Analysis of Flash Zero Day Shows Layers of Obfuscation

The Flash zero day that made its way into the Angler exploit kit was wrapped in multiple layers of obfuscation and has the ability to inject its malicious payload straight into users’ browsers. In the last week, since the news broke of the Adobe Flash zero-day flaw appearing in the Angler kit,...

帝友P2C借贷系统前台getshell#1

简要描述： 帝友P2C借贷系统前台getshell1 详细说明： 这次是帝友公司旗下出的另一套电子商务cms 不是帝友p2p！ 官方最新版本是 帝友P2C借贷系统V1.01 上传头像处存在getshell 已官方演示站做演示 已注册账号，账号密码都是test1a 访问 http://p2c.diyou.cc/?user&m=approve/safe 上传头像，抓包 修改数据包，插入一句话木马，修改后缀为php后缀 虽然回显500，但是phpshell已经上传了 dyupfiles/avatar/diyou/用户id.php 得到...

FatPlayer-0.6b-(.wav)

Exploit Title: FatPlayer 0.6b Malicious WAV Buffer Overflow Vulnerability SEH Date: 10/18/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/fatplayer/files/ Version: 0.6 Beta junk = "\x41" 4132 nSEH = "\x90\x90\xeb\x06" SEH = 0x0046bee3.pack'V' pop pop...

ActFax-4.31---Local-System

Title: ActFax 4.31 Local Privilege Escalation Exploit Author: Craig Freyman @cd1zz Discovered: July 10, 2012 Vendor Notified: June 12, 2012 Description: http://www.pwnag3.com/2012/08/actfax-local-privilege-escalation.html sc = "\x89\xe5\xdb\xce\xd9\x75\xf4\x58\x50\x59\x49\x49\x49\x49"...

BlazeVideo-HDTV-Player-6.6

Exploit Title: BlazeVideo HDTV Player 6.6 Professional Direct Retn Date: 11-25-2012 Exploit Author: Nezim @nezimlufni Vendor Homepage: http://www.blazevideo.com/ Version: BlazeVideo HDTV Player 6.6 Professional filename="video.PLF" junk = "http://"+"\x90"253 junk +="\x33\xBF\x96\x7C" junk +="\x90...

Magnitude Exploit Kit Landing Page

Magnitude exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Magnitude exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code...

LeapFTP-3.1.0-URL-Handling

Exploit Title: LeapFTP 3.1.0 URL Handling SEH Exploit Google Dork: "k3170makan is totally awesome" hehehe Date: 2014-08-28 Exploit Author: k3170makan Vendor Homepage: http://www.leapware.com/ Software Link: http://www.leapware.com/download.html Version: 3.1.0 Tested on: Windows XP SP0 DoS on...

Astrum Exploit Kit Landing Page

Astrum exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Astrum exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...

Angler Exploit Kit Landing Page

Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...

Angler Exploit Kit Landing Page - Ver 2

Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...

Angler Exploit Kit Landing Page URL

Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...

Sweet Orange Exploit Kit Landing Page

Sweet Orange exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Sweet Orange exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code...

Gondad Exploit Kit Landing Page

Gondad exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Gondad exploit kit by enticing them to visit a malicious web page. Successful infection will compromise the security of all data on the victim's...

Archie Exploit Kit Landing Page Code Execution

Archie exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Archie exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...

Nuclear Exploit Kit Landing Page

Nuclear Exploit Kit operates by delivering a malicious payload to the victim's computer. Successful exploitation could result in remote code execution on the target system once the malicious page is loaded...

Nuclear Exploit Kit Redirection

Nuclear Exploit Kit operates by delivering a malicious payload to the victim's computer. Successful exploitation could result in remote code execution on the target system once the malicious page is loaded...

Invision Power Board (IP.Board) 3.x - Cross-Site Request Forgery / Token Hjiacking

Title: IP Board 3.x CSRF - Token hjiacking Date: 03.09.14 Version: = 3.4.6 Vendor: invisionpower.com Author: Piotr S. Video-PoC: https://www.youtube.com/watch?v=G5P21TA4DjY 1 Introduction Latest and propabbly previous IPB verions suffers on vulnerability, which allows attacker to steal CSRF token...

LightsOut/Hello Exploit Kit (CVE-2013-2465)

LightsOut/Hello is an exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users by enticing them to visit a malicious web page. Successful infection will allow the attacker to download additional malware to the target...

SpoonFTP 1.2 - RETR Denial of Service Vulnerability

No description provided by source. !/usr/bin/python +Exploit Title: Exploit Denial of Service SpoonFTP 1.2 +Date: 21\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html +Version: 1.2 +Tested On: WIN-XP SP3 Portuguese Brazil +CVE: N/A xx...

Maxthon3 about:history XCS Trusted Zone Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...