View source

From Malware Guru

for Collection of working (live) browser exploits (malware)

You do not have permission to do that, for the following reason:

This page has been locked to prevent editing.

You can view and copy the source of this page:

[[Image:Harry Potter Pot.png|80px]]Below is a list of WORKING, LIVE malware that we have collected for your experiment. 
  Browser Security Test. You can use them for your study purposes, for testing your anti-virus, IDS, IPS, ... security solutions.
  Or for evaluating your enterprise malware solutions.
<p>You're very welcome to submit a malware to us; we'll host it here if it indeed 
  works. Please send your submission to: mailto:submitmalware@malwareguru.org</p>
<br>

<CAPTION>LIVE Malware Code List (Browser Security Test):</CAPTION>

{|border=1
|- align=middle
|Exploit Name||Exploitable environment||CVE NO.||Exploit available||Popularly||File dropped||Actions after successful exploitation
|- align=middle
|MS05-052
||IE (COM Object-Msdds.dll)||CAN-2005-2127||Not yet||***||--||Expliot test
|- align=middle
|[http://malwareguru.com/malware/MS06-014/index.html MS06-014]
||IE+MDAC||CVE-2006-0003||Yes||*****||(temp)\svchost.exe||"Found this vulnerability." message
|- align=middle
|[http://malwareguru.com/malware/MS06-042/index.html MS06-042]
||IE (Long URL)||CVE-2006-3869<br>CVE-2006-3873||Yes||***||(IE-temp)\test.avi<br>(temp)\g0ld.com||"Found this vulnerability." message
|- align=middle
|MS06-055
||IE (VML)||CVE-2006-4868||Not yet||**||--||Expliot test
|- align=middle
|[http://malwareguru.com/malware/MS06-067/index.html MS06-067]
||IE (DirectAnimation ActiveX)||CVE-2006-4777||Yes||**||(SystemRoot)\system32\a.exe<br>(Temp)\Temp~\Cont~\\test.avi||"Found this vulnerability." message
|- align=middle
|[http://malwareguru.com/malware/MS07-004/index.html MS07-004]
||IE (VML), Replace MS06-055||CVE-2007-0024||Yes||*****||(SystemRoot)\system32\~.exe<br>(IE-temp)\test.avi||"Found this vulnerability." message
|- align=middle
|MS07-016
||IE (COM Objects)||CVE-2007-0219<br>CVE-2006-4697||Not yet||**||--||Expliot test
|- align=middle
|MS07-017
||IE (Animated Cursor Handling)||CVE-2007-0038||Not yet||**||--||Expliot test
|- align=middle
|MS07-033
||IE (Language Pack Installation)||CVE-2007-3027||Not yet||**||--||Expliot test
|- align=middle
|MS07-055
||IE (Kodak Image Viewer)||CVE-2007-2217||Not yet||**||--||Expliot test
|- align=middle
|MS08-011
||IE+Office Words (File Converter)||CVE-2007-0216<br>CVE-2008-0105<br>CVE-2008-0108||Not yet||**||--||Expliot test
|- align=middle
|[http://malwareguru.com/malware/MS08-041/index.html MS08-041]
||IE+Snapshot Viewer for Access||CVE-2008-2463||Yes||***||c:\SnapShock.exe||Create File=> "c:\SnapShock.exe"
|- align=middle
|[http://malwareguru.com/malware/MS08-078/index.html MS08-078]
||IE XML Heap Corruption exploit||CVE-2008-4844||Yes||*****||launches calculator||launches calculator
|- align=middle
|[http://malwareguru.com/malware/Plugin-AdobeFlash/index.html  Plugin-AdobeFlash]
||IE+Adobe Flash Player||CVE-2007-0071||Yes||*****||(IE-temp)\test.avi<br>(temp)\orz.exe||"Found this vulnerability." message
|- align=middle
|Plugin-BEWS
||IE+Symantec Backup Exec for Windows Server (BEWS)||CVE-2007-6016<br>CVE-2007-6017||Not yet||*||--||Expliot test
|- align=middle
|Plugin-LZ
||IE+LZ (Ourgame GLWorld, aka Lianzong Game)||CVE-2008-0647||Not yet||**||--||Expliot test
|- align=middle
|Plugin-QvodPlayer
||IE+QvodPlayer||No CVE NO.||Not yet||*||--||Expliot test
|- align=middle
|[http://malwareguru.com/malware/Plugin-RealPlayer11/index.html Plugin-RealPlayer11]
||IE+Real Player 11||CVE-2008-1309||Yes||*****||c:\U.exe||"Found this vulnerability." message
|- align=middle
|Plugin-StormII
||IE+Baofeng StormII||CVE-2007-4816<br>CVE-2007-4943||Not yet||*||--||Expliot test
|- align=middle
|Plugin-Thunder
||IE+Thunder||CVE-2007-6144||Not yet||**||--||Expliot test
|- align=middle
|[http://malwareguru.com/malware/Phishing-001/index.html Video WebSite]
||by Phishing||Spoofing||Yes||****||Download File||Run and "Found this vulnerability." message
|- align=middle
|[http://malwareguru.com/malware/Phishing-002/index.html Video ActiveX]
||by Phishing+Script||Spoofing||Yes||*****||Download File||Run and "Found this vulnerability." message
|- align=middle
|[http://malwareguru.com/malware/Clickjacking-001/index.html Clickjacking]
||Firefox 3.0.5, Chrome 1.0.154.43, Safari 3.2.1,IE 7.0.6001||Clickjacking||Yes||**||Clickjacking||You will see phishing URL
|}

Return to Collection of working (live) browser exploits (malware).

Retrieved from "http://www.malwareguru.org/mediawiki/index.php/Collection_of_working_%28live%29_browser_exploits_%28malware%29"

View source

From Malware Guru

Views

Personal tools

Navigation

Search

Toolbox