<commit_before>---
layout: page
title: "The 'Aurora' IE Exploit Used Against Google in Action"
category: 
  - Vulnerability
tags: 
  - AuroraX
  - Google
  - featured
teaser: |
    Internet Explorer can be caused to allow remote code execution.
    Earlier today this entry from yesterday at Wepawet (an online analysis
    engine for malware) was pointed out to <NAME>, and within hours
    Metasploit has an exploit of the vulnerability integrated.
header: 
  image_fullwidth: "aurora_vuln.jpg"
published: true
---

Internet Explorer can be caused to allow remote code execution.
Earlier today this entry from yesterday at Wepawet (an online analysis
engine for malware) was pointed out to <NAME>, and within hours
Metasploit has an exploit of the vulnerability integrated. McAfee has
confirmed that the exploit is out and the same one they saw during the
investigation. The video below demonstrates how crackers initially
gained access to the corporate networks of Google, et al. using this
zero day attack.

## Here It Is

The video below demonstrates how Google and the rest have been,
according to most news reports, exploited via the "Aurora" vulnerability
in Internet Explorer, and had their "intellectual property" taken.

<div class="flex-video widescreen vimeo">
  <iframe src="http://player.vimeo.com/video/8771582" frameborder="0" webkitAllowFullScreen mozallowfullscreen allowFullScreen></iframe>
</div>

[The "Aurora" IE Exploit in Action][1] from [The Crew of Praetorian Prefect][2] on [Vimeo][3].

[1]: http://vimeo.com/8771582
[2]: http://vimeo.com/prefects
[3]: htto://vimeo.com 

In the video you will see Metasploit set up a listening session, set
up a web site that serves up the malicious code, and watch as an<commit_msg>alsjdla<commit_after>---
layout: page
title: "The 'Aurora' IE Exploit Used Against Google in Action"
category: 
  - Vulnerability
tags: 
  - AuroraX
  - Google
  - featured
teaser: |
    Internet Explorer can be caused to allow remote code execution.
    Earlier today this entry from yesterday at Wepawet (an online analysis
    engine for malware) was pointed out to <NAME>, and within hours
    Metasploit has an exploit of the vulnerability integrated.
header: 
  image_fullwidth: "aurora_vuln.jpg"
published: true
---

Internet Explorer can be caused to allow remote code execution.
Earlier today this entry from yesterday at Wepawet (an online analysis
engine for malware) was pointed out to <NAME>, and within hours
Metasploit has an exploit of the vulnerability integrated. McAfee has
confirmed that the exploit is out and the same one they saw during the
investigation. The video below demonstrates how crackers initially
gained access to the corporate networks of Google, et al. using this
zero day attack.

## Here It Is

The video below demonstrates how Google and the rest have been,
according to most news reports, exploited via the "Aurora" vulnerability
in Internet Explorer, and had their "intellectual property" taken.

<div class="flex-video">
  <iframe src="http://player.vimeo.com/video/8771582" frameborder="0" webkitAllowFullScreen mozallowfullscreen allowFullScreen></iframe>
</div>

[The "Aurora" IE Exploit in Action][1] from [The Crew of Praetorian Prefect][2] on [Vimeo][3].

[1]: http://vimeo.com/8771582
[2]: http://vimeo.com/prefects
[3]: htto://vimeo.com 

In the video you will see Metasploit set up a listening session, set
up a web site that serves up the malicious code, and watch as an
{'fraction_non_alphanumeric': 0.07153158350158638, 'fraction_numerical': 0.012114219786558985, 'mean_word_length': 4.427230046948357, 'pattern_counts': {'":': 0, '<': 15, '<?xml version=': 0, '>': 15, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2557804', 'n_tokens_mistral': 1056, 'n_tokens_neox': 972, 'n_words': 467}