4071 matches found
Moxie Marlinspike on new SSL attacks at Black Hat DC
At the Black Hat DC conference last week, Moxie Marlinspike gave a fascinating talk on the various weaknesses in the SSL infrastructure and a number of novel ways he’s discovered to exploit them. Jeff Moss, Black Hat’s founder, talked to Marlinspike about the attacks...
Mozilla Firefox 3.0.6 (BODY onload) Remote Crash Exploit-a vulnerability warning-the black bar safety net
| ! In milw0rm to see on FF this crash a classic! BODY But the triggering process is not well understood, queryCommandState this method previously useless! Monyer! ---...
Translation software hijacking attacks-vulnerability warning-the black bar safety net
Original link: http://xeye.us/blog/2009/02/%E7%BF%BB%E8%AF%91%E8%BD%AF%E4%BB%B6%E5%8A%AB%E6%8C%81%E6%94%BB%E5%87%BB/ You believe of your mouse? Ever wondered, when your mouse in the selected passage, by translation software the flat-screen takes the word function to be translated, then it is hidi...
Recently that IE7 0day shellcode decryption-bug warning-the black bar safety net
One, use freshow tool to decrypt Original link http://bbs.kafan.cn/viewthread.php?tid=383769&page=1&extra=page%3D1pid5736829 Need to extract the shellcode decryption 1 dadong replace to % u for once esc decrypt--up 2 esc next fill in 2 1 decode should appear. ! Second, The do-it-yourself it, writ...
Ewebeditor2. 8. 0 Ultimate Edition delete arbitrary file vulnerability-vulnerability warning-the black bar safety net
Author: oldjun This vulnerability can very tasteless, it can be fatal, the key to see how you use! This vulnerability is present in Example\NewsSystem directory delete. asp file, which is ewebeditor test page, without the login you can go directly to, to see these code: 'The band"|"the string...
webshell upgrade for linux-vulnerability warning-the black bar safety net
Author: 54safer I'm in the zone-h got the answers, they are so dry With wget the bindshell is downloaded to the/tmp/directory Or then/etc/inetd. conf can be written directly without opening an interactive shell Then use gcc to compile http://cgiserver.sogang.ac.kr/gsviscom/cgi-bin/technote/main...
Use the split function perfectly free to kill the marine to the top such as asp Trojan-vulnerability warning-the black bar safety net
We all know the“marine top”of the asp Trojan is very famous. But in fact really use it, but not much. The main reason is because it is too well known to be mollusc stare very tight, the feature code also many, so doingfree killis very difficult. A few days ago, in the Black anti-of on see hack214...
53KF online customer service system XSS vulnerability-vulnerability warning-the black bar safety net
Author: xushaopei About 53KF: Online customer service（WWW.53KF.COM is the leading site online customer service system, by the six degrees company, the investment founded, is committed to the achievement of the largest web dialogue tool provider. There have been 2 2 million site users in the use o...
“Cocktail”therapy to deal with the variety of Trojan hybrid intrusion-vulnerability warning-the black bar safety net
Here is a quote of the“cocktail”therapy is a medical term, refers to the physician while using the a variety of anti-viral drugs to deal with AIDS. For a computer virus to a single tool in particular is very well-known tool is very easy to be viral as against the target without losing effect, it'...
No routing password permissions when the Dove on-line method-vulnerability warning-the black bar safety net
No routing password permissions when the pigeons on the line method: The first step:tools--FTP--FTP home directory, just in the desktop build one, put the following ports into 2 1. The user name can not fill. The following two options are marked with a tick. Then turn on the service. Completed th...
Turn off XP protection. Replace explorer. exe-vulnerability warning-the black bar safety net
Author: open Source: open's blog In the even of a VPC on the test. No more test. Even not call the dllcache directory. You like it Quote: Turn off XP protection. 替换 explorer.exe Copyright C 2 0 0 8 bbs.secdst.net program Project1; uses Windows,TlHelp32; function LowerCaseconst S: string: string;...
Look at ServU password encryption and storage method-vulnerability warning-the black bar safety net
Look at ServU password encryption storage method First randomly generate a 2-bit charactersfrom a-z lowercase characters. Then the user's original password with this 2-bit random character merge to become the new password character. Such as: the user's original password is a,The randomly generate...
Copy and the real hidden administrator account(complete batch)-bug warning-the black bar safety net
Online to see a lot of copy administator permissions to the account of the method or tool, such as the establishment of the admin$, the so-called hidden account. And copy administrator permissions. In fact, this is a temporary, one-time hidden only, Server reboot through the“Computer Management”o...
Session hijacking attack demo(II)-vulnerability warning-the black bar safety net
...
The use of the hamster hijacking Gmail(sidejacking)-vulnerability warning-the black bar safety net
4 month released, the software DESCRIPTION is tempting: "The black hat of the General Assembly after the outgoing of a tool to Ferret it. The author claims that you can use him to intercept mail login process the cookie information. Then you can feel free to invade the others mailbox. Worked at t...
About Serv-U FTP service System rights of use-vulnerability warning-the black bar safety net
Text/figure Cschi The first back to the hanging horse, Woe from Shaw wall ! The second back to the mention of the right to dead end Third back to borrow the right, winding paths Users\000004ff Fourth back to the afterword, the initiate...
serv-u the default installation of the injection point to read the accounts-vulnerability warning-the black bar safety net
C:\\Program Files\\serv-u\\ServUDaemon. ini and 1=2 union select 1,2,3,4,5,6,7,8,loadfilechar67,58,92,92,80,114,111,103,114,97,109,32,70,105,108,101,115,92,92,115,101,114,118,45,117,92,92,83, 101,114,118, 85,68,97,101,109,111,110,46,105,110,105,1 0,1 1,1 2,1 3,1 4,1 5,1 6,1 7/， Read the serv-u...
The RPC vulnerability is a common method of analysis-vulnerability warning-the black bar safety net
Author: Friddy A． Tools ready 1. IDA Pro Advanced 5.2a powerful static reverse tool 2. HexRays（powerful can the assembler code is converted to high-quality C code of the IDA plug-in 3. mIDA（excellent abstract RPC Interface of the IDA plug-in II. Find the overflow point 1. Patch comparison...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp full automatically obtain the SHELL with the log-vulnerability warning-the black bar safety net
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝Discuz.php＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝ !/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / if $argc3 printr' -------------------------------------------------------------------------------- Usage...
Wireless penetration-from the external network to the internal network series of MITM man in the middle attacks-vulnerability warning-the black bar safety net
Author:Christopher Yang "ZerOne" , Welcome reproduced, reproduced please indicate the author and source） Preface: recently busy faint day secretly, but not many people can share, all the important things are to hands-on force, tired........ Finally have free when get previous articles sort, the...