Log in

View Full Version : exploited pdf


NMI
July 19th, 2009, 05:04
can u help for exploiting pdf with prone function (Collab.getIcon) ?
i extract pdf of milw0rm but streams don't inflate compelete.

evaluator
July 19th, 2009, 08:50
where is PDF?
Also look here. i attached swf-file to EXE & call exploit address
http://www.woodmann.com/forum/showthread.php?t=12863

NMI
July 19th, 2009, 13:02
http://milw0rm.com/exploits/8595

it's exploited pdf with run calc.exe
i want to use shellcode instead of calc.exe javascript shellcode.

evaluator
July 20th, 2009, 03:52
what will do your shellcode? ~

NMI
July 20th, 2009, 04:48
Quote:
[Originally Posted by evaluator;81928]what will do your shellcode? ~

it's reverse shellcode.
shellcode isn't major problem. my problem is how can do replace my shell with calc.exe.
clearly that how can inflate FlateDecode for stream in pdf. can u help me?

evaluator
July 20th, 2009, 05:04
PDF stream is ZLIB compressed.

NMI
July 20th, 2009, 12:56
O man! I know it but my inflate code , decode stream not compelete.

evaluator
July 20th, 2009, 14:24
ahm, so you want create your own shell-code!? strange..
my repeat question:>> what will do your shellcode? ~

NMI
July 20th, 2009, 14:48
o No.
shellcode differ from exploit .ok?
i need exploit algorithm that encoded with FlateDecode in stream. ok?
stream not inflate compelete.

NMI
July 20th, 2009, 15:00
Musician member?
what r u dooing?

evaluator
July 22nd, 2009, 04:07
yet i not understood, what you want.
IF you want know exploit-decryptor-algo, it is simple XOR/ADD
IF you want know, how it is done, mostly probably by METASPLOIT engines.