![]() |
|
Philly's Personal Skype Jacked - Printable Version +- Sinisterly (https://sinister.ly) +-- Forum: General (https://sinister.ly/Forum-General) +--- Forum: The Lounge (https://sinister.ly/Forum-The-Lounge) +--- Thread: Philly's Personal Skype Jacked (/Thread-Philly-s-Personal-Skype-Jacked) Pages:
1
2
|
RE: Philly's Personal Skype Jacked - BreShiE - 04-10-2013 (04-09-2013, 06:40 PM)w00t Wrote:(04-09-2013, 09:14 AM)vipvince Wrote: For skype, alternatively you can try to get your hands on the REAL leaked skype 0day, not the one that doesn't do anything : P, this will let you do remote code exec on your victim, fun stuff. One guy is selling it for $100 on HF. I've heard about it for a while. RE: Philly's Personal Skype Jacked - w00t - 04-10-2013 It isn't a 0day that allows code execution if it's being sold for 100$. I'd bet more on it not being a 0day then not being able to exec arbitrary code, since Skype isn't the best about forcing clients to updates. RE: Philly's Personal Skype Jacked - Nefarious - 04-13-2013 (04-13-2013, 01:24 AM)vipvince Wrote:(04-10-2013, 06:04 AM)w00t Wrote: It isn't a 0day that allows code execution if it's being sold for 100$. I'd bet more on it not being a 0day then not being able to exec arbitrary code, since Skype isn't the best about forcing clients to updates. RE: Philly's Personal Skype Jacked - w00t - 04-13-2013 (04-13-2013, 01:24 AM)vipvince Wrote: The only skype 0s out there atm is that leaked rce, any shit you saw for 50k on darkode/torland/0sec/0dayin/coru/anyother superl33tf0rum is fake. There was a priv esc bug, but that was local, and pretty lame. None the less, skype is vuln to overflow, whether it's stackbased/stckbased bof/bof, etc. it just takes some time, and fuzzing. What. You say that there's only one exploit out there( though the RCE is outdated and also hardly an exploit ), then go on to say that they can be found. Trust me, there are a few on the market. RE: Philly's Personal Skype Jacked - w00t - 04-13-2013 Most people have the fake version of it. That's exactly why. And if you're really as elite as you seem to like to think, you would know that 0day sellers don't tend to make threads. They will usually sell the exploit to a broker, and anyone who knows that broker will buy it from them. |