http://www.darknet.org.uk/2008/08/isr-evilgrade-inject-updates-to-exploit-software/ Ethical Hacking, Penetration Testing & Computer Security Sat, 21 Nov 2009 06:04:59 +0000 http://wordpress.org/?v=2.8.6 hourly 1 http://www.darknet.org.uk/2008/08/isr-evilgrade-inject-updates-to-exploit-software/#comment-124714 Morgan Storey Mon, 01 Sep 2008 10:33:09 +0000 http://www.darknet.org.uk/?p=988#comment-124714 @Navin: Well yes windows updates is insecure, but have a look at Redhat, its key was compromised, and a few packages signed with it. A lot of Linux package managers (except apt I am pretty sure) have been shown to install an older (vulnerable) version of a package over an existing newer package, so the same dns redirect would work there, as long as the repo's gpg key was trusted, but how many users would just click continue... @Navin: Well yes windows updates is insecure, but have a look at Redhat, its key was compromised, and a few packages signed with it. A lot of Linux package managers (except apt I am pretty sure) have been shown to install an older (vulnerable) version of a package over an existing newer package, so the same dns redirect would work there, as long as the repo’s gpg key was trusted, but how many users would just click continue…

]]> http://www.darknet.org.uk/2008/08/isr-evilgrade-inject-updates-to-exploit-software/#comment-124712 Navin Mon, 01 Sep 2008 09:55:38 +0000 http://www.darknet.org.uk/?p=988#comment-124712 +1 c'mon its like a holy grail for a dark-hatter...the ability to infect millions of people at a go!! Windows Update seriously, as Morgan pointed out, shows how insecure Windows is compared to other OSes +1
c’mon its like a holy grail for a dark-hatter…the ability to infect millions of people at a go!! Windows Update seriously, as Morgan pointed out, shows how insecure Windows is compared to other OSes

]]> http://www.darknet.org.uk/2008/08/isr-evilgrade-inject-updates-to-exploit-software/#comment-124710 d347hm4n Mon, 01 Sep 2008 07:42:43 +0000 http://www.darknet.org.uk/?p=988#comment-124710 Was wondering when a tool was going to come out to use this P.O.C. Was wondering when a tool was going to come out to use this P.O.C.

]]> http://www.darknet.org.uk/2008/08/isr-evilgrade-inject-updates-to-exploit-software/#comment-124705 Morgan Storey Sun, 31 Aug 2008 00:01:11 +0000 http://www.darknet.org.uk/?p=988#comment-124705 well I decdied to check a bit how windows updates works, cause I was sure it is http. I google, no mention of any internal signing process. Next step a quick netstat. It is plain http traffic, as I originally thought. Makes me feel all safe and warm... sarcasm doesn't present well on the internet, but yikes I am glad I have moved away from windows. well I decdied to check a bit how windows updates works, cause I was sure it is http.
I google, no mention of any internal signing process.
Next step a quick netstat. It is plain http traffic, as I originally thought. Makes me feel all safe and warm… sarcasm doesn’t present well on the internet, but yikes I am glad I have moved away from windows.

]]> http://www.darknet.org.uk/2008/08/isr-evilgrade-inject-updates-to-exploit-software/#comment-124700 lyz Sat, 30 Aug 2008 12:09:42 +0000 http://www.darknet.org.uk/?p=988#comment-124700 Windows update crack prolly just in the making.. lol Windows update crack prolly just in the making.. lol

]]> http://www.darknet.org.uk/2008/08/isr-evilgrade-inject-updates-to-exploit-software/#comment-124686 Morgan Storey Fri, 29 Aug 2008 11:24:11 +0000 http://www.darknet.org.uk/?p=988#comment-124686 Thanks for the mention... Nah I am kidding. It is an awesome little proof of concept, I am wondering why they aren't including windows updates. I am pretty sure from what I have seen it is only http (not https), so it could be broken as well in the same manner, anyone have a link to prove me wrong? Thanks for the mention… Nah I am kidding. It is an awesome little proof of concept, I am wondering why they aren’t including windows updates. I am pretty sure from what I have seen it is only http (not https), so it could be broken as well in the same manner, anyone have a link to prove me wrong?

]]>