Stack-Based Buffer Overflow in Foxit Reader npFoxitReaderPlugin.dll

This repository contains a single Metasploit module (foxit_reader_plugin_url_bof.rb) that exploits a stack-based buffer overflow in the Foxit Reader browser plugin (npFoxitReaderPlugin.dll) when handling overly long query strings in PDF URLs. The exploit targets Windows 7 SP1 systems running Firefox 18.0 with Foxit Reader 5.4.4.11281. The module sets up a malicious HTTP server that serves a specially crafted PDF URL to the victim's browser. When the vulnerable plugin processes the URL, a buffer overflow occurs, allowing the attacker to execute arbitrary code (Metasploit payload) in the context of the browser. The exploit uses a ROP chain to bypass DEP and leverages the lack of ASLR in the plugin DLL. The main attack vector is browser-based, requiring the victim to visit the attacker's web page. The only code file is a Ruby Metasploit module, and the main entry point is the on_request_uri method, which handles incoming HTTP requests and delivers the exploit.