BruCON Agnitio workshop Slides and Video Demonstration - Download

BruCON Agnitio workshop Slides and Video Demonstration - Download Workshop by David Rook Security Ninja at BruCON 2011 in Belgium. You can Download Slide from here. Required for the Agnitio hands on demos: A 32bit Windows Operating System XP or 7 preferably – VM will be fine .NET framework 3.5...

Session Race Conditions and Session Puzzling – Now Simplified

Session Race Conditions and Session Puzzling – Now Simplified A few months ago Shay Chen, Senior Manager at Hacktics Advanced Security Center HASC published a paper about Session Puzzling, a new application level attack vector of critical severity and numerous uses, but for some bizarre reasons,...

DDOs Tracer - 1.0 Released by MaxPainCode

DDOs Tracer - 1.0 Released by MaxPainCode At most any time of the day, there's a distributed denial-of-service DDOS attack underway somewhere on the Internet. Yes, it's still true, despite reports that some ISPs have experienced fewer DDOS attacks overall during the last six months. It's a matter...

Vulnerability Master 1.0 Released By MaxPain

Vulnerability Master 1.0 Released By MaxPain Video Demostartion Download Vulnerability Master 1.0...

Shanghai Freemen SQL Injection

+Title : SHANGHAI FREEMEN Sql Injection +Vender : http://www.shanghai-freemen.com/ +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 01/07/2011 +Home : www.skote-vahshat.com Err0r 0n : hot.asp Exploit : http://target.com/products/hot.asp?id=SQL Demo :...

Lock Picking Basics - PadLocks & Urban Freestyle

Document Title: =============== Lock Picking Basics - PadLocks & Urban Freestyle References: =========== Download: http://www.vulnerability-lab.com/resources/videos/17.wmv View: http://www.youtube.com/watch?v=ULGsfZxcD4 Release Date: ============= 2011-06-17 Vulnerability Laboratory ID VL-ID:...

DNS Spoofing - Man in the Middle (Basic Attack)

Document Title: =============== DNS Spoofing - Man in the Middle Basic Attack References: =========== Download: http://www.vulnerability-lab.com/resources/videos/16.wmv View: http://www.youtube.com/watch?v=9HWvUgSk0Y Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID:...

CVMH Solutions SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Gloves In A Bottle Local File Inclusion Vulnerability

Exploit for php platform in category web applications + Gloves In A Bottle Local File Inclusion + Google dork : Gloves In A Bottle, Inc. All rights reserved + Contact : email protected - d3c0der.blogspot.com + special tnx : attackerz.ir , phc.ir...

Internet Explorer 9 Address Bar Spoof

IE9 Address Bar Spoof: For a quick demo, please visit http://keyloggeronline.com/misc/temp/about.htm Thanks. Spoof function myOpen var mywin=open'about:blank',"mywindow",'location=1,scrollbars=0,width=300,height=290';...

How easy it is to hack AMC's sites !

An 'ethical' hacker demonstrates how one can break into the civic corporation's e-governance site and I P Gautam's official domain to access confidential info. The state government's websites are under threat of being hacked. A BCA student, who calls himself an 'ethical' hacker, demonstrated how ...

PHP Art Info SQL Injection

=============================================== PHP Art Info SQL Injection Vulnerability =============================================== +Title : PHP Art Info SQL Injection Vulnerability +Software : Art Info +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeathotmaildotcom +Web ...

Researcher Demonstrates Stuxnet At Work

We know Stuxnet has caused some major disruptions in nations like Iran and India. But how, exactly, does it work? In this video, Symantec researcher Liam O’Murchu demonstrates how a Stuxnet infected programmable logic controller PLC by Siemens can instruct a piece of machinery to run out of...

ATM Makers Release Fixes for 'Jackpotting' Flaw

Two ATM manufacturers have released software updates to address the remotely exploitable vulnerabilities in their machines’ firmware that IOActive researcher Barnaby Jack demonstrated line on stage at the Black Hat conference last month. In response to the demonstration, in which Jack was able to...

Android Rootkit Demonstrated at DEFCON

IT security researchers Nicholas Percoco and Christian Papathanasiou demonstrated what they claim is the first rootkit for Android. Their aim was to show how slight the obstacles to the development of a such a rootkit are and how powerful the result can be. Read the full article. The H Security...

SHOPEX Cross Station and CSRF vulnerabilities-vulnerability warning-the black bar safety net

Cross-site request forgerycross-site request forgeryis usually abbreviated as CSRF/XSRF, the literal translation for cross-site request forgery, i.e. an attacker by invoking third-party web site the malicious script or use the program to forge a request, of course, not need to the user end disgui...

rapidCMS 2.0 - Authentication Bypass

Exploit Title: rapidCMS V2 Authentication Bypass Date: 18/07/2010 Author: Mahjong Software Link: www.rapidcms.de Version: V2 Tested on: Linux Found by: Mahjong E-Mail: [email protected] Greetings: Puddy, Ancolon ---------------------------------------------------------- Exploit Authentication Bypas...

Joomla! Component PaymentsPlus 2.1.5 - Blind SQL Injection

Joomla! Component PaymentsPlus 2.1.5 - Blind SQL Injection Critical Level : HIGH Vendor Url : http://paymentsplus.com.au/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members and my...

waibrasil Remote / Local File Inclusion

Exploit for php platform in category web applications ======================================= waibrasil Remote / Local File Inclusion ======================================= Author: eXeSoul Vendor: www.waibrasil.com.br category: Remote Version: Web Application Tested on: Apcahe/Unix Code : exploi...

SoftBizScripts Hosting Script SQL Injection

Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability Date: 29-4-2010 Author: 41.w4r10r Vendor Link : http://softbizscripts.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:"browsecats.php?cid=" Code :...