Microsoft DRM technology (msnetobj.dll) ActiveX Multiple Remote Vulnerabilities

Detail of POC can be viewed
http://www.exploit-db.com/exploits/15061/
http://www.securityfocus.com/bid/43345/info

Microsoft DRM technology (msnetobj.dll) ActiveX Multiple Remote Vulnerabilities
by

Asheesh Kumar Mani Tripathi


# Vulnerability Discovered By Asheesh kumar Mani Tripathi

# email informationhacker08@gmail.com

# company www.aksitservices.co.in

# Credit by Asheesh Anaconda

# Date 18th Sep 2010

# Description: Microsoft DRM technology (msnetobj.dll) ActiveX suffers from multiple remote vulnerabilities such as buffer overflow, integer overflow and denial of service (IE crash). This issue is triggered when an attacker convinces a victim user to visit a malicious website.

The "GetLicenseFromURLAsync" function does not handle input correctly.
Remote attackers may exploit this issue to execute arbitrary machine code in the context of the affected application, facilitating the remote compromise of affected computers. Faile exploit attempts likely result in browser crashes.

Detail of POC can be viewed
link:http://www.exploit-db.com/exploits/15061/
link:http://www.securityfocus.com/bid/43345/info

Problem :No Internet in Backtrack 4

Problem :No Internet in Backtrack 4 BT4

1)start the Network ..

In command line type
bt# /etc/init.d/networking start

or Menu -> Services -> NETWORK -> Start NETWORK

Then Configure Network Card

Static IP address

ifconfig eth0 192.168.1.2

For variable subnet mask
ifconfig eth0 192.168.1.2 netmask 255.255.255.224


Add a default gateway:

route add default gw 192.168.1.1 eth0

Replace the IP address with your default gateways


Assign DNS servers:

echo nameserver 200.1.1.1 > /etc/resolv.conf


For DHCP

dhcpcd eth0

Metasploit db_create error

msf > db_create
[-]
[-] Warning: The db_create command is deprecated, use db_connect instead.
[-] The database and schema will be created automatically by
[-] db_connect. If db_connect fails to create the database, create
[-] it manually with your DBMS's administration tools.

Solution
Just use

msf > db_driver sqlite3

or
msf > db_connect

Installing Oracle Client using TOAD

1)Install the oracle instant client. (instantclient_10_2)
Unzip the files to a directory, and then copy the path of this directory to the clipboard.

2)Add this directory to the PATH environmental variable.
right click on My Computer, go to the Advanced tab, and click 'Environment Variables'. Under System variables, find 'Path'. Select it, and click edit. ctrl-v to paste the directory into the string, and say OK. e.g.:

Before:C:\Perl\bin\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\

After: C:\Perl\bin\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\;C:\instantclient_10_2


3)In the same window, under 'User variables for ...', Click the New button. Call the variable 'TNS_ADMIN'. ctrl-v to paste the directory path into the 'variable value' field. Say OK, and close out the 'My Computer' properties windows.

e.g Varaible name TNS_ADMIN
variable value C:\instantclient_10_2


4)Create a file called 'TNSNAMES.ORA' in your instant client installation directory. In this file designate the connection parameters for your database. Mine looked something like this:

DB_ALIAS =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = ip.add.re.ss)(PORT = 1521))
)
(CONNECT_DATA =
(SID = orcl)
(SERVER = DEDICATED)
)
)

replace the DB_ALIAS, ip.add.re.ss, port, and SID with your settings.


5)Reset your computer, fire up Toad, and then open a new connection. You should see DB_ALIAS as an option under the database field. Set your username and password, hit connect

File association fixes for Windows Vista

his page contains the file association fixes for some of the most common file types. The fixes are applicable for Windows® Vista systems only.

http://www.winhelponline.com/articles/105/1/File-association-fixes-for-Windows-Vista.html


Broken EXE Association

Executable (.EXE) files are the programs you run for most tasks on a computer. Now and again someone reports that they have, in error, assigned some other program to the .EXE extension without first establishing a System Restore Point so they can recover from making this error. When that happens little will run on the computer. Instead, when an .EXE file is clicked some program will start and attempt to process that file instead.

http://filext.com/faq/broken_exe_association.php

Opera (plenitude String )Denial of Service Exploit

http://www.packetstormsecurity.org/1003-exploits/operaplen-crash.txt
http://www.exploit-db.com/exploits/11617


=======================================================================

Opera (plenitude String )Denial of Service Exploit
=======================================================================

by

Asheesh Kumar Mani Tripathi


# code by Asheesh kumar Mani Tripathi

# email informationhacker08@gmail.com

# company www.aksitservices.co.in

# Credit by Asheesh Anaconda


#Download http://www.opera.com/download/


#Background

Opera is a popular internet browser :)

#Vulnerability
This bug is a typical result when attacker try to write plenitude String in
document.write() function .User interaction is required to
exploit this vulnerability in that the target must visit a malicious
web page.



#Impact
Browser doesn't respond any longer to any user input, all tabs are no
longer accessible, your work if any might be lost.



#Proof of concept
copy the code in text file and save as "asheesh.html" open in Mozilla Firefox




Why do you worry without cause? Whom do you fear without reason? Who can kill you?
The soul is neither born, nor does it die.


#If you have any questions, comments, or concerns, feel free to contact me.

Mozilla Firefox 3.6 plenitude String Crash(0day) Exploit

link:http://www.exploit-db.com/exploits/11617
link:http://www.packetstormsecurity.org/1003-exploits/mozff36-crash.txt

for code

=======================================================================

Mozilla Firefox 3.6 plenitude String Crash(0day) Exploit
=======================================================================

by

Asheesh Kumar Mani Tripathi


# code by Asheesh kumar Mani Tripathi

# email informationhacker08@gmail.com

# company www.aksitservices.co.in

# Credit by Asheesh Anaconda


#Download www.mozilla.com/firefox


#Background

Mozilla Firefox is a popular internet browser. .....:)

#Vulnerability
This bug is a typical result when attacker try to write plenitude String in
document.write() function .User interaction is required to
exploit this vulnerability in that the target must visit a malicious
web page.


#Impact
MOzilla Crash :)


#Proof of concept
copy the code in text file and save as "asheesh.html" and closed all tabs and windows to avoid any lost of data

open in Mozilla Firefox and wait for 15 sec ...... :) and say Good Bye

Mozilla .......

Per usske phele Mozilla k antim darshan kar le :) Prem se bolo jai maata di

Mozilla Rest In Piece!!!!!!!!!!!!!!!!!!!!!!!!!!!



BHAGAVAD GITA Quote
You came empty handed, you will leave empty handed. What is yours today, belonged to someone else yesterday, and will belong to someone else the day after tomorrow. So, whatever you do, do it as a dedication to God!

Tum khaali haath aaye, khaali haath chale. Jo aaj tumhara hain, wao kal kisi aur ka tha, parso kisi aur ka hoga. Tum isse apna samajhkar magna ho rahe ho,bus yahi prasannatha tumhare dukhon ka kaaran hain.

#If you have any questions, comments, or concerns, feel free to contact me.