All Questions
9 questions
3
votes
2
answers
355
views
When receiving PDFs from unknown sources, is it sufficient to remove dynamic content to minimise attack surface?
My company allows customers to upload PDFs, JPEGs and PNGs to our servers, which are then viewed by clients. We want to minimise the potential for attack on the clients. While the image formats are ...
- 161
0
votes
1
answer
179
views
Will browser isolation solution protect our enterprise from Flash and JavaScript exploits and fileless malware?
Since we didn't see any pentest done to bypass on such solution, we don't really know if it worth purchasing such type of solution. Will this really protect us from Flash and JavaScript exploits, ...
- 1,294
1
vote
0
answers
222
views
Testing Adobe Flash - SWF Stack Corruption
For didactic purposes I have a windows 7 VM with IE11 and Adobe Flash 18.0.0.203.
Also, I must test if CVE-2017-2988 can be executed on it.
I have downloaded the stackbad.swf, inserted it in an index....
- 113
1
vote
1
answer
289
views
Is it possible to encode a Flash exploit with msfencode?
I am using a Flash exploit from metasploit, exploit/multi/browser/adobe_flash_hacking_team_uaf.
The Cisco FirePOWER services notice these signatures and drop the packets.
I was wondering about the ...
- 21
2
votes
1
answer
708
views
What to do with an APK file containing Swf.Exploit.CVE_2015_0323-1 and ELF File?
I received an APK file from a source. Prior to installation, I ran a virus scan on it. The result had following main features:
The file contained Swf.Exploit.CVE_2015_0323-1
It required android....
- 123
-2
votes
2
answers
898
views
Does Microsoft EMET protect against latest Hacking Team Adobe Flash 0-day exploit?
If I were to not update Adobe Flash and instead used the old version (from before the Hacking Team 0-day exploit was published in the internet), in that case, would Microsoft EMET protect me from the ...
- 209
14
votes
2
answers
4k
views
Why are Adobe Flash exploits found so often? [closed]
Over the last couple of years Adobe Flash published bug fixes for (zero-day) exploits so often, that the installation is already annoying. But why are exploits so often found in this particular ...
- 765
6
votes
3
answers
338
views
find if 0-day flash bug was exploited (on a particular machine)
There have been several critical 0-day exploits in the past days/weeks in Flash alone. Nobody knows how long the 0-days have been exploited, and it is reasonable to expect that there are 0-days being ...
- 1,771
0
votes
1
answer
312
views
What is the difference between XSS and Cross Site Flashing? [duplicate]
I want to know the basic differences between XSS and XSF
- 2,097