CVE-2015-1126
Apple iOS < 8.3 and Safari < 6.2.5 - Remote Resource Access via FTP URL Userinfo Field
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-1126.
PoCs published by Jouko Pynnonen, joev, including Metasploit module auxiliary/gather/apple_safari_ftp_url_cookie_theft.
AI-analyzed exploit summary This Metasploit module exploits a vulnerability in Safari (CVE-2015-1126) to steal non-HTTPOnly cookies via an FTP URL manipulation technique. It sets up an FTP and HTTP server to serve a malicious payload that exfiltrates cookies from targeted domains.
Description
WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors.
Exploits (1)
This Metasploit module exploits a vulnerability in Safari (CVE-2015-1126) to steal non-HTTPOnly cookies via an FTP URL manipulation technique. It sets up an FTP and HTTP server to serve a malicious payload that exfiltrates cookies from targeted domains.