23rd Nov, 2009

iPhone: TYTMobile

Update:
Here is the source. Hopefully someone can take it and either use it personally, expand it, or post on the app store.

Happy Coding!

17th Oct, 2009

State Radio – Let It Go

Highlights:

Knights Of Bostonia

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Bohemian Grove

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Blood Escaping Man

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Mansin Humanity

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Arsenic and Clover

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Held Up By The Wires

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Let It Go

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Highlights:

Blue Balls

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

A Days Work

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Face It

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

American Nightmare

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Getitit

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

25th Sep, 2009

Brother Ali – Us

Highlights:

Breakin Dawn

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Us

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Babygirl

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Tight Rope

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Games

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Highlights:

Feel Good Hit Of The Summer 2

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Millie Fell Off The Fire Escape

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

The Ropes

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Highlights:

A Different Mirror

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Devil’s Advocate

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Good

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Next Best Thing

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Rise (Feat. Scarub Of Living Legends)

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

You may have read about the Calendar bug that allows an applet to leave its normal privileges and engage in local privileges. This mainly effects Mac OS X due to their unpatched version of Java. Basically, it allows someone to run any Java code on the a client’s computer they wish just by the client visiting their url. I won’t go into the details how it works, you can read up on the proof of concept blogs here:
http://slightlyrandombrokenthoughts.blogspot.com/2008/12/calendar-bug.html
http://landonf.bikemonkey.org/
http://blog.cr0.org/2009/05/write-once-own-everyone.html

I got curious how this works, but no source code was available so I gave it a shot. So I now have a proof of concept and some source code to share. You can visit the proof of concept url here: http://www.therareair.com/javaexploit. If the exploit effects you, you can find a new directory on your desktop “Hi”.

The source code can be found here: Source Code

When I get more time I can maybe comment how it works and what files do what. Pretty sure you can figure it out with the source though.

That’s it.
Happy coding!

Categories