├── .gitignore ├── direct ├── JavaUpgrade.jnlp ├── WebEnhancer.java ├── java-1.6.0_30.xml ├── java-map-update.xml ├── java-policy.sec ├── jre-windows-i586-iftw-rv.exe ├── makeapplet.sh ├── makeapplet.vbs └── makeupgrade.vbs ├── twostage ├── .classpath ├── .project ├── .settings │ ├── org.eclipse.jdt.core.prefs │ └── org.eclipse.jdt.ui.prefs ├── Readme.txt ├── applets.pro ├── build.xml ├── build │ ├── classes-exploit │ │ └── x │ │ │ ├── classes.ser │ │ │ ├── pr │ │ │ └── puc │ ├── jar │ │ └── x.jar │ └── src-encoded │ │ └── x │ │ ├── EC.java │ │ └── XAppletW.java ├── html │ ├── applet.demo.html │ └── applet.html ├── lib │ ├── asm-all-3.3.1.jar │ └── proguard.jar ├── out.map ├── payloads │ └── putty ├── server │ └── applet │ │ ├── applet.html │ │ ├── version │ │ └── zip.exe ├── src-datacreator │ └── x │ │ ├── ClassEncryptor.java │ │ ├── EC.java │ │ ├── SerializedDataCreator.java │ │ ├── StringEncryptor.java │ │ └── Weaponizer.java ├── src-direct │ ├── Html5.java │ └── x │ │ └── Strings.java └── src-exploit │ └── x │ ├── ClassLoaderHolder.java │ ├── CorbaTrustedMethodChain.java │ ├── EC.java │ ├── EP.java │ ├── FallbackExploit.java │ ├── InvocationEventHolder.java │ ├── MyAny.java │ ├── MyConnection.java │ ├── MyContactInfo.java │ ├── MyCorbaMessageMediatorImpl.java │ ├── MyCorbaServerRequestDispatcher.java │ ├── MyEventHandler.java │ ├── MyIIOPProfile.java │ ├── MyIIOPProfileTemplate.java │ ├── MyIOR.java │ ├── MyInputObject.java │ ├── MyMaliciousInputStream.java │ ├── MyNamingContextImplBase.java │ ├── MyORB.java │ ├── MyORBData.java │ ├── MyORBVersion.java │ ├── MyObjectAdapter.java │ ├── MyObjectAdapterFactory.java │ ├── MyObjectAdapterId.java │ ├── MyObjectId.java │ ├── MyObjectKey.java │ ├── MyObjectKeyFactory.java │ ├── MyObjectKeyTemplate.java │ ├── MyOutputStream.java │ ├── MyPIHandler.java │ ├── MyRequestDispatcherRegistry.java │ ├── MyRunnable.java │ ├── MySelector.java │ ├── MySocketOrChannelConnectionImpl.java │ ├── MyTransportManager.java │ ├── PayloadRunner.java │ ├── PayloadRunnerOrig.java │ ├── PrivilegedURLClassLoader.java │ ├── SerializableClassLoader.java │ ├── StandaloneStarter.java │ ├── Strings.java │ ├── XApplet.java │ ├── XAppletW.java │ ├── bytes.ser │ ├── classes.ser │ ├── pr │ └── puc └── weaponized ├── .classpath ├── .project ├── .settings ├── org.eclipse.jdt.core.prefs └── org.eclipse.jdt.ui.prefs ├── Readme.txt ├── applets.pro ├── build.xml ├── html └── jarWeaponPayload.html ├── lib ├── asm-all-3.3.1.jar └── proguard.jar ├── payloads ├── mac ├── nomac ├── nowin ├── putty ├── rcs └── win ├── server ├── applet-w.zip ├── applet-x.zip └── applet │ ├── applet.html │ ├── version │ └── zip.exe ├── src-datacreator └── x │ ├── ClassEncryptor.java │ ├── EC.java │ ├── InterfaceAdder.java │ ├── Main2.java │ ├── StringEncryptor.java │ └── Weaponizer.java ├── src-direct └── x │ └── Strings.java ├── src-exploit └── x │ ├── CFT.java │ ├── Context_close_Caller.java │ ├── EC.java │ ├── EP.java │ ├── H.java │ ├── MCL.java │ ├── MyHashSet.java │ ├── MyXMLDecoder.java │ ├── PayloadRunner.java │ ├── PrivilegedURLClassLoader.java │ ├── Strings.java │ ├── XAppletW.java │ └── input.xml └── src-payload └── payload └── DemoPayload.java /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/.gitignore -------------------------------------------------------------------------------- /direct/JavaUpgrade.jnlp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/JavaUpgrade.jnlp -------------------------------------------------------------------------------- /direct/WebEnhancer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/WebEnhancer.java -------------------------------------------------------------------------------- /direct/java-1.6.0_30.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/java-1.6.0_30.xml -------------------------------------------------------------------------------- /direct/java-map-update.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/java-map-update.xml -------------------------------------------------------------------------------- /direct/java-policy.sec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/java-policy.sec -------------------------------------------------------------------------------- /direct/jre-windows-i586-iftw-rv.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/jre-windows-i586-iftw-rv.exe -------------------------------------------------------------------------------- /direct/makeapplet.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/makeapplet.sh -------------------------------------------------------------------------------- /direct/makeapplet.vbs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/makeapplet.vbs -------------------------------------------------------------------------------- /direct/makeupgrade.vbs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/direct/makeupgrade.vbs -------------------------------------------------------------------------------- /twostage/.classpath: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/.classpath -------------------------------------------------------------------------------- /twostage/.project: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/.project -------------------------------------------------------------------------------- /twostage/.settings/org.eclipse.jdt.core.prefs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/.settings/org.eclipse.jdt.core.prefs -------------------------------------------------------------------------------- /twostage/.settings/org.eclipse.jdt.ui.prefs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/.settings/org.eclipse.jdt.ui.prefs -------------------------------------------------------------------------------- /twostage/Readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/Readme.txt -------------------------------------------------------------------------------- /twostage/applets.pro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/applets.pro -------------------------------------------------------------------------------- /twostage/build.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/build.xml -------------------------------------------------------------------------------- /twostage/build/classes-exploit/x/classes.ser: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/build/classes-exploit/x/classes.ser -------------------------------------------------------------------------------- /twostage/build/classes-exploit/x/pr: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/build/classes-exploit/x/pr -------------------------------------------------------------------------------- /twostage/build/classes-exploit/x/puc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/build/classes-exploit/x/puc -------------------------------------------------------------------------------- /twostage/build/jar/x.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/build/jar/x.jar -------------------------------------------------------------------------------- /twostage/build/src-encoded/x/EC.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/build/src-encoded/x/EC.java -------------------------------------------------------------------------------- /twostage/build/src-encoded/x/XAppletW.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/build/src-encoded/x/XAppletW.java -------------------------------------------------------------------------------- /twostage/html/applet.demo.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/html/applet.demo.html -------------------------------------------------------------------------------- /twostage/html/applet.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/html/applet.html -------------------------------------------------------------------------------- /twostage/lib/asm-all-3.3.1.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/lib/asm-all-3.3.1.jar -------------------------------------------------------------------------------- /twostage/lib/proguard.