Phoenix exploit's kit

[SysAdMini]

Installation Protection Mechanisms of Phoenix Exploit's Kit
http://community.websense.com/blogs/securitylabs/archive/2010/12/27/installation-protection-mechanisms-of-phoenix-exploit-s-kit.aspx?cmpid=sltw

[SysAdMini]

Now Exploiting: Phoenix Exploit Kit Version 2.5
http://blog.trendmicro.com/now-exploiting-phoenix-exploit-kit-version-2-5/

[SysAdMini]

Version 2.7 announced
http://translate.google.co.jp/translate?js=n&prev=_t&hl=en&ie=UTF-8&layout=2&eotf=1&sl=auto&tl=en&u=http://scriptkiddiesec.blogspot.com/2011/05/phoenix-exploit-27.html

----------- V2 .7 ------------------------------------

• Added new exploit JAVA TRUST under JRE / JDK versions 1.6.0, 1.6.0_23
• Removed all the obsolete and palevnyh currently exploits: HCP, FLASH 9, FLASH10, IEPEERS, IE CSS
• The chain sploytov rewritten and meets maximum performance

[GmG]

http://wepawet.iseclab.org/view.php?hash=79a210bbed2651d8d5575416c0423dec&t=1303635027&type=js

.cc/27/btfpkrfwcqgvxqdrgp.php

and

Code: [Select]

http://1160.mosesigses.in/?n=1160
http://sanstag.com/adv/astr/dmxtfzysjq.php

http://urlquery.net/report.php?id=2587
http://wepawet.iseclab.org/view.php?hash=24ee89d61a2041980910ae0580f1e3ed&t=1306268077&type=js

[GmG]

Phoenix Exploit Kit (2.7) continues to be updated
http://labs.m86security.com/2011/06/phoenix-exploit-kit-2-7-continues-to-be-updated/

[SysAdMini]

Phoenix Exploit's Kit 3.1
http://xylibox.blogspot.de/2012/05/phoenix-exploits-kit-31-full.html

We are pleased to present new version of pack 3.1!

-----------v3.1------------------------------------

• Added new JAVA ATOMIC exploit of JRE 1.6.0-1.6.0_30, 1.7.0-1.7.0_2 for FF/IE/OPERA. Sufficiently increased exploitation success.
• JAVA TC and JAVA RHINO combined in one .jar file
• added 4 activation variants:

1)JAVA with version determination, PDF with version determination before load
2)JAVA without version determination, PDF with version determination before load
3)JAVA with version determination, PDF without version determination before load
4)JAVA without version determination, PDF with version determination before load

This flexible system allows for longer not to kill traffic sources (actual for iframe traffic) or conversely with little sacrifice of traffic sources raise exploitation success (actual for Pop up traffic)

• The exploits delivery chain has been rewritten to be up to date, has been removed JAVA SMB, JAVA TRUST, FLASH 10 because they are no longer actual. As a consequence, there was easy to configure and install - no-Apache on port 8080 and SMB configs.