CVE-2016-0189

This is a functional proof-of-concept exploit for CVE-2016-0189, a VBScript memory corruption vulnerability in Internet Explorer 11. The exploit requires serving specific HTML and DLL files via a web server to trigger the vulnerability, potentially leading to remote code execution.

This repository contains a functional proof-of-concept exploit for CVE-2016-0189, a VBScript memory corruption vulnerability in Internet Explorer 11. The exploit includes support DLLs for local privilege escalation and a local HTTP server to serve the malicious payload.

This repository contains a functional proof-of-concept exploit for CVE-2016-0189, a VBScript memory corruption vulnerability in Internet Explorer 11. The exploit includes support DLLs for local privilege escalation via a local HTTP server and environment variable manipulation.

This Metasploit module exploits a memory corruption vulnerability (CVE-2016-0189) in the VBScript engine of Internet Explorer 11. It uses a combination of heap spraying and memory manipulation to achieve remote code execution on vulnerable systems.