Quem te guia é Jesus

Quando Nabucodonosor mandou levantar uma grande estátua. e quando o povo estava pronto para sujeitar-se aos caprichos do rei e adorar a estátua que fora levantada; eis que:

"Ora, no mesmo instante, se chegaram alguns homens caldeus e acusaram os judeus;" (Dn 3:8)

Porque exatamente uns poucos não estavam se sujeitando ao fato, como foi o caso de Hananias, Misael e Azarias, que passaram a se chamar Sadraque, Mesaque e Abede-Nego.

"Há uns homens judeus, que tu constituíste sobre os negócios da província da Babilônia: Sadraque, Mesaque e Abede-Nego; estes homens, ó rei, não fizeram caso de ti, a teus deuses não servem, nem adoram a imagem de ouro que levantaste." (Dn 3:12)

"Responderam Sadraque, Mesaque e Abede-Nego ao rei: Ó Nabucodonosor, quanto a isto não necessitamos de te responder.
Se o nosso Deus, a quem servimos, quer livrar-nos, ele nos livrará da fornalha de fogo ardente e das tuas mãos, ó rei.
Se não, fica sabendo, ó rei, que não serviremos a teus deuses, nem adoraremos a imagem de ouro que levantaste." (Dn 3:16-18)

"Então, se chegou Nabucodonosor à porta da fornalha sobremaneira acesa, falou e disse: Sadraque, Mesaque e Abede-Nego, servos do Deus Altíssimo, saí e vinde! Então, Sadraque, Mesaque e Abede-Nego saíram do meio do fogo." (Dn 3:26)

"Falou Nabucodonosor e disse: Bendito seja o Deus de Sadraque, Mesaque e Abede-Nego, que enviou o seu anjo e livrou os seus servos, que confiaram nele, pois não quiseram cumprir a palavra do rei, preferindo entregar o seu corpo, a servirem e adorarem a qualquer outro deus, senão ao seu Deus.
Portanto, faço um decreto pelo qual todo povo, nação e língua que disser blasfêmia contra o Deus de Sadraque, Mesaque e Abede-Nego seja despedaçado, e as suas casas sejam feitas em monturo; porque não há outro deus que possa livrar como este.
Então, o rei fez prosperar a Sadraque, Mesaque e Abede-Nego na província da Babilônia." (Dn 3:28-30)

(ap. Ely Silmar Vidal - Teólogo: COJAE 0001-12-PF-BR; Psicanalista: CONIPSI CIP: 0001-12-PF-BR; Jornalista: DRT-9597/PR e presidente do CIEP - Clube de Imprensa Estado do Paraná)

Contato:
(41) 98514-8333
(41) 99109-8374
(41) 99821-2381 e 99820-9599 (WhatsApp)

Mensagem 04032023 - Quem te guia é Jesus - (imagens da internet)

Os trabalhos que desenvolvo, não visam lucros financeiros, e são, apenas divulgação do que acho interessante para conhecimento geral, por isso, não monetizo.

Que o Espírito Santo do Senhor nos oriente a todos para que possamos iluminar um pouquinho mais o caminho de nossos irmãos, por isso contamos contigo.

Se a mensagem foi útil, e acha que pode ajudar alguém, divulgue: (ao replicar, preserve a fonte)

Siga-nos: https://www.bitchute.com/video/hF2y21d2I9e4/

Texto completo e outros em: http://www.portaldaradio.com

[category economia,politica,ffaa,cristianismo,pensamentos,psicanalise,historia,noticias]

@elyvidal @radiocrista @pastorelyvidal @conipsip @CiepClube
#FalaPortaldaRadio #conipsi #cojae #dojae

Louvar a Deus

Foi para isso que você veio ao mundo, louvar a Deus, quando anda, quando come, quando descansa, enfim, louvar a Deus em todo tempo e com todas as tuas forças.
O demais, como seja, viver bem, por exemplo, isso acontecerá, quanto mais a sua dedicação for em louvar ao Senhor.
Quando todas as nossas forças estão voltadas para A ou para B, naturalmente que a força escolhida, será mais ou menos expressiva em tua vida. Quando o jovem sai em busca de bebidas, drogas, etc... Nota-se então, que esses pontos eleitos como fatores de sua atenção, o levarão à satisfação do que seu corpo exige, e por conseguinte, a resposta será a do afastamento de Deus. E se a resposta for do afastamento, naturalmente, que isso acontecerá com as consequências naturais pela escolha feita.

Então louvar a Deus é a tônica para a nossa vida, no entanto, o que mais percebemos é que a vida nos indica caminhos que não são muito adequados. Isso, desagrada a Deus, porque Ele exige todo louvor, toda a honra e toda a Glória que lhe é devida, e ainda complementa com o fato de que, Ele não divide a Sua glória com ninguém.

"Tributai ao Senhor, ó famílias dos povos, tributai ao Senhor glória e força.
Tributai ao Senhor a glória devida ao seu nome; trazei oferendas e entrai nos seus átrios.
Adorai o Senhor na beleza da sua santidade; tremei diante dele, todas as terras.
Dizei entre as nações: Reina o Senhor. Ele firmou o mundo para que não se abale e julga os povos com equidade.
Alegrem-se os céus, e a terra exulte; ruja o mar e a sua plenitude.
Folgue o campo e tudo o que nele há; regozijem-se todas as árvores do bosque, na presença do Senhor, porque vem, vem julgar a terra; julgará o mundo com justiça e os povos, consoante a sua fidelidade." (Sl 96:7-13)

Primeiramente, que cada um tome a sua cruz, e siga em direção a tudo o que determina a Santa e Sagrada Palavra, para que tenha uma vida, que sendo santa, será agradável a Deus e portanto, te será abençoadara, para que tenhas vida longa e saudável.
Não esqueça de exortar ao próximo nos caminhos em que deve andar, porque sim, tu és guardador de teus irmãos sobre a face da terra; e procedendo assim, estará pagando teus votos, pela vida que Ele tão generosamente te tem proporcionado.

(ap. Ely Silmar Vidal - Teólogo: COJAE 0001-12-PF-BR; Psicanalista: CONIPSI CIP: 0001-12-PF-BR; Jornalista: DRT-9597/PR e presidente do CIEP - Clube de Imprensa Estado do Paraná)

Contato:
(41) 98514-8333
(41) 99109-8374
(41) 99821-2381 e 99820-9599 (WhatsApp)

Mensagem 03032023 - Louvar a Deus - (imagens da internet)

Os trabalhos que desenvolvo, não visam lucros financeiros, e são, apenas divulgação do que acho interessante para conhecimento geral, por isso, não monetizo.

Que o Espírito Santo do Senhor nos oriente a todos para que possamos iluminar um pouquinho mais o caminho de nossos irmãos, por isso contamos contigo.

