Article: iOS Chrome Browser Opens Doors To Call Affiliate Hackers - published about 10 years ago. Content: First blog post in a long time, so firstly I apologise for that. I was looking for a companies contact number to report a bug to them using my phone which is when I discovered this extremely weird bug. So for my testing I have only tried on an Iphone 5 running iOS 8.0.2 only the current Chrome browser version. Exploit Landscape: Chrome includes a featur... http://trojan7malware.blogspot.com/2014/10/ios-chrome-browser-opens-doors-to-call.html Published: 2014 10 07 17:42:00 Received: 2023 03 31 23:02:32 Feed: Trojan7Malware Source: Trojan7Malware Category: Cyber Security Topic: Cyber Security |
Article: Source code for BadUSB vulnerability posted on GitHub - published about 10 years ago. Content: http://www.livehacking.com/2014/10/07/source-code-for-badusb-vulnerability-posted-on-github/ Published: 2014 10 07 11:10:03 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
|
Article: Adf.ly Auto Clicker 2014 - published about 10 years ago. Content: Here is another adf.ly bot which is also working without any issue. Recently we shared a different adf.ly bot which is still working like a charm. But some how If you are facing any problem with that bot try using new proxies list, download it from below link. If still there is any problem try this bot. If you are new visitor to our site then kindly use thi... http://hacking-share.blogspot.com/2014/10/adfly-auto-clicker-2014.html Published: 2014 10 04 15:19:00 Received: 2024 02 07 05:20:19 Feed: Hacking Share Source: Hacking Share Category: Cyber Security Topic: Cyber Security |
Article: New security flaw uncovered in WordPress - published about 10 years ago. Content: Researchers have revealed a potentially serious flaw in WordPress software, that allows hackers to search for abandoned or inactive WordPress sites before mounting phishing attacks aimed at enticing users to install infected updates. Hackers can then quickly hijack the website and direct visitors to deliver malicious content. WordPress is by far the most po... https://penturalabs.wordpress.com/2014/10/03/new-security-flaw-uncovered-in-wordpress/ Published: 2014 10 03 14:19:49 Received: 2021 06 06 09:04:46 Feed: Pentura Labs's Blog Source: Pentura Labs's Blog Category: Cyber Security Topic: Cyber Security |
Article: ShellShock payload sample Linux.Bashlet - published about 10 years ago. Content: Someone kindly shared their sample of the shellshock malware described by the Malware Must die group - you can read their analysis here: MMD-0027-2014 - Linux ELF bash 0day (shellshock): The fun has only just begun... Download Download. Email me if you need the password File Information File: fu4k_2485040231A35B7A465361FAF92A512D Size:... https://contagiodump.blogspot.com/2014/10/shellshock-payload-sample-linuxbashlet.html Published: 2014 10 02 12:12:00 Received: 2024 03 13 18:00:20 Feed: contagio Source: contagio Category: Cyber Security Topic: Cyber Security |
|
Article: A Tale Of Another SOP Bypass In Android Browser < 4.4 - published about 10 years ago. Content: Since, my recent android SOP bypass [CVE-2014-6041] triggered a lot of eruption among the infosec community, I was motivated to research a bit more upon the android browser, it turns out that things are much worse than I thought, I managed to trigger quite a few interesting vulnerabilities inside of Android browser, one of them being another Same Origin... http://www.rafayhackingarticles.net/2014/10/a-tale-of-another-sop-bypass-in-android.html Published: 2014 10 02 11:53:00 Received: 2024 02 17 13:21:47 Feed: Ethical Hacking - Rafayhackingarticles Source: Ethical Hacking - Rafayhackingarticles Category: Cyber Security Topic: Cyber Security |
|
