PHP 'exception::getTraceAsString' type obfuscation vulnerability

PHP is a general-purpose scripting language. A type-obfuscation vulnerability in PHP exception::getTraceAsString when handling input from deserialization constructs allows remote attackers to exploit the vulnerability to obtain information about an application's leaked memory or execute arbitrary...

VBS-Obfuscator - VBScript obfuscation to allow PenTesters bypass countermeasures

VBScript obfuscation to allow PenTesters bypass countermeasures. Sample Script Output C:\toolspython obfuscator.py test.vbs out.vbs Char 109 - 5505-5396 Char 115 - 1113775/9685 Char 103 - 540853/5251 Char 98 - -2629+2727 Char 111 - 291-180 Char 120 - 826320/6886 Char 32 - 118016/3688 Char 34 -...

Exploit Kit Delivers Pharming Attacks Against SOHO Routers

Attacks targeting small office and home router DNS settings, long a target for network intruders seeking to redirect web traffic to malicious sites, have for the first time been included in an exploit kit—one that specializes in cross-site request forgery attacks. An exploit kit has been spotted ...

Microsoft Windows NtCreateTransactionManager Type Obfuscation Vulnerability

Microsoft Windows is a windowed operating system developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists when Microsoft Windows fails to authenticate and execute the emulation layer. The vulnerability allows an authenticated attacker to bypass...

Javascript Injection For Eval-Based Unpackers

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/jsobfu' class Metasploit3 'Javascript Injection for Eval-based Unpackers', 'Description' = %q This module generates a...

DroidStealth — Android Encryption Tool with Stealth Capabilities

We all have Internet-connected smartphones in our pockets, but it’s very hard to find a place on Internet to feel secure and private. No doubt, there is data Encryption on cell phones, but what’s the use if it is cracked by hackers or law enforcement? What if the encrypted files don’t exist in th...

Analyzing Angler: World's Most Sophisticated Exploit Kit

The Angler exploit kit was ahead of the game when it began detecting antivirus and virtual machines and deploying encrypted dropper files. It’s repeatedly proven itself the fastest kit to incorporate newly released zero-days and its malware runs from memory, without having to write to the...

Unspecified Type Obfuscation Vulnerability in Adobe Flash Player

Adobe Flash Player is a Flash file handling program. An unspecified type obfuscation vulnerability exists in Adobe Flash Player, which allows attackers to construct malicious SWF files that can be tricked into parsing by a user, which can then be used in an application context to execute arbitrar...

Adobe Flash Player suffers from unspecified type confusion vulnerability (CNVD-2015-00956)

Adobe Flash Player is a Flash file handling program. An unspecified type obfuscation vulnerability exists in Adobe Flash Player, which allows attackers to construct malicious SWF files that can be tricked into parsing by a user, which can then be used in an application context to execute arbitrar...

Apple MAC OS X Yosemite XPC Message Handling Type Obfuscation Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. Apple MAC OS X Yosemite Handling of coresymbolicationd Handling of XPC messages suffers from a type obfuscation vulnerability that allows an attacker to construct a malicious application and trick a user into parsing it,...

Apple TV and iOS Interprocess Communication Type Obfuscation Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. Multiple type-obfuscation vulnerabilities exist in the way Apple TV and iOS...

Analysis of Flash Zero Day Shows Layers of Obfuscation

The Flash zero day that made its way into the Angler exploit kit was wrapped in multiple layers of obfuscation and has the ability to inject its malicious payload straight into users’ browsers. In the last week, since the news broke of the Adobe Flash zero-day flaw appearing in the Angler kit,...

win64/7 Obfuscated Shellcode Download And Execute [Dynamic Lenth]

Title: Obfuscated Shellcode Windows x64 Download And Execute Use PowerShell - Generator length: Dynamic ! depend on url and filename Date: 20 January 2015 Author: Ali Razmjoo tested On: Windows 7 x64 ultimate WinExec = 0x769e2c91 ExitProcess = 0x769679f8 ==================================== Execu...

Apple Mac OS X XPC Type Obfuscated Local Elevation of Privilege Vulnerability

Apple Mac OS X is a BSD-based operating system of a commercial nature. A local elevation of privilege vulnerability exists in Apple Mac OS X XPC type obfuscation, which allows local attackers to exploit this vulnerability to elevate privileges...

Dridex Banking Trojan Spreading Via Office Macros

The left-for-dead Office macro has apparently made a comeback with cybercriminals who have found them to be a good hiding place for banking malware. Recently, Microsoft reported a spike in the use of macros in hacking campaigns, peaking in mid-December. This has been corroborated by researchers a...

JavaScript Percent-Encoding Obfuscation

Although various security products provide coverage against many web vulnerabilities, such as ActiveX exploits, these known exploits could potentially bypass security products by using JavaScript obfuscation techniques.An example of such a technique is percent-encoding, also known as URL encoding...

Specify logging level to Prevent Root DEBUG from Exposing Login

h3. Summary Setting root level DEBUG can expose login information username/pw when JIRA is connected to Crowd for user management, as it outputs the REST POST contents that are transmitted through the HttpClient. h3. Environment Crowd integrated with JIRA for user management. h3. Steps to Reprodu...

Microsoft Internet Explorer Option Element Use-After-Free

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Microsoft Internet Explorer 5.0.1 Mouse Event URI Status Bar Obfuscation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be leveraged by an attacker to display false...

KDE Konqueror 3.x Embedded Image URI Obfuscation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/10383/info It is reported that KDE Konqueror is prone to a URI obfuscation weakness that may hide the true contents of a URI link. The issue occurs when an image is contained within a properly formatted HREF tag. This...