158 matches found
Android Rootkit Demonstrated at DEFCON
IT security researchers Nicholas Percoco and Christian Papathanasiou demonstrated what they claim is the first rootkit for Android. Their aim was to show how slight the obstacles to the development of a such a rootkit are and how powerful the result can be. Read the full article. The H Security...
Whizzy CMS 10.02 - Local File Inclusion
x Type: Local File Inclusion x Vendor: www.unverse.net x Script Name: Whizzy CMS x Script Version: 10.02 x Script DL: http://code.google.com/p/whizzy/downloads/list x Author: Anarchy Angel x Mail : anarchydotang31@gmaildotcom Exploit: http://site.org/?LFI Ex:...
Researcher to Show Off GSM Intercept Attack at Defcon
At the Defcon conference later this week, Chris Paget, a well-known security researcher who focuses on wireless and RFID issues, will give a demonstration of a technique that enables him to intercept calls made on GSM wireless handsets without any interaction with the user’s handset. The techniqu...
Android Rootikit To Be Shown at DefCon
Researchers have developed a kernel-level Android rootkit in the form of a loadable kernel module and will demonstrate the proof of concept exploit at the upcoming DefCon conference. Read the demo statement. DefCon.org...
ScribeFire Firefox Extension - Privileged Code Injection
, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ScribeFire Firefox Extension Code Injection Vulnerability Versions affected: 3.4.2 +-----------+ |Description| +-----------+ The ScribeFire Firefox extension provides an interface f...
2WIRE Gateway Authentication Bypass & Password Reset
2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET ==================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously set. By setting a n...
2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities
Exploit for hardware platform in category remote exploits ==================================================================== 2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities ==================================================================== 2WIRE GATEWAY AUTHENTICATION...
2WIRE Gateway - Authentication Bypass Password Reset (1)
2WIRE Gateway - Authentication Bypass Password Reset 1 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to...
Joe Grand on the DEFCON Badge, Hacking Parking Meters and the Hazards of Security Research
Dennis Fisher talks with Joe Grand of Grand Idea Studio about the design for this year’s DEFCON badge, the secret feature he added that no one has uncovered yet and his research on hacking smart parking meters. Download SHOW NOTES: Hacking The Defcon 2009 Badge Subscribe to the Digital Undergroun...
Scenes from Black Hat and Defcon 2009
See photos taken from Black Hat 2009 and Defcon, both held last week in Las Vegas, Nev...
DEFCON: CSRF Attacks Made Easy
LAS VEGAS — The security of social networking sites isn’t as bad as you think. In fact, it’s much worse. Sites such as Twitter, Facebook and others that rely heavily on user-generated content, shared content and aggregation have been the targets of increasingly sophisticated attacks over the last...
ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC
Exploit for linux platform in category dos / poc ====================================================== ISC DHCP dhclient 3.1.2p1 Remote Buffer Overflow PoC ====================================================== / cve-2009-0692.c ISC DHCP dhclient 3.1.2p1 Remote Exploit Information:...
Jeff Moss on the History of DEFCON, Black Hat and the Security Underground
Dennis Fisher talks with Jeff Moss, the founder of DEFCON and Black Hat, about the history of the shows, the Michael Lynn-Cisco incident and the evolution of the hacker culture. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...
Jeff Moss on the vulnerability economy
Jeff Moss, the founder of DEFCON and Black Hat, discusses the unfolding of the vulnerability economy. Nowadays, instead of exposing high profile zero-day vulnerabilities at conferences, many researchers opt for selling their discoveries on a growing market...
NXP Semiconductors MIFARE Classic智能卡存在多个未明安全漏洞
BUGTRAQ ID: 30668 CNCAN ID：CNCAN-2008081409 NXP Semiconductors MIFARE是一款一卡通常用的芯片解决方案。 MIFARE智能卡存在多个未明安全问题，攻击者可以利用漏洞克隆卡或伪造未授权卡。 作者将在DEFCON上进行演讲。目前没有详细漏洞细节提供 NXP Semiconductors MiFARE Classic 目前没有解决方案提供： http://www.nxp.com/...
PocketPC MMS Composer (WAPPush) Denial of Service Exploit
No description provided by source. / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner [email protected] http://www.trifinite.org...
PocketPC Mms Composer - 'WAPPush' Denial of Service
/ This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org http://www.mulliner.org/pocketpc/ NotfiFlood - a...
The SUPER Bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / SAVE DEFCON..HELP GOBBLES..SAVE DEFCON..HELP GOBBLES When GOBBLES say he and he security team are non-profit. He really mean NON-profit. This means GOBBLES and he GOBBLES Security Labs GSL friends do not have much funds. GOBBLES was hoping to receiv...