IRONSQUIRREL

Description

This project aims at delivering browser exploits to the victim browser in an encrypted fashion. Ellyptic-curve Diffie-Hellman (secp256k1) is used for key agreement and AES is used for encryption.

By delivering the exploit code (and shellcode) to the victim in an encrypted way, the attack can not be replayed. Meanwhile the HTML/JS source is encrypted thus reverse engineering the exploit is significantly harder.

Names

Name
IRONSQUIRREL

Category

Exploits

Type

  • 0-day
  • Loader

Information

Other Information

Uuid

c2b9177b-36f5-4ee4-be17-d764909e266a

Last Card Change

2020-04-22