Thursday, September 16, 2010

Combining the Quicktime "Marshaled_pUnk" exploit with JSidle

The Quicktime "Marshaled_pUnk" exploit works well with a Javascript packer to circumvent AV detection as it solely relies on Javascript code. Quite often a web based exploit needs a special setting (HTML objects, data files etc.) beside the Javascript code and therefore makes it easier to create an AV signature.

The current metasploit module for the exploit (see here) has a detection rate of 14/43 on VirusTotal.
After changing a few lines to use the JSidle packer (patches on github) the detection drops to zero, no further customization needed.

As the packer is available for over 2 months now, it seems to work quite well.

13 comments:

  1. This comment has been removed by the author.

    ReplyDelete
  2. This was huge information for all those who need this. That was a really good blog and of course knowledgeable. Thank you for sharing this much information with us. Case Packers

    ReplyDelete
  3. I always like your article because you have provide every time informative post..new whatsapp plus download free pc

    ReplyDelete
  4. I'd like to express my gratitude for writing such an informative piece on this blog about Robotic Case Packaging Systems This article provided me with a variety of data. Continue to post.

    ReplyDelete
  5. Great Platform. Are you also searching for nursing essay writing help? we are the best solution for you. We are best known for offering the best nursing essay writing services

    ReplyDelete
  6. chrome browser is user friendly and very responsive recently i shift chrome form Mozilla because its very easy to use. anyway we have 8 years experienced team who can fulfil your desire Law Essay Help UK requirement.

    ReplyDelete
  7. Your blogs are fantastic. Are you looking for a Online Phd Thesis Help as well? We are the most suitable option for you. We are well renowned for providing students with affordable nursing writing services that do not require them to break the budget.

    ReplyDelete
  8. Your blogs are great.Are you also searching for Nursing Writing Services reviews? we are the best solution for you. We are best known for delivering nursing writing services to students without having to break the bank.whatsapp us:+1-(951)-468-9855

    ReplyDelete
  9. Hey! “Can you write my paper today?” Get a suitable expert from https://rankmywriter.com/essaypro-com-review instantly and be on your way to getting a custom assignment now. We can comfortably tackle your assignment, regardless of subject, topic, length, or complexity. Our speedy writing specialists are spread across more than 50 subjects and are ready to help you meet your urgent deadline.

    ReplyDelete
  10. It is used in the production of toys, water bottles, squeeze bottles for detergents, pipes for shower curtains, medical tubes, and butter jars. It poses a serious health risk since it is linked to the development of asthma and cancer. PE Stretch Film

    ReplyDelete
  11. I found your blog post very informative and insightful. Thanks for sharing, Please read my blog crewneck t shirts for men

    ReplyDelete
  12. Explore the world around you like never before by investing in a pair of binoculars. With their ability to magnify distant objects and bring them into clear focus, binoculars allow you to see the finer details of nature, wildlife, and even sporting events. From compact and lightweight options perfect for hiking and travel, to high-powered binoculars designed for stargazing and long-distance viewing, there is a wide range of choices available to suit your specific needs and preferences.

    So why wait? Take your outdoor adventure to the next level and Buy Binoculars today. binoculars will provide you with a whole new perspective and allow you to immerse yourself in the beauty of the world around you.

    ReplyDelete