Article: Change passwords regularly - a myth and a lie, don't be fooled, part 1 - published about 10 years ago. Content: TL;DR: different passwords have different protection requirements, and different attackers using various attacks can only be prevented through different prevention methods. Password security is not simple. For real advise, checking the second post (in progress). Are you sick of password advices like "change your password regularly" or "if your password is ... https://jumpespjump.blogspot.com/2014/10/change-passwords-regularly-myth-and-lie.html Published: 2014 10 01 07:17:00 Received: 2024 03 12 23:22:34 Feed: Jump ESP, jump! Source: Jump ESP, jump! Category: Cyber Security Topic: Cyber Security |
Article: Oracle Security Alert for CVE-2014-7169 - 26 September 2014 - published about 10 years ago. Content: http://www.oracle.com/technetwork/topics/security/alert-cve-2014-7169-2303276.html Published: 2014 09 26 19:30:54 Received: 2021 06 06 09:03:27 Feed: Oracle Security Alerts Source: Oracle Security Alerts Category: Alerts Topic: Vulnerabilities |
Article: Shell Shock Rapid 7 Threatsweeper - published about 10 years ago. Content: By now, you may have heard about CVE-2014-6271, also known as the “bash bug“, or even “Shell Shock”, that may affect your organisation. It’s rated the maximum CVSS score of 10 for impact and ease of exploitability. The affected software, Bash (the Bourne Again SHell), is present on most Linux, BSD, and Unix-like systems, including Mac OS X. New packages were... https://penturalabs.wordpress.com/2014/09/26/shell-shock-rapid-7-threatsweeper/ Published: 2014 09 26 09:27:31 Received: 2021 06 06 09:04:46 Feed: Pentura Labs's Blog Source: Pentura Labs's Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Shellshock: Code injection vulnerability found in Bash - published about 10 years ago. Content: http://www.livehacking.com/2014/09/26/shellshock-code-injection-vulnerability-found-in-bash/ Published: 2014 09 26 06:54:53 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
|
Article: Indepth Code Execution in PHP: Part Two - published about 10 years ago. Content: This is a continued post from Code Execution in PHP; you can read the first post here, so if you haven't read that before please go ahead and read it first or else you would have problem understanding the second part. “…It’s no secret that PHP is an easy language to which anyone with amateur coding skills could work with and as a rule with poor knowled... http://www.rafayhackingarticles.net/2014/09/indepth-code-execution-in-php-part-two.html Published: 2014 09 20 18:39:00 Received: 2024 02 17 13:21:47 Feed: Ethical Hacking - Rafayhackingarticles Source: Ethical Hacking - Rafayhackingarticles Category: Cyber Security Topic: Cyber Security |
Article: Apple releases iOS 8 with 56 security patches - published about 10 years ago. Content: http://www.livehacking.com/2014/09/18/apple-releases-ios-8-with-56-security-patches/ Published: 2014 09 18 07:22:43 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
|
Article: The Five W’s of Penetration Testing - published about 10 years ago. Content: Often in discussions with customers and potential customers, questions arise about our penetration testing services, as well as penetration testing in general. In this post, we want to walk through Mandiant's take on the five W's of penetration testing, in hopes of helping those of you who many have some of these same questions. Fo... http://www.fireeye.com/blog/threat-research/2014/09/ws-penetration-testing.html Published: 2014 09 16 20:49:32 Received: 2021 06 06 09:05:12 Feed: FireEye Blog Source: FireEye Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Basic Security Testing with Linux - published about 10 years ago. Content: With This Chapers ! Chapter 1 – Introduction Part 1: Installing and Basic Overview Chapter 2 – Installing Kali with VMWare Player Part 2 – Metasploit Tutorial Chapter 3 – Introduction to Metasploit Chapter 4 – Meterpreter Shell Part 3 – Information Gathering & Mapping Chapter 5 – Recon Tools Chapter 6 – Shodan Part 4 - Attacking Hosts ... http://hacking-share.blogspot.com/2014/09/basic-security-testing-with-linux.html Published: 2014 09 14 07:06:00 Received: 2024 02 07 05:20:19 Feed: Hacking Share Source: Hacking Share Category: Cyber Security Topic: Cyber Security |
