Microsoft Official Blog and Twitter account hacked by Syrian Electronic Army

It could be the worst day ever for Microsoft's patch management and Incident response team. A group of pro-Syrian hackers 'Syrian Electronic Army' has successfully compromised the official Twitter account of the Microsoft News @MSFTNews, Xbox Support. They also defaced the Microsoft's TechNet blo...

Setting Up a Secure and Private Twitter Account

To kick off the new year, we are restarting our tutorial screencast series where we attempt to briefly walk users through the process of locking down their various online accounts. Today’s video, which is just slightly longer than we had hoped, thoroughly details the steps necessary to ensure tha...

Tajikistan Domain Registrar hacked; Google, Yahoo, Twitter, Amazon also defaced

Google’s primary search domain for Tajikistan had seemingly been hacked yesterday, along with other high profile domains including Yahoo, Twitter, Amazon -- redirected to a defaced page. Actually neither Google, nor Twitter servers have been hacked, rather website of Tajikistan's Domain registrar...

Hiox Guest Book 5.0 Cross Site Scripting

Exploit Title : HIOX GUEST BOOK 5.0 HGB-5.0 Cross Site Scripting Author : JoKeRStEx Tested On : Windows Download Software Link : www.hscripts.com/scripts/php/downloads/HGB.zip Date : 03/01/2014 + P.O.C prompt'JoKeRStEx'" prompt'xss email'" prompt'xss comment'" + For test The Exploit Example...

Syrian Electronic Army Hacks Skype Twitter Account With Anti-Surveillance Message

The Syrian Electronic Army took advantage of the relative calm of New Year’s Day to make a loud statement about the NSA’s surveillance program and Microsoft’s alleged participation in it. The group compromised the Twitter account and blog of Microsoft’s Skype service and posted anti-surveillance...

Skype's Official Twitter, Facebook and Blog Hacked by Syrian Electronic Army

None...

Ophcrack 3.6 DLL Hijacking

/ Title: Ophcrack 3.6 Dll Hijacking Exploit quserex.dll Version: 3.6 Tested on: Windows 8 64-bit ,Windows XP SP2 en Vendor: http://ophcrack.sourceforge.net/ Software Link: http://sourceforge.net/projects/ophcrack/files/ophcrack/3.6.0/ophcrack-win32-installer-3.6.0.exe E-Mail:...

[Twitter Password Dump] Command-line Tool to Recover Twitter Password from Web Browsers

Twitter Password Dump is the command-line tool to instantly recover your lost Twitter password from all the popular web browsers. Currently it can recover your Twitter password from following applications, Firefox Internet Explorer v6.x - v10.x Google Chrome Chrome Canary/SXS CoolNovo Browser Ope...

[Avivore] The Twitter-searching Data Miner

Avivore is a Python-based tool that searches Twitter for keywords and then parses any tweets that are found. When parsing, it looks for the following sort of data: Phone numbers in NPA-NXX format ex: 604-555-1212 IPv4 addresses 127.0.0.1 Blackberry PINs ABCDEF12 It presently uses a SQLite backend...

Geolocation OSINT Tool Creepy

Geolocation OSINT Tool Creepy Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentation on map, search filtering based on exact location and/or date, export in csv format or kml for further analysis in Google Maps. What’s new in...

Penny Auction 5 - SQL Injection

| \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Penny auction version - 5, SQLi Vulnerabilities Product Page: http://www.auctionwebsitescript.com/pennyauctionv5.html Script Demo:...

Two Million stolen Facebook, Twitter login credentials found on 'Pony Botnet' Server

Security researchers at Trustwave's SpiderLabs found a Netherlands-based Pony Botnet Controller Server with almost two Million usernames and passwords, stolen by cybercriminals from users of Facebook, Twitter, Google, Yahoo and other websites. In a blog post, the researchers mentioned that after...

Pony Botnet Controller Has 2 Million Stolen, Weak Passwords

So what’s worse: Finding two million passwords harvested by a botnet, or learning that most of the stolen passwords are terribly weak? Researchers at Trustwave found another Pony botnet controller recently that oversees a trove of close to two million website logins, email account credentials, as...

Vodafone Iceland hacked and exposed 70000 Users' Personal Information

Today Vodafone Iceland was hacked by the Turkish group of hackers Maxn3y @AgentCoOfficial who in the past has stolen data from airports' systems, electronic giants and fast food company. The hackers announced via Twitter that he has successfully compromised Vodafone Iceland server and defaced the...

TIME Magazine Twitter account hacked by Syrian Electronic Army

Just now, The hacktivist group Syrian Electronic Army SEA briefly took over the Twitter account of the TIME Magazine. The Hacker group tweeted from the TIME's official account, "Syrian Electronic Army Was Here via @OfficialSEA16..Next time write a better word about the Syrian president SEA" with...

CVE-2013-5065: Microsoft Windows XP and Server 2003 Privilege escalation Zero-Day exploit discovered

Researchers at FireEye have discovered a new privilege escalation vulnerability in Windows XP and Windows Server 2003. CVE-2013-5065, Local privilege escalation vulnerability is used in-the-wild in conjunction with an Adobe Reader exploit CVE-2013-3346 that appears to target a patched...

TIME Magazine Twitter account hacked by Syrian Electronic Army

None...

Pastebin CAPTCHA Bypass

Hello all, After reading an article in Go Null Yourself about abusing PhpBB's Tell-a-Friend feature a while back, I've kept an eye out for ways to spam people or bypass a website's flood protection. Apologies to forum moderators everywhere! On October 5, I discovered a captcha bypass technique an...

Twitter Implements Perfect Forward Secrecy

Twitter took another step toward not only securing the privacy of its users’ communication over the social network, but in warding off the prying eyes of government surveillance with the implementation of Perfect Forward Secrecy. The technology thwarts the efforts of anyone who may be collecting...

Passive Security Community Turned Activist

Security people like to call themselves a community, but until June some might say its greatest community achievement is turning Twitter into its own private and contentious echo chamber. But since the Snowden leaks, there’s been a palpable change and a marked swell in stand-taking. Tweeters have...