8d78a47e45
|
get_resource() added to 'src' parameter
git-svn-id: file:///home/svn/framework3/trunk@12543 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-05 22:10:30 +00:00 |
|
David Rude
|
a8b6c43636
|
reverting the disclosure dates for now need to clean up the patch
git-svn-id: file:///home/svn/framework3/trunk@12540 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-04 20:43:19 +00:00 |
|
David Rude
|
3b7ea08f6a
|
Fixes a ton of Disclosure Date discrepencies in various modules, thanks a ton to Michael Baker for spending the time to ensure accuracy
git-svn-id: file:///home/svn/framework3/trunk@12539 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-04 19:17:31 +00:00 |
|
Wei Chen
|
c5d51cf810
|
Disclosure date change
git-svn-id: file:///home/svn/framework3/trunk@12391 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-21 15:45:07 +00:00 |
Mario Ceballos
|
31f2afc033
|
fix date
git-svn-id: file:///home/svn/framework3/trunk@12388 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-21 11:12:34 +00:00 |
|
Wei Chen
|
cb491e35d2
|
Changed disclosure date
git-svn-id: file:///home/svn/framework3/trunk@12384 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-21 02:10:40 +00:00 |
|
Wei Chen
|
458d8cccb8
|
Modified heap spray routine. Added IE 8 target for XP SP3.
git-svn-id: file:///home/svn/framework3/trunk@12383 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-20 21:55:33 +00:00 |
|
Wei Chen
|
c28e7259ac
|
Added CVE-2011-0611 Adobe Flash 0day
git-svn-id: file:///home/svn/framework3/trunk@12330 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-16 02:09:33 +00:00 |
|
Wei Chen
|
ffe6868d22
|
Updated vbs stager temp var
git-svn-id: file:///home/svn/framework3/trunk@12286 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-09 18:24:43 +00:00 |
|
Steve Tornio
|
a8947662db
|
old file hanging around
git-svn-id: file:///home/svn/framework3/trunk@12280 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-08 13:28:57 +00:00 |
|
Steve Tornio
|
bb26593da7
|
add osvdb ref. rename file to correct typo
git-svn-id: file:///home/svn/framework3/trunk@12279 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-08 12:41:18 +00:00 |
|
Wei Chen
|
717fb83fc9
|
Added RealNetworks RealGames ActiveX exec arbitrary code execution
git-svn-id: file:///home/svn/framework3/trunk@12276 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-08 02:39:11 +00:00 |
|
Wei Chen
|
b90d6fc16f
|
Modified the heap spraying function. Each block size should be more consistent now.
git-svn-id: file:///home/svn/framework3/trunk@12264 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-07 07:27:38 +00:00 |
Joshua Drake
|
0882f18ec0
|
add fix commit diff and fix broken cve reference
git-svn-id: file:///home/svn/framework3/trunk@12166 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-28 03:04:54 +00:00 |
|
Joshua Drake
|
24fd896bfb
|
add OSVDB reference back, conflict handling fail!
git-svn-id: file:///home/svn/framework3/trunk@12165 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-28 03:02:46 +00:00 |
|
Wei Chen
|
214751379f
|
Updated: using get_resource() instead of datastore['URIPATH']
git-svn-id: file:///home/svn/framework3/trunk@12156 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-27 03:56:45 +00:00 |
|
Wei Chen
|
25ca59b56f
|
Added Win Vista and debug target
git-svn-id: file:///home/svn/framework3/trunk@12153 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 23:22:51 +00:00 |
|
David Rude
|
349512f48d
|
Updated exploit ranking and description to reflect the new ranking
git-svn-id: file:///home/svn/framework3/trunk@12151 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 19:33:38 +00:00 |
|
Steve Tornio
|
81fae13258
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12147 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 12:05:48 +00:00 |
|
David Rude
|
ff3659aa37
|
Lots of work to make this a lot more reliable =)
git-svn-id: file:///home/svn/framework3/trunk@12146 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 06:35:28 +00:00 |
|
Wei Chen
|
eb7df0be8e
|
Updated how the trigger file should be loaded... the proper way.
git-svn-id: file:///home/svn/framework3/trunk@12140 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-26 00:07:36 +00:00 |
|
Wei Chen
|
77ceadc6ad
|
Updated description and how the trigger file loads
git-svn-id: file:///home/svn/framework3/trunk@12139 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-25 22:49:11 +00:00 |
|
Wei Chen
|
08f210ac52
|
Added CVE-2010-3275 (VLC AMV vulnerability)
git-svn-id: file:///home/svn/framework3/trunk@12137 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-25 21:03:12 +00:00 |
|
Steve Tornio
|
89ec6ab5da
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12092 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-23 11:19:45 +00:00 |
|
David Rude
|
8233030184
|
opps removed mixin require as well
git-svn-id: file:///home/svn/framework3/trunk@12091 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-23 04:41:48 +00:00 |
|
David Rude
|
f8534f06dd
|
opps removed mixin reference =)
git-svn-id: file:///home/svn/framework3/trunk@12090 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-23 04:40:38 +00:00 |
|
David Rude
|
d7266b6551
|
Add CVE-2011-0609 exploit for Adobe Flash
git-svn-id: file:///home/svn/framework3/trunk@12089 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-23 04:31:48 +00:00 |
|
Joshua Drake
|
586c1f9305
|
oops, broke the LIBPATH option
git-svn-id: file:///home/svn/framework3/trunk@12015 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-18 01:18:18 +00:00 |
|
Joshua Drake
|
f4fe3f11b0
|
enable bind payloads, thx hdm :)
git-svn-id: file:///home/svn/framework3/trunk@12014 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-18 00:52:58 +00:00 |
|
Steve Tornio
|
4992deed21
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@12013 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-18 00:16:06 +00:00 |
|
Joshua Drake
|
fb6107ffb5
|
enable java payloads, currently via one-off method
git-svn-id: file:///home/svn/framework3/trunk@12012 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-17 23:57:11 +00:00 |
|
David Rude
|
36b83cde6f
|
Added exploit for CVE-2010-3747 RealPlayer CDDA URI Code Execution
git-svn-id: file:///home/svn/framework3/trunk@12009 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-17 15:42:28 +00:00 |
|
David Rude
|
382e63e16e
|
fixed a typo in javascript
git-svn-id: file:///home/svn/framework3/trunk@12007 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-17 04:40:36 +00:00 |
|
Joshua Drake
|
4a1e59be8d
|
oops =D
git-svn-id: file:///home/svn/framework3/trunk@11983 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-16 05:01:29 +00:00 |
|
Joshua Drake
|
4644110962
|
add exploit for cve-2010-4452, currently windows only and no payloads :(
git-svn-id: file:///home/svn/framework3/trunk@11982 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-03-16 04:50:25 +00:00 |