 |
Exploits
->
Anti-DNS Pinning ( DNS Rebinding ) + Socket in FLASH : Online Demonstration
What is this?
Please read the article.
Requirements
- Flash Player version 9.0 or higher required. You can check your version at here.
- JavaScript enabled
Overview
On this demo the FLASH file scans some ports and get banners, and send the information to the attackers website( www.jumperz.net ).
TARGET PORTS: 21,22,25,80,110,135,139,143,445,3306,5432,8080,1080,1433,1434,1443,1521,5500,6000,6667,8008,31337,10000
Input your private IP address of the target machine and click 'start'.
Browsers tested
IE6.0SP2 on WindowsXP/SP2
IE6.0SP1 on Windows2000/SP4
Firefox 2.0 on Windows2000/SP4
Firefox 2.0 on WindowsXP/SP2
Netscape 8.2.1 on WindowsXP/SP2
Opera 9.0.2 on Windows2000/SP4
Source code
Source code of the SWF file is here.
You can build it with Flex Builder 2.
|
|
|
|