Article: FLARE IDA Pro Script Series: MSDN Annotations Plugin for Malware Analysis - published about 10 years ago. Content: The FireEye Labs Advanced Reverse Engineering (FLARE) Team continues to share knowledge and tools with the community. We started this blog series with a script for Automatic Recovery of Constructed Strings in Malware. As always, you can download these scripts at the following location: https://github.com/fireeye/flare-ida. We hope you find all th... https://www.fireeye.com/blog/threat-research/2014/09/flare-ida-pro-script-series-msdn-annotations-ida-pro-for-malware-analysis.html Published: 2014 09 11 22:00:00 Received: 2022 05 23 16:06:45 Feed: FireEye Blog Source: FireEye Blog Category: Cyber Security Topic: Cyber Security |
Article: 2905247 - Insecure ASP.NET Site Configuration Could Allow Elevation of Privilege - Version: 2.0 - published about 10 years ago. Content: Revision Note: V2.0 (September 9, 2014): Advisory rereleased to announce the offering of the security update via Microsoft Update, in addition to the Download-Center-only option that was provided when this advisory was originally released.Summary: Microsoft is announcing the availability of an update for Microsoft ASP.NET to address a vulnerability in ASP.NE... https://technet.microsoft.com/en-us/library/security/2905247 Published: 2014 09 09 17:00:00 Received: 2022 04 14 18:03:38 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
|
Article: Security Implications of the Electric Smart Grid - published about 10 years ago. Content: https://www.securitymagazine.com/articles/85785-security-implications-of-the-electric-smart-grid Published: 2014 09 04 05:00:00 Received: 2021 04 25 02:14:07 Feed: Security Magazine – Reports Source: Security Magazine Category: Reports Topic: Cyber Security |
Article: Defense in Depth: A Layered Approach to Network Security - published about 10 years ago. Content: https://www.securitymagazine.com/articles/85788-defense-in-depth-a-layered-approach-to-network-security Published: 2014 09 01 04:00:00 Received: 2021 04 25 02:14:07 Feed: Security Magazine – Reports Source: Security Magazine Category: Reports Topic: Cyber Security |
|
Article: Automating Security Incident Respons - published about 10 years ago. Content: https://www.securitymagazine.com/articles/85789-automating-security-incident-respons Published: 2014 09 01 04:00:00 Received: 2021 04 25 02:14:07 Feed: Security Magazine – Reports Source: Security Magazine Category: Reports Topic: Cyber Security |
|
Article: Android Browser Same Origin Policy Bypass < 4.4 - CVE-2014-6041 - published about 10 years ago. Content: Introduction Same Origin Policy (SOP) is one of the most important security mechanisms that are applied in modern browsers, the basic idea behind the SOP is the javaScript from one origin should not be able to access the properties of a website on another origin. The origin is formed by the combination of Scheme, domain and port with the port being an e... http://www.rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html Published: 2014 08 31 09:33:00 Received: 2024 02 17 13:21:48 Feed: Ethical Hacking - Rafayhackingarticles Source: Ethical Hacking - Rafayhackingarticles Category: Cyber Security Topic: Cyber Security |
Article: Connecting the Dots: Syrian Malware Team Uses BlackWorm for Attacks - published about 10 years ago. Content: The Syrian Electronic Army has made news for its recent attacks on major communications websites, Forbes, and an alleged attack on CENTCOM. While these attacks garnered public attention, the activities of another group - The Syrian Malware Team - have gone largely unnoticed. The group’s activities prompted us to take a closer look. We discovere... https://www.fireeye.com/blog/threat-research/2014/08/connecting-the-dots-syrian-malware-team-uses-blackworm-for-attacks.html Published: 2014 08 29 08:00:00 Received: 2022 05 23 16:06:47 Feed: FireEye Blog Source: FireEye Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Smashing The Browser: From Vulnerability Discovery To Exploit - published about 10 years ago. Content: submitted by /u/demi6od [link] [comments] https://www.reddit.com/r/vrd/comments/2evme2/smashing_the_browser_from_vulnerability_discovery/ Published: 2014 08 29 01:16:01 Received: 2021 06 06 11:29:11 Feed: Vulnerability Research and Development Source: Vulnerability Research and Development Category: Alerts Topic: Vulnerabilities |
