Home
Tools
Malybuzz
peepdf
Pub
Advisories
Exploits
Articles
Presentations
Var
Scripts
About
Home
Workshop
Analysis of a CVE-2013-3346/CVE-2013-5065 exploit with peepdf
Conferences
Exploits
PDF
peepdf
Shellcode
Tools
Vulnerabilities
Workshop
There are already some good blog posts talking about this exploit, but I think this is a really good example to show how
peepdf
works and what you can learn next month if you attend the
1day-workshop
“Squeezing Exploit Kits and PDF Exploits”
at
Troopers14
or the
2h-workshop
"PDF Attack: A Journey from the Exploit Kit to the Shellcode"
at
Black Hat Asia (Singapore)
. The mentioned exploit was using the
Adobe Reader ToolButton Use-After-Free vulnerability
to execute code in the victim's machine and then the
Windows privilege escalation 0day
to bypass the
Adobe sandbox
and execute a new payload without restrictions.
This is what we see when we open the PDF document (
6776bda19a3a8ed4c2870c34279dbaa9
) with
peepdf
:
Submitted by jesparza on Thu, 2014/02/20 - 21:48
Read more
Español
Search this site:
Scripts
Spam
Mobile
Feodo
Vulnerabilities
Shellcode
Reversing
Conferences
peepdf
Fraud
Research
Analysis
Black Hat
Malware
Tatanga
Botnet
Challenge
Botnets
Javascript
Specifications
Python
Exploits
Tools
PDF
ZeuS
NFC
Citadel
Exploit kits
Social Networking
Security
more tags
Latest blog posts
Dridex spam campaign using PDF as infection vector
Adding a scoring system in peepdf
Travelling to the far side of Andromeda at Botconf 2015
Black Hat Arsenal peepdf challenge solution
Black Hat Arsenal peepdf challenge
peepdf news: GitHub, Google Summer of Code and Black Hat
Andromeda/Gamarue bot loves JSON too (new versions details)
Quick analysis of the CVE-2013-2729 obfuscated exploits
Dissecting SmokeLoader (or Yulia's sweet ass proposition)
Released peepdf v0.3
more
Security Posts
Infocon: green
Cursos y consejos sobre ciberseguridad en la Living App de Hack by Security en Movistar+
ISC Stormcast For Friday, April 26th, 2024 https://isc.sans.edu/podcastdetail/8956, (Fri, Apr 26th)
Apple releases eight small AI language models aimed at on-device use
Millions of IPs remain infected by USB worm years after its creators left it for dead
The private sector probably isn’t coming to save the NVD
School athletic director arrested for framing principal using AI voice synthesis
Talos IR trends: BEC attacks surge, while weaknesses in MFA persist
Sifting through the spines: identifying (potential) Cactus ransomware victims
5 reasons to strive for better disclosure processes
3 healthcare organizations that are building cyber resilience
5 ways to strengthen healthcare cybersecurity
Cybersecurity Concerns for Ancillary Strength Control Subsystems
Update on Naked Security
more