Browser Security Pack v4.55 [Proxomitron]

Version 4.55 is Released!

Last Updated: January 3, 2006 - 10:36 PM EST

What's New?

http://kyeu.info/proxo/forums/viewtopic.php?p=1115#1115

Download here!

MD5: C786223CCD8752EA70533ECDCFE0F300

---------------------

For those who have problems with Proxomitron after merging this set, try my standalone version.

http://kyeu.info/proxo/forums/docs/Kye-U.Browser.Security.Pack.v4.55.Standalone.zip

Download, Extract to Your Proxomitron Folder, Open Proxomitron.exe, click on Load Config, select "Kye-U.Browser.Security.Pack.v4.55.Standalone.cfg".

(The difference in this one is that it has window settings and everything a normal config has)

---------------------

WMF-Exploit Filters only. You need both.

Web Page Filter:

Code:

[Patterns]
Name = "Windows: Nullify Suspected WMF-Exploit Files [Kye-U] {JJoe}"
Active = TRUE
Limit = 18
Match = "[%00-%02][%00][%09][%00][%00][%03]([%00-%FF]+{10})[%00][%00]$SET(SS=1)PrxNeverMatch"
        "|[%26][%00-%FF][%09][%00]$TST(SS=1)"
Replace = "\k$ALERT(Suspected WMF-Exploit File Nullified on:\n\n\u\n\nProbable exploit and payload has been removed from the file.\n\nThe file is now harmless.)"

Header Filter:

Code:

[HTTP headers]
In = TRUE
Out = FALSE
Key = "Content-Type: !!!Filter All File Types {P} [Kye-U] {JJoe} (In)"
URL = "(^local.ptron/)$FILTER(true)"
Match = "(*|)image/gif(*|)$SET(1=image/jpeg)|\1"
Replace = "\1"

 

weird - the standalone page is always blocked for me -

http://kyeu.info/proxo/forums/docs/Kye-U.Browser.Security.Pack.v4.55.Standalone.zip

always returns

http://kyeu.info/403.php

cheers

OK - works in opera - not in maxthorn

have to check things out

 

Ok, here you go xD

Save Target As.

Rename to .ZIP

 

thanks - able to get it ok via opera - something must be diff in maxthorn - will investigate.

cheers

 

They are already in the config file Welcome to Proxomitron!

 

ahah.. sorry reread your readme... whoops. Thanks!