Re: What is the most cool IE exploit and java on the moment (metasploit)?

[Gerry Brunelle <gbrunelle () gmail com>]

I would honestly suggest doing something with a pdf exploit since most large
companies love pdf and their users normally seem to have an inherent trust
in pdf files. Maybe have the client open a pdf file in their browser since
that wont go through email scanners which are starting to get better at
picking up malicious pdf files.

Gerry

On Sun, Nov 21, 2010 at 11:42 PM, Richard Miles <
richard.k.miles () googlemail com> wrote:

> Hi
>
> There is no restriction.
>
> Do you suggest the most recent and most reliable one for Flash and Adobe?
>
> Yes, but browser autopwn is out of date.
>
> Thanks
>
> On Thu, Nov 11, 2010 at 4:01 PM, Chao Mu <chao.mu () minorcrash com> wrote:
> > You may also want to consider Flash and Adobe vulnerabilities. Or are
> > you restricting yourself to IE and Java? If so, what versions? There
> > is always browser autopwn if you get lazy...
> >
> > On Wed, Nov 10, 2010 at 3:24 PM, Richard Miles
> > <richard.k.miles () googlemail com> wrote:
> > > I'm going to execute a client side attack, my target is win-xp SP3 in
> > > Spanish. I'm able to make my client access a site controlled by me.
> > > What is the more recent and more cool (good reliable and recent
> > > patched) exploit for IE and Java available on metasploit? Both
> > > launched from browser..
> > >
> > > Thanks
> > > _______________________________________________
> > > https://mail.metasploit.com/mailman/listinfo/framework
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework