«
Expand/Collapse
260 items tagged "internet explorer"
Related tags:
zero day [+],
technical [+],
cyber [+],
code execution [+],
code [+],
txt [+],
memory [+],
denial of service [+],
zero [+],
uninitialized [+],
service vulnerability [+],
object tag [+],
day [+],
cyber security alert [+],
vulnerability [+],
uri validation [+],
mshtml [+],
zdi [+],
xss [+],
whitepaper [+],
vupen [+],
security research [+],
research [+],
protocol handler [+],
exploit [+],
domain information [+],
advisory [+],
active x [+],
windows microsoft [+],
windows [+],
table element [+],
suspected [+],
srcelement [+],
spoof [+],
spam [+],
sanitizing [+],
proof of concept [+],
process [+],
pdf [+],
office internet [+],
null pointer [+],
mode design [+],
microsoft developer tools [+],
mhtml [+],
low [+],
integrity [+],
iepeers [+],
iedvtool [+],
host integration server [+],
heap corruption [+],
element [+],
critical vulnerability [+],
cobjectelement [+],
cache size [+],
bar [+],
avg [+],
memory corruption [+],
x exploits [+],
winhlp32 [+],
time element [+],
table layout [+],
spying [+],
shift jis [+],
security advisory [+],
secunia [+],
safari [+],
reuse [+],
retired [+],
quot [+],
pwn [+],
poc [+],
ms10 [+],
ms internet [+],
microsoft office document [+],
meta [+],
malicious software [+],
javascript onload [+],
internet browser [+],
free error [+],
explorer 6 0 [+],
exploits [+],
exploitation techniques [+],
execution [+],
dll [+],
cross site scripting [+],
core [+],
cookie file [+],
comparison [+],
ciframeelement [+],
bypassing [+],
browser [+],
black hat [+],
active x control [+],
accuvant [+],
access security [+],
safer use [+],
zalewski [+],
year [+],
wshom [+],
winhlp [+],
windows secrets [+],
windows internet [+],
web [+],
vpn client [+],
virtual function [+],
victima [+],
vbdevkit [+],
use [+],
urlmon [+],
uri handler [+],
toolkit [+],
tabular data control [+],
tabular [+],
style object [+],
silent [+],
set [+],
service [+],
security team [+],
saved [+],
run [+],
researchers [+],
remote desktop [+],
read [+],
rdesktop [+],
protected [+],
pressure [+],
phase [+],
paul stone [+],
paguina web [+],
own [+],
option element [+],
option [+],
onreadystatechange event [+],
offline [+],
ocx [+],
multiple [+],
msiemshtml [+],
ms internet explorer 6 [+],
mounts [+],
moaub [+],
microsoft corp [+],
michal zalewski [+],
michal [+],
metasploit [+],
local [+],
juniper vpn [+],
jean michel picod [+],
information leak [+],
information disclosure [+],
information [+],
idefense security advisory [+],
idefense [+],
history information [+],
google [+],
fortiguard [+],
file [+],
explorer telnet [+],
explorer microsoft [+],
exec [+],
dynamic [+],
drag and drop [+],
dpapi [+],
dos vulnerability [+],
dom object [+],
dom modification [+],
dom editing [+],
dom [+],
denial [+],
dangling pointer [+],
crash [+],
compromise [+],
com [+],
col [+],
client [+],
clickjacking [+],
click [+],
chinese hackers [+],
bypass [+],
bugs microsoft [+],
boundelements [+],
blogspot [+],
attackers [+],
arbitrary code execution [+],
application [+],
acceso remoto [+],
Videos [+],
Pentesting [+],
ExploitsVulnerabilities [+],
security [+],
vulnerabilities [+],
dos [+],
firefox [+],
internet [+],
information disclosure vulnerability [+],
bugtraq [+],
microsoft [+],
cve [+],
remote [+],
explorer [+],
using internet,
payload,
mitigation,
malicious code,
ieceo,
cpp,
browser helper,
General,
Discussion
-
-
18:33
»
Packet Storm Security Advisories
Zero Day Initiative Advisory 12-014 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XMLSimpleAccessor ActiveX control (CLSID: {466576F3-19B6-4FF1-BD48-3E0E1BFB96E9}). By passing an overlong string to the LoadXML() method it is possible to trigger a heap corruption vulnerability. A remote attacker could exploit this vulnerability to execute arbitrary code on the affected machine under the context of the user running the Internet Explorer process.
