JVN#54336184: Winny BBS information processing vulnerability

Winny is a P2P file sharing software. Winny contains a vulnerability in the processing of BBS information, which can be used to launch Distributed Denial of Service DDoS attacks. Impact A user may take part in a DDoS attack by a remote attacker. Solution Do not use Winny Please discontinue use of...

JVN#25393522: Winny node information processing vulnerability

Winny is a P2P file sharing software. Winny contains a vulnerability in the processing of node information, which can be used to launch Distributed Denial of Service DDoS attacks. Impact A user may take part in a DDoS attack by a remote attacker. Solution Do not use Winny Please discontinue use o...

rsaUnDumper[sql] – универсальный дампер SQL INJECTION

Версия 1.5 Нововведения по сравнению с версией 1.0: добавлена поддержка прокси http; socks4 и sokcs5 - с авторизацией возможно указывать приоритет для потоков фак по ним позже, щас можно почитать msdn теперь вы указываете не url, а HTTP запрос, т.е. есть возможность дампить sql inj с уюзвимым pos...

Блогер cyxymu потребовал от Медведева разобраться с хакерами

Блогер cyxymu потребовал от Медведева разобраться с хакерами Блогер cyxymu http://cyxymu.livejournal.com/ 10 августа обратился к президенту России Дмитрию Медведеву с просьбой найти организаторов DDoS-атак на ресурсы Twitter, LiveJournal и Facebook. Cyxymu предложил президенту использовать для...

Researchers Demo DDoS Attacks in the Cloud

Researchers at Def Con created a handful of virtual server instances on Amazon’s EC2 and used a homemade program to attack the network of a client — a small business that wanted its connectivity tested. They took the company off the Internet. The price? Six dollars. Read the full article. Dark...

Inside the Black Energy 2 Botnet

By Dmitry Tarakanov Cybercriminals use a variety of bots to conduct DDoS attacks on Internet servers. One of the most popular tools is called Black Energy. To date, Kaspersky Lab has identified and implemented detection for over 4,000 modifications of this malicious program. In mid-2008 malware...

Invision power board 2.x 3.x 0-day DDOS

Exploit for windows platform in category dos / poc ======================================= Invision power board 2.x 3.x 0-day DDOS ======================================= The largest Exploit Database in the world ! 2.x 3.x are effected Thanks to Inj3ct0r Cr3w Greetz to R0073r Sid3^effects L0rd...

Государственные ресурсы США подвергли DDoS-атаке не корейские хакеры

Как сообщает Associated Press, оглашены предварительные результаты расследования, которое ведут американские специальные службы по делу нарушения работы сайтов госслужб США. Как выяснилось, хакеры из Северной Кореи не участвовали в широкомасштабном DDoS-прессинге, который был нацелен на...

[S]Hell Wizard - управляем веб-шеллами вместе c Dr.Z3r0 :)

Вообщем представляю вашему вниманию свою тулзу для управления шеллами: SHell Wizard Текущая версия: 5.0 28.12.2011 Введение Даная система предназначенна для массового управления веб шеллами нескольких типов. Как в плюс пытался создать максимально интуитивно понятный интерфейс, но и в тоже время...

Jose Nazario on Politically Motivated DDoS Attacks (Part 3)

In the third part of his talk on politically motivated DDoS attacks at the recent Kaspersky Lab Security Analyst Summit, Jose Nazario of Arbor Networks discusses the tactics and motivations for these attacks...

Jose Nazario on Politically Motivated DDoS Attacks (Part 2)

In the second part of his discussion on DDoS attacks at the Kaspersky Lab Security Analyst Summit in Cyprus, Jose Nazario of Arbor Networks delves into some of the statistics he has compiled on these attacks...

Jose Nazario on Politically Motivated DDoS Attacks (Part 1)

Jose Nazario of Arbor Networks gives a talk at the Kaspersky Lab Security Analyst Summit in Cyprus about the hype around cyberwar and the roots of politically motivated DDoS attacks and what they mean in today’s climate...

DDoS Extortionists Offer 'Discount' Competitor Attacks

One of the most novel approaches for acquiring new botnet clients is a weird combination consisting of direct DDoS extortion, followed by penalties for delayed response and the offering of 30% discount in case the victim wants to DDoS the competition once the ransom is paid. Read the full article...

Media Temple Web Hosting Suffers DDoS Attack

Media Temple, Web hosting provider for Adobe, ABC, Sony, NBC, Time, Volkswagen, and Starbucks, was hit with a sophisticated distributed denial-of-service DDoS attack. Read the full article. CNET...

Scientology DDoS Attacker Gets Jail

A second US man has been jailed over controversial denial of service attacks against the Church of Scientology two years ago. Read the full article. The Register...

DDoS Suspect Who Caused Conservative Havoc Charged

Federal prosecutors have accused a man of carrying out a series of botnet offenses including attacks that brought down the websites of conservative talking heads Bill O’Reilly, Ann Coulter and Rudolph Giuliani. Read the full article. The Register...

New, Simple Twitter Botnet Tool Debuts

There is a new point-and-click tool circulating online that enables virtually anyone to create a piece of malware that will connect a PC to a budding Twitter botnet. The tool, known as TwitterNET Builder, is being used by attackers to build quick and easy botnets that are then controlled through...

DDoS Worm Creator Heading to Prison

An Estonian virus writer has been jailed for two and a half years for creating a Windows worm family that launched denial of service attacks on the websites of a local insurance firm and ISP. Read the full article. The Register...

RSA 2010: BlackEnergy 2 Botnet Revealed

Like the sequel to a successful movie, the botnet behind the distributed denial of service attacks that hit the country of Georgia during its conflict with Russia in 2008 has been updated. This time though, the idea isn’t hacktivism—it’s stealing financial data and, unlike in the case of other...

Cisco Buffer Overflow, DDoS Flaws Revealed

Cisco has discovered a buffer overflow in version 2.6 of CiscoWorks Internetwork Performance Monitor IPM and previous versions for Windows; the flaw allows attackers to compromise vulnerable systems remotely, as well as a DDos flaw in Cisco IOS XR. Read the full article. The H Security...