Article: Attacking financial malware botnet panels - SpyEye - published over 10 years ago. Content: This is the second blog post in the "Attacking financial malware botnet panels" series. After playing with Zeus, my attention turned to another old (and dead) botnet, SpyEye. From an ITSEC perspective, SpyEye shares a lot of vulnerabilities with Zeus. The following report is based on SpyEye 1.3.45, which is old, and if we are lucky, the whole SpyEye bra... https://jumpespjump.blogspot.com/2014/08/attacking-financial-malware-botnet.html Published: 2014 08 22 17:09:00 Received: 2024 03 12 23:22:35 Feed: Jump ESP, jump! Source: Jump ESP, jump! Category: Cyber Security Topic: Cyber Security |
|
Article: Vulnerability Summary for the Week of August 11, 2014 - published over 10 years ago. Content: https://www.cisa.gov/news-events/bulletins/sb14-230 Published: 2014 08 18 21:11:23 Received: 2023 03 17 18:04:35 Feed: CISA Bulletins Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: Bulletins Topic: Cyber Security |
|
Article: 最近、雑誌やネットでやけにバストアップ商品をみませんか? - published over 10 years ago. Content: 最近、女性誌やネットをみていると、やけにバストアップ商品の広告をよく見るような気がします。 「夏は、薄着になったり、水着を着る機会が増えるので、バストアップ商品はよく売れる」という話はよく聞きます。 けれど、昨年より明らかに多い気がします。 ちょっと調べてみたところ、今年に入って、かなりの数のバストアップ製品が発売されているようです。 そして、中でも多いのが、プエラリアミリフィカを主成分とする、バストアップサプリメント。 このプエラリア・ミリフィカという成分は、タイの植物の成分なのですが、女性ホルモンに近い成分なので、食べれば、ムネが大きくなったり、生理痛が改善されたりするとされています。 このプエラリア・ミリフィカは、世界各国で、「実際にバストアップに効果がある」との臨床データがぞくぞくと出てきており... http://www.hackus.org/%e6%9c%80%e8%bf%91%e3%80%81%e9%9b%91%e8%aa%8c%e3%82%84%e3%83%8d%e3%83%83%e3%83%88%e3%81%a7%e3%82%84%e3%81%91%e3%81%ab%e3%83%90%e3%82%b9%e3%83%88%e3%82%a2%e3%83%83%e3%83%97%e5%95%86%e5%93%81%e3%82%92/ Published: 2014 08 18 20:12:27 Received: 2021 06 06 09:04:52 Feed: Hackus Source: Hackus Category: Cyber Security Topic: Cyber Security |
|
Article: Analyzing heap objects with mona.py - published over 10 years ago. Content: https://www.corelan.be/index.php/2014/08/16/analyzing-heap-objects-with-mona-py/?utm_source=rss&utm_medium=rss&utm_campaign=analyzing-heap-objects-with-mona-py Published: 2014 08 16 15:09:22 Received: 2023 01 18 09:44:47 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
Article: DEFCON 22 Badge Challenge - published over 10 years ago. Content: https://potatohatsecurity.tumblr.com/post/94565729529 Published: 2014 08 12 21:23:00 Received: 2021 06 06 09:04:58 Feed: Team PotatoSec Source: Team PotatoSec Category: Cyber Security Topic: Cyber Security |
|
Article: 2915720 - Changes in Windows Authenticode Signature Verification - Version: 1.4 - published over 10 years ago. Content: Revision Note: V1.4 (July 29, 2014): Revised advisory to announce that Microsoft no longer plans to enforce the stricter verification behavior as a default functionality on supported releases of Microsoft Windows. It remains available as an opt-in feature. See the Advisory FAQ section for more information.Summary: Microsoft is announcing the availability of ... https://technet.microsoft.com/en-us/library/security/2915720 Published: 2014 07 29 17:00:00 Received: 2022 04 14 18:03:38 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
Article: Advanced Exploitation of VirtualBox 3D Acceleration VM Escape Vulnerability / Exploit (CVE-2014-0983), VUPEN (July 2014) - published over 10 years ago. Content: submitted by /u/stormehh [link] [comments] https://www.reddit.com/r/vrd/comments/2bp9v7/advanced_exploitation_of_virtualbox_3d/ Published: 2014 07 25 16:08:47 Received: 2021 06 06 11:29:11 Feed: Vulnerability Research and Development Source: Vulnerability Research and Development Category: Alerts Topic: Vulnerabilities |
|