-
18:33
»
Packet Storm Security Recent Files
Zero Day Initiative Advisory 12-014 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XMLSimpleAccessor ActiveX control (CLSID: {466576F3-19B6-4FF1-BD48-3E0E1BFB96E9}). By passing an overlong string to the LoadXML() method it is possible to trigger a heap corruption vulnerability. A remote attacker could exploit this vulnerability to execute arbitrary code on the affected machine under the context of the user running the Internet Explorer process.
-
18:33
»
Packet Storm Security Misc. Files
Zero Day Initiative Advisory 12-014 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XMLSimpleAccessor ActiveX control (CLSID: {466576F3-19B6-4FF1-BD48-3E0E1BFB96E9}). By passing an overlong string to the LoadXML() method it is possible to trigger a heap corruption vulnerability. A remote attacker could exploit this vulnerability to execute arbitrary code on the affected machine under the context of the user running the Internet Explorer process.
-
-
17:49
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
17:49
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
17:44
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
16:09
»
SecuriTeam
This vulnerability allows remote attackers to escape Protected Mode on vulnerable installations of Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
15:34
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
14:44
»
Packet Storm Security Recent Files
Whitepaper called Browser Security Comparison: A Quantitative Approach. The Accuvant LABS research team completed an extensive security evaluation of the three most widely used browsers – Mozilla Firefox, Google Chrome, and Microsoft Internet Explorer – to determine which browser best secures against attackers. The team used a completely different and more extensive methodology than previous, similar studies. They compared browsers from a layered perspective, taking into account security architecture and anti-exploitation techniques.
-
14:44
»
Packet Storm Security Misc. Files
Whitepaper called Browser Security Comparison: A Quantitative Approach. The Accuvant LABS research team completed an extensive security evaluation of the three most widely used browsers – Mozilla Firefox, Google Chrome, and Microsoft Internet Explorer – to determine which browser best secures against attackers. The team used a completely different and more extensive methodology than previous, similar studies. They compared browsers from a layered perspective, taking into account security architecture and anti-exploitation techniques.
-
-
19:25
»
Packet Storm Security Advisories
Secunia Security Advisory - A weakness has been discovered in Microsoft Internet Explorer, which can be exploited by malicious people to disclose sensitive information.
-
-
18:19
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
19:10
»
Packet Storm Security Advisories
Technical Cyber Security Alert 2011-284A - There are multiple vulnerabilities in Microsoft Windows, .NET Framework, Silverlight, Internet Explorer, Forefront Unified Access Gateway, and Host Integration Server. Microsoft has released updates to address these vulnerabilities.
-
19:10
»
Packet Storm Security Recent Files
Technical Cyber Security Alert 2011-284A - There are multiple vulnerabilities in Microsoft Windows, .NET Framework, Silverlight, Internet Explorer, Forefront Unified Access Gateway, and Host Integration Server. Microsoft has released updates to address these vulnerabilities.
-
19:10
»
Packet Storm Security Misc. Files
Technical Cyber Security Alert 2011-284A - There are multiple vulnerabilities in Microsoft Windows, .NET Framework, Silverlight, Internet Explorer, Forefront Unified Access Gateway, and Host Integration Server. Microsoft has released updates to address these vulnerabilities.
-
-
16:59
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
16:59
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
9:06
»
Packet Storm Security Recent Files
Malicious software also known as "Malcode" or "Malware" can compromise the security and functionality of a program. Once "installed" it monitors the user’s habits. This documents introduces this kind of threats by spying a widespread internet browser.
-
9:06
»
Packet Storm Security Misc. Files
Malicious software also known as "Malcode" or "Malware" can compromise the security and functionality of a program. Once "installed" it monitors the user’s habits. This documents introduces this kind of threats by spying a widespread internet browser.
