Nmap NSE 6.01: smb-security-mode

Returns information about the SMB security level determined by SMB. Here is how to interpret the output: User-level authentication: Each user has a separate username/password that is used to log into the system. This is the default setup of pretty much everything these days. Share-level...

Windows NetLM Downgrade Attack

This module changes the system LmCompatibilityLevel registry value to enable sending LM challenge hashes and initiates a SMB connection to the host specified in the SMBHOST module option. If an SMB server is listening, it will receive the NetLM hashes for the session user. This module requires...

SCADA DNP3 server unsolicited auth challenge response function code

...

Facebook Privacy Flaw exposed two College Gay Students Accidentally

Facebook is continually changing its privacy settings, trying to give users more control over what they want to share and with whom. Two gay college students were outed on Facebook because of a privacy flaw in Facebook Groups. Users can be added to Facebook Groups by friends without the user's...

Authentication Capture: MySQL

This module provides a fake MySQL service that is designed to capture authentication credentials. It captures challenge and response pairs that can be supplied to Cain or JtR for cracking. This module requires Metasploit: https://metasploit.com/download Current source:...

Yahoo Patches Vulnerability that Led to 450,000-Password Breach

Yahoo announced today it’s fixed the security hole that allowed a hacker group this week to post some 450,000 email addresses and passwords belonging to freelance writers. “We have taken swift action and have now fixed this vulnerability, deployed additional security measures for affected Yahoo!...

SA-CONTRIB-2012-111 - Security Questions - Access Bypass

This module provides administrator configurable challenge questions for use during the log in and password reset processes. The module doesn't perform a proper access check, allowing a users' questions and answers to be edited by other users including anonymous users. CVE: CVE-2012-4475 Versions...

Australia's first national cyber security competition Announced

Australia's first national cyber security competition Announced Australia's first national cyber security competition, the 2012 Cyber Defence University Challenge, was launched today by broadband minister Senator Stephen Conroy. If you are an undergraduate with top cyber problem-solving skills th...

VNC Authentication Scanner

This module will test a VNC server on a range of machines and report successful logins. Currently it supports RFB protocol version 3.3, 3.7, 3.8 and 4.001 using the VNC challenge response authentication method. This module requires Metasploit: https://metasploit.com/download Current source:...

Combination of Eyes and Algorithms Wins $50K Prize In DARPA's Shredder Challenge

Scientists for the Pentagon’s far-out research branch, DARPA, weren’t sure that anyone would be able to collect the $50,000 prize when they announced their Shredder Challenge to find ways to reassemble shredded documents just over a month ago. This week – just 33 days later – they had a winner...

OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability

The host is running OpenSSH sshd with ChallengeResponseAuthentication enabled and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsshdchallengerespauthenticationbofvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ OpenSSH 'sshd' Challenge Response Authentication Buffer...

OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability

OpenSSH sshd with ChallengeResponseAuthentication enabled is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Banana Dance CMS and Wiki - SQL Injection

Banana Dance CMS and Wiki - SQL Injection +-----------------------+ | Banana Dance CMS+Wiki | +-----------------------+ Vulnerable Web-App : Banana Dance CMS+Wiki Vulnerability : SQLi Author : Aodrulez. Email : [email protected] Google-Dork : : Guess it. Tested on : Ubuntu 10.04 Web-App :...

Banana Dance CMS / Wiki SQL Injection

+-----------------------+ | Banana Dance CMS+Wiki | +-----------------------+ Vulnerable Web-App : Banana Dance CMS+Wiki Vulnerability : SQLi Author : Aodrulez. Email : [email protected] Google-Dork : : Guess it. Tested on : Ubuntu 10.04 Web-App : http://www.doyoubananadance.com/ Download Link...

Banana Dance CMS and Wiki - SQL Injection

+-----------------------+ | Banana Dance CMS+Wiki | +-----------------------+ Vulnerable Web-App : Banana Dance CMS+Wiki Vulnerability : SQLi Author : Aodrulez. Email : [email protected] Google-Dork : : Guess it. Tested on : Ubuntu 10.04 Web-App : http://www.doyoubananadance.com/ Download Link...

LulzSec's Leader Sabu can be at DefCon Security conference

LulzSec's Leader Sabu can be at DefCon Security conference LulzSec's Leader Sabu can be at DefCon Security conference in Las Vegas these days. According to a Article on PCMag , Author note some Tweet chat Between "Sabu" and "th3j35t3r". The LulzSec leader Sabu claimed to have been available in...

Anonplus.com (Anonymous Social Networking Site) Hacked by AKINCILAR

Anonplus.com Anonymous Social Networking Site Hacked by AKINCILAR After several members of Anonymous were reportedly banned from Google+ , the hacker group has announced they will be building their own social network called Anonplus.com . Today Anonplus.com Got defaced by AKINCILAR with page titl...

Lulzsec hack Infragard Atlanta Members Alliance & challenge FBI !

Lulzsec hackInfragard Atlanta Members Alliance & challengeFBI ! Lulzsec yesterday hack Sony and Today they hack Infragard Atlanta Members Alliance , which having partnership with FBI. There is a Video Posted By Lulzsec on Their site after hack : The message written by them : LET IT FLOW YOU STUPI...

Wi-Fi Security Challenge 3 By Security Tube, Prize: $50 !

Wi-Fi Security Challenge 3 By Security Tube, Prize: $50 ! Wi-Fi Security Challenge 3: This challenge has 2 parts: 3a. Never Judge a Packet by its Type: In this challenge the trace file contains a Shared Key Challenge Text and Encrypted Response. You will need to crack the WEP key with just this...

Wi-Fi Challenge by Security Tube !

Wi-Fi Challenge by Security Tube ! 1. Objective: This series of challenges is aimed at testing your skills as a Wireless Hacker! We will posting challenges ranging from - Basic, Intermediate, Advanced, Expert and Insane levels! Our first challenge remain uncracked which we categorized as "Basic" ...