Chinese Hackers group 'Comment Crew' is still active and operating under cover

Security experts are confident that the Chinese hackers group known as Comment Crew is still operating under cover. “The Comment Crew is back again” this is the rumor within Intelligence community, researchers suspect the involvement of the group of hackers in the recent cyber dispute between U.S...

Comment Crew's Operation Beebus Stealing Drone Tech

FireEye experts have been tracking the Operation Beebus campaign for a few months now, and their latest research suggests that whomever is responsible for the attacks is ultimately interested in stealing drone technology-related secrets. Operation Beebus is an APT-style attack campaign targeting...

EasyPHP Webserver PHP Command Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Voila CMS Cross Site Scripting

Exploit Title:Voila Cms Xss Vulnerability. Exploit Author:Darksnipper & Dr.v!ru$ Home:www.cybercoders.org Email:[email protected] Cms Link:http://www.voilasyria.com Tested On : windows 7 & linux. Dork:intext:powerd by voila P.o.c open http://site.com/path/view/search/viewSearch.php put in sear...

Rebus:list - list.php?list_id SQL Injection

Rebus:list - list.php?listid SQL Injection Exploit Title: Rebus:list SQL Injection Vulnerability Date: 3/18/2013 Vendor Homepage: http://www.ptfs-europe.com/products/rebus/rebuslist/ Author: Robert Cooper robert.cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable Parameters: listid=...

Rebus:list SQL Injection

Exploit Title: Rebus:list SQL Injection Vulnerability Date: 3/18/2013 Vendor Homepage: http://www.ptfs-europe.com/products/rebus/rebuslist/ Author: Robert Cooper robert.cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable Parameters: listid= Google Dork: intext: Powered by rebus:list...

Joomla! Component Spider Calendar - 'date' Blind SQL Injection

Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================== ? Joomla Component comspidercalendar Blind SQL Injection...

Joomla Component com_spidercalendar Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================== ?...

Joomla! Component Spider Calendar - date Blind SQL Injection

Joomla! Component Spider Calendar - date Blind SQL Injection Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================...

Joomla ZtAutoLink Local File Inclusion

!===========================================================================! Joomla Component ztautolink LFI Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://Xr0b0t.name | http://mc-crew.info Date : 19 Des, 2012...

Wordpress Plugin Spotlight Your Upload Vulnerability

Exploit for php platform in category web applications . \ /| | \ \ \ \ | | | | / \ / \ | / \ / / / / / \ | / \ / / / | | | Y \ / \ | | \ /\ \ \ | | | /\ / || || /\ \ /| / /// \ /| \ // / / / / / / INDO-PENDENT HACKER http://thecrowscrew.org Exploit Title: Wordpress Plugins...

Gray Hat Pyrhon by Justin Seitz

Завершился перевод книги Gray Hat Python от Justin Seitz командой r0 crew, а также M. Chumichev. Задать вопросы и полистать книгу вы можете на форуме, либо скачать pdf-версию и наслаждаться книгой на локалхосте...

English Defence League defaced by ZCompany Hacking Crew

ZCompany Hacking Crew members hack and deface English Defence League official website https://englishdefenceleague.org,a far-right British organization . Deface page include text "Fuck Zionist Jews! – Boycot israel! – Fuck the American Government! - Fuck fascist Organizations like EDL" and a...

WordPress Plugin Easy Webinar - Blind SQL Injection

WordPress Plugin Easy Webinar - Blind SQL Injection Exploit Title: Wordpress Easy Webinar Plugin Blind SQL Injection Vulnerability Vendor Homepage: www.easywebinarplugin.com Date: 10/26/2012 Author: Robert Cooper robert.cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable Parameters:...

WordPress Easy Webinar Blind SQL Injection

Exploit Title: Wordpress Easy Webinar Plugin Blind SQL Injection Vulnerability Vendor Homepage: www.easywebinarplugin.com Date: 10/26/2012 Author: Robert Cooper robert.cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable Parameters: wid= Google Dork: allinurl: get-widget.php?wid=...

'Elderwood' Crew, Tied to Google Aurora Attack, Targeting Defense, Energy, Finance Companies

UPDATE–The same team that attacked Google in the Aurora campaign in 2009 is still active and has been conducting a long-term campaign targeting defense contractors, financial services companies, energy companies, human rights organizations and government agencies using a seemingly inexhaustible...

Use of Java Zero-Day Flaws Tied to Nitro Attack Crew

Researchers say that one of the attack groups using the two new Java zero-day vulnerabilities is the same group that was behind an earlier targeted attack campaign from 2011. That group was traced back to China and was essentially running a spear-phishing campaign, but now the crew, known as Nitr...

Blogspot Cross Site Scripting

Exploit Title: Blogspot Cross Site Scripting Date: 13/08/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com/ Category: - Security:RISK: High Vendor or Software Link: Google dork: - Tested on: Linux Proof of Concept: 1.1 "alertdocument.cookie Post String key & save : Preview :...

Symantec Web Gateway 5.0.28 LFI / Code Execution

Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: https://192.168.82.207/spywall/previewProxyError.php?err=../../../../../../../../etc/passwd File include and OS command...

Symantec PcAnywhere 12.5.0 Buffer Overflow

!/usr/bin/python Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Author: S2 Crew Hungary Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 CVE: CVE-2011-3478 Code : import socket import time import struct import string import sys...