Persistence – AppInit DLLs

Windows operating systems provide the functionality to allow custom DLL's to be loaded into the address space of almost all application processes. This can give the opportunity for persistence since an arbitrary DLL can be loaded that will execute code when applications processes are created on t...

Microsoft Windows Server 2012 - (Group Policy) Remote Code Execution Exploit

Exploit Title: Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution Exploit Author: Thomas Zuk Version: Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows RT, Windows 8.1, Windows Server 2012 R2, and...

The vulnerability of the AppInit_DLLs parameter in the Akord-Win64 information protection tool allows a hacker to execute arbitrary code.

The vulnerability of the AppInitDLLs parameter in the Accord-Win64 information protection tool is related to deficiencies in the mechanism for calling system libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially crafted DLL library, by placing i...

WinRAR Settings Import Command Execution

!/usr/bin/python -w Title : WinRar Settings Import Command Execution Date : 02/10/2015 Author : R-73eN Tested on : Windows 7 Ultimate Vulnerable Versions : Winrar 5.30 beta 4 The vulnerability exists in the "Import Settings From File" function. Since Settings file of Winrar are saved as a registr...

WinRar 5.30 Beta 4 - Settings Import Command Execution

WinRar 5.30 Beta 4 - Settings Import Command Execution !/usr/bin/python -w Title : WinRar Settings Import Command Execution Date : 02/10/2015 Author : R-73eN Tested on : Windows 7 Ultimate Vulnerable Versions : Winrar 5.30 beta 4 The vulnerability exists in the "Import Settings From File" functio...

WinRar < 5.30 Beta 4 - Settings Import Command Execution

!/usr/bin/python -w Title : WinRar Settings Import Command Execution Date : 02/10/2015 Author : R-73eN Tested on : Windows 7 Ultimate Vulnerable Versions : Winrar 5.30 beta 4 The vulnerability exists in the "Import Settings From File" function. Since Settings file of Winrar are saved as a registr...

Microsoft Windows AutoRuns Appinit DLLs

Binary data windowsautorunsappInitdll.nbin...