PDF Structure + embedded JavaScript

Since recently, I’ve been studying about PDF structure and how it can be a platform to distribute and infect malware to user. All I can say, it is made possible through vulnerability in handling JavaScript.

GNU Screen rawks!

I’ve always heard about screen before but never had an interest to read about and try. Up until recently, a friend of mine use it and it got my attention on how he manage his terminal with screen.

Testing the new smb2 exploit

Recently I’ve downloaded the metasploit framework 3.3 and tested the new unpatched smb2 exploit in my local network ;-D.

Accessing MySQL database from outside localhost

When I installed or use certain application that needed a MySQL database, mostly it will be accessing from a localhost.

Exploit published for SMB2 vulnerability in Windows

Good news! (i guess), the fully functional exploit code for the (still unpatched) Windows SMB v2 vulnerability has been published to the public via metasploit framework. It can be used to discover and attack vulnerable Windows machines remotely.

You can read more at here, here and here