iFunbox 2014 3.4.697.652 DLL Hijacking

/ Exploit Title:iFunbox 2014 3.4.697.652 DLL Hijacking Exploit itunesmobiledevice.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://i-funbox.com/ Soft link :http://dl.i-funbox.com/ifunbox2014setup.exe Tested on: windows 7 fr / include BOOL WINAPI DllMain HANDLE...

Phoenix Service Software 2012.16.004.48159(Nokia) DLL Hijacking

/ Exploit Title: Phoenix Service Software 2012.16.004.48159Nokia DLL Hijacking Exploit phoenixresources.dll,iagnosticlog.dll,phoenixresources.dll,diagnosticlog.dll Date: 25/12/2014 Author:Hadji Samir [email protected] Version: 2012.16.004.48159 Vendor Homepage: http://www.Nokia.com/ Tested on:...

iExplorer 3.6.3.0 DLL Hijacking

/ Exploit Title: iExplorer 3.6.3.0 DLL Hijacking Exploit itunesmobiledevice.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.macroplant.com/ Soft link :http://www.macroplant.com/downloads Tested on: windows 7 fr / include BOOL WINAPI DllMain HANDLE hinstDLL,...

MobiConnect 23.009.17.00.216 Privilege Escalation / DLL Hijacking

/ Exploit Title: MobiConnect 23.009.17.00.216 HUAWEI Insecure Permissions Local Privilege Escalation & DLL Hijacking Exploit wintab32.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.mobilis.dz/entreprises/mobiconnect.php Vendor: http://www.huawei.com/ Tested o...

Windows Inject DLL, Hidden Bind Ipknock TCP Stager

Inject a custom DLL into the exploited process. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get your shellcode from any IP. The socket will...

Reflective DLL Injection, Hidden Bind Ipknock TCP Stager

Inject a DLL via a reflective loader. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get your shellcode from any IP. The socket will appear as...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

CVE-2014-9416

Huawei eSpace Desktop (pre-V200R003C00) is affected by DLL Hijacking involving mfc71enu.dll, mfc71loc.dll, tcapi.dll and airpcap.dll. The vulnerability, described as untrusted search path leading to arbitrary code execution, relies on loading these libraries via Trojan-horse scenarios. Multiple C...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

Reflective DLL Injection, Hidden Bind TCP Stager

Inject a DLL via a reflective loader. Listen for a connection from a hidden port and spawn a command shell to the allowed host. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 343...

Windows Inject DLL, Hidden Bind TCP Stager

Inject a custom DLL into the exploited process. Listen for a connection from a hidden port and spawn a command shell to the allowed host. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

Security Advisory-Multiple Vulnerabilities in Huawei eSpace Desktop Product

Huawei eSpace Desktop products have the following vulnerabilities: 1 The program does not implement comprehensive validity check on the QES file imported into the system, causing the system to exit unexpectedly. Vulnerability ID: HWPSIRT-2014-1151 This vulnerability has been assigned Common...

PuttyRider - Hijack Putty sessions in order to sniff conversation and inject Linux commands

PuttyRider injects a DLL into a running putty.exe process in order to sniff all communication and inject Linux commands on the remote server. This can be useful in an internal penetration test when you already have access to a sysadmin’s machine who has a Putty session open to a Linux server. You...

CVE-2 0 1 4-6 3 2 1 schannel heap overflow vulnerability analysis-vulnerability warning-the black bar safety net

0x00 background MS14-0 6 6 CVE-2 0 1 4-6 3 2 1 is present in Microsoft's schannel. dll in the TLS heap buffer overflow vulnerability. The following principles and poc structure for analysis. 0x01 SSL/TLS principle description Https is based on SSL/TLS Http, all http data is in the SSL/TLS Protoco...

Elipse E3 - HTTP Denial of Service

Elipse E3 - HTTP Denial of Service // Exploit Http DoS Request for SCADA ATTACK Elipse 3 // Mauro Risonho de Paula Assumpção aka firebits // [email protected] // 29-10-2013 11:42 // Vendor Homepage: http://www.elipse.com.br/port/index.aspx // Software Link:...

Windows OLE Automation Array command execution

Added: 11/17/2014 CVE: CVE-2014-6332 BID: 70952 OSVDB: 114533 Background OLE Object Linking and Embedding is a technology that allows applications to share data and functionality, such as the ability to create and edit compound data, i.e., data that contains information in multiple formats. Probl...

Windows OLE Automation Array command execution

Added: 11/17/2014 CVE: CVE-2014-6332 BID: 70952 OSVDB: 114533 Background OLE Object Linking and Embedding is a technology that allows applications to share data and functionality, such as the ability to create and edit compound data, i.e., data that contains information in multiple formats. Probl...

Windows OLE Automation Array command execution

Added: 11/17/2014 CVE: CVE-2014-6332 BID: 70952 OSVDB: 114533 Background OLE Object Linking and Embedding is a technology that allows applications to share data and functionality, such as the ability to create and edit compound data, i.e., data that contains information in multiple formats. Probl...

Windows OLE Automation Array command execution

Added: 11/17/2014 CVE: CVE-2014-6332 BID: 70952 OSVDB: 114533 Background OLE Object Linking and Embedding is a technology that allows applications to share data and functionality, such as the ability to create and edit compound data, i.e., data that contains information in multiple formats. Probl...