Penetration Testing: Re: Frameworks to exploit AV gw and Browser?

["Richard Miles" <richard.k.miles () googlemail com>]

Hi HD.

There is nothing wrong with metasploit and browser_autopwn, it's
really good, I only asked to keep it off the list because I already
knew about it.

Regards and keep the good job.

On Wed, Dec 31, 2008 at 4:54 PM, H D Moore <sflist () digitaloffense net> wrote:
> On Wednesday 31 December 2008, Richard Miles wrote:
> > One of this projects was a framework for client side "browser"
> > attacks. Where they had implemented a common evil web page which
> > detects technology the client use (java, flash, etc) and the browser
> > itself (IE, FF) and try different vectors of exploits which match.
> >
> > Someone know this project? Or someone related?
> >
> > off: please no metasploit stuff, since I already know about it.
> If you already know about the browser_autopwn module, let us know what it
> doesn't do to meet those requirements.
>
> -HD