Se a mensagem foi útil, e acha que pode ajudar alguém, divulgue: (ao replicar, preserve a fonte)

Siga-nos: https://www.bitchute.com/video/DRj0kiZMi1J5/

Texto completo e outros em: http://www.portaldaradio.com

[category economia,politica,ffaa,cristianismo,pensamentos,psicanalise,historia,noticias]

@elyvidal @radiocrista @pastorelyvidal @conipsip @CiepClube
#FalaPortaldaRadio #conipsi #cojae #dojae

A revelação da glória de Deus na Palavra

O objetivo a cada leitura, cada vírgula, cada novo termo é apenas ilustrar e revelar cada vez mais a face do Senhor.
Como havia pedido Moisés:

"Então, ele disse: Rogo-te que me mostres a tua glória.
Respondeu-lhe: Farei passar toda a minha bondade diante de ti e te proclamarei o nome do Senhor; terei misericórdia de quem eu tiver misericórdia e me compadecerei de quem eu me compadecer.
E acrescentou: Não me poderás ver a face, porquanto homem nenhum verá a minha face e viverá.
Disse mais o Senhor: Eis aqui um lugar junto a mim; e tu estarás sobre a penha.
Quando passar a minha glória, eu te porei numa fenda da penha e com a mão te cobrirei, até que eu tenha passado.
Depois, em tirando eu a mão, tu me verás pelas costas; mas a minha face não se verá." (Êx 33:18-23)

por essa passagem vemos, embora de forma indelével, mas muito objetiva, a descrição da glória do Senhor.
Ou seja, Ele nos diz, que tudo o que devemos saber acerca dEle, de Sua graça e misericórdia, já está revelada ao longo da meditação da Palavra e da observância do que seja a dinamicidade da vida.
Nada foi ocultado, apenas e tão somente, muitos de nós não veremos muita coisa, por conta da incredulidade que nos domina e por consequência do afastamento a que nos submetemos, até a ponto da apostasia.

Devemos sempre ter em mente o arrependimento e uma oração pela clemência de Deus sobre nossas vidas, como o pedido de perdão de Simei a Davi:

"Não me imputes, senhor, a minha culpa e não te lembres do que tão perversamente fez teu servo, no dia em que o rei, meu senhor, saiu de Jerusalém; não o conserves, ó rei, em teu coração." (2 Sm 19:19)

E Deus te responderá ao notar em teu coração a verdade em tuas palavras:

"Não morrerás. E lho jurou." (2 Sm 19:23)

(ap. Ely Silmar Vidal - Teólogo: COJAE 0001-12-PF-BR; Psicanalista: CONIPSI CIP: 0001-12-PF-BR; Jornalista: DRT-9597/PR e presidente do CIEP - Clube de Imprensa Estado do Paraná)

Contato:
(41) 98514-8333
(41) 99109-8374
(41) 99821-2381 e 99820-9599 (WhatsApp)

Mensagem 19042023 - A revelação da glória de Deus na Palavra - (imagens da internet)

Os trabalhos que desenvolvo, não visam lucros financeiros, e são, apenas divulgação do que acho interessante para conhecimento geral, por isso, não monetizo.

Que o Espírito Santo do Senhor nos oriente a todos para que possamos iluminar um pouquinho mais o caminho de nossos irmãos, por isso contamos contigo.

Se a mensagem foi útil, e acha que pode ajudar alguém, divulgue: (ao replicar, preserve a fonte)

Siga-nos: https://www.bitchute.com/video/kvzTgzXz57RX

Texto completo e outros em: http://www.portaldaradio.com

[category economia,politica,ffaa,cristianismo,pensamentos,psicanalise,historia,noticias]

@elyvidal @radiocrista @pastorelyvidal @conipsip @CiepClube
#FalaPortaldaRadio #conipsi #cojae #dojae

Abra o teu coração

"Uma vez em terra, verificamos que a ilha se chamava Malta.
Os bárbaros trataram-nos com singular humanidade, porque, acendendo uma fogueira, acolheram-nos a todos por causa da chuva que caía e por causa do frio.
Tendo Paulo ajuntado e atirado à fogueira um feixe de gravetos, uma víbora, fugindo do calor, prendeu-se-lhe à mão.
Quando os bárbaros viram a víbora pendente da mão dele, disseram uns aos outros: Certamente, este homem é assassino, porque, salvo do mar, a Justiça não o deixa viver.
Porém ele, sacudindo o réptil no fogo, não sofreu mal nenhum; mas eles esperavam que ele viesse a inchar ou a cair morto de repente. Mas, depois de muito esperar, vendo que nenhum mal lhe sucedia, mudando de parecer, diziam ser ele um deus.
Perto daquele lugar, havia um sítio pertencente ao homem principal da ilha, chamado Públio, o qual nos recebeu e hospedou benignamente por três dias.
Aconteceu achar-se enfermo de disenteria, ardendo em febre, o pai de Públio. Paulo foi visitá-lo, e, orando, impôs-lhe as mãos, e o curou.
À vista deste acontecimento, os demais enfermos da ilha vieram e foram curados, os quais nos distinguiram com muitas honrarias; e, tendo nós de prosseguir viagem, nos puseram a bordo tudo o que era necessário.
Ao cabo de três meses, embarcamos num navio alexandrino, que invernara na ilha e tinha por emblema Dióscuros.
Tocando em Siracusa, ficamos ali três dias, donde, bordejando, chegamos a Régio. No dia seguinte, tendo soprado vento sul, em dois dias, chegamos a Putéoli, onde achamos alguns irmãos que nos rogaram ficássemos com eles sete dias; e foi assim que nos dirigimos a Roma.
Tendo ali os irmãos ouvido notícias nossas, vieram ao nosso encontro até à Praça de Ápio e às Três Vendas. Vendo-os Paulo e dando, por isso, graças a Deus, sentiu-se mais animado.
Uma vez em Roma, foi permitido a Paulo morar por sua conta, tendo em sua companhia o soldado que o guardava.
Três dias depois, ele convocou os principais dos judeus e, quando se reuniram, lhes disse: Varões irmãos, nada havendo feito contra o povo ou contra os costumes paternos, contudo, vim preso desde Jerusalém, entregue nas mãos dos romanos; os quais, havendo-me interrogado, quiseram soltar-me sob a preliminar de não haver em mim nenhum crime passível de morte.
Diante da oposição dos judeus, senti-me compelido a apelar para César, não tendo eu, porém, nada de que acusar minha nação.
Foi por isto que vos chamei para vos ver e falar; porque é pela esperança de Israel que estou preso com esta cadeia.
Então, eles lhe disseram: Nós não recebemos da Judeia nenhuma carta que te dissesse respeito; também não veio qualquer dos irmãos que nos anunciasse ou dissesse de ti mal algum.
Contudo, gostaríamos de ouvir o que pensas; porque, na verdade, é corrente a respeito desta seita que, por toda parte, é ela impugnada.
Havendo-lhe eles marcado um dia, vieram em grande número ao encontro de Paulo na sua própria residência. Então, desde a manhã até à tarde, lhes fez uma exposição em testemunho do reino de Deus, procurando persuadi-los a respeito de Jesus, tanto pela lei de Moisés como pelos profetas.
Houve alguns que ficaram persuadidos pelo que ele dizia; outros, porém, continuaram incrédulos.
E, havendo discordância entre eles, despediram-se, dizendo Paulo estas palavras: Bem falou o Espírito Santo a vossos pais, por intermédio do profeta Isaías, quando disse: Vai a este povo e dize-lhe: De ouvido, ouvireis e não entendereis; vendo, vereis e não percebereis.
Porquanto o coração deste povo se tornou endurecido; com os ouvidos ouviram tardiamente e fecharam os olhos, para que jamais vejam com os olhos, nem ouçam com os ouvidos, para que não entendam com o coração, e se convertam, e por mim sejam curados.
Tomai, pois, conhecimento de que esta salvação de Deus foi enviada aos gentios. E eles a ouvirão.
[Ditas estas palavras, partiram os judeus, tendo entre si grande contenda.]
Por dois anos, permaneceu Paulo na sua própria casa, que alugara, onde recebia todos que o procuravam, pregando o reino de Deus, e, com toda a intrepidez, sem impedimento algum, ensinava as coisas referentes ao Senhor Jesus Cristo." (At 28:1-31)

(ap. Ely Silmar Vidal - Teólogo: COJAE 0001-12-PF-BR; Psicanalista: CONIPSI CIP: 0001-12-PF-BR; Jornalista: DRT-9597/PR e presidente do CIEP - Clube de Imprensa Estado do Paraná)

Contato:
(41) 98514-8333
(41) 99109-8374
(41) 99821-2381 e 99820-9599 (WhatsApp)

Mensagem 02032023 - Abra o teu coração - (imagens da internet)

Os trabalhos que desenvolvo, não visam lucros financeiros, e são, apenas divulgação do que acho interessante para conhecimento geral, por isso, não monetizo.

