Follow us on Twitter!
You cannot teach a man anything; you can only help him find it within himself. - Galileo
Wednesday, April 23, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 27
Guests Online: 26
Members Online: 1

Registered Members: 82885
Newest Member: ConiBE
Latest Articles
View Thread

HellBound Hackers | Computer General | Hacking in general

Author

Anyone know about gzip vulnerabilities


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 18-01-11 04:53
I am messing around with a windows exe application. This application allows its users to add an image to their player, an avatar. I figured out that when you are in the same room as another player who has an image that image downloads to your computer. It downloads as a gzi file into the appropriate program files folder of the application. Just wondering if anyone knows of any gzip vulnerabilities and if there are any significant ones can they even be taken advantage of on a windows machine? Maybe the gzi file is executed by the application when viewing the players image. So since the gzi file is executed at some point it may be possible to execute malicious code on the computer of whoever extracts it. I believe the image itself may be unziped by the application and presented to the other players as a normal jpeg so it might be possible to execute code through your jpeg image on the victims machine, i have many questions about this also but i am going to make a thread specifically about that.




Edited by rex_mundi on 11-12-13 13:42
Author

RE: Anyone know about gzip vulnerabilities?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 18-01-11 18:35
MoshBat wrote:
Only just noticed this. Had I seen it before I replied to your other, I wouldn't have bothered answering with any kind of (vague) details.

This is what you actually need:
http://www.securi. . .

Or this:
http://bit.ly/i1agE0


k. thanks for your response.

by the way,,,,,,,,,
is that a marijuana plant your trying to show off there? I sure hope not because you have really messed up if it is... I'm from California right next door to humboldt county. I have the best bud for the cheapest prices in the entire world. the best growers in the world come from right here in my back yard (in my opinion). I have a little grow going myself. Hydroponics of course, soil is just so old school. Looks like you need to purchase one of these, http://tinyurl.co. . .ijuanaHelp that will help tremendously with the ease of growing (any plant at all). Anyways let me know if i can help you in any way with your little growing project. even if it isnt marijuana (your camera sucks.) i can still help Ive had experience growing everything form vegetables to opium poppies and of course my favorite marijuana. let me know.
had to throw that link in. but seriously not being a smart ass i know my way around marijuana gardening so let me know.






Edited by on 19-01-11 00:57
Author

RE: Anyone know about gzip vulnerabilities?

spyware
Member



Posts: 4192
Location:
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 18-01-11 20:12
Heh, amused by your reply to Moshbat. I actually found a package containing all vulnerabilities in the current version of gzip, take a gander here: http://bit.ly/dUMMXZ

PM me if you need help.



img507.imageshack.us/img507/3580/spynewsig3il1.png
"The chowner of property." - Zeph
[small]
Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.
- Carl Sagan
[center]�Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?� - Ebert[/ce

Edited by spyware on 18-01-11 20:14
Author

RE: Anyone know about gzip vulnerabilities?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 19-01-11 00:45
spyware wrote:
Heh, amused by your reply to Moshbat. I actually found a package containing all vulnerabilities in the current version of gzip, take a gander here: http://bit.ly/dUMMXZ

PM me if you need help.


very helpful link spyware thanks. the "GZip Long File Name Buffer Overflow Vulnerability" looks promising, ill have to checkout that site more in depth after a min. thanks a lot.



Author

RE: Anyone know about gzip vulnerabilities?

spyware
Member



Posts: 4192
Location:
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 19-01-11 01:12
apescanfly223 wrote:
very helpful link spyware thanks. the "GZip Long File Name Buffer Overflow Vulnerability" looks promising, ill have to checkout that site more in depth after a min. thanks a lot.


Snap, what was supposed to be a witty, sharp remark about people who don't do their own study of source code turns out like this...

On the other hand, you think you can work with an exploit made public in (at least) 2001. Ha. You fool.



img507.imageshack.us/img507/3580/spynewsig3il1.png
"The chowner of property." - Zeph
[small]
Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.
- Carl Sagan
[center]�Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?� - Ebert[/ce