A forum for reverse engineering, OS internals and malware analysis 

Zero Day Java Exploits(All Java Exploits goes here)

Forum for analysis and discussion about malware.

Re: Zero Day Java Exploits(All Java Exploits goes here)

 #15396  by DWS94
 Wed Aug 29, 2012 10:51 am
Oracle Java 7 Update 6, and possibly other versions, allows remote attackers to execute arbitrary code via a crafted applet, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class

cve2012xxxx/Gondzz.class -
http://pastebin.com/pdrkL3xV

cve2012xxxx/Gondvv.class
http://pastebin.com/YrY5u7RZ

A Metasploit module developed to target this Java 0-day
EXP
http://pastie.org/4595899

Re: Zero Day Java Exploits(All Java Exploits goes here)

 #15439  by Xylitol
 Fri Aug 31, 2012 8:32 am
java 7 u6 exploit hxxp://pagemake.org >> http://urlquery.net/report.php?id=153395
https://www.virustotal.com/file/79c7dfc ... 346401354/ applet.jar >> 13/42
https://www.virustotal.com/file/ecd252c ... 346401456/ dcgold.exe >> 2/41

--
Update Java (Java 7 u7): http://www.java.com/en/download/installed.jsp
How to turn off Java applets on firefox: http://support.mozilla.org/en-US/kb/How ... %20applets
Is your Java exploitable? http://www.isjavaexploitable.com/
Attachments
infected
(536.32 KiB) Downloaded 113 times
  • 1
  • 2
  • 3
  • 4
  • 5
  • 7
 Return to “Malware”