begood Posted August 27, 2010 Report Share Posted August 27, 2010 (edited) ==extrageti arhiva pe desktop si rulati bg.7z(cu winrar trebuie deschis) Edited August 27, 2010 by begood Quote Link to comment Share on other sites More sharing options...
begood Posted August 27, 2010 Author Report Share Posted August 27, 2010 k. done. it's working.thx guys ! Quote Link to comment Share on other sites More sharing options...
ROFL Posted August 27, 2010 Report Share Posted August 27, 2010 Buffer Overflow? Ai IP corect + ceva malware care se conecteaza pe portul 81. Quote Link to comment Share on other sites More sharing options...
begood Posted August 27, 2010 Author Report Share Posted August 27, 2010 (edited) meterpreternu e BOF, e ceva nou si exploatat foarte des in ultima vremeps: nu va faceti griji, doar am testat daca se conecteaza. nu vi-am umblat.ps2: http://dl.dropbox.com/u/6179878/Exploits.rarps3: aveti cap, gasiti voi cum am facut ^^ Edited August 27, 2010 by begood Quote Link to comment Share on other sites More sharing options...
ROFL Posted August 27, 2010 Report Share Posted August 27, 2010 Merge si cu 7zip:| Quote Link to comment Share on other sites More sharing options...
begood Posted August 27, 2010 Author Report Share Posted August 27, 2010 Merge si cu 7zip:|lol Quote Link to comment Share on other sites More sharing options...
wpanda Posted August 27, 2010 Report Share Posted August 27, 2010 Ai facut cu dll hijack nu? asta care e acum la moda... inseamna ca sunt toate care deschid arhive vuln.Ai pus in dll direct shellcode sau scris si compliat? Quote Link to comment Share on other sites More sharing options...
begood Posted August 27, 2010 Author Report Share Posted August 27, 2010 (edited) Ai facut cu dll hijack nu? asta care e acum la moda... inseamna ca sunt toate care deschid arhive vuln.Ai pus in dll direct shellcode sau scris si compliat?ala-i, ai bulina alba.am scris si compilat, dar poti folosi si msf pentru asta.msfpayload windows/meterpreter/reverse_tcp_dns etc etc.msfpayload windows/vncinject/reverse_tcp :> hai ca va dau link direct, deja e evident despre ce e vorba.http://blog.metasploit.com/2010/08/better-faster-stronger.htmldoar sa nu va pice fa?a pe tastatura. Edited August 27, 2010 by begood Quote Link to comment Share on other sites More sharing options...
wpanda Posted August 27, 2010 Report Share Posted August 27, 2010 (edited) Pai daca nu gresesc teoretic ar trebuii sa fie toate app de windows vulnerabile...L.E Ala cu shortcutul era sexy rau Edited August 27, 2010 by wpanda Quote Link to comment Share on other sites More sharing options...
begood Posted August 27, 2010 Author Report Share Posted August 27, 2010 Pai daca nu gresesc teoretic ar trebuii sa fie toate app de windows vulnerabile...nu toate . Quote Link to comment Share on other sites More sharing options...
Guest User Name Posted August 27, 2010 Report Share Posted August 27, 2010 Din cate am inteles sursa windows-ului e pe mana rusilor,care s-au apucat de cautat buguri,vulnerabilitati,si probleme majore...Daca aceasta sursa va aparea publica s-ar adeveri ce ar zice wpanda. Quote Link to comment Share on other sites More sharing options...
begood Posted August 27, 2010 Author Report Share Posted August 27, 2010 Din cate am inteles sursa windows-ului e pe mana rusilor,care s-au apucat de cautat buguri,vulnerabilitati,si probleme majore...Daca aceasta sursa va aparea publica s-ar adeveri ce ar zice wpanda.visezi. offtopic. Quote Link to comment Share on other sites More sharing options...
LLegoLLaS Posted August 27, 2010 Report Share Posted August 27, 2010 daca o fac astia publica s-a dus pe apa wingoz-ul (nu ca nu ar fi deja pe drum...).Apropo azi am vazut firewallul ca mi-a blocat utorrent-ul zicand ceva de DLL.A aparut si update la utorrent (2.0.4) care repara asta (azi) Quote Link to comment Share on other sites More sharing options...
AlStar Posted August 27, 2010 Report Share Posted August 27, 2010 Deci DLL hijacking-u' te scuteste de umblat cu troieni? Quote Link to comment Share on other sites More sharing options...
nedo Posted August 27, 2010 Report Share Posted August 27, 2010 (edited) la mine avastul imi blocheaza si primul link pus de begood si anume http://dl.dropbox.com/u/6179878/Exploits.rar, cat si kit-ul de dllhijack autid kit(doar runcalc.dll) presupun ca avast-ul deja stie de asta si blocheaza la rulare le1: @ alstar, nu, asta faciliteaza inserarea oricariui tip de malware in calculatorul cuiva expoatand aceasta vulnerabilitate. A postat Nytro exemple .Foarte tare, partea nasoala e ca nu prea ai cum sa te aperi de chestia asta, decat daca nu cumva are antivirusul tau capacitatea de a detecta aceasta chestie(cel mai probabil prin heuristica, la fel cum avira detecteaza un iframe cu width si height 0 ca si malware ) Edited August 27, 2010 by nedo Quote Link to comment Share on other sites More sharing options...
