Renewed Attention on Android Apps Failing SSL Validation

SAN FRANCISCO – Android developers whose apps fail to validate SSL certificates are on notice; not only are researchers scanning apps making insecure connections, but so is Google. And the hammer may fall soon. Will Dormann, a researcher with CERT at the Software Engineering Institute at Carnegie...

Malware Communication Analyzer: Malcom

Malcom is a tool designed to analyze a system’s network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate with the outside world. Malcom can help you...

Wireless Network Auditing Tool: FruityWifi

FruityWifi is an open source tool to audit wireless networks. It allows the user to deploy advanced attacks by directly using the web interface or by sending messages to it. Initialy the application was created to be used with the Raspberry-Pi, but it can be installed on any Debian based system...

Paper: NetFlow Data De-Anonymizes Tor Users

Tor Project leaders are trying to rein in concerns about an academic paper describing an end-to-end traffic correlation attack that could be used by a well-funded attacker such as a nation state to de-anonymize traffic on Tor. Executive director Roger Dingledine points out that the researchers...

81% of Tor Users Can be Easily Unmasked By Analysing Router Information

Tor has always been a tough target for law enforcement for years and FBI has spent millions of dollars to de-anonymize the identity of Tor users, but a latest research suggests that more than 81% of Tor clients can be "de-anonymised" by exploiting the traffic analysis software ‘Netflow’ technolog...

U.S. Air Force Aiming to Raise Cyber Awareness on Networks with MAMA

The United States Air Force is attempting to enhance what the military service branch is calling cyber situational awareness in order to contend with “increasingly sophisticated” threats to its networks and systems. The Air Force Research Laboratory’s Information Directorate announced it was...

[SECURITY] Fedora 20 Update: webalizer-2.23_08-1.fc20

The Webalizer is a Web server log analysis program. It is designed to scan Web server log files in various formats and produce usage statistics in HTML format for viewing through a browser. It produces professional looking graphs which make analyzing when and where your Web traffic is coming from...

phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability

No description provided by source. Application: phpTrafficA = 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1...

ntop Cross Site Scripting

Exploit Title : ntop, Web-based Traffic Analysis and Flow Collection tool reflected xss vulnerability Author : Manish Kishan Tanwar Vendor : httphttp://www.ntop.org Date : 10/06/2014 Discovered @ : INDISHELL Lab Love to : zero cool,Team indishell,Hardeep Singh email : [email protected]...

Bro - Passive Open-Source Network Traffic Analyzer

While focusing on network security monitoring, Bro provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Bro has successfully bridged the traditional gap between academia and operations since its inception. Today, it ...

Tor Browser v3.6 - Anonymity Online and defend yourself against network surveillance and traffic analysis

The Tor Browser Bundle lets you use Tor on Windows, Mac OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser to protect your anonymity, and is self-contained. Changelog v3.6 Here is the complete changelog since TBB 3.5.4...

DTLS v1.2 Traffic Negotiation Detection

Binary data 8198.prm...

Wireshark NFS Dissector拒绝服务漏洞

Bugtraq ID：66068 CVE ID：CVE-2014-2281 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 由于程序没有正确处理某些类型的数据包，攻击者可以利用漏洞是受影响程序崩溃，拒绝服务合法用户。 0 MandrakeSoft Enterprise Server 5 x8664 MandrakeSoft Enterprise Server 5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wireshark.org/...

Wireshark M3UA Dissector拒绝服务漏洞

Bugtraq ID：66070 CVE ID：CVE-2014-2282 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 由于程序没有正确处理某些类型的数据包，攻击者可以利用漏洞是受影响程序崩溃，拒绝服务合法用户。 0 Wireshark 1.10.0 - 1.10.5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wireshark.org/...

Wireshark RLC Dissector 'packet-rlc.c'拒绝服务漏洞

Bugtraq ID：66072 CVE ID：CVE-2014-2283 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 由于程序没有正确处理某些类型的数据包，攻击者可以利用漏洞是受影响程序崩溃。 0 MandrakeSoft Enterprise Server 5 x8664 MandrakeSoft Enterprise Server 5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wireshark.org/...

[Ipdecap] Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols

Ipdecap can decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP ipsec protocols, and can also remove IEEE 802.1Q virtual lan header. It reads packets from an pcap file, removes the encapsulation protocol, and writes them to another pcap file. Goals are: Extract encapsulated tcp flow to...

HTTPS can leak your Personal details to Attackers

Explosive revelations of massive surveillance programs conducted by government agencies by the former contractor Edward Snowden triggered new debate about the security and privacy of each individual who is connected somehow to the Internet and after the Snowden’s disclosures they think that by...

Open Web Analytics 'owa_email_address'参数SQL注入漏洞

BUGTRAQ ID: 64774 CVECAN ID: CVE-2014-1206 Open Web Analytics是一个开源的网站流量统计系统。 Open Web Analytics 1.5.4及更早版本没有正确过滤index.php的"owaemailaddress"参数（"owado"设置为"base.passwordResetForm"，"owaaction"设置为"base.passwordResetRequest"），在实现上存在安全漏洞，可导致注入任意SQL代码。 0 Open Web Analytics Open Web Analytics = 1.5.4 Open...

Indian Intelligence Agencies going to deploy Internet Surveillance project NETRA

Think twice before using some words like ‘Bomb’, ‘Attack’, ‘Blast’ or ‘kill’ in your Facebook status update, tweets or emails, because this may flag you as a potential terrorist under a surveillance project of Indian Security agencies. This Indian Internet surveillance project named as NETRA...

Network Security Monitor Framework: Bro

Bro is a passive, open-source network traffic analyzer. It is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including...