Are you prepared for the BlueHat Challenge?

Today we are kicking off a new challenge so you can showcase your security prowess and, if we can, help you build some more. Our BlueHat Challenge is a series of computer security questions, which increase in difficulty as you progress. Only the rare and talented engineer will be able to finish t...

[Ghost Phisher Tool] Fake DNS Server, Fake DHCP Server and Fake HTTP server

Ghost Phisher is a computer security application that comes inbuilt with a Fake DNS Server, Fake DHCP Server, Fake HTTP server and also has an integrated area for automatic capture and logging of HTTP form method credentials to a database. The program could be used as an honeypot, could be used t...

WinRM Script Exec Remote Code Execution

This module uses valid credentials to login to the WinRM service and execute a payload. It has two available methods for payload delivery: Powershell 2 and above and VBS CmdStager. The module will check if Powershell is available, and if so uses that method. Otherwise it falls back to the VBS...

Microsoft, Symantec Join Forces to Take Down Bamital Click-Fraud Botnet

Microsoft and Symantec have shut down a massive click fraud botnet known as Bamital, numerous variants of which have been in circulation since 2009 amassing several million dollars in fraudulent profit for the attackers as well as spreading more malware including scareware. The botnet thrived on...

Court: Government Need Not Justify Warrantless Data Requests

A Virginia appeals court on Friday denied a right-to-access order filed by the Electronic Frontier Foundation and the American Civil Liberties Union on behalf of Icelandic parliamentarian Birgitta Jonsdottir and computer security researchers Jacob Appelbaum and Rop Gonggrijp. The denial confirms ...

Bugtraq Penetration Testing Linux

Bugtraq -2 Blackwidow is a Open-Source Linux Distribution based in Ubuntu and Debian with PAE kernel 3.2 and 3.4 Hacker ‘s suite where you will find all kinds of tools for the best systems auditory. Adapted for beginners in Ethical hacking computer security, and for experts in this field. Is not...

Security in a serious way [THN] - eZine Issue 014

Document Title: =============== Security in a serious way THN - eZine Issue 014 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/780.pdf Original: magazine.hackinthebox.org/issues/THN-September2012.pdf Release Date: ============= 2012-11-26 Vulnerability...

Security in a Serious Way - The Hacker News Magazine September 2012 Edition

Hey faithful readers and people interested in Internet Security! Enjoy our - The Hacker News Magazine September 2012 Edition ,Issue 14 packed full of computer security issues and a great interview with a young hacker who defines the world of hacking and the future. Let us know what you think and...

South Korea Leads Nations for PC Infections, According to PandaLabs' Q2 Report

South Korea for the first time topped PandaLabs’ quarterly ranking of countries with the highest number of infected computers. The nation’s PC infection rate stood at 57.3 percent for Q2, followed by China at almost 52 percent and Taiwan at 42 percent. Other heavy hitters were Bolivia, Honduras,...

PBBoard - admin.php?xml_name Arbitrary PHP Code Execution

PBBoard - admin.php?xmlname Arbitrary PHP Code Execution source: https://www.securityfocus.com/bid/54916/info PBBoard is prone to multiple security vulnerabilities including: 1. Multiple SQL-injection vulnerabilities 2. A security-bypass vulnerability 3. An arbitrary file upload vulnerability...

Threat Outbreak Alert: Fake Anti-Phishing Email Messages on March 9, 2015

Low Alert ID: 26510 First Published: 2012 July 30 22:05 GMT Last Updated: 2015 March 10 11:01 GMT Version: 32 Summary Cisco Security has detected significant activity related to spam email messages that claim to be from the antiphishing.org support team. The message claims the recipient's system...

Study: SQL Attacks Jump 69 Percent In Recent Months

The number of SQL attacks jumped by nearly two thirds earlier this year according to cloud hosting firm FireHost who recorded over 450,000 blocked SQL injection attacks between the first and second quarter this year. According to a report in ComputerWeekly, the firm claimed this week that it...

Joomla! Component com_hello - Controller Local File Inclusion

Joomla! Component comhello - Controller Local File Inclusion source: https://www.securityfocus.com/bid/54611/info The 'comhello' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerabili...

Umapresence - Local File Inclusion / Arbitrary File Deletion

source: https://www.securityfocus.com/bid/54194/info Umapresence is prone to a local file-include vulnerability and an arbitrary file-deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit a local file-include vulnerability to...

Flame spy virus going to Suicide

Flame spy virus going to Suicide The creators of the world's most complicated espionage virus Flame have sent a 'suicide' command that removes it from some infected computers. U.S. computer security researchers said on Sunday that the Flame computer virus, which struck at least 600 specific...

Yellow Duck Framework 2.0 Beta1 - Local File Disclosure

source: https://www.securityfocus.com/bid/53674/info The Yellow Duck Framework is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability could allow an attacker to obtain potentially sensitive information from loca...

VOXTRONIC Voxlog Professional 3.7.x - userlogdetail.php?idclient SQL Injection

VOXTRONIC Voxlog Professional 3.7.x - userlogdetail.php?idclient SQL Injection source: https://www.securityfocus.com/bid/52081/info VOXTRONIC Voxlog Professional is prone to a file-disclosure vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize...

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_qry_common.php?base_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...

Nova CMS - '/includes/function/gets.php?Filename' Remote File Inclusion

source: https://www.securityfocus.com/bid/51976/info Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicio...

OpenEMR 4.1 - '/Interface/fax/fax_dispatch.php?File' 'exec()' Call Arbitrary Shell Command Execution

source: https://www.securityfocus.com/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input. A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the us...