Que o Espírito Santo do Senhor nos oriente a todos para que possamos iluminar um pouquinho mais o caminho de nossos irmãos, por isso contamos contigo.

Se a mensagem foi útil, e acha que pode ajudar alguém, divulgue: (ao replicar, preserve a fonte)

Siga-nos: https://www.bitchute.com/video/vpIzxncdM5Za/

Texto completo e outros em: http://www.portaldaradio.com

[category economia,politica,ffaa,cristianismo,pensamentos,psicanalise,historia,noticias]

@elyvidal @radiocrista @pastorelyvidal @conipsip @CiepClube
#FalaPortaldaRadio #conipsi #cojae #dojae

will Do Verify the factory,Sample Collection, Negotiation, Dropshipping, Shipping, After-Sales Follow-up, Search, Etc.

hello
 
Hope this finds you well.
 
I can be your sourcing agent in China.

Tired of a middle-men charging your higher prices?

Lower effectively communication with factory or salesman?

Delay the factory delivery time one time and one time?

Manufacture can't accept your Mini order?

Why I am a professional China sourcing agent?

Procurement process：

1.MARKET INFORMATION COLLECTION
1>Sourcing consult 2>Trading suggestions 3>Shipping suggestions 4>Industrial analysis

2.SOURCING REPORT WITH SUGGESTIONS
1>Sourcing report 2> Production time and shipping cost estimate 3>Product upgrade(Open mold)

3.SOURCING SAMPLE PRODUCTION SHIPPING
1>Sample collection and review 2>Negotiation 3>Production arrange. 4>Shipping arrange.

Much appreciated if you could assign this to the responsible party.

We are dedicated to help small & medium overseas companies or individual sourcing from China.

Instead of your company adjusting to the needs of a buying agent, I will comply with

your demands so everything you want comes to fruition.

➤Just tell us what exactly you want, we can give you a satisfied result or plan !

For more infomation, Pls feel free to contact me

Lee

Skype：+86 15919103357

WhatsApp：+86 15919103357 

WeChat：15919103357

Insecure Features In PDFs

In 2019, we published attacks on PDF Signatures and PDF Encryption. During our research and studying the related work, we discovered a lot of blog posts, talks, and papers focusing on malicious PDFs causing some damage. However, there was no systematic analysis of all possible dangerous features supported by PDFs, but only isolated exploits and attack concepts.

We decided to fill this gap and systematize the possibilities to use legitimate PDF features and do bad stuff. We define four attack categories: Denial of Service, Information Disclosure, Data Manipulation, and Code Execution.

Our evaluation reveals 26 of 28 popular PDF processing applications are vulnerable to at least one attack. You can download all malicious PDFs here. You can also find more technical details in our NDSS'21 paper.

This is a joined work of Jens Müller, Dominik Noss, Christian Mainka, Vladislav Mladenov, and Jörg Schwenk.

Dangerous Paths: Overview

To identify attack vectors, we systematically surveyed which potentially dangerous features exist in the PDF specification. We created a comprehensive list with all PDF Actions that can be called. This list contains 18 different actions that we carefully studied.

 

 

We selected eight actions – the ones that directly or indirectly allow access to a file handle and may therefore be abused for dangerous features such as URL invocation or writing to files. Having a list of security-sensitive actions, we proceeded by investigating all objects and related events that can trigger these actions.

We identified four PDF objects which allow calling arbitrary actions (Page, Annotation, Field, and Catalog). Most objects offer multiple alternatives for this purpose. For example, the Catalog object, defines the OpenAction or additional actions (AA) events. Each event can launch any sequence of PDF actions, for example, Launch, Thread, etc. JavaScript actions can be embedded within documents. It  opens a new area for attacks, for example, new annotations can be created that can have actions which once again lead to accessing file handles.

Denial of Service

The goal of the denial of service class of attacks is enforcing to process PDF applications in consuming all available resources (i.e., computing time or memory) or causes them to crash by opening a specially crafted PDF document. We identified two variants: Infinite Loop and Deflate Bomb.

Infinite Loop

This variant induces an endless loop causing the program execution to get stuck. The PDF standard allows various elements of the document structure to reference to themselves, or to other elements of the same type.

• Action loop: PDF actions allow to specify a Next action to be performed, thereby resulting in "action cycles".

• ObjStm loop: Object streams may extend other object streams allows the crafting of a document with cycles.

• Outline loop: PDF documents may contain an outline. Its entries, however, can refer to themselves or each other.

• Calculations: PDF defines "Type 4" calculator functions, for example, to transform colors. Processing hard-to-solve mathematical formulas may lead to high demands of CPU.

• JavaScript: Finally, in case the PDF application processes scripts within documents, infinite loops can be induced.

Deflate Bomb

Data amplification attacks based on malicious zip archives are well-known. The first publicly documented DoS attack using a "zip bomb" was conducted in 1996 against a Fidonet BBS administrator. However, not only zip files but also stream objects within PDF documents can be compressed using various algorithms such as Deflate to reduce the overall file size. 

Information Disclosure

The goal of this class of attacks is to track the usage of a document by silently invoking a connection to the attacker's server once the file is opened, or to leak PDF document form data, local files, or NTLM credentials to the attacker.

URL Invocation

PDF documents that silently "phone home" should be considered as privacy-invasive. They can be used, for example, to deanonymize reviewers, journalists, or activists behind a shared mailbox. The attack's goal is to open a backchannel to an attacker-controlled server once the PDF file is opened by the victim.

The possibility of malicious URI resolving in PDF documents has been introduced by Hamon [1] who gave an evaluation for URI and SubmitForm actions in Acrobat Reader. We extend their analysis to all standard PDF features that allow opening a URL, such as ImportData, Launch, GoToR, and JavaScript.

Form Data Leakage

Documents can contain forms to be filled out by the user – a feature introduced with PDF version 1.2 in 1996 and used on a daily basis for routine offices tasks, such as travel authorization or vacation requests. The idea of this attack is as follows: The victim downloads a form – a PDF document which contains form fields – from an attacker controlled source and fills it out on the screen, for example, in order to print it. The form is manipulated by the attacker in such a way that it silently send input data to the attacker's server.

Local File Leakage

The PDF standard defines various methods to embed external files into a document or otherwise access files on the host's file system, as documented below.

