Thursday, September 16, 2010

Combining the Quicktime "Marshaled_pUnk" exploit with JSidle

The Quicktime "Marshaled_pUnk" exploit works well with a Javascript packer to circumvent AV detection as it solely relies on Javascript code. Quite often a web based exploit needs a special setting (HTML objects, data files etc.) beside the Javascript code and therefore makes it easier to create an AV signature.

The current metasploit module for the exploit (see here) has a detection rate of 14/43 on VirusTotal.
After changing a few lines to use the JSidle packer (patches on github) the detection drops to zero, no further customization needed.

As the packer is available for over 2 months now, it seems to work quite well.

13 comments:

  1. This comment has been removed by the author.

    ReplyDelete
  2. This was huge information for all those who need this. That was a really good blog and of course knowledgeable. Thank you for sharing this much information with us. Case Packers

    ReplyDelete
  3. I always like your article because you have provide every time informative post..new whatsapp plus download free pc

    ReplyDelete
  4. I'd like to express my gratitude for writing such an informative piece on this blog about Robotic Case Packaging Systems This article provided me with a variety of data. Continue to post.

    ReplyDelete
  5. Your blogs are great.Are you also searching for Cheap Nursing Writing company? we are the best solution for you. We are best known for delivering cheap nursing writing services to students without having to break the bank.whatsapp us:+1-(951)-468-9855

    ReplyDelete
  6. Great Platform. Are you also searching for nursing essay writing help? we are the best solution for you. We are best known for offering the best nursing essay writing services

    ReplyDelete
  7. chrome browser is user friendly and very responsive recently i shift chrome form Mozilla because its very easy to use. anyway we have 8 years experienced team who can fulfil your desire Law Essay Help UK requirement.

    ReplyDelete
  8. Your blogs are fantastic. Are you looking for a Online Phd Thesis Help as well? We are the most suitable option for you. We are well renowned for providing students with affordable nursing writing services that do not require them to break the budget.

    ReplyDelete
  9. I want to always read your blogs. I love them Are you also searching for nursing diagnosis writing services? we are the best solution for you. We are best solution for you.

    ReplyDelete
  10. Your blogs are great.Are you also searching for Nursing Writing Services reviews? we are the best solution for you. We are best known for delivering nursing writing services to students without having to break the bank.whatsapp us:+1-(951)-468-9855

    ReplyDelete
  11. MyCaseStudyHelp.Com is an online assignment help and writing service provider for Graduate and Post Graduate students of universities. It provides quick solutions to the assignment, essay, dissertation and thesis related problems of students at an affordable service price on the following subjects: MBA, Nursing, Law, Engineering &c. Thousands of students availed our services and are happy and satisfied. Why are you lagging behind? Get more info at: https://www.mycasestudyhelp.com/assignment/

    ReplyDelete
  12. Are you worried for timely completion of your assignment? Are you unable to do your assignment perfectly so that you can show excellent performance ? If so, please take advantages of our cheap and best assignment writing services.
    We are no 1 assignment writing service provider in the world and especially in Australia. Please connect with us: Phone: +61-2 9191 7405, E-mail: sales@no1assignmenthelp.com, Website: assignment help, Office: 25 Robert St, Melbourne VIC 3207, Australia

    ReplyDelete
  13. Hey friend, it is very well written article, thank you for the valuable and useful information you provide in this post. Keep up the good work! FYI, How to know if your dog is having a heat stroke , IDFC FIRST Classic Credit Card review
    , The Charismatic Charlie Wade by Lord Leaf Download,10 lines on my ambition in life

    ReplyDelete