NetRipper - Smart Traffic Sniffing for Penetration Testers

NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after decryption. NetRipp...

Samsung smart Refrigerator presence of the vulnerability can lead to Gmail credentials theft-vulnerability warning-the black bar safety net

The recent Internet of things and new security issues, this time security researchers from the Samsung smart fridge to extract the Gmail authentication information. The middleman steal authentication At the recent DEFCON hacking conference, hackers have made a through the middle attack to steal t...

Smart Traffic Sniffing: NetRipper

Smart Traffic Sniffing NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before...

RollJam — $30 Device That Unlocks Almost Any Car And Garage Door

We have talked a lot about car hacking. Recently researchers even demonstrated how hackers can remotely hijack Jeep Cherokee to control its steering, brakes and transmission. Now, researchers have discovered another type of car hack that can be used to unlock almost every car or garage door. You...

Pineapple 2.3.0 Autopwn Script

I have wrote PoC half a year ago, because i needed to try it on my Chinese router, and it still works on freshly purchased pineapple devices. hello from Defcon ; And guys, it’s not a talk for the defcon, especially if you have done a botnet based on that shit… ; See ya tomorrow at WiFi village...

Hack or will be in 8 months to disclose the Tesla Model S The digital security vulnerabilities-vulnerability warning-the black bar safety net

Right now, the Tesla car is perhaps the world networking of the highest consumer vehicles, has become a hackers a target. Thomas Fox-Brewster at Forbes Chinese network wrote the article said, in 8 months, held at the Defcon hacker conference, CloudFlare company Research Director Marc Rogers Marc...

Hacking exposed Tesla Model S the memory 5 of the digital vulnerability-vulnerability warning-the black bar safety net

According to Forbes reports, next month's Defcon hacker conference the eve of the opening, Tesla Model S models are exposed there are still 5 at the digital security vulnerabilities, and these vulnerabilities are still not being blocked. As global probably the most popular consumer interest in th...

Встреча Defcon Moscow #9

3 июля, в пятницу, в офисе Mail.Ru Group состоится девятая встреча Defcon Moscow, которую организует группа DC7499. Defcon Moscow — это открытое и независимое сообщество технических энтузиастов, приближенных к области высоких технологий, а также информационной и технической безопасности. Программ...

Technical analysis: Femtocell home base station to a communication to intercept, fake arbitrary SMS vulnerability-vulnerability warning-the black bar safety net

Ali mobile security team with the Chinese Thiel Laboratory of wireless technology Ministry of communication experts together, the combination of domestic operator a type of Femtocell base station for the security analysis, found that the more pieces of the major vulnerabilities that can lead to...

GPG 32-Bit Short Key ID Collision Attacks

Attack and vulnerability details are often disclosed in order to prompt vendors and project maintainers into action. It happened recently with publication of attack code that mimicked the work of Karsten Nohl on BadUSB and tried to nudge Phison Electronics of Taiwan into looking at its USB...

Cisco IOS 11.x TFTP Server Long File Name Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file name handling of Cisco IOS is...

ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC

No description provided by source. / cve-2009-0692.c ISC DHCP dhclient 3.1.2p1 Remote Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 Stack-based buffer overflow in the scriptwriteparams method in...

Telmanik CMS Press 1.01b (pages.php, page_name param) - SQL Injection

No description provided by source. x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Mail : anarchyatdc414dotorg...

2WIRE Gateway - Authentication Bypass & Password Reset Vulnerabilities

No description provided by source. 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password...

Telmanik CMS Press 1.01b - pages.php?page_name SQL Injection

Telmanik CMS Press 1.01b - pages.php?pagename SQL Injection x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Ma...

Telmanik CMS Press 1.01b SQL Injection

x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Mail : anarchyatdc414dotorg Exploit:...

My DEFCON social engineering talk and DerbyCon

This year has been a year of firsts for me and for Coalfire. I was recently hired to my first Information security job as a penetration tester for Coalfire Labs, the forensic and app/network testing side of Coalfire. Many of the Coalfire Labs team attended DEFCON in Las Vegas in early August.. No...

BackTrack 5 R3 Released - Download Now !

The latest version of Backtrack is out! Check out Backtrack 5 R3! "The time has come to refresh our security tool arsenal – BackTrack 5 R3 has been released. R3 focuses on bug-fixes as well as the addition of over 60 new tools – several of which were released in BlackHat and Defcon 2012. A whole...

ZeroNights 2012, Москва 19-20 ноября

Привет всем, Попросили запостить от defcon-group. Цитата: Заявка на участие в конференции в качестве докладчика ZeroNights — международная конференция, посвященная техническим аспектам информационной безопасности. Главная цель конференции — распространение информации о новых методах атак, угрозах...

DEFCON Kids Returns, Now With 0-Day

DEFCON is inviting the kids back again this year for the second edition of DEFCON Kids, and this time, there’s zero-days involved. The not-for-profit conference is dedicated to teaching kids about white-hat hacking, security, privacy and hardware skills. The learning starts at DEFCONKids.org, whe...