Spentera Blog

Windows Red Team Lab Review

October 2, 2018 f3ci Tips

Intro Red Team generally is different with Penetration Test, Red Team is very offensive and should be performed as stealthy as possible. Readteaming is not

Zahir Accounting Enterprise Plus 6 <= build 10b 0day Exploit Vulnerability Discovery

October 1, 2018 modpr0be Exploit Development

Zahir Accounting adalah software akuntansi yang sangat banyak digunakan oleh tingkatan SOHO (Small Office Home Office) di Indonesia. Selain harganya yang terjangkau, Zahir memiliki fitur

FileRun: Blind SQL Injection Vulnerability

September 29, 2017 f3ci Security Advisory

Some time ago while doing a pentest, we found a vulnerability in a file sharing web application named FileRun. This application allows us to access our files anywhere through self-hosted secure cloud storage, backup and sharing files for our photos, videos, files and more.

CyberLink LabelPrint: Buffer Overflow

September 19, 2017 modpr0be Exploit Development, Security Advisory

It’s been a while since the last post about exploitation on this blog. This time, we try to explain a stack based overflow on a software called Cyberlink LabelPrint. The software serves as a tool to assist in designing labels for CD / DVD covers. Cyberlink LabelPrint is included in the installation of Cyberlink Power2Go, PowerDVD, and Power Producer software and also pre-installed in the latest laptop by Lenovo, HP, and Asus.

ALLPlayer: Buffer Overflow (SEH Unicode)

August 18, 2017 f3ci Exploit Development, Security Advisory

After playing around with unicode stack overflow, I try to do it on an application called AllPlayer. Techniques used are not much different, so the result will be the same as the previous exploits. This application never seems to be updated by the developer, ironically this application is widely used.

NetGain Enterprise Manager: Authentication Bypass / Local File Inclusion

June 5, 2017 f3ci Security Advisory

We found a vulnerability on NetGain Enterprise Manager during a pentest. We think that the vulnerability is quite rare and worth to share.

SMB Exploit (MS17-010) dengan EternalBlue dan DoublePulsar

May 16, 2017 f3ci Tutorial

EternalBlue dapat digunakan untuk melakukan eksploitasi pada layanan Server Message Block (SMB) tanpa membutuhkan proses otentikasi. Kemudian ditambah dengan menggunakan DoublePulsar untuk mengirim sekaligus mengeksekusi malicious Dynamic-Link Libraries (DLL) atau raw shellcode pada komputer korban.