CVE-2014-4936

This Metasploit module exploits a vulnerability in Malwarebytes Anti-Malware and Anti-Exploit by spoofing the update server to deliver a malicious executable. It intercepts version check requests and serves a fake update containing the payload.

This PoC simulates a Malwarebytes CDN to exploit CVE-2014-4936, allowing arbitrary code execution by serving a malicious payload during the update process. It intercepts update requests and forces the client to download and execute a payload.

This Metasploit module exploits a vulnerability in Malwarebytes Anti-Malware and Anti-Exploit by spoofing the update server to deliver a malicious executable. It leverages the lack of proper update package validation to achieve remote code execution.