记得2周前的那个迅雷ActiveX漏洞是一个叫做superli的同学发布的
今天群里热热闹闹的在议论这个同学,
因为他一下子放出了5个洞洞
包括 迅雷、趋势、adobe、毒霸、百度 的几个东东。
如下资料来自:
packet storm今天最新的100个exp
| /// File Name: |
xunlei-activex.txt |
| Description: |
Xunlei XPPlayer ActiveX related remote execution proof of concept exploit. |
| Author: |
superli |
| File Size: |
51613 |
| Last Modified: |
Jan 18 01:59:19 2010 |
| MD5 Checksum: |
7f5e49a3cea9a15a43b5183008a66b8f |
| /// File Name: |
trendmicrowd-activex.txt |
| Description: |
TrendMicro Web-Deployment Active-X remote execution proof of concept exploit. |
| Author: |
superli |
| File Size: |
5961493 |
| Last Modified: |
Jan 18 01:48:45 2010 |
| MD5 Checksum: |
83582d2b6cc0c3bc07c7e29d32265fc3 |
| /// File Name: |
adobe-activex.txt |
| Description: |
Adobe GetPlus get_atlcom Active-X remote execution proof of concept exploit. |
| Author: |
superli |
| File Size: |
329102 |
| Last Modified: |
Jan 18 01:45:59 2010 |
| MD5 Checksum: |
f7aae43179790a553b5767466d9cd156 |
再看看SecurityFocus上的BugTrap