mediacodecoob

mediacodecoob fuga de información y control de PC poc para CVE-2015-6620 24445127, agregaré después de la conferencia...

CVE-2016-3861

CVE-2016-3861 这是 Mark Brand 的 libutils 漏洞利用的扩展版本，源自 Google Project Zero 博客文章：https://googleprojectzero.blogspot.com/2016/09/return-to-libstagefright-exploiting.html 主要区别： 所有用于漏洞利用的 mp4 文件都在浏览器中动态生成 带有 'extragroom' 选项，因为某些 5-6 版本区间的 AOSP 构建需要额外的堆 grooming 这真的有效吗？ 是的，但它只能控制 PC（程序计数器），没有进一步操作...

The MIPS buffer overflow vulnerability practice-vulnerability warning-the black bar safety net

This practice from the learn-decrypt router vulnerability notes, and summaries. Mainly used to review and consolidate the entire process, the entire process is not very smooth, the main problem in the point that the overflow function of the address determination. This write your own exploit code ...

Flexense DupScout 10.7 Cross Site Scripting

Description: URL: localhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense DupScout Version: from v10.0.18 to v10.7. Attack Type: Remote Impact: This attack allows an attacker...

Chrome Remote Desktop for Android to Control Your PC from Anywhere

Have you ever been somewhere and urgently you need a file stored in your home computer ? This is very common situation that most of us deal with, but now rather returning home and get it, Google has offered a better solution for this problem. Google – one of the most innovative tech companies on...

ZeuS Botnet Module Gives Total PC Control

New capabilities are strengthening the ZeuS botnet, which criminals use to steal financial credentials and execute unauthorized transactions in online banking, automated clearing house ACH networks and payroll systems. The latest version of this cybercrime toolkit offers a $10,000 module that can...