16 Commits

Author	SHA1	Message	Date
jvazquez-r7	533accaa87	Add module for CVE-2013-3346	2013-12-16 14:13:47 -06:00
sinn3r	bc8604f151	Use safe_negate_size for hxds	2013-10-03 23:15:29 -05:00
sinn3r	63d7b8c309	Use safe_negate_size for java	2013-10-03 23:13:57 -05:00
sinn3r	ab62af220b	Use safe_negate_size key for msvcrt (XP)	2013-10-03 23:12:58 -05:00
jvazquez-r7	9df676ca7e	Land #2447, @wchen-r7's new msvcrt ROP chains without nulls	2013-10-03 22:38:29 -05:00
sinn3r	cd1f023f72	Update msvcrt.dll ROP chain for Windows Server 2003	2013-10-01 16:18:57 -05:00
sinn3r	14d99ffbdb	Update Win XP msvcrt.dll ROP ... This updated ROP chain for msvcrt.dll does not have any null bytes.	2013-10-01 15:00:43 -05:00
sinn3r	7c6c8291e2	Add ROP chains for Office 2007 and Office 2010 (hxds.dll) ... This adds two ROP chains for Office 2007 and Office 2010 based on hxds.dll.	2013-10-01 01:33:35 -05:00
jvazquez-r7	27778e6ea9	fix comma typo	2013-03-19 19:20:39 +01:00
sinn3r	be9d4ec393	New pt for virtualprotect, and readjust size to 0x401	2013-03-19 09:25:06 -05:00
sinn3r	ea4c88bc2c	Java Rop null-byte free ... Our new heap spray routine does not like double nulls, so we need to adjust our ROP.	2013-03-18 23:42:17 -05:00
m m	f7481b160c	add centos5 target	2012-10-31 18:21:41 +01:00
m m	f819ec8e75	typo	2012-10-30 17:19:23 +01:00
m m	3855ba88b1	add meterpreter/command support to samba exploit using ROP	2012-10-29 17:33:00 +01:00
sinn3r	ba1b65742e	Separate XML for various DLLs.	2012-10-02 11:27:10 -05:00
sinn3r	f2c7731b39	Add RopDb mixin	2012-10-01 17:09:01 -05:00