CVE-2018-4878

著者とクレジット 著者: Vincent Yiu @vysecurity クレジット: @evi1cg: テストに協力してくれて、やる気を維持させてくれた @smgoreli: オリジナルの Calc.exe PoC @kbandla: 彼は知っているし、私も知っている。 ; 免責事項 より多くのAggressorスクリプト開発を促すために開発されました。許可を得たペネトレーションテストでのみ使用してください！ 説明 2017年2月より前のShockwave Flashプレイヤー向けのCVE-2018-4878エクスプロイトを使用して、Internet...

CVE-2018-4878

このリポジトリには README がありません。...

CVE-2018-4878

CVE-2018-4878 Flash Exploit Poc 'クイック＆ダーティ' 詳細情報はこちら http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html 元のPoc https://github.com/anbai-inc/CVE-2018-4878 このリポジトリでは、クラッシュ問題を修正し、シェルコードに適切なスペースを計算しました。詳細はエクスプロイトを確認してください。 Twitter: @SyFi2k...

CVE-2018-4878

CVE-2018-4878 用の Metasploit モジュール SWF ファイルは Michael Gorelik による PoC に基づいています。 CVE-2018-4878.swf を data/exploits にコピーしてください。...

malware-samples

malware-samples マルウェアサンプルと関連する解析情報のコレクションです。おそらく、http://blog.inquest.net または https://twitter.com/inquest から参照されています。また、https://labs.inquest.net の Deep File Inspection（DFI）セクションもぜひご確認ください。ダウンロード可能なマルウェアの囮（50万件以上）の大規模なコーパスをインタラクティブに検索できるインターフェースが用意されています。 CVE-2018-4878-Adobe-Flash-DRM-UAF-0day...

SoftwareSystemSecurity-2019

SoftwareSystemSecurity-2019 ソフトウェアシステムセキュリティ最終課題：脆弱性再現 CVE-2018-4878 Flash 0day...

CVE-2018-4878

著者とクレジット 著者: Vincent Yiu @vysecurity クレジット: @evi1cg: テストを手伝ってくれて、モチベーションを保たせてくれた @smgoreli: オリジナルの Calc.exe PoC @kbandla: 彼は知っているし、私も知っている。; 免責事項 より多くのAggressorスクリプト開発を促進するために開発された。許可されたペネトレーションテストでのみ使用してください！ 説明 2018年2月より前のShockwave Flashプレイヤー向けのCVE-2018-4878エクスプロイトを使用して、Internet...

Mageia: Security Advisory (MGASA-2018-0120)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat profile: Egregor ransomware is making a name for itself

What is Egregor? Egregor ransomware is a relatively new ransomware first spotted in September 2020 that seems intent on making its way to the top right now. Egregor is considered a variant of Ransom.Sekhmet based on similarities in obfuscation, API-calls, and the ransom note. As weve reported in...

Exploit kits: spring 2019 review

Exploit kit activity remains fairly unchanged since our last winter review in terms of active distribution campaigns. But this spring edition will feature a new exploit kit and another atypical EK, in that it specifically goes after routers. The main driver behind these drive-by download attacks...

Exploit kits: winter 2019 review

Active malvertising campaigns in December and the new year have kept exploit kit activity from hibernating in winter 2019. We mostly observed Fallout and RIG with the occasional, limited GrandSoft appearance for wider geo-targeting. In addition, narrowly-focused exploit kits such as Magnitude,...

Underminer exploit kit improves in its latest iteration

One of the most interesting exploit kits we track is also a bit of an elusive one, and as such does not receive the same scrutiny as its RIG and Fallout counterparts. Underminer was mentioned in our Fall 2018 round up, and at the time was using CVE-2018-8174 Internet Explorer and CVE-2018-4878...

Exploit kits: fall 2018 review

Exploit kit EK activity continues to surprise us as the weather cools, the leaves change, and we move into the fall of 2018. Indeed, shortly after our summer review, a new exploit kit was discovered, and while no new vulnerabilities were added to the current EKs, several malvertising chains are...

To see the Hidden Bee how to use a new vulnerability propagation-vulnerability warning-the black bar safety net

! Write in front of words Recently we found a to attempt to exploit CVE-2018-4878 Flash Player vulnerability, vulnerability to attack, its sequence and we currently find any loopholes to use the tool are not the same. After investigation, we found that this is a Chinese security company qihoo 360...

APT Trends Report Q2 2018

In the second quarter of 2017, Kaspersky Lab's Global Research and Analysis Team GReAT began publishing summaries of the quarter's private threat intelligence reports, in an effort to make the public aware of the research we have been conducting. This report serves as the latest installment,...

RIG Exploit Kit Delivering Monero Miner Via PROPagate Injection Technique

Introduction Through FireEye Dynamic Threat Intelligence DTI, we observed RIG Exploit Kit EK delivering a dropper that leverages the PROPagate injection technique to inject code that downloads and executes a Monero miner similar activity has been reported by Trend Micro. Apart from leveraging a...

RIG Exploit Kit Delivering Monero Miner Via PROPagate Injection Technique

Introduction Through FireEye Dynamic Threat Intelligence DTI, we observed RIG Exploit Kit EK delivering a dropper that leverages the PROPagate injection technique to inject code that downloads and executes a Monero miner similar activity has been reported by Trend Micro. Apart from leveraging a...

Exploit kits: Spring 2018 review

Since our last report on exploit kits, there have been some new developments with the wider adoption of the February Flash zero-day, as well as the inclusion of a new exploit for Internet Explorer. We have not seen that many changes in the drive-by landscape for a long time, although these are th...

Flash ActiveX 28.0.0.137 - Code Execution Exploit (2)

Exploit for windows platform in category local exploits CVE-2018-4878 Pop up a calculator - Requires Flash ActiveX 28.0.0.137 Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44745.swf 0day.today 2018-05-24...

Flash ActiveX 28.0.0.137 - Code Execution Exploit (1)

Exploit for windows platform in category local exploits CVE-2018-4878 flash exploit Pop up a calculator - tested with installation of flash activeX plugin 28.0.0.137 Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44744.xlsx 0day.today 2018-05-2...