-
-
13:59
»
SecuriTeam
This vulnerability allows remote attackers to leak information on vulnerable installations of Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
21:31
»
Packet Storm Security Advisories
Technical Cyber Security Alert 2011-221A - There are multiple vulnerabilities in Microsoft Windows, Microsoft Office, Internet Explorer, .NET Framework, and Microsoft Developer Tools. Microsoft has released updates to address these vulnerabilities.
-
21:31
»
Packet Storm Security Recent Files
Technical Cyber Security Alert 2011-221A - There are multiple vulnerabilities in Microsoft Windows, Microsoft Office, Internet Explorer, .NET Framework, and Microsoft Developer Tools. Microsoft has released updates to address these vulnerabilities.
-
21:31
»
Packet Storm Security Misc. Files
Technical Cyber Security Alert 2011-221A - There are multiple vulnerabilities in Microsoft Windows, Microsoft Office, Internet Explorer, .NET Framework, and Microsoft Developer Tools. Microsoft has released updates to address these vulnerabilities.
-
21:19
»
Packet Storm Security Advisories
Zero Day Initiative Advisory 11-249 - This vulnerability allows remote attackers to escape Protected Mode on vulnerable installations of Internet Explorer. Internet Explorer Protected Mode consists of a Medium Integrity and a Low Integrity process. The Low Integrity process is only allowed to write to special Low Integrity locations. File written there are marked as Low Integrity files. When a new Internet Explorer process is launched it checks the Integrity of the file it is launched against. If the file is a Low Integrity file it will run the process in Low Integrity Mode. It is however possible to give the file an even lower permission: Untrusted, since this does not match the check for 'Low Integrity' the Internet Explorer will run in Medium Integrity instead of Low Integrity. This can be abused in an exploit to bypass the Protected Mode design and thus allow an attacker to escalate their privileges.
-
21:19
»
Packet Storm Security Recent Files
Zero Day Initiative Advisory 11-249 - This vulnerability allows remote attackers to escape Protected Mode on vulnerable installations of Internet Explorer. Internet Explorer Protected Mode consists of a Medium Integrity and a Low Integrity process. The Low Integrity process is only allowed to write to special Low Integrity locations. File written there are marked as Low Integrity files. When a new Internet Explorer process is launched it checks the Integrity of the file it is launched against. If the file is a Low Integrity file it will run the process in Low Integrity Mode. It is however possible to give the file an even lower permission: Untrusted, since this does not match the check for 'Low Integrity' the Internet Explorer will run in Medium Integrity instead of Low Integrity. This can be abused in an exploit to bypass the Protected Mode design and thus allow an attacker to escalate their privileges.
-
21:19
»
Packet Storm Security Misc. Files
Zero Day Initiative Advisory 11-249 - This vulnerability allows remote attackers to escape Protected Mode on vulnerable installations of Internet Explorer. Internet Explorer Protected Mode consists of a Medium Integrity and a Low Integrity process. The Low Integrity process is only allowed to write to special Low Integrity locations. File written there are marked as Low Integrity files. When a new Internet Explorer process is launched it checks the Integrity of the file it is launched against. If the file is a Low Integrity file it will run the process in Low Integrity Mode. It is however possible to give the file an even lower permission: Untrusted, since this does not match the check for 'Low Integrity' the Internet Explorer will run in Medium Integrity instead of Low Integrity. This can be abused in an exploit to bypass the Protected Mode design and thus allow an attacker to escalate their privileges.
-
-
23:36
»
Packet Storm Security Advisories
Secunia Security Advisory - A vulnerability has been reported in Internet Explorer, which can be exploited by malicious people to conduct cross-site scripting attacks.
-
-
18:39
»
SecuriTeam
Microsoft Internet Explorer contains a vulnerability caused by a use-after-free error in the "CSpliceTreeEngine::InsertSplice()" function within the MSHTML library when handling layouts.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
18:34
»
SecuriTeam
Microsoft Internet Explorer contains a memory corruption vulnerability in Property Change.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
5:46
»
Packet Storm Security Exploits
This Metasploit module exploits a use-after-free vulnerability in Internet Explorer. The vulnerability occurs when an invalid object tag exists and other elements overlap/cover where the object tag should be when rendered (due to their styles/positioning). The mshtml!CObjectElement is then freed from memory because it is invalid. However, the mshtml!CDisplay object for the page continues to keep a reference to the freed and attempts to call a function on it, leading to the use-after-free.
