Exploit for Out-of-bounds Write in Adobe Acrobat CVE-2008-2992

## https://sploitus.com/exploit?id=F2A0301C-3B9E-52B8-A150-47847F2D9B1C
# EP284U
This project is about CVE-2008-2992.

## Author

| Name | Mail |
| --- | --- |
| Jonas Holmberg | jonash3@ug.kth.se |

## Table of Contents

- [EP284U](#EP284U)
  - [Author](#author)
  - [Table of Contents](#table-of-contents)
  - [Project Proposal](#project-proposal)
  - [Final Report](#final-report)
  - [Scripts](#scripts)
  - [Installation and Setup](#installation-and-setup)
  - [Proof of Concept](#proof-of-concept)

## Project Proposal
[Project proposal](Project_proposal.pdf) was the intend project.

## Final Report
[Final report](Final_Report_EH.pdf) is the final project.

## Scripts
[Scripts](scripts) contains a [python program](scripts/automated_user_behavior.py) that belongs to the windows 7 victim machine that automates the opening of files sent trough FTP and a [bash file](scripts/automated_hack.sh) to run on a linux machine that automates the hack from the attacker machine.

## Installation and Setup
[Machine setup](Machine%20setup) contains instructions on how to install and prepare the machine to be hacked.

## Proof of Concept
This proof of concept shows the hack simultaneously on both machines. To the left is a kali linux and to the right is the windows 7 victim machine. Both machines have the [scripts](scripts) running.

![Proof of concept gif](Proof%20of%20concept/Proof_of_concept_automated_attack.gif)
[or Download for better resolution](Proof%20of%20concept/Proof_of_concept_automated_attack.mp4)