exploit18 Metasploit Framework 3.7.2 Released “The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits for a variety of platforms. Payloads, encoders, and nop slide generators can be mixed and matched with exploit modules to solve almost any exploit-related task.“ This is the official change log: Statistics: Metasploit now ships wi.. 2011. 6. 22. More about the JailbreakMe PDF exploit Today has been released the source code of the Jailbreakme exploit, so maybe this explanation comes a bit late. In the update of the previous post about this subject I knew that I was right about the overflow in the arguments stack when parsing the charstrings in the Type 2 format, so here is a little more info. After decoding the stream of the object 13 we can see the following bytes (talking a.. 2011. 2. 21. Create a New User with UID 0 - ARM (Meta) # Exploit Title: Linux/ARM - Create a new user with UID 0 (MSF) # Date: 2010-11-25 # Author: Jonathan Salwan - twitter @shell_storm # Tested on: ARM926EJ-S rev 5 (v5l) # Issue link: https://metasploit.com/redmine/issues/3254 ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # Framework web site for mor.. 2010. 12. 9. Offensive Security Exploit Weekend Sud0′s story : After quickly analyzing the pdf file, it was clear that the PDF reader is vulnerable to a buffer overflow when parsing an overly long string in the "Title" field. (Simply open the pdf file in a editor or use Didier Stevens’ pdf-parser.py tool to list the elements in the pdf file) When opening the PoC pdf file in Foxit Reader (with Immunity Debugger attached to it), an access viola.. 2010. 11. 23. Firefox Addon Firesheep Exploit 누구나 Wi-Fi 네트워크를 스캔하고 다른 사람의 페이스북, 트위터, 혹은 기타 다른 호스팅 서비스 계정에 접속할 수 있도록 하는 파이어폭스 애드온이 등장했다. 투어콘(ToorCon) 보안 컨퍼런스에서 공개된 파이어쉽(Firesheep)이라는 이 애드온은 웹 애플리케이션 개발자인 에릭 버틀러가 만든 것으로, 그는 공개된 Wi-Fi를 통해서 비암호화된 웹사이트에 접속하는 것이 얼마나 위험한지 보여주기 위해서 이 애드온을 공개하게 됐다고 배경을 밝혔다. 2010. 11. 4. 이전 1 2 3 4 다음
