APT 高级漏洞利用技术

显示全部楼层 · 发表于 2014-11-14 19:32:56

http://vdisk.weibo.com/s/BgiHan4xseFf/1401437915

CVE-2014-6332

显示全部楼层 · 发表于 2014-11-14 19:48:42

https://www.virustotal.com/en/fi ... nalysis/1415965692/

显示全部楼层 · 发表于 2014-11-15 01:00:01

本帖最后由 jefffire 于 2014-11-15 01:03 编辑

袁哥这个漏洞真是神一样的漏洞。不在于秒掉EMET各种措施，而在于思路NB。

1. It impacts almost all Microsoft Windows versions from Windows 95 onward.
2.A stable exploit exists and works in versions of Internet Explorer from 3 to 11, and can bypass operating system (OS) security utilities and protection such as Enhanced Mitigation Experience Toolkit (EMET), Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR),and Control-Flow Integrity (CFI).
3.Proof of concept (PoC) exploit code has recently been published by a Chinese researcher named Yuange1975.
4.Based on the PoC, it’s fairly simple to write malicious VBScript code for attacks.
5.Attackers may soon utilize the PoC to target unpatched systems.

显示全部楼层 · 发表于 2014-11-15 16:23:27

TX这个拉黑MD5的去掉注释就不能报了，囧

https://www.virustotal.com/en/fi ... nalysis/1416039691/

为什么我不看都知道百度金山瑞星肯定不行？

[分享] APT 高级漏洞利用技术

评分

评分