• External streams: Documents can contain stream objects (e.g., images) to be included from external files on disk.
• Reference XObjects: This feature allows a document to import content from another (external) PDF document.
• Open Prepress Interface: Before printing a document, local files can be defined as low-resolution placeholders.
• Forms Data Format (FDF): Interactive form data can be stored in, and auto-imported from, external FDF files.
• JavaScript functions: The Adobe JavaScript reference enables documents to read data from or import local files.

If a malicious document managed to firstly read files from the victim's disk and secondly, send them back to the attacker, such behavior would arguably be critical.

Credential Theft

In 1997, Aaron Spangler posted a vulnerability in Windows NT on the Bugtraq mailing list [2]: Any client program can trigger a connection to a rogue SMB server. If the server requests authentication, Windows will automatically try to log in with a hash of the user's credentials. Such captured NTLM hashes allow for efficient offline cracking and can be re-used by applying pass-the-hash or relay attacks to authenticate under the user's identity. In April 2018, Check Point Research [3] showed that similar attacks can be performed with malicious PDF files. They found that the target of GoToR and GoToE actions can be set to \\attacker.com\dummyfile, thereby leaking credentials in the form of NTLM hashes.

Data Manipulation

This attack class deals with the capabilities of malicious documents to silently modify form data, to write to local files on the host's file system, or to show a different content based on the application that is used to open the document.

Form Modification

The idea of this attack is as follows: Similar to Form Data Leakage attacks, the victim obtains a harmlessly looking PDF document from an attacker controlled source, for example, a remittance slip or a tax form. The goal of the attacker is to dynamically, and without knowledge of the victim, manipulate form field data.

File Write Access

The PDF standard enables documents to submit form data to external webservers. Technically the webserver's URL is defined using a PDF File Specification. This ambiguity in the standard may be interpreted by implementations in such a way that they enable documents to submit PDF form data to a local file, thereby writing to this file.

 

Content Masking 

The goal of this attack is to craft a document that renders differently, depending on the applied PDF interpreter. This can be used, for example, to show different content to different reviewers, to trick content filters (AI-based machines as well as human content moderators), plagiarism detection software, or search engines, which index a different text than the one shown to users when opening the document.

• Stream confusion: It is unclear how content streams are parsed if their Length value does not match the offset of the endstream marker, or if syntax errors are introduced.
• Object confusion: An object can overlay another object. The second object may not be processed if it has a duplicate object number, if it is not listed in the XRef table, or if other structural syntax errors are introduced.
• Document confusion: A PDF file can contain yet another document (e.g., as embedded file), multiple XRef tables, etc., which results in ambiguities on the structural level.
• PDF confusion: Objects before the PDF header or after an EOF marker may be processed by implementations, introducing ambiguities in the outer document structure.

Code Execution

The goal of this attack is to execute attacker-controlled code. This can be achieved by silently launching an executable file, embedded within the document, to infect the host with malware. The PDF specification defines the Launch action, which allows documents to launch arbitrary applications. The file to be launched can either be specified by a local path, a network share, a URL, or a file embedded within the PDF document itself.

Evaluation

Out of 28 tested applications, 26 are vulnerable to at least one attack.

Authors of this Post

Jens Müller

Dominik Noss
Christian Mainka

Vladislav Mladenov

Jörg Schwenk 

Sources

1] V. Hamon. "Malicious URI resolving in PDF documents". In: Journal of Computer Virology and Hacking Techniques 9.2 (2013), pp. 65–76.

[2] Aaron Spangler. WinNT/Win95 Automatic Authentication Vulnerability (IE Bug #4). https://insecure.org/sploits/winnt.automatic.authentication.html. Mar. 1997.

[3] Check Point Research. NTLM Credentials Theft via PDF Files. https://research.checkpoint.com/ntlm-credentials-theft-via-pdf-files/. 2018.

Related articles

1. Easy Hack Tools
2. Physical Pentest Tools
3. Hacking Tools Github
4. Hacking Tools Github
5. Hacking Apps
6. Pentest Tools Android
7. Pentest Tools For Android
8. Hacking Tools 2020
9. Usb Pentest Tools
10. Pentest Tools Find Subdomains
11. Hacker Tools Linux
12. Bluetooth Hacking Tools Kali
13. Hack Tools Online
14. Hacker Tool Kit
15. Pentest Tools Android
16. Hack Tools For Mac
17. Hacker Tools Online
18. Pentest Tools Alternative
19. Pentest Tools Website
20. Hacking Tools For Beginners
21. Pentest Tools Online
22. Hacker Search Tools
23. Hacker Tools Windows
24. Nsa Hack Tools
25. New Hacker Tools
26. Bluetooth Hacking Tools Kali
27. Best Pentesting Tools 2018
28. Pentest Tools Free
29. Hacks And Tools
30. Hacker Tools 2020
31. Pentest Tools Nmap
32. What Are Hacking Tools
33. Hacker Security Tools
34. Hacking Tools 2019
35. Hacking Tools For Windows Free Download
36. Hack Tools For Games
37. World No 1 Hacker Software
38. Hack Apps
39. Hacker Tools Apk Download
40. Hack App
41. Hacking Tools For Windows
42. Hack And Tools
43. Hacking Tools For Games
44. Pentest Tools Review
45. Hacking App
46. Pentest Tools Tcp Port Scanner
47. Hacking Tools For Windows Free Download
48. Pentest Automation Tools
49. Hacker Tools Free
50. Hacker Tools Apk
51. Best Hacking Tools 2019
52. Hack Tools Github
53. Pentest Box Tools Download
54. Hacking Tools For Pc
55. Pentest Reporting Tools
56. Pentest Recon Tools
57. Best Pentesting Tools 2018
58. Hack Tools For Windows
59. Tools 4 Hack
60. Hacker
61. Pentest Tools Subdomain
62. Blackhat Hacker Tools
63. Hack Rom Tools
64. Hack Tools
65. Pentest Tools Open Source
66. Hacking Tools For Beginners
67. Hack App
68. Hacker Techniques Tools And Incident Handling
69. Pentest Tools Review
70. Hacking Tools Online
71. Hack Rom Tools
72. Hacker Tools For Mac
73. Pentest Tools Nmap
74. Best Hacking Tools 2020
75. Hacking Tools For Beginners
76. Physical Pentest Tools
77. Pentest Recon Tools
78. Hacking Tools Kit
79. Pentest Tools Kali Linux
80. Hacker Tools 2020
81. Hacking Tools For Kali Linux
82. Hack Tools
83. Pentest Tools For Android
84. Hack App
85. What Is Hacking Tools
86. Pentest Tools Alternative
87. Hacking Tools For Mac
88. Pentest Tools For Windows
89. Hack And Tools
90. Hacking Tools 2019
91. Hack Tool Apk
92. Pentest Tools Nmap
93. Kik Hack Tools
94. Hack Tools For Mac
95. Hacker
96. Kik Hack Tools
97. Hacker Tools Apk Download
98. Hacking Tools Software
99. How To Hack
100. Hacking Tools Kit
101. Hacker Tools 2020
102. Pentest Tools Kali Linux
103. Best Pentesting Tools 2018
104. Hacker Tools List
105. Pentest Tools Download
106. Hacking Tools Free Download
107. Game Hacking
108. Pentest Box Tools Download
109. Black Hat Hacker Tools
110. Hacking Tools For Games
111. Hacking Tools Online
112. Hack Tool Apk No Root
113. Hacker Tools
114. Hacker Hardware Tools
115. Hack Tools Mac
116. Hack Tools For Games
117. Pentest Tools Bluekeep
118. New Hacker Tools
119. Hack Apps
120. Hacker Tools Linux

An Overview Of Exploit Packs (Update 25) May 2015

Update May 12, 2015

Added CVE-2015-0359 and updates for CVE-2015-0336

 Exploit kit table 2014- 2015 (Sortable HTML table)

Reference table : Exploit References 2014-2015

Update March 20, 2015

Added CVE-2015-0336

------------------------

Update February 19, 2015

Added Hanjuan Exploit kit and CVE-2015-3013 for Angler 

Update January 24, 2015 

http://www.kahusecurity.com

Added CVE-2015-3010, CVE-2015-3011 for Agler and a few reference articles. 
If you notice any errors, or some CVE that need to be removed (were retired by the pack authors), please let me know. Thank you very much!