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/lib/proguard.jar -------------------------------------------------------------------------------- /twostage/out.map: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/out.map -------------------------------------------------------------------------------- /twostage/payloads/putty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/payloads/putty -------------------------------------------------------------------------------- /twostage/server/applet/applet.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/server/applet/applet.html -------------------------------------------------------------------------------- /twostage/server/applet/version: -------------------------------------------------------------------------------- 1 | 2012080601 2 | -------------------------------------------------------------------------------- /twostage/server/applet/zip.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/server/applet/zip.exe -------------------------------------------------------------------------------- /twostage/src-datacreator/x/ClassEncryptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-datacreator/x/ClassEncryptor.java -------------------------------------------------------------------------------- /twostage/src-datacreator/x/EC.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-datacreator/x/EC.java -------------------------------------------------------------------------------- /twostage/src-datacreator/x/SerializedDataCreator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-datacreator/x/SerializedDataCreator.java -------------------------------------------------------------------------------- /twostage/src-datacreator/x/StringEncryptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-datacreator/x/StringEncryptor.java -------------------------------------------------------------------------------- /twostage/src-datacreator/x/Weaponizer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-datacreator/x/Weaponizer.java -------------------------------------------------------------------------------- /twostage/src-direct/Html5.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-direct/Html5.java -------------------------------------------------------------------------------- /twostage/src-direct/x/Strings.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-direct/x/Strings.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/ClassLoaderHolder.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/ClassLoaderHolder.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/CorbaTrustedMethodChain.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/CorbaTrustedMethodChain.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/EC.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/EC.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/EP.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/EP.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/FallbackExploit.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/FallbackExploit.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/InvocationEventHolder.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/InvocationEventHolder.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyAny.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyAny.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyConnection.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyConnection.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyContactInfo.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyContactInfo.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyCorbaMessageMediatorImpl.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyCorbaMessageMediatorImpl.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyCorbaServerRequestDispatcher.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyCorbaServerRequestDispatcher.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyEventHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyEventHandler.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyIIOPProfile.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyIIOPProfile.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyIIOPProfileTemplate.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyIIOPProfileTemplate.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyIOR.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyIOR.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyInputObject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyInputObject.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyMaliciousInputStream.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyMaliciousInputStream.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyNamingContextImplBase.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyNamingContextImplBase.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyORB.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyORB.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyORBData.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyORBData.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyORBVersion.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyORBVersion.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyObjectAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyObjectAdapter.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyObjectAdapterFactory.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyObjectAdapterFactory.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyObjectAdapterId.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyObjectAdapterId.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyObjectId.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyObjectId.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyObjectKey.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyObjectKey.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyObjectKeyFactory.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyObjectKeyFactory.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyObjectKeyTemplate.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyObjectKeyTemplate.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyOutputStream.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyOutputStream.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyPIHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyPIHandler.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyRequestDispatcherRegistry.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyRequestDispatcherRegistry.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyRunnable.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyRunnable.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MySelector.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MySelector.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MySocketOrChannelConnectionImpl.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MySocketOrChannelConnectionImpl.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/MyTransportManager.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/MyTransportManager.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/PayloadRunner.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/PayloadRunner.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/PayloadRunnerOrig.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/PayloadRunnerOrig.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/PrivilegedURLClassLoader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/PrivilegedURLClassLoader.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/SerializableClassLoader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/SerializableClassLoader.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/StandaloneStarter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/StandaloneStarter.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/Strings.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/Strings.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/XApplet.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/XApplet.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/XAppletW.