Jump to content

Worm64

Active Members
 View Profile  See their activity

  • Posts

    231

  • Joined

  • Last visited

  • Days Won

    3

 Content Type 

Posts posted by Worm64

  10. Call winapi functions from inline asm

    in Programare

    Posted · Edited by Worm64

    A fost un mic pariu cu @Usr6.M-am gandit sa il postez aici pentru cine vrea sa foloseasca functii din windows.h in asm.


    #include "windows.h"

    char a2[]="usr6";
    char a3[]="Salut";
    int main()
    {
            __asm
            {
                    mov eax,0
                    push eax
                    mov eax,offset a3
                    push eax
                    mov eax,offset a2
                    push eax
                    mov eax,0
                    push eax
                    call DWORD PTR MessageBox
                    pop ebx
                    pop ebx
                    pop ebx
                    pop ebx
            }
    }

    • Upvote 1

  12. Sugestie- Troll Place

    in Sugestii

    Posted

    Sunt Worm64 presedintele asociatiei de trolling profesionist,vreau sa iti atrag atentia ca prin acest post,noi astia care facem trolling ne simtim ofensati.Trebuie sa ne apreciezi ca noi astia care glumim zi de zi,va facem ziua mai frumoasa.Iei viata prea in serios.

  15. New Adobe Flash Zero-Day found in the Wild

    in Stiri securitate

    Posted · Edited by Worm64

    Flash0day-965x395.png

    Security researcher Kafeine has discovered a Zero-Day in Adobe Flash Player distributed through the Angler Exploit Kit.

    Flash has been plagued with critical vulnerabilities in the past few months and surpassed the no longer popular Java as the most exploited plugin.

    We immediately got our hands on this new Zero-Day (thanks Kafeine) and were able to replay it as well with the goal of testing our Anti-Exploit product:

    MarcinZeroDay-1024x758.png

    Security researcher Kafeine has discovered a Zero-Day in Adobe Flash Player distributed through the Angler Exploit Kit.

    Flash has been plagued with critical vulnerabilities in the past few months and surpassed the no longer popular Java as the most exploited plugin.

    We immediately got our hands on this new Zero-Day (thanks Kafeine) and were able to replay it as well with the goal of testing our Anti-Exploit product:

    MarcinZeroDay

    With the latest version of Internet Explorer and latest version of Flash, the exploit was successfully blocked by Malwarebytes Anti-Exploit.

    On unprotected machines, the Angler Exploit Kit will install Bedep, a distribution botnet that can load multiple payloads on the infected host.

    As this is a breaking story, we are still analyzing the exploit and will update this post later accordingly.

    Update: 01/21/15: Some details about the malware payload.

    The payload in this particular instance was ad fraud. Upon infection, explorer.exe (not to be confused with iexplore.exe) is injected and performs the ad fraud calls.

    The following Fiddler capture shows how a zombie PC is gaming the ad networks with bogus requests without the victim’s knowledge:

    adfraud_traffic.png

    sursa:Malwarebytes team

  17. Read local files using pure javascript

    in Programe utile

    Posted

    Scris de dimineata la cafea:


    <script>
    function citeste(file)
    {
    fisier=new FileReader()
    fisier.onload = function(e) {
      var text = fisier.result;
      document.getElementById('display').innerHTML=text;
    }
    fisier.readAsText(file,'UTF-8')
    }
    </script> 
    <input type="file" id="fileInput">
    <input type='button' value='Citeste' onclick='citeste(fileInput.files[0])'></br>
    <textarea id='display' style='height:80%; width: 30%;'>
    </textarea>

    • Upvote 2

  18. Port Checker

    in Programe utile

    Posted · Edited by Worm64

    M-am jucat putin cu sockets in python,verifica toate porturile deschise de pe un ip dat.


    import socket;

    port=[]

    def check(t):
    	ip=t.split(":");
    	sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    	result= sock.connect_ex((ip[0],int(ip[1])))
    	if result == 0:
    		print "Portul:"+ip[1]+" este deschis!\n"
    		port.append(ip[1])

    print "Target:"
    target=raw_input()

    print "Target: "+str(target)+"\nConfirm: y/n \n"
    confirm=raw_input()
    if(confirm=='y'):
    	for i in range(1,65536):		
    		print "Testez portul:"+str(i)+"\n"
    		check(str(target)+":"+str(i))
    else:
    	exit();

    L.E.Daca va duce putin capul si nu il aveti doar sa nu va ploua in gat,il puteti transforma usor in scanner de vnc,smtp,rdp....etc

×
×
  • Create New...