Update December 12, 2014

Update Jan 8, 2014

 This is version 20 of the exploit pack table - see the added exploit packs and vulnerabilities listed below.

Exploit Pack Table Update 20
Click to view or download from Google Apps

I want to give special thanks to Kafeine  L0NGC47,  Fibon and  Curt Shaffer for their help and update they made.  Note the new Yara rules sheet / tab for yara rules for exploit kit.
I also want to thank Kahu security, Kafeine, Malforsec and all security companies listed in References for their research.

If you wish to be a contributor (be able to update/change the exploits or add yara rules), please contact me :)
If you have additions or corrections, please email, leave post comments, or tweet (@snowfl0w) < thank you!

The Wild Wild West image was created by Kahu Security  - It shows current and retired (retiring) kits.

List of changed kits

Gong Da / GonDad	Redkit 2.2	x2o (Redkit Light)	Fiesta (=Neosploit)	Cool  Styxy	DotkaChef
CVE-2011-3544	CVE-2013-2551	CVE-2013-2465	CVE-2010-0188	CVE-2010-0188	CVE-2012-5692
CVE-2012-0507	CVE-2013-2471		CVE-2013-0074/3896	CVE-2011-3402	CVE-2013-1493
CVE-2012-1723	CVE-2013-1493		CVE-2013-0431	CVE-2013-0431	CVE-2013-2423
CVE-2012-1889	CVE-2013-2460		CVE-2013-0634	CVE-2013-1493
CVE-2012-4681			CVE-2013-2551	CVE-2013-2423
CVE-2012-5076
CVE-2013-0422
CVE-2013-0634
CVE-2013-2465

Angler	FlashPack = SafePack	White Lotus	Magnitude (Popads)	Nuclear 3.x	Sweet Orange
CVE-2013-0074/3896	CVE-2013-0074/3896	CVE-2011-3544	CVE-2011-3402	CVE-2010-0188	CVE-2013-2423
CVE-2013-0634	CVE-2013-2551	CVE-2013-2465	CVE-2012-0507	CVE-2012-1723	CVE-2013-2471
CVE-2013-2551		CVE-2013-2551	CVE-2013-0634	CVE-2013-0422	CVE-2013-2551
CVE-2013-5329			CVE-2013-2460	CVE-2013-2423
CVE-2013-2471 ??			CVE-2013-2471	CVE-2013-2460
			CVE-2013-2551	CVE-2013-2551

CK	HiMan	Neutrino	Blackhole (last)	Grandsoft	Private EK
CVE-2011-3544	CVE-2010-0188	CVE-2013-0431	CVE-2013-0422	CVE-2010-0188	CVE-2006-0003
CVE-2012-1889	CVE-2011-3544	CVE-2013-2460	CVE-2013-2460	CVE-2011-3544	CVE-2010-0188
CVE-2012-4681	CVE-2013-0634	CVE-2013-2463*	CVE-2013-2471	CVE-2013-0422	CVE-2011-3544
CVE-2012-4792*	CVE-2013-2465	CVE-2013-2465*	and + all or some	CVE-2013-2423	CVE-2013-1347
CVE-2013-0422	CVE-2013-2551	CVE-2013-2551	exploits	CVE-2013-2463	CVE-2013-1493
CVE-2013-0634		* switch 2463*<>2465*	from the previous		CVE-2013-2423
CVE-2013-3897		Possibly + exploits	version		CVE-2013-2460
* removed		from the previous
		version

Sakura 1.x	LightsOut	Glazunov	Rawin	Flimkit	Cool EK (Kore-sh)	Kore (formely Sibhost)
cve-2013-2471	CVE-2012-1723	CVE-2013-2463	CVE-2012-0507	CVE-2012-1723	CVE-2013-2460	CVE-2013-2423
CVE-2013-2460	CVE-2013-1347	cve-2013-2471	CVE-2013-1493	CVE-2013-2423	CVE-2013-2463	CVE-2013-2460
and + all or some	CVE-2013-1690		CVE-2013-2423	CVE-2013-2471		CVE-2013-2463
exploits	CVE-2013-2465					CVE-2013-2471
from the previous
version

Styx 4.0	Cool	Topic EK	Nice EK
CVE-2010-0188	CVE-2012-0755	CVE-2013-2423	CVE-2012-1723
CVE-2011-3402	CVE-2012-1876
CVE-2012-1723	CVE-2013-0634
CVE-2013-0422	CVE-2013-2465
CVE-2013-1493	cve-2013-2471
CVE-2013-2423	and + all or some
CVE-2013-2460	exploits
CVE-2013-2463	from the previous
CVE-2013-2472	version
CVE-2013-2551
Social Eng

=================================================================

The Explot Pack Table has been updated and you can view it here.

Exploit Pack Table Update 19.1  - View or Download from Google Apps

If you keep track of exploit packs and can/wish  to contribute and be able to make changes, please contact me (see email in my profile)
I want to thank L0NGC47, Fibon, and Kafeine,  Francois Paget, Eric Romang, and other researchers who sent information for their help.




Update April 28, 2013 - added CVE-2013-2423 (Released April 17, 2013) to several packs. 
Now the following packs serve the latest Java exploit (update your Java!)

1. Styx
2. Sweet Orange
3. Neutrino
4. Sakura
5. Whitehole
6. Cool
7. Safe Pack
8. Crime Boss
9. CritX

Other changes
Updated:

1. Whitehole
2. Redkit
3. Nuclear
4. Sakura
5. Cool Pack
6. Blackhole
7. Gong Da

Added:

1. KaiXin
2. Sibhost
3. Popads 
4. Alpha Pack
5. Safe Pack
6. Serenity
7. SPL Pack
   
   There are 5 tabs in the bottom of the sheet

1. 2011-2013
2. References
3. 2011 and older
4. List of exploit kits
5. V. 16 with older credits

March 2013
The Explot Pack Table, which has been just updated, has migrated to Google Apps - the link is below. The new format will allow easier viewing and access for those who volunteered their time to keep it up to date.

In particular, I want to thank
L0NGC47, Fibon, and Kafeine  for their help.

