The Quicktime "Marshaled_pUnk" exploit works well with a Javascript packer to circumvent AV detection as it solely relies on Javascript code. Quite often a web based exploit needs a special setting (HTML objects, data files etc.) beside the Javascript code and therefore makes it easier to create an AV signature.
The current metasploit module for the exploit (see here) has a detection rate of 14/43 on VirusTotal.
After changing a few lines to use the JSidle packer (patches on github) the detection drops to zero, no further customization needed.
As the packer is available for over 2 months now, it seems to work quite well.
Thursday, September 16, 2010
Combining the Quicktime "Marshaled_pUnk" exploit with JSidle
Labels:
antivirus,
javascript,
metasploit
Subscribe to:
Post Comments (Atom)
This comment has been removed by the author.
ReplyDeleteThis was huge information for all those who need this. That was a really good blog and of course knowledgeable. Thank you for sharing this much information with us. Case Packers
ReplyDeleteI always like your article because you have provide every time informative post..new whatsapp plus download free pc
ReplyDeleteI'd like to express my gratitude for writing such an informative piece on this blog about Robotic Case Packaging Systems This article provided me with a variety of data. Continue to post.
ReplyDeletechrome browser is user friendly and very responsive recently i shift chrome form Mozilla because its very easy to use. anyway we have 8 years experienced team who can fulfil your desire Law Essay Help UK requirement.
ReplyDeleteYour blogs are fantastic. Are you looking for a Online Phd Thesis Help as well? We are the most suitable option for you. We are well renowned for providing students with affordable nursing writing services that do not require them to break the budget.
ReplyDeleteHey! “Can you write my paper today?” Get a suitable expert from https://rankmywriter.com/essaypro-com-review instantly and be on your way to getting a custom assignment now. We can comfortably tackle your assignment, regardless of subject, topic, length, or complexity. Our speedy writing specialists are spread across more than 50 subjects and are ready to help you meet your urgent deadline.
ReplyDeleteVery Nice blog
ReplyDeleteinstant personal loan online
It is used in the production of toys, water bottles, squeeze bottles for detergents, pipes for shower curtains, medical tubes, and butter jars. It poses a serious health risk since it is linked to the development of asthma and cancer. PE Stretch Film
ReplyDeleteI found your blog post very informative and insightful. Thanks for sharing, Please read my blog crewneck t shirts for men
ReplyDeleteExplore the world around you like never before by investing in a pair of binoculars. With their ability to magnify distant objects and bring them into clear focus, binoculars allow you to see the finer details of nature, wildlife, and even sporting events. From compact and lightweight options perfect for hiking and travel, to high-powered binoculars designed for stargazing and long-distance viewing, there is a wide range of choices available to suit your specific needs and preferences.
ReplyDeleteSo why wait? Take your outdoor adventure to the next level and Buy Binoculars today. binoculars will provide you with a whole new perspective and allow you to immerse yourself in the beauty of the world around you.
Thank you for this awesome content. I have been looking for what to watch then I stumbled on this page. Thanks for sharing. Also Have a look at our aricle about Best Cheap Gaming Headset.
ReplyDeleteYour blogs are fantastic.. At Rummy Perfect, we also discuss similar strategies to help rummy players improve their game. Feel free to check it out! Rummy Perfect VIP
ReplyDelete