Thursday, September 25, 2014

CVE-2014-6271: Exploiting Bash Remote Code Execution Vulnerability

Checkout ampliasecurity's exploit for the CVE-2014-6271 Bash Remote Code Execution Vulnerability against a simple #!/bin/bash CGI script running on Apache.


(CVE-2014-6271) Exploiting Bash Remote Code Execution Vulnerability


You can also read: Exploiting BASH Remote Code Execution Vulnerability (CVE-2014-6271)

Friday, November 15, 2013

WCE v1.42beta released (64bit)

WCE v1.42beta released (64bit)
New in this version: improved support for unicode passwords, improved "safe mode" no code injection.
http://www.ampliasecurity.com/research/wce_v1_42beta_x64.zip

WCE v1.42beta released (32bit)

WCE v1.42beta released (32bit). This is a minor release.
New in this version: bug fixes and improved support for unicode cleartext passwords.
http://www.ampliasecurity.com/research/wce_v1_42beta_x32.zip

Thursday, May 30, 2013

WCE v1.4beta released

WCE v1.4beta released. Includes several bug fixes and support for Windows 8.

32bit version available at http://www.ampliasecurity.com/research/wce_v1_4beta_x32.zip
64bit version available at http://www.ampliasecurity.com/research/wce_v1_4beta_x64.zip
"Universal Binary" (works both on x32 and x64) available at http://www.ampliasecurity.com/research/wce_v1_4beta_universal.zip

Tuesday, November 27, 2012

Tuesday, August 28, 2012

Java 0-Day Vulnerability Exploit Demo (CVE-2012-4681)

This is a demo of the Java 0-Day Vulnerability made public on 08-26-2012 (now CVE-2012-4681): http://youtu.be/HO4yO7_5sEc?hd=1 (watch in HD)

This vulnerability was found being exploited in the wild and discovered by Michael Schierl.

This exploit was written based on the PoC published by @jduck1337 at http://pastie.org/pastes/4594319/text

Tested on Windows 7 with Internet Explorer, Firefox and Chrome (keep in mind this affects Java on all platforms)

The exploit is extremely easy to implement, not much needs to be changed from the public PoC besides adding code to drop a payload.

References:

http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html
http://www.deependresearch.org/2012/08/java-7-0-day-vulnerability-information.html
http://immunityproducts.blogspot.com.ar/2012/08/java-0day-analysis-cve-2012-4681.html