Penetration Testing: Re: Frameworks to exploit AV gw and Browser?

["Joshua Gimer" <jgimer () gmail com>]

On Wed, Dec 31, 2008 at 12:22 PM, Richard Miles
<richard.k.miles () googlemail com> wrote:
> One of this projects was a framework for client side "browser"
> attacks. Where they had implemented a common evil web page which
> detects technology the client use (java, flash, etc) and the browser
> itself (IE, FF) and try different vectors of exploits which match.
>
> Someone know this project? Or someone related?
How about:

Browser Rider: http://engineeringforfun.com/browserrider.html
BeFF: http://www.bindshell.net/tools/beef
Backframe: http://www.darknet.org.uk/2006/12/backframe-formerly-backweb-javascript-attack-console/

-- 
Thx
Joshua Gimer