Friday, November 15, 2013
New in this version: bug fixes and improved support for unicode cleartext passwords.
Thursday, July 18, 2013
Universal binary: http://www.ampliasecurity.com/research/wce_v1_41beta_universal.zip
Thursday, May 30, 2013
32bit version available at http://www.ampliasecurity.com/research/wce_v1_4beta_x32.zip
64bit version available at http://www.ampliasecurity.com/research/wce_v1_4beta_x64.zip
"Universal Binary" (works both on x32 and x64) available at http://www.ampliasecurity.com/research/wce_v1_4beta_universal.zip
Thursday, January 10, 2013
Exploit made public by http://www.twitter.com/Kafeine
Exploit code released publicly by Gdark - DamageLabs
Tuesday, November 27, 2012
Tuesday, August 28, 2012
This is a demo of the Java 0-Day Vulnerability made public on 08-26-2012 (now CVE-2012-4681): http://youtu.be/HO4yO7_5sEc?hd=1 (watch in HD)
This vulnerability was found being exploited in the wild and discovered by Michael Schierl.
This exploit was written based on the PoC published by @jduck1337 at http://pastie.org/pastes/4594319/text
Tested on Windows 7 with Internet Explorer, Firefox and Chrome (keep in mind this affects Java on all platforms)
The exploit is extremely easy to implement, not much needs to be changed from the public PoC besides adding code to drop a payload.
Wednesday, June 13, 2012
Exploitation of this critical vulnerability is trivial and requires only to perform several authentication attempts with any password and a valid username until the MySQL server grants access.
After successful exploitation this exploit dumps information from the target MySQL server such as: version, available databases, password hashes of MySQL users to be cracked later, dumps some system files, in this example, /etc/password, etc. Depending on the configuration of the target MySQL server and privileges of the user selected other actions can be performed.