Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Move the latest flash exploit to a proper CVE-2015-5119 dir structure #5681

Merged
merged 2 commits into from
Jul 7, 2015
Merged

Move the latest flash exploit to a proper CVE-2015-5119 dir structure #5681

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3d630de
Replace with a real CVE number
Jul 7, 2015
116c3f0
Add CVE as a real ref, too
Jul 7, 2015
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
0 data/exploits/hacking_team/msf.swf → data/exploits/CVE-2015-5119/msf.swf
View file
Open in desktop
File renamed without changes.
0 external/source/exploits/hacking_team/Elf.as → ...rnal/source/exploits/CVE-2015-5119/Elf.as
View file
Open in desktop
File renamed without changes.
0 ...l/source/exploits/hacking_team/Exploit.as → .../source/exploits/CVE-2015-5119/Exploit.as
View file
Open in desktop
File renamed without changes.
0 ...exploits/hacking_team/ExploitByteArray.as → ...xploits/CVE-2015-5119/ExploitByteArray.as
View file
Open in desktop
File renamed without changes.
0 ...ce/exploits/hacking_team/ExploitVector.as → ...e/exploits/CVE-2015-5119/ExploitVector.as
View file
Open in desktop
File renamed without changes.
0 ...source/exploits/hacking_team/Exploiter.as → ...ource/exploits/CVE-2015-5119/Exploiter.as
View file
Open in desktop
File renamed without changes.
0 ...al/source/exploits/hacking_team/Logger.as → ...l/source/exploits/CVE-2015-5119/Logger.as
View file
Open in desktop
File renamed without changes.
0 ...l/source/exploits/hacking_team/MyClass.as → .../source/exploits/CVE-2015-5119/MyClass.as
View file
Open in desktop
File renamed without changes.
0 .../source/exploits/hacking_team/MyClass1.as → ...source/exploits/CVE-2015-5119/MyClass1.as
View file
Open in desktop
File renamed without changes.
0 .../source/exploits/hacking_team/MyClass2.as → ...source/exploits/CVE-2015-5119/MyClass2.as
View file
Open in desktop
File renamed without changes.
0 external/source/exploits/hacking_team/PE.as → external/source/exploits/CVE-2015-5119/PE.as
View file
Open in desktop
File renamed without changes.
7 changes: 4 additions & 3 deletions modules/exploits/multi/browser/adobe_flash_hacking_team_uaf.rb
View file
Open in desktop
Expand Up @@ -23,7 +23,7 @@ def initialize(info={})
Windows 7 SP1 (32-bit), IE11 and Adobe Flash 18.0.0.194,
Windows 7 SP1 (32-bit), Firefox 38.0.5 and Adobe Flash 18.0.0.194,
Windows 8.1 (32-bit), Firefox and Adobe Flash 18.0.0.194,
Windows 8.1 (32-bit), IE11 and Flash 17.0.0.169,
Windows 8.1 (32-bit), IE11 and Flash 17.0.0.169, and
Linux Mint "Rebecca" (32 bits), Firefox 33.0 and Adobe Flash 11.2.202.468.
},
'License' => MSF_LICENSE,
Expand All @@ -36,7 +36,8 @@ def initialize(info={})
'References' =>
[
['URL', 'http://blog.trendmicro.com/trendlabs-security-intelligence/unpatched-flash-player-flaws-more-pocs-found-in-hacking-team-leak/'],
['URL', 'https://twitter.com/w3bd3vil/status/618168863708962816']
['URL', 'https://twitter.com/w3bd3vil/status/618168863708962816'],
['CVE', '2015-5119']
],
'Payload' =>
{
Expand Down Expand Up @@ -144,7 +145,7 @@ def exploit_template(cli, target_info)
end

def create_swf
path = ::File.join(Msf::Config.data_directory, 'exploits', 'hacking_team', 'msf.swf')
path = ::File.join(Msf::Config.data_directory, 'exploits', 'CVE-2015-5119', 'msf.swf')
swf = ::File.open(path, 'rb') { |f| swf = f.read }

swf
Expand Down