Running an old version of flash

[Guest]

Hello,

I am trying to work with an exploit from an old version of flash. The specific version is Adobe Flash Player 10.2.153.1. I am running this version of flash on Internet Explorer 7.0.5730.13 with Windows XP service pack 3. I am currently trying to use an exploit to give a demo for a school project in college. I am using metasploit to execute this demo. I am running metasploit on my local machine with OSX, and I am running the Windows install in a virtual machine.

When I run the exploit using metasploit, I try to make the old version of flash work and an adobe installer shows up and does not allow me to run the old version of flash. It asks me to install a new version of flash, and it seems like it won't allow the old version of flash to run. Is there a way around this so that I can try to run the exploit?

Thank you for your time.

[pwillener]

Do you have any (newer) version of Flash Player currently installed?  If so, use the uninstaller from http://kb2.adobe.com/cps/141/tn_14157.html to uninstall the current version.

You should be able to download and install your target version from http://kb2.adobe.com/cps/142/tn_14266.html

If the installer still prevents you from installing, can you post a screenshot of that message?

[pwillener]

You could also try to place a mms.cfg file into C:\Windows\system32\Macromed\Flash to prevent Flash Player from auto updating. (See attachment.)

[Guest]

I don't have any newer versions, no. Currently it is a fresh install of Windows XP and it only has the specific older version installed. Here is what I am talking about:

http://i.imgur.com/ozPWp.png

Here are a few screenshots of what is happening:

http://i.imgur.com/hdmPP.png

http://i.imgur.com/jCgUj.png

http://i.imgur.com/aebPi.png

I also just tried placing the mms.cfg file into the directory you specified and it doesn't seem to prevent the autoupdate.

http://i.imgur.com/dedQs.png

Any other ideas perhaps? Your help is greately appricated again, thank you.

[Guest]

http://i.imgur.com/8UHar.png

I went to check my version and it looks like it isn't even installed, even though I know I have it installed. (Check my previous image from my previous post at the top). Maybe this is a clue? I know flash is installed, however, internet explorer seems to think I don't.

[pwillener]

Sorry, I do not understand how you are trying to install the older version (from the screenshots you provided).

Did you download the installer from the archive link I gave you?

P.S. please post screenshots directly into the forum posts, using the camera icon in the forum editor.