Exploiting browsers for fun and profit
Web browsers are used primarily for surfing the web. However, an outdated web browser can lead to the entire system being compromised. Clients may never use the preinstalled web browsers and might instead choose one based on their preferences. However, the default preinstalled web browser can still lead to various attacks on the system. Exploiting a browser by finding vulnerabilities in the browser components is known as browser-based exploitation.
The browser Autopwn attack
Metasploit offers browser Autopwn, which is a collection of various attack modules that aim to exploit the target's browser by triggering the relevant vulnerabilities. To understand the inner workings of this module, let's discuss the technology behind the attack.
The technology behind the browser Autopwn attack
The Autopwn attack refers to the automatic exploitation of the target. The Autopwn module sets up most of the browser-based exploits in listening...