-
5:46
»
Packet Storm Security Recent Files
This Metasploit module exploits a use-after-free vulnerability in Internet Explorer. The vulnerability occurs when an invalid object tag exists and other elements overlap/cover where the object tag should be when rendered (due to their styles/positioning). The mshtml!CObjectElement is then freed from memory because it is invalid. However, the mshtml!CDisplay object for the page continues to keep a reference to the freed and attempts to call a function on it, leading to the use-after-free.
-
5:46
»
Packet Storm Security Misc. Files
This Metasploit module exploits a use-after-free vulnerability in Internet Explorer. The vulnerability occurs when an invalid object tag exists and other elements overlap/cover where the object tag should be when rendered (due to their styles/positioning). The mshtml!CObjectElement is then freed from memory because it is invalid. However, the mshtml!CDisplay object for the page continues to keep a reference to the freed and attempts to call a function on it, leading to the use-after-free.
-
-
19:49
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
15:30
»
Packet Storm Security Advisories
Technical Cyber Security Alert 2011-102A - There are multiple vulnerabilities in Microsoft Windows, Office, Internet Explorer, and Visual Studio. Microsoft has released updates to address these vulnerabilities.
-
15:30
»
Packet Storm Security Recent Files
Technical Cyber Security Alert 2011-102A - There are multiple vulnerabilities in Microsoft Windows, Office, Internet Explorer, and Visual Studio. Microsoft has released updates to address these vulnerabilities.
-
15:30
»
Packet Storm Security Misc. Files
Technical Cyber Security Alert 2011-102A - There are multiple vulnerabilities in Microsoft Windows, Office, Internet Explorer, and Visual Studio. Microsoft has released updates to address these vulnerabilities.
-
-
16:45
»
SecuriTeam
Microsoft Internet Explorer contains a Vulnerability caused by use-after-free vulnerability when handling certain animation behaviours.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
18:20
»
SecuriTeam
Remote exploitation of a memory corruption vulnerability in Microsoft Corp.'s Internet Explorer could allow an attacker to execute arbitrary code with the privileges of the current user.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
17:35
»
Packet Storm Security Advisories
Zero Day Initiative Advisory 11-02 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. This vulnerability was submitted to the ZDI via at the annual Pwn2Own competition at CanSecWest. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the MSADO component. When handling the a user specified CacheSize property the process uses this value to calculate the 'real' cache size. This value is used without proper validation. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
-
17:35
»
Packet Storm Security Recent Files
Zero Day Initiative Advisory 11-02 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. This vulnerability was submitted to the ZDI via at the annual Pwn2Own competition at CanSecWest. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the MSADO component. When handling the a user specified CacheSize property the process uses this value to calculate the 'real' cache size. This value is used without proper validation. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
-
17:35
»
Packet Storm Security Misc. Files
Zero Day Initiative Advisory 11-02 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. This vulnerability was submitted to the ZDI via at the annual Pwn2Own competition at CanSecWest. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the MSADO component. When handling the a user specified CacheSize property the process uses this value to calculate the 'real' cache size. This value is used without proper validation. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
-
-
10:56
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
10:51
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
22:01
»
Packet Storm Security Recent Files
Core Security Technologies Advisory - Microsoft Windows is prone to a memory corruption vulnerability when instantiating the 'HtmlDlgHelper Class Object' in a Microsoft Office Document (ie: .XLS, .DOC). The affected vulnerable module is part of Internet Explorer ('mshtmled.dll'). This vulnerability could be used by a remote attacker to execute arbitrary code with the privileges of the user that opened the malicious file.
-
22:01
»
Packet Storm Security Exploits
Core Security Technologies Advisory - Microsoft Windows is prone to a memory corruption vulnerability when instantiating the 'HtmlDlgHelper Class Object' in a Microsoft Office Document (ie: .XLS, .DOC). The affected vulnerable module is part of Internet Explorer ('mshtmled.dll'). This vulnerability could be used by a remote attacker to execute arbitrary code with the privileges of the user that opened the malicious file.
