Attention!!™
SMB3 Hacking Forum Opened!
Information needed!
If you have any useful data on hacking SMB3, please post it in the this stickied thread in the new SMB3 Forum. We are also looking for someone to help run a SMB3 hacking Wiki.
Join the Kafuka Discord! (Click here)
Views: 5,475,963
Main | FAQ | IRC chat | Memberlist | Active users | Latest posts | Calendar | Stats | Ranks | Online users | Search
09-20-18 10:08 PM
Guest: Register | Login

0 users currently in msg db 'Computer Address',0xa | 1 guest

Main - msg db 'Computer Address',0xa - ASUS LiveUpdate MitM exploit
Next newer thread | Next older thread


StapleButter
Posted on 06-05-16 03:51 PM Link | ID: 90426
Developer
Acmlmboard has... side effects
Level: 72


Posts: 1014/1615
EXP: 3212646
Next: 111116

Since: 01-05-12
From: France

Last post: 1 day
Last view: 1 day
source


ASUS LiveUpdate is one of ASUS' preinstalled bloatware programs, that updates shit like BIOS, drivers etc...

The updates are retrieved over plain HTTP and not authenticated. There is a way, via MitM and some other trickery, to make it run a malicious executable with admin/system privileges.



Long story short, first thing to do when getting a new computer is axing all the preinstalled bloatware.

____________________
Kuribo64 - we hack shit
obsolete advert is obsolete

Danika
Posted on 06-05-16 07:24 PM Link | ID: 90428

Crazy Catgirl
Meow meow meow meow...
Level: 194


Posts: 2749/16646
EXP: 102032806
Next: 1510288

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 3 min.
Last view: 3 min.
Just as bad as the Lenovo "Superfish" malware, too :P Typically whenever I buy a name brand machine I do a full format and erase the hard drive and do a clean install using the OEM supplied key ;)


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

Next newer thread | Next older thread
Main - msg db 'Computer Address',0xa - ASUS LiveUpdate MitM exploit


Acmlmboard v2.5.4 (8/04/2018)
© 2005-2018 Acmlm, Emuz, et al.

Page rendered in 0.031 seconds. (610KB of memory used)
MySQL - queries: 59, rows: 458/491, time: 0.018 seconds.