Hacking exposed Tesla Model S the memory 5 of the digital vulnerability-vulnerability warning-the black bar safety net

According to Forbes reports, next month's Defcon hacker conference the eve of the opening, Tesla Model S models are exposed there are still 5 at the digital security vulnerabilities, and these vulnerabilities are still not being blocked. As global probably the most popular consumer interest in th...

Встреча Defcon Moscow #9

3 июля, в пятницу, в офисе Mail.Ru Group состоится девятая встреча Defcon Moscow, которую организует группа DC7499. Defcon Moscow — это открытое и независимое сообщество технических энтузиастов, приближенных к области высоких технологий, а также информационной и технической безопасности. Программ...

Technical analysis: Femtocell home base station to a communication to intercept, fake arbitrary SMS vulnerability-vulnerability warning-the black bar safety net

Ali mobile security team with the Chinese Thiel Laboratory of wireless technology Ministry of communication experts together, the combination of domestic operator a type of Femtocell base station for the security analysis, found that the more pieces of the major vulnerabilities that can lead to...

GPG 32-Bit Short Key ID Collision Attacks

Attack and vulnerability details are often disclosed in order to prompt vendors and project maintainers into action. It happened recently with publication of attack code that mimicked the work of Karsten Nohl on BadUSB and tried to nudge Phison Electronics of Taiwan into looking at its USB...

Telmanik CMS Press 1.01b (pages.php, page_name param) - SQL Injection

No description provided by source. x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Mail : anarchyatdc414dotorg...

2WIRE Gateway - Authentication Bypass & Password Reset Vulnerabilities

No description provided by source. 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password...

Cisco IOS 11.x TFTP Server Long File Name Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file name handling of Cisco IOS is...

ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC

No description provided by source. / cve-2009-0692.c ISC DHCP dhclient 3.1.2p1 Remote Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 Stack-based buffer overflow in the scriptwriteparams method in...

Telmanik CMS Press 1.01b - pages.php?page_name SQL Injection

Telmanik CMS Press 1.01b - pages.php?pagename SQL Injection x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Ma...

Telmanik CMS Press 1.01b SQL Injection

x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Mail : anarchyatdc414dotorg Exploit:...

My DEFCON social engineering talk and DerbyCon

This year has been a year of firsts for me and for Coalfire. I was recently hired to my first Information security job as a penetration tester for Coalfire Labs, the forensic and app/network testing side of Coalfire. Many of the Coalfire Labs team attended DEFCON in Las Vegas in early August.. No...

BackTrack 5 R3 Released - Download Now !

The latest version of Backtrack is out! Check out Backtrack 5 R3! "The time has come to refresh our security tool arsenal – BackTrack 5 R3 has been released. R3 focuses on bug-fixes as well as the addition of over 60 new tools – several of which were released in BlackHat and Defcon 2012. A whole...

ZeroNights 2012, Москва 19-20 ноября

Привет всем, Попросили запостить от defcon-group. Цитата: Заявка на участие в конференции в качестве докладчика ZeroNights — международная конференция, посвященная техническим аспектам информационной безопасности. Главная цель конференции — распространение информации о новых методах атак, угрозах...

DEFCON Kids Returns, Now With 0-Day

DEFCON is inviting the kids back again this year for the second edition of DEFCON Kids, and this time, there’s zero-days involved. The not-for-profit conference is dedicated to teaching kids about white-hat hacking, security, privacy and hardware skills. The learning starts at DEFCONKids.org, whe...

http-slowloris NSE Script

Tests a web server for vulnerability to the Slowloris DoS attack by launching a Slowloris attack. Slowloris was described at Defcon 17 by RSnake see . This script opens and maintains numerous 'half-HTTP' connections until the server runs out of resources, leading to a denial of service. When a...

Forget 'Brogrammers,' Women Have The Edge In DEFCON Social Engineering Contest

Men may dominate the ranks of vulnerability researchers and hackers. But could women be the superior social engineers? Its a question that the organizers of the annual Social Engineering Capture the Flag CTF contest at DEFCON will try to answer. In a break from recent years, the third annual DEFC...

[Video+Pdf] Android No-Permissions Reverse Shell

Достаточно объемная презентация с дефкона: http://www.defcon.org/images/defcon-...ooking-For.pdf Демо-видео от ViaForensics: Дамп настроек, листинг директорий- все включено. Тема актуальна для андроидов начиная 1.5 до 4.0...

Онлайн семинары, источники.

В этой теме собираем информацию о ресурсах проводящих онлайн конференции по нашей тематике. На данный момент это: Вебинары: от Positive Technologies от Neuron hackspace Презентации: Так же можно послушать радио от Eset:...

How to Beat Evil Governments When Your Internet Turned Off ?

How to Beat Evil Governments When Your Internet Turned Off ? Bruce Sutherland explain at DefCon 19 Conference that "How To Get Your Message Out When Your Government Turns Off The Internet " . Bruce Sutherland is a network systems architect and software developer with Domex Computer Services Inc,...

Unsecured Calls, 5.0

New with iOS 5, the “unsecured call” call warning seems like a direct response to presentations like “Practical Cellphone Spying” at DEFCON, which demonstrated the ability of attackers to set up a phony GSM base station and intercept cellphone calls. iPhone users who are communicating over an...