There are 5 tabs in the bottom of the sheet

1. 2011-2013
2. References
3. 2011 and older
4. List of exploit kits
5. V. 16 with older credits

The updates include

1. Neutrino  - new
2. Cool Pack - update
3. Sweet Orange - update
4. SofosFO aka Stamp EK - new
5. Styx 2.0 - new
6. Impact - new
7. CritXPack - new
8. Gong Da  - update
9. Redkit - update
10. Whitehole - new
11. Red Dot  - new

The long overdue Exploit pack table Update 17 is finally here. It got a colorful facelift and has newer packs (Dec. 2011-today) on a separate sheet for easier reading.
Updates / new entries for the following 13 packs have been added (see exploit listing below)

1. Redkit 
2. Neo Sploit
3. Cool Pack
4. Black hole 2.0
5. Black hole 1.2.5
6. Private no name
7. Nuclear 2.2 (Update to 2.0 - actual v. # is unknown)
8. Nuclear 2.1  (Update to 2.0 - actual v. # is unknown)
9. CrimeBoss
10. Grandsoft
11. Sweet Orange 1.1 Update to 1.0 actual v. # is unknown)
12. Sweet Orange 1.0
13. Phoenix  3.1.15
14. NucSoft
15. Sakura 1.1 (Update to 1.0  actual v. # is unknown)
16. AssocAID (unconfirmed)  

The full table in xls format - Version 17 can be downloaded from here.  

Exploit lists for the added/updated packs

AssocAID (unconfirmed)

09-'12

CVE-2011-3106

CVE-2012-1876

CVE-2012-1880

CVE-2012-3683

Unknown CVE

5

Redkit

08-'12

CVE-2010-0188

CVE-2012-0507

CVE-2012-4681

3

Neo Sploit

09-'12

CVE-2012-1723

CVE-2012-4681

2?

Cool

08-'12

CVE-2006-0003

CVE-2010-0188

CVE-2011-3402

CVE-2012-0507

CVE-2012-1723

CVE-2012-4681

5

Black hole 2.0

09-'12

CVE-2006-0003

CVE-2010-0188

CVE-2012-0507

CVE-2012-1723

CVE-2012-4681

CVE-2012-4969 promised

5

Black hole 1.2.5

08-'12

CVE-2006-0003

CVE-2007-5659 /2008-0655

CVE-2008-2992

CVE-2009-0927

CVE-2010-0188

CVE-2010-1885

CVE-2011-0559

CVE-2011-2110

CVE-2012-1723

CVE-2012-1889

CVE-2012-4681

11

Private no name

09-'12

CVE-2010-0188

CVE-2012-1723

CVE-2012-4681

3

Nuclear 2.2 (Update to 2.0 - actual v. # is unknown)

03-'12

CVE-2010-0188

CVE-2011-3544

CVE-2012-1723

CVE-2012-4681

4

Nuclear 2.1 (Update to 2.0 - actual v. # is unknown)

03-'12

CVE-2010-0188

CVE-2011-3544

CVE-2012-1723

3

CrimeBoss

09-'12

Java Signed Applet

CVE-2011-3544

CVE-2012-4681

3

Grandsoft

09-'12

CVE-2010-0188

CVE-2011-3544

2?

Sweet Orange 1.1

09-'12

CVE-2006-0003

CVE-2010-0188

CVE-2011-3544

CVE-2012-4681

4?

Sweet Orange 1.0

05-'12

CVE-2006-0003

CVE-2010-0188

CVE-2011-3544

3?

Phoenix  3.1.15

05-'12

CVE-2010-0842

CVE: 2010-0248

CVE-2011-2110

CVE-2011-2140

CVE: 2011-2371

CVE-2011-3544

CVE-2011-3659

Firefox social

CVE: 2012-0500

CVE-2012-0507

CVE-2012-0779

11

NucSoft

2012

CVE-2010-0188

CVE-2012-0507

2

Sakura 1.1

08-'12

CVE-2006-0003

CVE-2010-0806

CVE-2010-0842

CVE-2011-3544

CVE-2012-4681

5

Version 16. April 2, 2012

Thanks to Kahu security
for Wild Wild West graphic 

The full table in xls format - Version 16 can be downloaded from here. 

 

ADDITIONS AND CHANGES:

1. Blackhole Exploit Kit 1.2.3

Added:

1. CVE-2011-0559 - Flash memory corruption via F-Secure
2. CVE-2012-0507 - Java Atomic via Krebs on Security
3. CVE-2011-3544 - Java Rhino  via Krebs on Security

2. Eleonore Exploit Kit 1.8.91 and above- via Kahu Security

Added:

1. CVE-2012-0507 - Java Atomic- after 1.8.91was released
2. CVE-2011-3544 - Java Rhino
3. CVE-2011-3521 - Java Upd.27  see Timo Hirvonen,  Contagio, Kahu Security and Michael 'mihi' Schierl 
4. CVE-2011-2462 - Adobe PDF U3D

Also includes
"Flash pack" (presumably the same as before)
"Quicktime" - CVE-2010-1818 ?

3. Incognito Exploit Pack v.2 and above 

there are rumors that Incognito development stopped after v.2 in 2011 and it is a different pack now. If you know, please send links or files.

Added after v.2 was released:

1. CVE-2012-0507 - Java Atomic

See V.2 analysis via StopMalvertizing

4. Phoenix Exploit Kit v3.1 - via Malware Don't Need Coffee

Added:

1. CVE-2012-0507 -  Java Atomic
2. CVE-2011-3544 -  Java Rhino + Java TC (in one file)

5. Nuclear Pack v.2 - via TrustWave Spiderlabs

1. CVE-2011-3544 Oracle Java Rhino
2. CVE-2010-0840 JRE Trusted Method Chaining
3. CVE-2010-0188 Acrobat Reader  – LibTIFF
4. CVE-2006-0003 MDAC

6. Sakura Exploit Pack > v.1 via DaMaGeLaB

1. CVE-2011-3544 - Java Rhino (It was in Exploitpack table v15, listing it to show all packs with this exploit)

7. Chinese Zhi Zhu Pack via Kahu Security and Francois Paget (McAfee)

1. CVE-2012-0003 -  WMP MIDI 
2. CVE-2011-1255 - IE Time Element Memory Corruption
3. CVE-2011-2140 - Flash 10.3.183.x
4. CVE-2011-2110 - Flash 10.3.181.x 
5. CVE-2010-0806 - IEPeers

8. Gong Da Pack via Kahu Security 

1. CVE-2011-2140  - Flash 10.3.183.x
2. CVE-2012-0003 -  WMP MIDI  
3. CVE-2011-3544 - Java Rhino 

9. Dragon Pack - via DaMaGeLab  December 2010 - it is old, listing for curiosity sake

1. CVE-2010-0886 - Java SMB
2. CVE-2010-0840 - JRE Trusted Method Chaining
3. CVE-2008-2463 - Snapshot
4. CVE-2010-0806 - IEPeers
5. CVE-2007-5659/2008-0655 - Collab.collectEmailInfo
6. CVE-2008-2992 - util.printf
7. CVE-2009-0927 - getIco
8. CVE-2009-4324 - newPlayer

Version 15. January 28, 2012

Additions - with many thanks to Kahu Security

 Hierarchy Exploit Pack
=================
CVE-2006-0003
CVE-2009-0927
CVE-2010-0094
CVE-2010-0188
CVE-2010-0806
CVE-2010-0840
CVE-2010-1297
CVE-2010-1885
CVE-2011-0611
JavaSignedApplet

Siberia Private
==========
CVE-2005-0055
CVE-2006-0003
CVE-2007-5659
CVE-2008-2463
CVE-2008-2992
CVE-2009-0075
CVE-2009-0927
CVE-2009-3867
CVE-2009-4324
CVE-2010-0806

Techno XPack
===========
CVE-2008-2992
CVE-2010-0188
CVE-2010-0842
CVE-2010-1297
CVE-2010-2884
CVE-2010-3552
CVE-2010-3654
JavaSignedApplet

"Yang Pack"
=========
CVE-2010-0806
CVE-2011-2110
CVE-2011-2140
CVE-2011-354

Version 14. January 19, 2012

Version 14 Exploit Pack table additions:

Credits for the excellent Wild Wild West (October 2011 edition) go to kahusecurity.com

With many thanks to  XyliBox (Xylitol - Steven),  Malware Intelligence blog,  and xakepy.cc for the information:

1. Blackhole 1.2.1  (Java Rhino added, weaker Java exploits removed)
2. Blackhole 1.2.1 (Java Skyline added)
3. Sakura Exploit Pack 1.0  (new kid on the block, private pack)
4. Phoenix 2.8. mini (condensed version of 2.7)
5. Fragus Black (weak Spanish twist on the original, black colored admin panel, a few old exploits added)

If you find any errors or CVE information for packs not featured , please send it to my email (in my profile above, thank you very much) .

