Questions tagged [exploit-kits]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
20 votes
5 answers
5k views

Where can I find a solid BURP tutorial? [closed]

I'm looking for a good resource for learning/configuring BURP. I understand the concepts behind using the framework, and have read the docs on the site, but if anyone has a solid tutorial link I ...
mrnap's user avatar
  • 1,308
14 votes
1 answer
3k views

Why do exploit kits use droppers?

I've been looking into the structure of the online criminal underground, which consists of exploit kits, droppers, and malware payloads. What is the function of the dropper in this pipeline? Why ...
Fred Concklin's user avatar
13 votes
3 answers
2k views

How do you defend specifically against attackers utilizing any or all of the commercial exploit kits?

There are several commercial exploit kits available containing 0day vulnerabilities: White Phosphorus Exploit Pack http://www.immunityinc.com/products-whitephosphorus.shtml Agora Exploit Pack http:...
Tate Hansen's user avatar
  • 13.8k
13 votes
1 answer
2k views

SCADA / PLC exploit code was released in metasploit. Now what?

Wired reports that there are many security issues with Programmable Logic Controllers (PLCs) and now there is an easy to use tool to scan and detect vulnerabilities. They say it's so easy, the ...
makerofthings7's user avatar
10 votes
2 answers
1k views

How do exploit kits enumerate or fingerprint their targets?

My current understanding is that an exploit kit will fingerprint (gather information on) a system, check those details against a database of vulnerabilities and then attempt to use the relevant ...
Arlix's user avatar
  • 1,499
7 votes
1 answer
851 views

Realistic: Exploiting a computer on BIOS/ hardware level in less than an hour? (Infinite preparation time)

I wonder how hard it it to infect a laptop or netbook in 60 minutes or less in a way the victim cannot easily clean their machine by wiping hard disk drives. Let's assume the following: The attacker ...
ALittleBitOfParanoia's user avatar
4 votes
2 answers
42k views

known public exploits for vsftpd 2.0.1/2.0.5

I somehow noticed that there were numerous reports of security vulnerabilities of vsftpd 2.0.1~2.0.5; however, there just seems to be no public exploits. The server I am working on has vsftpd 2.0.5 (...
Leo Zacchov's user avatar
4 votes
2 answers
1k views

How to mitigate evil twin WIFI social engineering attack?

I just come across this article: Capturing WPA Passwords by Targeting Users with a Fluxion Attack. Although WIFI Evil Twin attack and WIFI de-authentication attacks is known for a long time, a ...
mootmoot's user avatar
  • 2,407
3 votes
2 answers
333 views

Proof of concepts for published exploits

Do industry pros have VM's or various workstations setup to go through known exploits after they've been patched or is that less beneficial for learning than i'm imagining? I'm thinking, how can you ...
inbinder's user avatar
  • 155
2 votes
3 answers
1k views

Browser as Honey-Pot, is there?

I'm watching all this movement around Metasploit project, the great number of different exploitation plugins, and thousands of exploit packs. Now, it is real truth, anyone could configure his own ...
anonymous's user avatar
2 votes
1 answer
196 views

Does Routersploit install any malware or executables on my PC?

If I install Routersploit on my PC, would it install any malware or executable binaries as part of it to PC? Even though developers of Routersploit do not have any nefarious intention to add malware, ...
Ajay's user avatar
  • 41
1 vote
1 answer
202 views

Wireless Exploit Project

I've been given a task of doing research for some tools/methods of accomplishing the following goals: The engineers will scan the 802.11-based signal cloud around your network testing for ways that ...
xpkiro's user avatar
  • 11
1 vote
1 answer
127 views

Can website exploit kits contain bootkits?

Can a website exploit kit theoretically contain a bootkit (it flashes your UEFI/BIOS)?
Sir Muffington's user avatar
1 vote
1 answer
133 views

Ad-Banner Rendering Sites Serve with malicious content - how to respond?

We've received a random email, which was of-course by the way it looks might be a marketing attempt - however, one always needs for a verification to be done. The email read the following: We have ...
Shritam Bhowmick's user avatar
0 votes
1 answer
332 views

Automatic exploit searches

How to automatically search and download exploits which matches for example with kernel release ? Is there for example a public REST web service which provide data in XML or JSON format to a client ...
TMR_OS's user avatar
  • 218
0 votes
1 answer
307 views

Can my infected phone’s hotspot infect my outdated computer?

Knowing that anything is possible for the many ways a hacker can break into a system, is it also possible that if I have an infected phone acting as a hotspot, my outdated computer could get infected ...
Quentin Bolton's user avatar
0 votes
1 answer
131 views

Difference Between Exploit Kits Vs. Probing a Network for Vulnerabilities

I don’t understand exactly the difference between websites using exploit kits on visiting users vs. a website server probing a network for vulnerabilities and then exploiting them. The scenario is ...
Quentin Bolton's user avatar
-1 votes
1 answer
138 views

Shortened links and social media [closed]

I've been into IT-sec for a few years now and I have recently gotten in to the whole reddit/r/netsec, twitter, security.stackexchange thing, to get more involved with the community. What surprises me ...
Memorem's user avatar
  • 11
-2 votes
1 answer
206 views

websites with vulnerabilities INFO [duplicate]

Websites like http://www.cvedetails.com/ http://www.securityfocus.com This websites show information about vulnerabilities and exploits, which other sites are similar?
riles's user avatar
  • 3