2WIRE Gateway - Authentication Bypass Password Reset (1)

2WIRE Gateway - Authentication Bypass Password Reset 1 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to...

Joe Grand on the DEFCON Badge, Hacking Parking Meters and the Hazards of Security Research

Dennis Fisher talks with Joe Grand of Grand Idea Studio about the design for this year’s DEFCON badge, the secret feature he added that no one has uncovered yet and his research on hacking smart parking meters. Download SHOW NOTES: Hacking The Defcon 2009 Badge Subscribe to the Digital Undergroun...

Scenes from Black Hat and Defcon 2009

See photos taken from Black Hat 2009 and Defcon, both held last week in Las Vegas, Nev...

DEFCON: CSRF Attacks Made Easy

LAS VEGAS — The security of social networking sites isn’t as bad as you think. In fact, it’s much worse. Sites such as Twitter, Facebook and others that rely heavily on user-generated content, shared content and aggregation have been the targets of increasingly sophisticated attacks over the last...

ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC

Exploit for linux platform in category dos / poc ====================================================== ISC DHCP dhclient 3.1.2p1 Remote Buffer Overflow PoC ====================================================== / cve-2009-0692.c ISC DHCP dhclient 3.1.2p1 Remote Exploit Information:...

Jeff Moss on the History of DEFCON, Black Hat and the Security Underground

Dennis Fisher talks with Jeff Moss, the founder of DEFCON and Black Hat, about the history of the shows, the Michael Lynn-Cisco incident and the evolution of the hacker culture. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...

Jeff Moss on the vulnerability economy

Jeff Moss, the founder of DEFCON and Black Hat, discusses the unfolding of the vulnerability economy. Nowadays, instead of exposing high profile zero-day vulnerabilities at conferences, many researchers opt for selling their discoveries on a growing market...

NXP Semiconductors MIFARE Classic智能卡存在多个未明安全漏洞

BUGTRAQ ID: 30668 CNCAN ID：CNCAN-2008081409 NXP Semiconductors MIFARE是一款一卡通常用的芯片解决方案。 MIFARE智能卡存在多个未明安全问题，攻击者可以利用漏洞克隆卡或伪造未授权卡。 作者将在DEFCON上进行演讲。目前没有详细漏洞细节提供 NXP Semiconductors MiFARE Classic 目前没有解决方案提供： http://www.nxp.com/...

PocketPC Mms Composer - 'WAPPush' Denial of Service

/ This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org http://www.mulliner.org/pocketpc/ NotfiFlood - a...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

No description provided by source. / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner [email protected] http://www.trifinite.org...

The SUPER Bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / SAVE DEFCON..HELP GOBBLES..SAVE DEFCON..HELP GOBBLES When GOBBLES say he and he security team are non-profit. He really mean NON-profit. This means GOBBLES and he GOBBLES Security Labs GSL friends do not have much funds. GOBBLES was hoping to receiv...

Microsoft SQL Server Payload Execution

This module executes an arbitrary payload on a Microsoft SQL Server by using the "xpcmdshell" stored procedure. Currently, three delivery methods are supported. First, the original method uses Windows 'debug.com'. File size restrictions are avoided by incorporating the debug bypass method present...