Xanda’s Blog !~!

:: Quick update ::

Today, I’ve been working on a video on the Aurora IE 0day exploit PoC that really mimics the original Aurora’s exploit on Google.

However, the original exploit gonna fail if you enable DEP on the machine.

A few minutes back, someone ping and inform me on the new PoC that gonna bypass the DEP. If true, enabling DEP wont protect IE users anymore

But you are still safe if you disable Active Script / JavaScript support for your IE

Here is how you can disable the Active Shit/JavaShit Active Script / JavaScript support in your IE: Advisory

April 29, 2008, Microsoft has publicly release the security update for Windows XP known as Microsoft Windows XP SP3. You can download it [here].

Windows XP SP3 running on VM

For those who are around Melaka, KL and Pahang who want to get a copy of Microsoft Windows XP SP3 bundled in a fresh installation of Windows XP, you can come and see me and don’t forget to bring an empty CD.

I’ve generate a new Windows XP ISO integrated SP3 using nLite, and for those who interested to do it by yourself, you can refer to xanda – /dev/project, follow the step, but dont forget to download and import your service pack