Showing 1 - 10 of 10

Files from Matt Miller

uninformed-10.tgz: Posted Oct 13, 2008; Authored by Matt Miller, H D Moore, Skywing, uninformed, mxatone | Site uninformed.org; Uninformed is pleased to announce the release of its tenth volume which is composed of 4 articles: Can you find me now? Unlocking the Verizon Wireless xv6800 (HTC Titan), Using dual-mappings to evade automated unpacker, Analyzing local privilege escalations in win32k, and Exploiting Tomorrow's Internet Today: Penetration testing with IPv6.; tags | local; MD5 | 59903dc059b514cf6bd0e37a30d6eac3; Download | Favorite | Comments (0)

uninformed-vol9.tgz: Posted Jan 28, 2008; Authored by Matt Miller, warlord, I)ruid, Skywing, uninformed | Site uninformed.org; Uninformed is pleased to announce the release of its ninth volume. This volume includes 4 articles on reverse engineering and exploitation technology. These articles include - Engineering in Reverse: An Objective Analysis of the Lockdown Protection System for Battle.net. Exploitation Technology: ActiveX - Active Exploitation. Exploitation Technology: Context-keyed Payload Encoding. Exploitation Technology: Improving Software Security Analysis using Exploitation Properties.; tags | activex; MD5 | c767de0e1c78ea8126020eebdf39c862; Download | Favorite | Comments (0)

ani_loadimage_chunksize-email.rb.txt: Posted Apr 3, 2007; Authored by Matt Miller, H D Moore; This Metasploit module exploits a buffer overflow vulnerability in the LoadAniIcon() function of USER32.dll. The flaw is triggered through Outlook Express by using the CURSOR style sheet directive to load a malicious .ANI file. This vulnerability was discovered by Alexander Sotirov of Determina and was rediscovered, in the wild, by McAfee.; tags | exploit, overflow; advisories | CVE-2007-1765, CVE-2007-0038; MD5 | 07a517f1fb87b03537a4fddfc3b6be68; Download | Favorite | Comments (0)

ani_loadimage_chunksize-browser.rb.txt: Posted Apr 3, 2007; Authored by Matt Miller, H D Moore; This Metasploit module exploits a buffer overflow vulnerability in the LoadAniIcon() function of USER32.dll. The flaw is triggered through Internet Explorer (6 and 7) by using the CURSOR style sheet directive to load a malicious .ANI file. Internet Explorer will catch any exceptions that occur while the invalid cursor is loaded, causing the exploit to silently fail when the wrong target has been chosen.; tags | exploit, overflow; advisories | CVE-2007-1765, CVE-2007-0038; MD5 | 19caa5e95a067243786ca88f30fd6667; Download | Favorite | Comments (0)

uninformed-vol6.tgz: Posted Jan 16, 2007; Authored by Matt Miller, H D Moore, Johnny Cache, Skywing, uninformed | Site uninformed.org; Uninformed is pleased to announce the release of its sixth volume. This volume includes 3 articles on reverse engineering and exploitation technology. These articles include - Engineering in Reverse: Subverting PatchGuard Version 2, Engineering in Reverse: Locreate: An Anagram for Relocate, Exploitation Technology: Exploiting 802.11 Wireless Driver Vulnerabilities on Windows. PDFs of all articles and related code are included in this tarball.; tags | vulnerability; systems | windows; MD5 | 6387aaa6e7cc43930494506675363d7a; Download | Favorite | Comments (0)

broadcom_wifi_ssid.rb.txt: Posted Nov 14, 2006; Authored by Matt Miller, H D Moore, Johnny Cache, Chris Eagle | Site projects.info-pull.com; This Metasploit module exploits a stack overflow in the Broadcom Wireless driver that allows remote code execution in kernel mode by sending a 802.11 probe response that contains a long SSID. The target MAC address must be provided to use this exploit. The two cards tested fell into the 00:14:a5:06:XX:XX and 00:14:a4:2a:XX:XX ranges.; tags | exploit, remote, overflow, kernel, code execution; MD5 | 8e29a33ce3fa0dea0811bce89496dec2; Download | Favorite | Comments (0)

dlink_wifi_rates.rb.txt: Posted Nov 14, 2006; Authored by Matt Miller, H D Moore, Johnny Cache, LMH | Site projects.info-pull.com; This Metasploit module exploits a stack overflow in the A5AGU.SYS driver provided with the D-Link DWL-G132 USB wireless adapter. This stack overflow allows remote code execution in kernel mode. The stack overflow is triggered when a 802.11 Beacon frame is received that contains a long Rates information element. This exploit was tested with version 1.0.1.41 of the A5AGU.SYS driver and a D-Link DWL-G132 USB adapter (HW: A2, FW: 1.02). Newer versions of the A5AGU.SYS driver are provided with the D-Link WUA-2340 adapter and appear to resolve this flaw, but D-Link does not offer an updated driver for the DWL-G132. Since this vulnerability is exploited via beacon frames, all cards within range of the attack will be affected. The tested adapter used a MAC address in the range of 00:11:95:f2:XX:XX.; tags | exploit, remote, overflow, kernel, code execution; MD5 | a403e8304d2632dbf796bf0e140b69a9; Download | Favorite | Comments (0)

elfcmp-1.0.0.tar.gz: Posted Oct 21, 2003; Authored by Matt Miller | Site hick.org; Elfcmp compares running processes to the their respective binary image to ensure that the process image in memory has not been tampered with after execution. This is useful for security auditing, as other methods that rely strictly on checking disk image checksums are not reliable if only the process image is being tampered with.; systems | linux; MD5 | ae293e91272d71698449a807ba109057; Download | Favorite | Comments (0)

smb.c: Posted Aug 31, 2002; Authored by Matt Miller | Site uninformed.org; Denial of service exploit for Core ST's recently discovered Windows SMB vulnerability which works against Windows NT/2k/XP.; tags | exploit, denial of service; systems | windows, nt; MD5 | 55227b050b4c92b696ada37ba58bac50; Download | Favorite | Comments (0)

decimate.tar.gz: Posted Feb 24, 2000; Authored by Matt Miller | Site afro-productions.com; Decimate removes files in an ext2 filesystem so they are not recoverable. Includes some cool examples of how regular rming can be recovered.; tags | tool; systems | unix; MD5 | b6de6d9a6c53c96e5f427e3ab99da67f; Download | Favorite | Comments (0)

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days