-
-
17:25
»
SecuriTeam
A critical vulnerability was discovered affecting Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
11:11
»
SecuriTeam
A critical vulnerability was discovered affecting Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
12:51
»
SecuriTeam
A critical vulnerability was discovered affecting Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
18:36
»
SecuriTeam
Multiple Denial of Service vulnerabilities were discovered in known Browsers.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
16:59
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
13:57
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
21:02
»
SecDocs
Authors:
Paul Stone Tags:
XSS CSRF clickjacking Event:
Black Hat EU 2010 Abstract: Clickjacking is a technique that can be used to trick users into performing unintended actions on a website by formatting a web page so that the victim clicks on concealed links, typically hidden within an IFRAME. However, in comparison to other browser-based attacks such as XSS (Cross-site Scripting) and CSRF (Cross-site Request Forgery), Clickjacking has hitherto been regarded as a limited attack technique in terms of consequences for the victim and the scenarios in which it can be used. During this talk I intend to demonstrate that this assumption is incorrect, and that today’s Clickjacking techniques can be extended to perform powerful new attacks that can affect any web application. This talk will cover the basics of Clickjacking, quickly moving on to more powerful, and newly developed, techniques. The presentation will explore further ways in which a user can be tricked into interacting with a victim site and how these can lead to attacks such as injecting data into an application (bypassing all current CSRF protections) and the extraction of data from websites without the user’s knowledge. The demo will show several cross-browser techniques, and newly released browser-specific vulnerabilities in Internet Explorer, Firefox and Safari/Chrome which can be used to take full control of a web application. I will also be demonstrating and releasing a new tool that allows for easy point-and-click creation of multi-step Clickjacking attacks on any web application, by visually selecting the links, buttons, fields and data to be targeted. The tool will highlight the need for improved Clickjacking defences in both browsers and web applications.
-
21:02
»
SecDocs
Authors:
Paul Stone Tags:
XSS CSRF clickjacking Event:
Black Hat EU 2010 Abstract: Clickjacking is a technique that can be used to trick users into performing unintended actions on a website by formatting a web page so that the victim clicks on concealed links, typically hidden within an IFRAME. However, in comparison to other browser-based attacks such as XSS (Cross-site Scripting) and CSRF (Cross-site Request Forgery), Clickjacking has hitherto been regarded as a limited attack technique in terms of consequences for the victim and the scenarios in which it can be used. During this talk I intend to demonstrate that this assumption is incorrect, and that today’s Clickjacking techniques can be extended to perform powerful new attacks that can affect any web application. This talk will cover the basics of Clickjacking, quickly moving on to more powerful, and newly developed, techniques. The presentation will explore further ways in which a user can be tricked into interacting with a victim site and how these can lead to attacks such as injecting data into an application (bypassing all current CSRF protections) and the extraction of data from websites without the user’s knowledge. The demo will show several cross-browser techniques, and newly released browser-specific vulnerabilities in Internet Explorer, Firefox and Safari/Chrome which can be used to take full control of a web application. I will also be demonstrating and releasing a new tool that allows for easy point-and-click creation of multi-step Clickjacking attacks on any web application, by visually selecting the links, buttons, fields and data to be targeted. The tool will highlight the need for improved Clickjacking defences in both browsers and web applications.
