PageAdmin VIEWSTATE引发的血案

简要描述： 本想找个注入的，却发现Isstr 与其绕过不如（此处打码）直接来的痛快。 @wefgod 小弟弱弱的告诉你 ViewState不仅仅可以WooYun-2014-61699这样用，还可以这样滴哟 详细说明： 下载pageAdmin 反编译发现混淆过 蛋疼！ 只好翻翻页面！各种页面各种翻 咿！尼玛 这是啥 ViewState"constr" 那就抄刀上阵吧 打开 ：http://192.168.10.64:9992/e/member/index.aspx?s=1&type=memfavolst 复制然后 这是在本地搭建的 那试试官网 附上官网的...

[Binrev] Automate Reversing Windows Binaries for Pentesters

What you can do with this? Static analysis: you can do a basic manual code review for decompiled sources to discover hidden communication channels, search for hard-coded passwords, or SQL injection vulnerabilities. Import decompiled projects to an IDE to reconstruct and modify the original source...

[Dexter] A Free Tool for Mobile (Android) Malware Analysis

Bluebox Labs just released Dexter, a free tool which wants to help information security professionals and malware analysts to analyze Android mobile applications in order to find malware and vulnerabilities. .png Dexter combines manual and automatic static program analysis to provide a better...

Dissecting a mobile malware

The capillary diffusion of mobile devices, the lack of security systems on these platforms and low level of awareness on principal cyber threats made them a privileged target for cybercrime. We have assisted in the recent year to an explosion of malware designed to hit principal mobile OSs, in a...

oday or exp mining techniques overview-vulnerability warning-the black bar safety net

A lot of times we on various 0day or exp with strong passion, indeed, the hand grip of such powerful weapons of destruction will make the target's combat becomes very smooth, but the problem is that not everyone can grasp the latest 0day, and to be clear that there is a lot we do not know the 0da...

HP unveils Flash vulnerability scanner

HP has released a free static-analysis tool designed to find vulnerabilities in applications developed on the Adobe Flash platform. But HP SWFScan is no security geek plaything. It’s meant specifically for developers without much in the way of security training. The tool is the brainchild of the...

CVE-2007-0014

ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM...

Design/Logic Flaw

ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JVM...

CVE-2007-0014

The CVE-2007-0014 issue concerns ChainKey Java Code Protection. Affected component: a Java class loader with a modified defineClass method that saves the bytecode to a file before passing it to the JVM, enabling decompilation of Java class files. The vulnerability is described as a local-attack r...