Cyber Security Consultant | Security Researcher
- Tweets 283
- Following 529
- Followers 2,014
- Likes 1,223
Do you know the exact location? I was trying to find the exact position by identifying the camera’s location using the road, sun, and mountains. I found these three red circles as possible locations, but the road still doesn’t match any of them.
1
30
This is their builder. You can see the features since it checks authentication on the client side if you set the response of /api/users to true.
2
2
185
yeah avast will do the job by unlocking a few 0-days on your device, you're typically safer without it 🤣
1
9
1,101
you guys should be careful this project configuration file contains a command that executes before the build starts and dropping vb and powershell into the temp directory ...
CC @malwrhunterteam @banthisguy9349 @RussianPanda9xx
3
8
480
@_devonkerr_ i don't think you'll be able to load a revoked driver. You can load a driver with an expired certificate, but not a revoked one you can't. An error will appear, like this
1
1
114
The malformed pixels at the bottom indicate potential data injection. Upon analysis, we can find a PowerShell command that decodes a Base64 encoded PE file and executes it.
5
921
And since it's an arbitrary file deletion, we can easily use it to exploit the MSI installer rollback to achieve privilege escalation :)
github.com/ZeroMemoryEx/IObi…
Shoutout to the homies at "IObit Malware Fighter".
Their IMFForceDelete driver is so wildly vulnerable, and poorly written, you can have their driver arbitrarily delete any file on the machine with 0 privileges and literally 1 line of code
Thanks @_mmpte_software for sharing
5
78
328
33,425
Indeed, i see the admin was already hacked a few months ago. I assume they didn't change the password!
2
277
I see. Prob should also be used inside the try-except block, Thanks for your note! I'll try this scenario when I get some time. btw I've also added a little fun part where, if an access violation exception occurs, the driver will terminate the caller Haha
1
3
264
