JavaScript String Inflation Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

JavaScript String Reversal Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

JavaScript String Dissection Evasion

An attacker might utilize various evasion technique in order to evade detection by IPS devices...

New Technique Complicates Mutex Malware Analysis

Malware analysts have had a measure of success using static mutex values as a fingerprint for detecting and blocking malicious code. These values are used in programming to enable software to synchronize communication between multiple threads or processes, or to determine whether another instance...

Domain Shadowing Latest Angler Exploit Kit Evasion Technique

The Angler Exploit Kit continues to evolve at an alarming rate, seamlessly adding not only zero-day exploits as they become available, but also a host of evasion techniques that have elevated it to the ranks of the more formidable hacker toolkits available. Researchers at Cisco’s Talos intelligen...

[SECURITY] Fedora 20 Update: libhtp-0.5.6-3.fc20

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. The goals of the project, in the order of importance, are as follows: 1. Completeness of coverage; 2. Permissive parsing; 3. Awareness of evasion techniques; 4. Performance;...

‘DarkLeaks’ Black Market — Anonymously Selling Secrets for Bitcoins

An all new anonymous online underground black market website, DarkLeaks, has been introduced on the Internet where Whistleblowers, blackmailers, hackers and any individual can trade/sell sensitive and valuable data/secrets anonymously in exchange for Bitcoin payments. DarkLeaks is a decentralized...

1,800 Domains Overtaken by Flash Zero Day

When the Blackhole exploit kit went away after the arrest of its alleged creator and maintainer Paunch, there were questions about which kit would rise up as its successor. It seems that the Angler exploit kit has ascended to the throne. The most definitive evidence seems to be the constant...

Fedora 20 : suricata-2.0.6-1.fc20 (2015-0792)

This is a new upstream release fixing several serious bugs: reports of eveasion issues, sequence gaps in tcp stream reassembly under TLS detection, segfault in libhtp 0.5.15 which can lead to denial of service, and several others. See change log for details. Note that Tenable Network Security has...

Adobe Flash Player Action Script Evasion (CVE-2015-0310; CVE-2015-0311)

Flash files can contain malicious Action Script code to exploit vulnerabilities in Adobe Flash Player. Certain evasion tools can use evasion techniques in order to circumvent inspection by security software. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Threat Outbreak Alert RuleID13169: Email Messages Distributing Malicious Software on January 21, 2015

Medium Alert ID: 37064 First Published: 2015 January 21 14:47 GMT Last Updated: 2015 January 22 14:44 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13169...

[SECURITY] Fedora 20 Update: libhtp-0.5.6-2.fc20

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. The goals of the project, in the order of importance, are as follows: 1. Completeness of coverage; 2. Permissive parsing; 3. Awareness of evasion techniques; 4. Performance;...

[SECURITY] Fedora 21 Update: libhtp-0.5.16-1.fc21

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. The goals of the project, in the order of importance, are as follows: 1. Completeness of coverage; 2. Permissive parsing; 3. Awareness of evasion techniques; 4. Performance;...

云锁最新版1.3.145绕过webshell检测

简要描述： webshell检测绕过 详细说明： 一句话马+大马绕过检测 漏洞证明： 1.一句话木马，单纯用这种方式肯定会被检测到，我们采用这种方式： 结果发现只有一开始说的那种文件被检测到： 2.大马，采用base64+gzinflate压缩编码，大马文件如下： ?php function CLsI$ZzvSWE $ZzvSWE=gzinflatebase64decode$ZzvSWE; for$i=0;$istrlen$ZzvSWE;$i++ $ZzvSWE$i = chrord$ZzvSWE$i-1; return $ZzvSWE;...

Malware evasion Security Bypass - Ver2 (CVE-2012-1427)

A security bypass vulnerability has been reported in Cat Quick HealCat Quick Heal. An attacker could exploit this vulnerability via a POSIX TAR file with a 57696E5A6970 character sequence at a certain location. Successful exploitation of this vulnerability would allow remote attackers to bypass...

USBDriveby Device Can Install Backdoor, Override DNS Settings in Seconds

Samy Kamkar has a special talent for turning seemingly innocuous things into rather terrifying attack tools. First it was an inexpensive drone that Kamkar turned into a flying hacking platform with his Skyjack research, and now it’s a $20 USB microcontroller that Kamkar has loaded with code that...

Malicious iFrame Conditional Cookie Injection

Several web exploitation tools inject payloads that are displayed only when specific conditions are met. This may allow an attacker to reduce the odds of detection and to evade inspection...

Detekt Open Source Surveillance Detection Tool

Hours spent on long-distance phone calls to political activists in the Middle East, journalists in Africa or human rights organizations in Asia are stressful for Claudio Guarnieri, an independent security researcher, white-hat hacker and civil rights activist. Often he has to convince that party,...

SunRPC Data Connection Evasion Technique

SunRPC protocol is vulnerable to evasion techniques over its data connection. An attacker may try to evade inspection via an unauthorized data connection. Successful evasion may result in a remote code execution...

New Backoff Variant ROM Tougher to Detect, Analyze

A new and more fine-tuned version of the Backoff point of sale malware known as ROM has been spotted in the wild, according to researchers. While the latest iteration is similar to the preceding version, ROM has tweaks that help the malware better evade detection and hinder the analysis process,...