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/XAppletW.java -------------------------------------------------------------------------------- /twostage/src-exploit/x/bytes.ser: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/bytes.ser -------------------------------------------------------------------------------- /twostage/src-exploit/x/classes.ser: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/classes.ser -------------------------------------------------------------------------------- /twostage/src-exploit/x/pr: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/pr -------------------------------------------------------------------------------- /twostage/src-exploit/x/puc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/twostage/src-exploit/x/puc -------------------------------------------------------------------------------- /weaponized/.classpath: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/.classpath -------------------------------------------------------------------------------- /weaponized/.project: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/.project -------------------------------------------------------------------------------- /weaponized/.settings/org.eclipse.jdt.core.prefs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/.settings/org.eclipse.jdt.core.prefs -------------------------------------------------------------------------------- /weaponized/.settings/org.eclipse.jdt.ui.prefs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/.settings/org.eclipse.jdt.ui.prefs -------------------------------------------------------------------------------- /weaponized/Readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/Readme.txt -------------------------------------------------------------------------------- /weaponized/applets.pro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/applets.pro -------------------------------------------------------------------------------- /weaponized/build.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/build.xml -------------------------------------------------------------------------------- /weaponized/html/jarWeaponPayload.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/html/jarWeaponPayload.html -------------------------------------------------------------------------------- /weaponized/lib/asm-all-3.3.1.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/lib/asm-all-3.3.1.jar -------------------------------------------------------------------------------- /weaponized/lib/proguard.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/lib/proguard.jar -------------------------------------------------------------------------------- /weaponized/payloads/mac: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/payloads/mac -------------------------------------------------------------------------------- /weaponized/payloads/nomac: -------------------------------------------------------------------------------- 1 | placeholder -------------------------------------------------------------------------------- /weaponized/payloads/nowin: -------------------------------------------------------------------------------- 1 | placeholder -------------------------------------------------------------------------------- /weaponized/payloads/putty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/payloads/putty -------------------------------------------------------------------------------- /weaponized/payloads/rcs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/payloads/rcs -------------------------------------------------------------------------------- /weaponized/payloads/win: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/payloads/win -------------------------------------------------------------------------------- /weaponized/server/applet-w.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/server/applet-w.zip -------------------------------------------------------------------------------- /weaponized/server/applet-x.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/server/applet-x.zip -------------------------------------------------------------------------------- /weaponized/server/applet/applet.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/server/applet/applet.html -------------------------------------------------------------------------------- /weaponized/server/applet/version: -------------------------------------------------------------------------------- 1 | 2012080601 2 | -------------------------------------------------------------------------------- /weaponized/server/applet/zip.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/server/applet/zip.exe -------------------------------------------------------------------------------- /weaponized/src-datacreator/x/ClassEncryptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-datacreator/x/ClassEncryptor.java -------------------------------------------------------------------------------- /weaponized/src-datacreator/x/EC.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-datacreator/x/EC.java -------------------------------------------------------------------------------- /weaponized/src-datacreator/x/InterfaceAdder.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-datacreator/x/InterfaceAdder.java -------------------------------------------------------------------------------- /weaponized/src-datacreator/x/Main2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-datacreator/x/Main2.java -------------------------------------------------------------------------------- /weaponized/src-datacreator/x/StringEncryptor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-datacreator/x/StringEncryptor.java -------------------------------------------------------------------------------- /weaponized/src-datacreator/x/Weaponizer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-datacreator/x/Weaponizer.java -------------------------------------------------------------------------------- /weaponized/src-direct/x/Strings.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-direct/x/Strings.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/CFT.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/CFT.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/Context_close_Caller.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/Context_close_Caller.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/EC.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/EC.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/EP.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/EP.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/H.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/H.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/MCL.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/MCL.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/MyHashSet.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/MyHashSet.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/MyXMLDecoder.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/MyXMLDecoder.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/PayloadRunner.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/PayloadRunner.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/PrivilegedURLClassLoader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/PrivilegedURLClassLoader.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/Strings.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/Strings.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/XAppletW.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/XAppletW.java -------------------------------------------------------------------------------- /weaponized/src-exploit/x/input.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-exploit/x/input.xml -------------------------------------------------------------------------------- /weaponized/src-payload/payload/DemoPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hackedteam/vector-applet/HEAD/weaponized/src-payload/payload/DemoPayload.java --------------------------------------------------------------------------------