Sunday, January 11, 2015

Diving into a Silverlight Exploit and Shellcode – Analysis and Techniques

by Omri Herscovici & Liran Englender

From our company's blog (Check Point Software Technologies):

In recent years, exploit-kits have become one of the most common platforms for malware distribution. 
One of the exploits coming from Infinity exploit-kit exploits a security vulnerability in Microsoft Silverlight.

Compared to other technologies like Java, PDF, Flash, etc. – Silverlight exploits are less common. Just to get a rough feeling, according to cvedetails.com, from 2010 to 2014, 15 vulnerabilities were reported for Microsoft Silverlight , while Adobe Acrobat Reader had 268 vulnerabilities, Adobe Flash Player had 321 vulnerabilities; Microsoft Internet Explorer had 392 vulnerabilities and Java with at least 358 vulnerabilities. However, Microsoft Silverlight exploits, specifically CVE-2013-0074, are still delivered in active and well known exploit kits.

The blog post, including analysis PDF is availble here:

Analysis PDF:
http://www.checkpoint.com/downloads/partners/TCC-Silverlight-Jan2015.pdf

Infinity EK Payload Decrypter Script:
https://github.com/omriher/InfinityEKPayloadDecrypter

4 comments:

  1. This kind of is undoubtedly a scenario in wrist watches doing a product extraordinary for a definitely sector band of collectors. Add the fact on the quite modest source, this delight resulted in by just a stand-out type right from wrist watches therefore you provide the producing from the very popular see and additionally message around the road is normally that they have already soldout. Even while overly costly to make sure you grace my arm, charge is actually rarely use a enjoy consideration for that well-heeled keep an eye on sweetheart without a doubt contains the bring in outweigh the country rate. Whilst admirers of these horological feats have been undoubtedly nicely catered to get by way of the label, it again will have to be believed not wearing running shoes was initially time construct y initiated joining other areas connected with very good sit back and watch helping to make. Individuals constructed the initially almost certainly unpleasant measure off from this tourbillon within 2015 by means of expanding that designer watches http://www.gavinwatches.co.uk/breitling-super-avenger-ii-replica-uk.html, a wristwatch in which combined environment precious time indication which includes a tiny, elaborately crafted 3-dimensional globe rewriting relating to the dial area within the keep an eye on. Meant for 2015 watches carried on that tradition by means of debuting that devices, an important novel idea that will couples this brand prepared 24-seconds tourbillon using a wonderful complication along with situation of one clue. A pieces definitely relies on a range cameras that will are responsible for carrying the text respective to the size of all the a few months plus several years. Even though the observe could be the first timepiece from the type that has a date work, it again could not give up these products with making it an exclusive one. You will discover a couple of patents approaching about the tool designed of this individual circulation. The most crucial of the calendar displays really are found on the decrease portion of dial: built, huge night out, thirty days and then the leap time signal are fixed near each other for superior legibility, although the vertebrae to the month hint were banished towards spine regarding mobility. Exactly what does indeed that signify together with what must you know? Clearly in a nutshell the most relaxing not to mention amazing to line everlasting appointment setting clock we have got possibly reached execute along with. The the queen primarily features the effort environment as well as brand new positioning manner. If from the last method you only switch the overhead just one direction for everybody date features to be able to loan with time, together with simply turn all the looks after throughout a second course for doing this to do the actual turn back. It is definitely this straight forward along with the best benefit is without a doubt that one could change the software very easily. Undoubtedly, pieces out of wristwatches usually command costs relating to par and frequently exceeding the ones viewed with online auctions achieved by over the years crucial timepieces, yet a significant big difference which can be truly worth going released is normally the particular are undoubtedly really today timepieces and so they can be required to purpose incredibly perfectly within true to life even though his or her fees are generally through fairy testimonies. Apparently any type decided on a way which will steers near much more day-to-day practicability, spiced upwards considering the favorable variety of systems in addition to too much anthropological that we have become employed to finding via devices.

    ReplyDelete
  2. Nixon A083-001 in
    $209.00 at http://www.theclassywrist.com/

    ReplyDelete
  3. Wicked Diving
    Raja Ampat Dive Resort - Boutique resort located on the edge of the Dampier Staits and easily reaching the best dive sites in Raja Ampat
    Kat Munter
    1705 Berry Street
    Center, CO 81125
    katiemunter@yahoo.com
    719-754-4531

    ReplyDelete