Demo for Attacking Layer 8: Client-Side Penetration Testing

CA eTrust PestPatrol ActiveX Stack Overflow Metasploit Fileformat Demo.

1st try we try an the eTrust ActiveX exploit against a host that doesn't have the control installed and we see that all we do is crash the browser :-(

2nd try we use the cab install version of the exploit to actually serve up the control to the victim, once they enable the ActiveX control, it is downloaded and installed, and we exploit the victim and get our userland shell