-
-
12:28
»
SecuriTeam
Remote exploitation of a use after free vulnerability in Microsoft Corp.'s Internet Explorer could allow an attacker to execute arbitrary code with the privileges of the current user.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
12:00
»
SecurityFocus Vulnerabilities
Re: [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
-
12:00
»
SecurityFocus Vulnerabilities
Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
-
9:00
»
SecurityFocus Vulnerabilities
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
-
8:05
»
SecurityFocus Vulnerabilities
[Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
-
7:01
»
SecurityFocus Vulnerabilities
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
-
-
0:00
»
SecurityFocus Vulnerabilities
Microsoft Internet Explorer Uninitialized Memory (CVE-2010-0267) Memory Corruption Vulnerability
-
-
9:00
»
SecurityFocus Vulnerabilities
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
-
9:00
»
SecurityFocus Vulnerabilities
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
-
-
13:00
»
SecurityFocus Vulnerabilities
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
-
11:00
»
SecurityFocus Vulnerabilities
DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
-
-
2:51
»
SecDocs
Authors:
Elie Bursztein Jean-Michel Picod Tags:
Windows reverse engineering Event:
Black Hat DC 2010 Abstract: The Data Protection API (DPAPI) plays a key role in Windows security: This API is meant to be the standard way on Windows OS to store encrypted data on the disk. DPAPI is used by many popular applications including Internet Explorer, Google Talk, Google Chrome, Skype, MSN (6.5-7) to encrypt their passwords. It is also used by Windows itself to store sensitive information such as EFS certificates and and Wifi (WEP and WPA) keys. DPAPI use very opaque structures to store these encrypted data on disk and the available documentation is very sparse. Therefore prior to our work it was impossible to extract and analyze these secrets offline for forensic purpose. This is a particular huge issue for files encrypted using EFS because unless the EFS certificate protected by DPAPI is recovered these files can’t be decrypted and analyzed. To address these issues, we did reverse the DPAPI and in this presentation will provide a complete walkthrough DPAPI and its structures. Afterward armed with this knowledge, anyone interested in windows forensic will be able to deal with data stored with DPAPI. We will cover the change made by Microsoft from Windows XP up to Windows Seven. Finally we will demonstrate and release DPAPick (www.dpapick.com) which we believe, is the first tool that allows to decrypt offline data encrypted with DPAPI.
-
-
0:53
»
remote-exploit & backtrack
hi,
MS10-002 ,ie_iepeers (Microsoft Internet Explorer iepeers.dll use-after-free exploit )
4xsecurityteam.blogspot(dot)com (home page)
4xunderground.blogspot(dot)com
vimeo(dot)com/user1010000
thk$
-
-
12:09
»
remote-exploit & backtrack
(SET) Social-Engineering Toolkit
Que es Social-Engineering Toolkit (Kit de herramientas de la ingeniería social) es una de las herramientas mas novedosas que encontramos para realizar ataques automatizados por medio de ingenieria social esta gran herramienta fue diseñada por David Kennedy (ReL1K) cuenta con algunos metodos como la clonacion de sitios web para realizar ataques mediante codigos malisiosos de java applet llevando a la victima a la paguina web ya sea por medio de ingenieria social, vulnerabilidad XSS o un E-Mail, la victima tendra que ejecutar la aplicacion de Microsoft una ves ejecutada tendremos el acceso remoto ala maquina victima. Otro de los metodos seria el envio de un archivo de formato por medio de correos electronicos llevando ala victima a la descargar del archivo y ejecutarlo hay tendremos el acceso remoto a la maquina victima sin mas que decir empesemos con la instalacion de SET.
podemos descargar SET atraves de la sudvercion escribiendo en la consola lo siguiente
Code:
svn co htτp://svn.thepentest.com/social_engineering_toolkit/ SET/
remplazo τ por t ----> htτp
luego de tener nuestra herramienta descargada la movemos ala carpeta exploits con la siguiente instruccion.
Code:
mv SET /pentest/exploits
Listo ya movimos la carpeta de SET al lugar que corresponde ahora vamos relizar el primer que tiene el nombre de Email Attack se trata del envio a el correo de la victima un archivo malicioso en formato .pdf la victima lo que tiene que hacer es descarga el archivo y abrirlo al abrirlo le dira que guarde otro archivo a la capeta My Documents este ultimo archivo es el ejecutable y el que nos da la entrada remotamente ala maquina victima, sin mas hay les dejo el video espero les guste y les sea de ayuda.
Social Engineering Toolkit --- Acceder a un sistema con SET (Email Attack )
Video
youtube.com/user/sOrtHacK#p/a/u/0/yQicAwIlAxA
Ahora vamos a ver otro videotuto se trata de la explotacion de vulnerabilidad en Internet Explorer por medio de (SET)
Social Engineering Toolkit --- Accediendo a un sistema por medio de SET (Aurora Attack )
Video
youtube.com/user/sOrtHacK#p/a/u/1/BKTaE4uTbxY