Sunday, 30. October 2011
Anonymous threatening Mexican drug cartel
Anonymous Mexico is going head-to-head with one of the most dangerous criminal organizations in the world, the Mexican cartel Los Zetas. With this Anonymous Proofs that they are not just a common Internet users as cowards behind a keyboard. Not only has the Anonymous threatened to reveal names, but it has also started making good to its threats.
Mexican Anonymous hackers is warning a Mexican drug cartel to release one of its members, kidnapped from a street protest, or it will publish the identities and addresses of the syndicate's associates, from corrupt police to taxi drivers, as well as reveal the syndicates' businesses.

Permalink

 


MANDIANT Memoryze
MANDIANT Memoryze is free memory forensic software that helps incident responders find evil in live memory. Memoryze can acquire and/or analyze memory images, and on live systems, can include the paging file in its analysis.

Download
http://mandiant.com/products/free_software/memoryze/download/

Permalink

 


Saturday, 29. October 2011
maxdome.com - SQL
Main
http://www.maxdome.com/
Type: SQL Injection

Comment
Path: /php-bin/functions/home_flash/
File: homeflash.swf
Para: ?id=

by
Vulnerability-Lab

Permalink

 


tagu.com.ar - SQL
Main
http://www.tagu.com.ar
Type: SQL Injection
Exploitable
http://www.tagu.com.ar/ver-post.php?p_id=4271'
Comment
Allow SQL Injection in "p_id" var.

Permalink

 


Friday, 28. October 2011
US satellites - victim by Chinese Hackers
Computer hackers, possibly from the Chinese military, interfered with two U.S. government satellites four times in 2007 and 2008 through a ground station in Norway, according to a congressional commission.

Source
http://www.bloomberg.com/news/2011-10-27/chinese-military-suspected-in-hacker-attacks-on-u-s-satellites.html

Permalink

 


DEFT - Linux
DEFT Linux 6 is based on the new Kernel 2.6.35 (Linux side) and the DEFT Extra 3.0 (Computer Forensic GUI) with the best freeware Windows Computer Forensic tools. DEFT it’s a new concept of Computer Forensic live system that use LXDE as desktop environment and WINE for execute Windows tools under Linux and mount manager as tool for device management. It is a very easy to use system that includes an excellent hardware detection and the best free and open source applications dedicated to incident response and computer forensics.

Download
http://www.deftlinux.net/download/

Permalink

 


FOCA 3 - Free
This new version has new fresh look and feel, and it is full of new features that you will love to discover. If you want to learn more about FOCA, and Get FOCA 3 PRO, then you can book for a seat in the next online training about FOCA. It is going to be delivered on 4th of November in English and on 8th of November in Spanish. Both of them delivered by our FOCA father Chema Alonso.

Download
http://www.informatica64.com/descargas/Foca_Free_3_0_20111027.zip

Permalink

 


Thursday, 27. October 2011
PacketFence - Linux
PacketFence is an open-source network access control (NAC) system which provides the following features: registration, detection of abnormal network activities, proactive vulnerability scans, isolation of problematic devices, remediation through a captive portal, 802.1X, wireless integration and DHCP fingerprinting.

Download
http://www.packetfence.org/download/releases.html

Permalink

 


Wednesday, 26. October 2011
Happy Diwali all
SecurityXploit would like to wish you all a Happy Diwali!
Wiki
http://en.wikipedia.org/wiki/Diwali





Permalink

 


THC-SSL-DOS Tool
THC-SSL-DOS is a tool to verify the performance of SSL.
Establishing a secure SSL connection requires 15x more processing power on the server than on the client.
THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it off the Internet.
This problem affects all SSL implementations today. The vendors are aware of this problem since 2003 and the topic has been widely discussed.
This attack further exploits the SSL secure Renegotiation feature to trigger thousands of renegotiations via single TCP connection.

Download
http://www.thc.org/thc-ssl-dos/thc-ssl-dos-1.4-win-bin.zip
Linux
http://www.thc.org/thc-ssl-dos/thc-ssl-dos-1.4.tar.gz

Permalink

 


ExploitMe Mobile - Android
The application contains both mobile web and mobile programming defects and we've outlined a set of labs and solutions online to guide you. This tool will help both mobile QA and mobile web developers to learn the kinds of weaknesses that exist in the mobile app space.

Download
http://securitycompass.github.com/AndroidLabs

Permalink