Mar 2 CVE-2012-0754 SWF in DOC Iran's Oil and Nuclear Situation.doc
Update: March 9, 2012 - I added another sample donated by anonymous - it is the same exploit but embedded in an Excel spreadsheet. The details about this sample are highlighted in yellow below. This is a message from a targeted attack and quite possibly you already received a few on your own - there seem to be a new campaign underway using this new CVE-2012-0754 exploit. The vulnerability exists
サービス終了ã®ãŠçŸ¥ã‚‰ã›
サービス終了ã®ãŠçŸ¥ã‚‰ã› ã„ã¤ã‚‚Yahoo! JAPANã®ã‚µãƒ¼ãƒ“スをã”利用ã„ãŸã ãèª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ãŠå®¢æ§˜ãŒã‚¢ã‚¯ã‚»ã‚¹ã•ã‚ŒãŸã‚µãƒ¼ãƒ“スã¯æœ¬æ—¥ã¾ã§ã«ã‚µãƒ¼ãƒ“スを終了ã„ãŸã—ã¾ã—ãŸã€‚ 今後ã¨ã‚‚Yahoo! JAPANã®ã‚µãƒ¼ãƒ“スをã”愛顧ãã ã•ã„ã¾ã™ã‚ˆã†ã€ã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚
補足2: .dtors overwrite ã«ã¤ã„㦠- memologue
ã“ã‚Œã®ç¶šã。 å‰ã«æ›¸ã„ãŸGOT overwriteã¨ã»ã¼åŒã˜æ‰‹å£ãªã‚“ã§ã™ãŒã€.dtorsセクションã«ç™»éŒ²ã•ã‚Œã¦ã„る（関数ã®ï¼‰ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’書ãæ›ãˆã¦ã€ãŠå¥½ããªé–¢æ•°ã‚’呼ã¶ã¨ã„ã†æ”»æ’ƒæ–¹æ³•ãŒã‚ã‚Šã¾ã™ã€‚.dtor overwrite ã¨ã‹å‘¼ã°ã‚Œã¦ã¾ã™ã€‚ã“ã®æ‰‹å£ã‚’〠NXã‚ã‚Š ASLRã‚ã‚Š RELROãªã— PIEãªã— ã¨ã„ã†æ¡ä»¶ä¸‹ã§è©¦ã—ã¦ã¿ã¾ã™ã€‚ #include <stdio.h> #include <stdlib.h> __attribute__((destructor)) static void dtor_fn() { puts("good bye!"); } static void my_dtor_fn(void) { puts("HEHE"); } int main(int argc, char** argv) { if (argc > 1) { unsigned int* got_addr
ld -z relro 㧠GOT overwrite attack ã‹ã‚‰èº«ã‚’守る - memologue
GOT overwrite? "GOT overwrite" ã¨ã„ã†ã€(ã“ã“ã§ã¯ç‰¹ã«Linuxã®)プãƒã‚°ãƒ©ãƒ ã«å¯¾ã™ã‚‹æ”»æ’ƒæ–¹æ³•ãŒã‚ã‚Šã¾ã™ã€‚攻撃ãŒæˆåŠŸã™ã‚‹ã¨ã€ãã®ãƒ—ãƒã‚»ã‚¹ã®æ¨©é™ã§ã®ä»»æ„コード実行ç‰ã€æ·±åˆ»ãªè¢«å®³ã‚’å—ã‘ã¾ã™ã€‚最近ã®GNU ld(リンカ)ã®ã‚ªãƒ—ションを用ã„ã‚‹ã¨ã€ã“ã®æ”»æ’ƒã‹ã‚‰èº«ã‚’守るã“ã¨ãŒã§ãã‚‹ãã†ã§ã™ã®ã§ã€ç´¹ä»‹ã—ã¾ã™ã€‚ 最åˆã«ã¾ã¨ã‚ （ã“ã¾ã‹ã„ã“ã¨ã¯ã‚ã¨ã§ï¼‰ GOT overwrite ã‹ã‚‰èº«ã‚’守るã«ã¯ã€gccã§ãƒ—ãƒã‚°ãƒ©ãƒ をリンクã™ã‚‹ã¨ãã«ã€ -Wl,-z,now,-z,relro ã‚’ã¤ã‘ã‚‹ã ã‘ã§ã™ã€‚起動時間ãŒé…ããªã‚‹ã¨ã„ã†ãƒˆãƒ¬ãƒ¼ãƒ‰ã‚ªãƒ•ãŒã‚ã‚Šã¾ã™ãŒã€GOTãŒreadonlyã«ãªã‚Šã¾ã™ã€‚GOTãŒreadonlyãªã‚‰ã€GOT overwrite attack ã‚’å—ã‘ãŸã¨ãã«ã€ãƒ—ãƒã‚»ã‚¹ãŒSEGVã—ã¦ãã‚Œã¾ã™ã®ã§ã€å®‰å…¨æ€§ãŒé«˜ã¾ã‚Šã¾ã™ã€‚プãƒã‚»ã‚¹ã®ãƒ¡ãƒ¢ãƒªãƒžãƒƒãƒ—を確èªã™ã‚‹ã¨ã€ãã¡ã‚“㨠w ãŒè½ã¡ã¦
Home - Broadcom Community - Discussion Forums, Technical Docs, Ideas and Blogs
