Client Side Exploit for Adobe 9.3 Vulnerability

[miekmuse1exploit]

nice copy video



[SocialEngineerOrg]

for a reverse connection you are correct... no need for the vic ip. but for bind you would need to know so you can connect. Sorry if i misspoke.

[pentester445]

Thanks.. I've tried rebooting the vm's, I will try another port next. Also I noticed you said you must know the IP of the victim machine? Why is that if you're simply doing a reverse connection? As long as you can get the pdf to the victim machine, whether it be email, ftp, etc. I don't see why you would actually need to know their IP address. Plz correct me if I'm mistaken.

Thanks dude

[SocialEngineerOrg]

Hey bro try rebooting the VM - once this is used it sometimes borks the system. Or change the listening port... but that means new shellcode.

[pentester445]

Nice vid man, one question, 1st time i did this, it wrkd, but now I get:

root@bt:~# nc -lvp 443

listening on [any] 443 ...

192.168.88.200: inverse host lookup failed: Unknown server error : Connection timed out

connect to [192.168.88.133] from (UNKNOWN) [192.168.88.200] 1076

I don't have another machine running XP right now in my lab, but I'm guessing the inverse lookup error has to do with it being a NAT's virtual machine. Both VMs hv hostnames & are on 192.168.88.0

Any suggestions? Thanks

[bonniekwacha]

Nice video. Now tell how do I get free chicks ? Subscribed with hope...

Also this whole SE framework/toolkit idea thing is really cool.

It's difficult to patch human vulnerabilities.

The largest cash robbery in UK was only possible because of the weakness in the human aspect of the security. They got away with 54million pounds in untraceable bank notes ($81million).They got caught weeks later also because of the weak human aspect of security, but this time it was their own security.

Peace. Y'al

[SocialEngineerOrg]

Yes you must know the IP address of the victim.

Music is Infected Mushroom

[belmond500]

In this example the attacker has to know the ip of the victim, right?

(By the way, does anyone know what is that mix in this video?)

[cerberuspandora]

@belmond500 no, he needs to know just how to forword a port on his hore ruter and send te pdf by email, when the victims opens it it tries to backconnect , its quite simple

[ObsidianAge]

I'm a preventative enthusiast, and that was simply amazing! Great video; 5 stars!

[SocialEngineerOrg]

Firewall or no it doesn't matter as the firewall will not inspect the PDF. You may want to use a standard port for the reverse shell though. Like 80

[melakseek]

it's ok if the recipient's win32 system has no firewall...

[tony757575]

Thanks 5stars for you:)