Re: What is the hottest exploit for IE and FF?

[Sherif El-Deeb <archeldeeb () gmail com>]

Wow! It has been a while (ever?) since I came across that perfect exploit
from heaven you are looking for.

the one thing I'll comment on is "if it's public, it'll get caught" and it's
very rare to find an exploit "that fits'em'all"

if you're after the client side, look at the social engineer toolkit "the
java applet attack" and think outside the box.

Good luck finding that "hot" one you're after, but if you found it, keep it
to your self, hotties don't like to be shared :)

On Oct 28, 2011 12:49 AM, "Richard Miles" <richard.k.miles () googlemail com>
wrote:

> Hi todb.
>
> By "hot" I mean:
>
> -  An exploit / vulnerability that affect the last version and older
> of the IE for example.
> - Reliable exploitation on the main languages (English and Spanish).
> - There is a well known and public way to bypass AVs (since all pdf
> and IE exploits that I tested from metasploit are detected by my AV).
>
> It's for client side.
>
> Any suggestions?
>
> Thanks.
>
> On Thu, Oct 27, 2011 at 3:55 PM, todb <todb () metasploit com> wrote:
> > On 10/27/2011 11:06 AM, Richard Miles wrote:
> > > Thanks todb. Based on this limitation, any other suggestion?
> >
> > Define "hot."
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework