The "Aurora" IE Exploit used in Chinese Google Attack in Action

The Aurora IE Exploit in Action: http://praetorianprefect.com/archives/2010/01/the-aurora-ie-exploit-in-action/

Per Microsofts Advisory 979352: In a specially-crafted attack, in attempting to access a freed object, Internet Explorer can be caused to allow remote code execution.. Earlier today this entry from yesterday at Wepawet (an online analysis engine for malware) was pointed out to H.D. Moore, and within hours Metasploit has an exploit of the vulnerability integrated. McAfee has confirmed that the exploit is out and the same one they saw during the investigation. The video below demonstrates how crackers initially gained access to the corporate networks of Google, et al. using this zero day attack.

Category:

Science & Technology

Tags:

• security
• google
• ie6
• ie
• metasploit
• aurora
• china
• adobe
• zero-day

[crogeek]

Test that on IE8 at Win7 and see what will happen.

[lakra57]

what is the ultime command? session....?

[Casioo24]

got a little question..

I cant do use exploit&windows&brwoser&ie?aur­ora

is therea way you find this option to download aurora, in the internet

i cant use that order, thanks for any advice

[danny42378]

IE 8 will likely crash because of differences in the memory structure. This will be overcome. DEP being enabled in the configuration you mentioned will hinder the exploit.

[guitarguru48083]

man, you gotta love metasploit for making it so damn easy. if this doesn't prove that you shouldn't be using IE, idk wtf will. Great video :-)