Article: CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other - published over 10 years ago. Content: Here are all samples (+ more) mentioned in this post by Fireeye : The Little Signature That Could: The Curious Case of CZ Solution"All files are digitally signed with a "CZ Solutions" certificate making it easy to create a Yara or ClamAV signature. A few Zeus samples seem to be still beaconing. Most are sinkholed.The certificate is now revoked by VeriSign.En... http://contagiodump.blogspot.com/2014/07/cz-solution-ltd-signed-samples-of.html Published: 2014 07 21 04:57:00 Received: 2022 07 04 22:08:53 Feed: contagio Source: contagio Category: Cyber Security Topic: Cyber Security |
|
Article: 2982792 - Improperly Issued Digital Certificates Could Allow Spoofing - Version: 2.0 - published over 10 years ago. Content: Revision Note: V2.0 (July 17, 2014): Advisory revised to announce the availability of update 2982792 for supported editions of Windows Server 2003. For more information, see the Suggested Actions section of this advisory.Summary: Microsoft is aware of improperly issued SSL certificates that could be used in attempts to spoof content, perform phishing attacks... https://technet.microsoft.com/en-us/library/security/2982792 Published: 2014 07 17 17:00:00 Received: 2022 04 14 18:03:38 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
Article: Havex, It’s Down With OPC - published over 10 years ago. Content: FireEye recently analyzed the capabilities of a variant of Havex (referred to by FireEye as “Fertger” or “PEACEPIPE”), the first publicized malware reported to actively scan OPC servers used for controlling SCADA (Supervisory Control and Data Acquisition) devices in critical infrastructure (e.g., water and electric utilities), energy, and manufactu... https://www.fireeye.com/blog/threat-research/2014/07/havex-its-down-with-opc.html Published: 2014 07 17 14:00:00 Received: 2022 05 23 16:06:45 Feed: FireEye Blog Source: FireEye Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Oracle Critical Patch Update Advisory - July 2014 - published over 10 years ago. Content: http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html Published: 2014 07 15 19:30:54 Received: 2021 06 06 09:03:27 Feed: Oracle Security Alerts Source: Oracle Security Alerts Category: Alerts Topic: Vulnerabilities |
Article: Episode #179: The Check is in the Mail - published over 10 years ago. Content: Tim mails one in: Bob Meckle writes in: I have recently come across a situation where it would be greatly beneficial to build a script to check revocation dates on certificates issued using a certain template, and send an email to our certificate staff letting them know which certificates will expire within the next 6 weeks. I am wondering if you guys hav... http://blog.commandlinekungfu.com/2014/06/episode-179-check-is-in-mail.html Published: 2014 06 30 21:51:00 Received: 2023 03 31 08:44:32 Feed: Command Line Kung Fu Source: Command Line Kung Fu Category: News Topic: Security Tooling |
|
Article: 2974294 - Vulnerability in Microsoft Malware Protection Engine Could Allow Denial of Service - Version: 1.0 - published over 10 years ago. Content: Revision Note: V1.0 (June 17, 2014): Advisory publishedSummary: Microsoft is releasing this security advisory to inform customers that an update to the Microsoft Malware Protection Engine addresses a security vulnerability that was reported to Microsoft. The vulnerability could allow denial of service if the Microsoft Malware Protection Engine scans a specia... https://technet.microsoft.com/en-us/library/security/2974294 Published: 2014 06 17 17:00:00 Received: 2022 04 14 18:03:38 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
