Attention!!™
SMB3 Hacking Forum Opened!
Information needed!
If you have any useful data on hacking SMB3, please post it in the this stickied thread in the new SMB3 Forum. We are also looking for someone to help run a SMB3 hacking Wiki.
Join the Kafuka Discord! (Click here)
Views: 5,486,387
Main | FAQ | IRC chat | Memberlist | Active users | Latest posts | Calendar | Stats | Ranks | Online users | Search
09-25-18 05:20 AM
Guest: Register | Login

0 users currently in msg db 'Computer Address',0xa | 1 guest | 1 bot

Main - msg db 'Computer Address',0xa - ASUS LiveUpdate MitM exploit
Next newer thread | Next older thread


StapleButter
Posted on 06-05-16 03:51 PM Link | ID: 90426
Developer
Acmlmboard has... side effects
Level: 72


Posts: 1014/1617
EXP: 3221439
Next: 102323

Since: 01-05-12
From: France

Last post: 15 hours
Last view: 7 hours
source


ASUS LiveUpdate is one of ASUS' preinstalled bloatware programs, that updates shit like BIOS, drivers etc...

The updates are retrieved over plain HTTP and not authenticated. There is a way, via MitM and some other trickery, to make it run a malicious executable with admin/system privileges.



Long story short, first thing to do when getting a new computer is axing all the preinstalled bloatware.

____________________
Kuribo64 - we hack shit
obsolete advert is obsolete

Danika
Posted on 06-05-16 07:24 PM Link | ID: 90428

Crazy Catgirl
Meow meow meow meow...
Level: 194


Posts: 2749/16757
EXP: 103153205
Next: 389889

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 2 hours
Last view: 2 hours
Just as bad as the Lenovo "Superfish" malware, too :P Typically whenever I buy a name brand machine I do a full format and erase the hard drive and do a clean install using the OEM supplied key ;)


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

Next newer thread | Next older thread
Main - msg db 'Computer Address',0xa - ASUS LiveUpdate MitM exploit


Acmlmboard v2.5.4 (8/04/2018)
© 2005-2018 Acmlm, Emuz, et al.

Page rendered in 0.030 seconds. (609KB of memory used)
MySQL - queries: 55, rows: 454/487, time: 0.017 seconds.