full-disclosure - Re: Evilgrade 2.0 - the update explotation framework is back

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <AANLkTikEiijOnFsVw9cZKKmd6h-pqF6kx2315NRps3nz@mail.gmail.com>
Date: Sat, 30 Oct 2010 04:43:14 +0800
From: Jacky Jack <jacksonsmth698@...il.com>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Evilgrade 2.0 - the update explotation
 framework is back

It's now a time for vendors to re-consider their updating scheme.



On Fri, Oct 29, 2010 at 6:25 PM, [ISR] - Infobyte Security Research
<noreply@...obytesec.com> wrote:
>
> [ISR] - Infobyte Security Research
> ISR-evilgrade | www.infobytesec.com
>
> Infobyte Security Research is pleased to announce the release of evilgrade 2.0
> with a lot of new modules and a bunch of squashed bugs.
>
> [-] RELEASE DETAILS
>
> BRIEF OVERVIEW
>
> Evilgrade is a modular framework that allows the user to take
> advantage of poor upgrade implementations by injecting fake updates.
>
> This framework comes into play when the attacker is able to make
> traffic redirection, and such thing can be done in several ways
> such as: DNS tampering, DNS Cache Poisoning, ARP spoofing
> Wi-Fi Access Point impersonation, DHCP hijacking with your
> favorite tools.
>
> This way you can easy take control of a fully patched machine
> during a penetration test in a clean and easy way. The main idea
> behind the is to show the amount of trivial errors in the update
> process of mainstream applications.
>
>
> .:: [NEW MODULES] ::.
> There's a new amount of 63 modules to play with! :
> - Safari
> - iTunes
> - Quicktime
> - APT
> - Cygwin
> - Cpan
> - Java
> - iTunes
> - Mirc
> - Adium
> - Notepadplus
> - Opera
> - Bsplayer
> - Winamp
> - Trillian
> - Teamviewer
> - Virtualbox
> - Vmware
> - Winscp
> - Winupdate
> .. and many more (check out the documentation for complete list)
>
>
> ..:: [ONLINE DEMO] ::.
> Watch the framework in action, Java signed certificate bypass +
> javapayload = pwnage
> http://www.infobytesec.com/demo/java_win7.htm
>
> .:: [AUTHOR] ::.
>
> Francisco Amato
> famato+at+infobytesec+dot+com
>
> .:: [DOWNLOAD] ::.
> Get the last version over here:
> http://www.infobytesec.com/developments.html
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/