Article: A Not-So Civic Duty: Asprox Botnet Campaign Spreads Court Dates and Malware - published over 10 years ago. Content: Executive Summary FireEye Labs has been tracking a recent spike in malicious email detections that we attribute to a campaign that began in 2013. While malicious email campaigns are nothing new, this one is significant in that we are observing mass-targeting attackers adopting the malware evasion methods pioneered by the stealthier APT attackers.... https://www.fireeye.com/blog/threat-research/2014/06/a-not-so-civic-duty-asprox-botnet-campaign-spreads-court-dates-and-malware.html Published: 2014 06 16 14:00:00 Received: 2022 05 23 16:06:45 Feed: FireEye Blog Source: FireEye Blog Category: Cyber Security Topic: Cyber Security |
|
Article: 2962824 - Update Rollup of Revoked Non-Compliant UEFI Modules - Version: 1.1 - published over 10 years ago. Content: Revision Note: V1.1 (June 10, 2014): Advisory revised to announce a detection change for the update rollup (updates 2920189 and 2961908). This is a detection change only. There were no changes to the update files. Customers who have already successfully updated their systems do not need to take any action.Summary: With this advisory, Microsoft is revoking th... https://technet.microsoft.com/en-us/library/security/2962824 Published: 2014 06 10 17:00:00 Received: 2022 04 14 18:03:38 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
Article: 2862973 - Update for Deprecation of MD5 Hashing Algorithm for Microsoft Root Certificate Program - Version: 3.0 - published over 10 years ago. Content: Revision Note: V3.0 (June 10, 2014): Revised advisory to rerelease the 2862973 update for Windows 8 and Windows Server 2012. This rerelease only applies to systems running Windows Embedded 8 and Windows Server 2012 for Embedded Systems. See the Advisory FAQ for more information.Summary: Microsoft is announcing the availability of an update for supported edit... https://technet.microsoft.com/en-us/library/security/2862973 Published: 2014 06 10 17:00:00 Received: 2022 04 14 18:03:38 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
|
Article: CSO : Common Sense Operator/Operations - published over 10 years ago. Content: https://www.corelan.be/index.php/2014/06/03/cso-common-sense-operatoroperations/?utm_source=rss&utm_medium=rss&utm_campaign=cso-common-sense-operatoroperations Published: 2014 06 03 08:05:09 Received: 2023 01 18 09:44:47 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
Article: How Much Would a Cyberattack Cost Your Enterprise? - published over 10 years ago. Content: https://www.securitymagazine.com/articles/85556-how-much-would-a-cyberattack-cost-your-enterprise Published: 2014 06 01 04:00:00 Received: 2021 04 25 02:14:07 Feed: Security Magazine – Reports Source: Security Magazine Category: Reports Topic: Cyber Security |
|
Article: HITB2014AMS – Day 2 – On Her Majesty’s Secret Service: GRX & A Spy Agency - published over 10 years ago. Content: https://www.corelan.be/index.php/2014/05/30/hitb2014ams-day-2-on-her-majestys-secret-service-grx-a-spy-agency/?utm_source=rss&utm_medium=rss&utm_campaign=hitb2014ams-day-2-on-her-majestys-secret-service-grx-a-spy-agency Published: 2014 05 30 13:13:22 Received: 2023 01 18 09:44:47 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
Article: HITB2014AMS – Day 2 – Exploring and Exploiting iOS Web Browsers - published over 10 years ago. Content: https://www.corelan.be/index.php/2014/05/30/hitb2014ams-day-2-exploring-and-exploiting-ios-web-browsers/?utm_source=rss&utm_medium=rss&utm_campaign=hitb2014ams-day-2-exploring-and-exploiting-ios-web-browsers Published: 2014 05 30 10:19:05 Received: 2023 01 18 09:44:48 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
Article: HITB2014AMS – Day 2 – Keynote 4: Hack It Forward - published over 10 years ago. Content: https://www.corelan.be/index.php/2014/05/30/hitb2014ams-day-2-keynote-4-hack-it-forward/?utm_source=rss&utm_medium=rss&utm_campaign=hitb2014ams-day-2-keynote-4-hack-it-forward Published: 2014 05 30 08:32:09 Received: 2023 01 18 09:44:48 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