 
The full table in xls format - Version 14 can be downloaded from here. 

The exploit pack table in XLSX format
The exploit pack table in csv format 

The references sheet in csv format 

P.S. There are always corrections and additions thanks to your feedback after the document release, come back in a day or two to check in case v.15 is out.

Version 13. Aug 20, 2011

Kahusecurity issued an updated version of their Wild Wild West graphic that will help you learn Who is Who in the world of exploit packs. You can view the full version of their post in the link above.

Version 13 exploit pack table additions:

1. Bleeding Life 3.0
2. Merry Christmas Pack (many thanks to kahusecurity.com)+
3. Best Pack (many thanks to kahusecurity.com)
4. Sava Pack (many thanks to kahusecurity.com)
5. LinuQ 
6. Eleonore 1.6.5
7. Zero Pack
8. Salo Pack (incomplete but it is also old)

List of packs in the table in alphabetical order

1. Best Pack
2. Blackhole Exploit 1.0
3. Blackhole Exploit 1.1
4. Bleeding Life 2.0
5. Bleeding Life 3.0
6. Bomba
7. CRIMEPACK 2.2.1
8. CRIMEPACK 2.2.8
9. CRIMEPACK 3.0
10. CRIMEPACK 3.1.3
11. Dloader
12. EL Fiiesta
13. Eleonore 1.3.2
14. Eleonore 1.4.1
15. Eleonore 1.4.4 Moded
16. Eleonore 1.6.3a
17. Eleonore 1.6.4
18. Eleonore 1.6.5
19. Fragus 1
20. Icepack
21. Impassioned Framework 1.0
22. Incognito
23. iPack
24. JustExploit
25. Katrin
26. Merry Christmas Pack
27. Liberty  1.0.7
28. Liberty 2.1.0*
29. LinuQ pack
30. Lupit
31. Mpack
32. Mushroom/unknown
33. Open Source Exploit (Metapack)
34. Papka
35. Phoenix  2.0 
36. Phoenix 2.1
37. Phoenix 2.2
38. Phoenix 2.3
39. Phoenix 2.4
40. Phoenix 2.5
41. Phoenix 2.7
42. Robopak
43. Salo pack
44. Sava Pack
45. SEO Sploit pack
46. Siberia
47. T-Iframer
48. Unique Pack Sploit 2.1
49. Webattack
50. Yes Exploit 3.0RC
51. Zero Pack
52. Zombie Infection kit
53. Zopack

----------------------------------------------
Bleeding Life 3.0
New Version Ad is here 

Merry Christmas Pack read analysis at kahusecurity.com	Best Pack read analysis at  kahusecurity.com	Sava Pack read analysis at kahusecurity.com
Eleonore 1.6.5  [+] CVE-2011-0611 [+] CVE-2011-0559 [+] CVE-2010-4452 [-] CVE-2010-0886	Salo Pack Old (2009), added just for the collection	Zero Pack 62 exploits from various packs (mostly Open Source pack)
LinuQ pack Designed to compromise linux servers using vulnerable PHPMyAdmin. Comes with DDoS bot but any kind of code can be loaded for Linux botnet creation. LinuQ pack is PhpMyAdmin exploit pack with 4 PMA exploits based on a previous Russian version of the Romanian PMA scanner ZmEu. it is not considered to be original, unique, new, or anything special. All exploits are public and known well. It is designed to be installed on an IRC server (like UnrealIRCD). IP ranges already listed in bios.txt can be scanned, vulnerable IPs and specific PMA vulnerabilities will be listed in vuln.txt, then the corresponding exploits can be launched against the vulnerable server. It is more like a bot using PMA vulnerabilities than exploit pack. It is using CVE-2009-1148 (unconfirmed) CVE-2009-1149 (unconfirmed) CVE-2009-1150 (unconfirmed) CVE-2009-1151 (confirmed)

 ====================================================================

Version 12. May 26, 2011

additional changes (many thanks to kahusecurity.com)

Bomba

Papka

See the list of packs covered in the list below


The full table in xls format - Version 12 can be downloaded from here.

I want to thank everyone who sent packs and information  :)

Version 11 May 26, 2011 Changes:

1. Phoenix2.7
2. "Dloader" (well, dloader is a loader but the pack is  some unnamed pack http://damagelab.org/lofiversion/index.php?t=20852)
3. nuclear pack
4. Katrin
5. Robopak
6. Blackhole exploit kit 1.1.0
7. Mushroom/unknown
8. Open Source Exploit kit
   

====================================================================

10. May 8, 2011 Version 10        Exploit Pack Table_V10May11
First, I want to thank everyone who sent and posted comments for updates and corrections. 

*** The Wild Wild West picture is from a great post about evolution of exploit packs by Kahu Security  Wild Wild West Update


As usual, send your corrections and update lists.

Changes:

• Eleonore 1.6.4
• Eleonore 1.6.3a
• Incognito
• Blackhole

Go1Pack  (not included) as reported as being a fake pack, here is a gui. Here is a threatpost article referencing it as it was used for an attack 
Also, here is another article claiming it is not a fake http://community.websense.com/blogs/securitylabs/archive/2011/04/19/Mass-Injections-Leading-to-g01pack-Exploit-Kit.aspx
Go1 Pack CVE are reportedly
CVE-2006-0003
CVE-2009-0927
CVE-2010-1423
CVE-2010-1885
Does anyone have this pack or see it offered for sale?

Exploit kits I am planning to analyze and add (and/or find CVE listing for) are:

• Open Source Exploit Kit
• SALO
• K0de

Legend: 

Black color entries by Francois Paget

Red color entries by Gunther

Blue color entries by Mila

Also, here is a great presentation by Ratsoul (Donato Ferrante) about Java Exploits (http://www.inreverse.net/?p=1687)

--------------------------------------------------------
 9.  April 5, 2011  Version 9        ExploitPackTable_V9Apr11

It actually needs another update but I am posting it now and will issue version 10 as soon as I can.

