Add exploitdb ascii example

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>

Author: egibs

pkg/action/archive_test.go

@@ -292,7 +292,10 @@ func TestScanInvalidArchive(t *testing.T) {
 		MinRisk:        0,
 		Renderer:       r,
 		Rules:          yrs,
-		ScanPaths:      []string{"testdata/joblib_0.9.4.dev0_compressed_cache_size_pickle_py35_np19.gz"},
+		ScanPaths: []string{
+			"testdata/17419.zip",
+			"testdata/joblib_0.9.4.dev0_compressed_cache_size_pickle_py35_np19.gz",
+		},
 	}
 	_, err = Scan(ctx, mc)
 	err = extractError(err)
@@ -326,7 +329,10 @@ func TestScanInvalidArchiveIgnore(t *testing.T) {
 		MinRisk:        0,
 		Renderer:       r,
 		Rules:          yrs,
-		ScanPaths:      []string{"testdata/joblib_0.9.4.dev0_compressed_cache_size_pickle_py35_np19.gz"},
+		ScanPaths: []string{
+			"testdata/17419.zip",
+			"testdata/joblib_0.9.4.dev0_compressed_cache_size_pickle_py35_np19.gz",
+		},
 	}
 	res, err := Scan(ctx, mc)
 	if err != nil {

pkg/action/testdata/17419.zip

@@ -0,0 +1,26 @@
+Advisory :
+
+
+Abysssec Public Exploit :
+
+This module exploits a code execution vulnerability in Mozilla
+Firefox <= 3.6.16 caused by nsTreeSelection element. The specific flaw
+exists within the way Firefox handles user defined functions of
+a nsTreeSelection element. When executing the function
+invalidateSelection it is possible to free the nsTreeSelection object
+that the function operates on. Any further operations on the freed
+object can result in remote code execution.this exploit module is only
+tested on win7 and used a Another JAVA ROPto defeat DEP/ASLR (due to
+there is no more non-aslr module in Firefox) and in my tests works
+reliably on Windows7.
+
+there is two version of this exploit XP and 7 and both use different
+method that used in MSF Exploit bounty !
+
+XP   Version: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17419-1.zip (nsTreeRange_XP.zip)
+Win7 Version: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17419-2.zip (nsTreeRange_7.zip)
+
+
+
+
+questions / comments : Info [at] abysssec.com