Article: Episode #178: Luhn-acy - published over 10 years ago. Content: Hal limbers up in the dojo To maintain our fighting trim here in the Command Line Kung Fu dojo, we like to set little challenges for ourselves from time to time. Of course, we prefer it when our loyal readers send us ideas, so keep those emails coming! Really... please oh please oh please keep those emails coming... please, please, please... ahem, but I d... http://blog.commandlinekungfu.com/2014/05/not-ready-yet-episode-178-luhn-acy.html Published: 2014 05 26 09:00:00 Received: 2023 03 31 08:44:32 Feed: Command Line Kung Fu Source: Command Line Kung Fu Category: News Topic: Security Tooling |
|
Article: Hacking Windows 95, part 2 - published over 10 years ago. Content: In the Hacking Windows 95, part 1 blog post, we covered that through a nasty bug affecting Windows 95/98/ME, the share password can be guessed in no time. In this article, I'm going to try to use this vulnerability to achieve remote code execution (with the help of publicly available tools only). The first thing we can do when we have read access to the Wi... https://jumpespjump.blogspot.com/2014/05/hacking-windows-95-part-2.html Published: 2014 05 23 15:29:00 Received: 2024 03 12 23:22:35 Feed: Jump ESP, jump! Source: Jump ESP, jump! Category: Cyber Security Topic: Cyber Security |
|
Article: Owning the Database with SQLMAP and METASPLOIT - published over 10 years ago. Content: Today I will be trying to teach you how to use it from Linux platform to take advantage of all that it has to offer. We will begin by booting up our favorite Linux distro of choice; I will be using BackTrack 4R2 for purposes of this tutorial - it is not required but helps because everything is mostly setup already (mostly Metasploit). Once you have you... http://hacking-share.blogspot.com/2014/05/owning-database-with-sqlmap-and.html Published: 2014 05 06 16:00:00 Received: 2023 04 02 10:42:09 Feed: Hacking Share Source: Hacking Share Category: Cyber Security Topic: Cyber Security |
|
Article: KLEE used to find NULL pointer dereference in OpenSSL - published over 10 years ago. Content: submitted by /u/turnersr [link] [comments] https://www.reddit.com/r/vrd/comments/24i2zh/klee_used_to_find_null_pointer_dereference_in/ Published: 2014 05 02 00:25:08 Received: 2021 06 06 11:29:11 Feed: Vulnerability Research and Development Source: Vulnerability Research and Development Category: Alerts Topic: Vulnerabilities |
Article: Episode #177: There and Back Again - published over 10 years ago. Content: Hal finds some old mail Way, way back after Episode #170 Tony Reusser sent us a follow-up query. If you recall, Episode #170 showed how to change files named "fileaa", "fileab", "fileac", etc to files named "file.001", "file.002", "file.003". Tony's question was how to go back the other way-- from "file.001" to "fileaa", "file.002" to "fileab", and so on.... http://blog.commandlinekungfu.com/2014/04/episode-177-there-and-back-again.html Published: 2014 05 01 01:01:00 Received: 2023 03 31 08:44:32 Feed: Command Line Kung Fu Source: Command Line Kung Fu Category: News Topic: Security Tooling |
|
Article: DSploit - published over 10 years ago. Content: DSploit After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality. The DSploit AP... https://jumpespjump.blogspot.com/2014/04/dsploit.html Published: 2014 04 29 21:56:00 Received: 2024 03 12 23:22:35 Feed: Jump ESP, jump! Source: Jump ESP, jump! Category: Cyber Security Topic: Cyber Security |
Article: New Zero-Day Exploit targeting Internet Explorer Versions 9 through 11 Identified in Targeted Attacks - published over 10 years ago. Content: Summary FireEye Research Labs, the intelligence behind our Mandiant Consultancy services, identified a new Internet Explorer (IE) zero-day exploit used in targeted attacks. The vulnerability affects IE6 through IE11, but the attack is targeting IE9 through IE11. This zero-day bypasses both ASLR and DEP. Microsoft has assigned CVE-2014-1776 to... https://www.fireeye.com/blog/threat-research/2014/04/new-zero-day-exploit-targeting-internet-explorer-versions-9-through-11-identified-in-targeted-attacks.html Published: 2014 04 27 02:29:08 Received: 2022 05 23 16:06:45 Feed: FireEye Blog Source: FireEye Blog Category: Cyber Security Topic: Cyber Security |
Click to Open Code Editor