Changes:
Phoenix 2.5
IFramer
Tornado
Bleeding life

Many thanks to Gunther for his contributions.
If you wish to add some, please send your info together with the reference links. Also please feel free to send corrections if you notice any mistakes

8. Update 8 Oct 22, 2010 Version 8 ExploitPackTable_V8Oct22-10

Changes: 

1. Eleonore 1.4.4 Moded added (thanks to malwareint.blogspot.com)
2. Correction on CVE-2010-0746 in Phoenix 2.2 and 2.3. It is a mistake and the correct CVE is CVE-2010-0886 (thanks to
   ♫
   etonshell for noticing)
   
3. SEO Sploit pack added (thanks to whsbehind.blogspot.com,  evilcodecave.blogspot.com and blog.ahnlab.com)

7. Update 7 Oct 18, 2010 Version 7 ExploitPackTable_V7Oct18-10 released

 thanks to SecNiche we have updates for Phoenix 2.4 :)

  

We also added shorthand/slang/abbreviated names for exploits for easy matching of exploits to CVE in the future. Please send us more information re packs, exploit names that can be added in the list. Thank you!

 

6. Update 6 Sept 27, 2010 Version 6 ExploitPackTable_V6Sept26-10 released

 Thanks to Francois Paget (McAfee) we have updates for Phoenix 2.2 and Phoenix 2.3

5. Update 5. Sept 27, 2010 Version 5 ExploitPackTable_V5Sept26-10 released

Added updates for Phoenix 2.1 and Crimepack 3.1.3

  

4 Update 4  July 23, 2010  Version 4 ExploitPackTable_V4Ju23-10 released. Added a new Russian exploit kit called Zombie Infection Kit to the table. Read more at malwareview.com

Update 3  July 7, 2010. Please read more about this on the Brian Krebs' blog Pirate Bay Hack Exposes User Booty 

Update 2 June 27, 2010 Sorry but Impassioned Framework is back where it belongs - blue

Update 1 June 24, 2010 Eleonore 1.4.1 columns was updated to include the correct list of the current exploits.

Francois Paget  www.avertlabs.com kindly agreed to allow us to make additions to his Overview of Exploit Packs table published on Avertlabs (McAfee Blog)

Many thanks to Gunther from ARTeam for his help with the update. There are a few blanks and question marks, please do no hesitate to email me if you know the answer or if you see any errors.

Please click on the image below to expand it (it is a partial screenshot)  Impassioned Framework is tentatively marked a different color because the author claims it is a security audit tool not exploit pack. However, there was no sufficient information provided yet to validate such claims. The pack is temporarily/tentatively marked a different color. We'll keep you posted.

Related news

1. Pentest Recon Tools
2. Hack Tools For Pc
3. World No 1 Hacker Software
4. Hacking Tools 2019
5. Hack Tools 2019
6. Nsa Hack Tools
7. Black Hat Hacker Tools
8. Nsa Hack Tools
9. Hacker Tools Apk
10. Pentest Tools Website Vulnerability
11. What Are Hacking Tools
12. Hack Rom Tools
13. Hacking Tools For Mac
14. Pentest Tools Find Subdomains
15. Tools Used For Hacking
16. Hacker Tools Software
17. Pentest Tools Android
18. Hacker Tools 2020
19. Hacking Tools For Windows
20. Hacker Tools For Pc
21. Nsa Hack Tools Download
22. Pentest Tools For Mac
23. Hack Tools Mac
24. Pentest Tools Windows
25. Hacker Tools Online
26. Hacker Tools Github
27. Pentest Tools Review
28. Hacker Security Tools
29. Hacker Tools
30. Hacker Security Tools
31. Pentest Tools Linux
32. Hacker Tools Apk Download
33. Pentest Tools Alternative
34. Hacker Tool Kit
35. Pentest Tools Port Scanner
36. Hacking Tools Software
37. Usb Pentest Tools
38. Hacker Search Tools
39. Hacker Tools Hardware
40. Hacking Tools Software
41. Hack Tools Download
42. Hack Tools
43. Ethical Hacker Tools
44. Growth Hacker Tools
45. Pentest Recon Tools
46. Hack Tool Apk
47. Pentest Tools Nmap
48. How To Install Pentest Tools In Ubuntu
49. Hacking Tools And Software
50. Hack Tools For Pc
51. Hak5 Tools
52. Hack Tools Mac
53. Hack Tools For Ubuntu
54. Hacker Tools Software
55. Pentest Tools Framework
56. Game Hacking
57. Hack Tools Online
58. Hack Tools For Windows
59. Hackers Toolbox
60. Pentest Box Tools Download
61. Hack Tools Online
62. Hack App
63. Pentest Tools Windows
64. Hacker Tools Hardware
65. Pentest Tools Online
66. Hack Tool Apk
67. How To Make Hacking Tools
68. Hacker Tools Online
69. Hacking Tools Windows
70. Pentest Tools Subdomain
71. Game Hacking
72. Pentest Tools For Ubuntu
73. Hacking Tools 2019
74. Beginner Hacker Tools
75. Bluetooth Hacking Tools Kali
76. Hacker Tools Github
77. Usb Pentest Tools
78. Hack Tools For Games
79. Hacker Tools Windows
80. Hacker Tools Apk
81. Hacking Tools For Windows
82. Hacking Tools Usb
83. Hacks And Tools
84. Hacker Techniques Tools And Incident Handling
85. Hack Tools Download
86. Hacker Tools Linux
87. Hacking Tools Download
88. Pentest Tools Subdomain
89. Pentest Tools Url Fuzzer
90. Hacking Tools Pc
91. Hack Tools Download
92. Pentest Tools
93. Hack Tools Online
94. Pentest Tools Nmap
95. Hacking Tools Software
96. Github Hacking Tools
97. Ethical Hacker Tools
98. Hacking App
99. Hacker Tools List
100. Hacker Tools For Pc
101. Hacker Tools For Pc
102. Hacking Tools
103. Ethical Hacker Tools
104. Pentest Tools Apk
105. Free Pentest Tools For Windows
106. Hacker Tools Apk
107. World No 1 Hacker Software
108. Hacker Tools Hardware
109. Nsa Hack Tools
110. Hacking Tools Github
111. Hacker Tools 2019
112. Best Hacking Tools 2020
113. Bluetooth Hacking Tools Kali
114. Pentest Tools For Mac
115. Beginner Hacker Tools
116. Hack Tools Download
117. Hack Tools Github
118. Hack Tools For Mac
119. Pentest Tools Review
120. Hack Tools For Ubuntu
121. Pentest Tools Review
122. Pentest Tools Bluekeep
123. Pentest Tools Apk
124. Hacking Tools For Games
125. Pentest Tools Review
126. Hacking Tools Kit
127. Hacker Tools For Windows
128. Underground Hacker Sites
129. Game Hacking
130. Underground Hacker Sites
131. Pentest Tools Apk
132. Pentest Tools Website Vulnerability
133. Pentest Tools Free
134. Hacking Tools Mac
135. Hacking Tools Download
136. Hacking Tools For Games
137. Hacking Tools Github
138. Hack Tools Pc
139. Best Hacking Tools 2020
140. Hacking App
141. Pentest Tools Framework
142. Pentest Tools Kali Linux
143. Hack Tools For Games
144. Hacking Tools For Windows
145. Hacker Tools Apk Download
146. Hacking Tools For Windows Free Download
147. Hacking Tools For Beginners
148. Hack Tools Online
149. Hacker Tools Apk
150. Tools Used For Hacking
151. Pentest Automation Tools
152. Hacking Tools Pc
153. Pentest Tools Online
154. Pentest Tools Alternative
155. Hacking Tools Github
156. Hack Tool Apk No Root
157. Blackhat Hacker Tools
158. Hacker Search Tools
159. Pentest Tools
160. Computer Hacker
161. Pentest Box Tools Download
162. Pentest Tools Port Scanner