VMware Explore Community Tracks - Videos View Live Streams and On Demand Videos from this year's Community sessions.. View Community Sessions VMware Explore Community Tracks - Videos View Live Streams and On Demand Videos from this year's Community sessions.. View Community Sessions VMware Explore Community Tracks - Videos View Live Streams and On Demand Videos from this year's Community sessions.
GitHub - saurik/mempodroid
Today on Hacker News (where I sadly get much of my news), the post ["Linux Local Privilege Escalation via SUID /proc/pid/mem Write"] 1 hit the front page. [This article] 2 was by Jason A. Donenfeld (zx2c4), and documented how he managed to exploit CVE-2012-0056, a seemingly silly mistake that was [recently found in the Linux kernel by Jüri Aedla] 3. Obviously, I was intrigued, and then spent the n
CVE-2012-0056 - Mempodipper, a linux local root exploit.
Linux Local Privilege Escalation via SUID /proc/pid/mem Write Mempodipper Introducing Mempodipper, an exploit for CVE-2012-0056. /proc/pid/mem is an interface for reading and writing, directly, process memory by seeking around with the same addresses as the process's virtual memory space. In 2.6.39, the protections against unauthorized access to /proc/pid/mem were deemed sufficient, and so the pri
Research
Subscribe to the Barracuda Blog. Sign up to receive threat spotlights, industry commentary, and more. Sign up to receive threat spotlights, industry commentary, and more. Get all the latest news, research, and analysis delivered right to your inbox.
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
exploit/windows/browser/java_ws_vmargs JNLP file - Pastebin.com
Sun Java Web Start Plugin - Command Line Argument Injection (2012) (Metasploit)
環境変数を利用ã—㟠exploit - 技術メモ帳
https://www.blackhat.com/presentations/bh-europe-09/Lineberry/BlackHat-Europe-2009-Lineberry-code-injection-via-dev-mem.pdf
sudo 1.8.0 < 1.8.3p1 - Format String
http://bogus.jp/wp/?p=1063
Android Malware Eavesdrops on Users, Uses Google+ as Disguise
OpenSSLã®ã€ŒHeartbleedã€è„†å¼±æ€§ã‚’悪用ã™ã‚‹æ”»æ’ƒã®ä»•çµ„ã¿ | Symantec
Jeff Jones Security Blog - Site Home - TechNet Blogs
Spam campaign uses Blackhole exploit kit to install SpyEye
MSF Post Exploitation - Metasploit Unleashed
MS12-005 : embedded object package allow arbitrary code execution
{{#tags}}- {{label}}
{{/tags}}