Skip To Main Content
Exploit Kit on Muck Rack

Exploit Kit

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Exploit Kit’s profile

Articles by Exploit Kit

Internet Explorer CVE-2019-1367 Exploitation - part 2

|
By Taha Karim, Exploit Kit, Write-what-where condition
| blog.confiant.com
In Part1 we explained CVE-2019–1367 vulnerability root cause. In this part we will discuss how this bug was exploited in the wild to achieve code execution. We will focus on the exploits we found in the wild used by both Magnitude Exploit Kit and DarkHotel APT. If needed, readers can go directly to Part3 for the Magnitude Exploit KIT shellcode analysis.
Open in Who Shared Issue with article?

Internet Explorer CVE-2019-1367 In the wild Exploitation - prelude

|
By Taha Karim, Darius Bashar, Exploit Kit
| blog.confiant.com
Photo by Darius Bashar on Unsplash There are some important aspects to know about CVE-2019–1367 before diving into the technical analysis including the intel around it and the series of events following the in-the-wild exploitations and Microsoft patches. First of all, here is the bug class of this bug based on the Google P0 report: JScript variable (represented as VAR structure) isn’t properly tracked by garbage collector Is it important to understand the bug class.
Open in Who Shared Issue with article?

Internet Explorer CVE-2019-1367 Exploitation - part 1

|
By Taha Karim, Exploit Kit
| blog.confiant.com
In this section we will go through the process of extracting the exploit from the pcaps generously provided by malware-traffic-analysis.
Open in Who Shared Issue with article?
Show More