Metasploit mailing list archives
setslice exploit for meta3 but not meta2.6?
From: hdm at metasploit.com (H D Moore)
Date: Sun, 1 Oct 2006 11:50:43 -0500
On Sunday 01 October 2006 07:07, sandalwood wrote:
any chance someone can port the recent msie exploit to 2.6?
I will upload my version soon.
? correct me if i am wrong, but the meta3 version is missing ? 1. chunked encoding ? 2. gzip encoding
msf exploit(webview_setslice) > show evasion
[..]
Name : HTTP::chunked
Current Setting: false
Description : Enable chunking of HTTP responses via
"Transfer-Encoding: chunked"
Name : HTTP::compression
Current Setting: none
Description : Enable compression of HTTP responses via content
encoding (accepted: none, gzip, deflate)
[..]
? 3. download+exec payload
I just added it, svn update|MSFUpdate to get it.
$ msfpayload windows/download_exec S
Name: Windows Executable Download and Execute
Version: $Revision: 3534 $
Platform: Windows
Arch: x86
Needs Admin: No
Total size: 340
Provided by:
Available options:
Name Current Setting Required Description
---- --------------- -------- -----------
URL yes The pre-encoded URL to the executable
Description:
Download an EXE from a HTTP URL and execute it
-HD
Current thread:
- setslice exploit for meta3 but not meta2.6? sandalwood (Oct 01)
- setslice exploit for meta3 but not meta2.6? H D Moore (Oct 01)
