3444 matches found
Warrant Authorized FBI to Track and Infect Computers with Malware
Tor has always been a tough target for law enforcement for years, but the United States Federal Bureau of Investigation FBI has found a way to successfully track users across the network. Just a few days back, Tor made a difficult announcement that an attack on its system likely exposed its users...
Web-Fu - Chrome extension for pentesting web applications
Chrome extension for pentesting web applications. Web-fu Is a web hacking tool focused on discovering and exploiting web vulnerabilitites. Is a Browser embedded webhacking tool. Some tools, doesn't support certifiacte auhtentication or web vpn accesses. If the browser can authenticate on the...
Podcast: Threatpost Previews Black Hat 2014
In this special edition of the Digital Underground Podcast, Dennis Fisher interviews fellow Threatpost editor Mike Mimoso and also Threatpost reporter Brian Donohue about the Black Hat security conference, which begins this week in Las Vegas. Topics of discussion include Chris Valasek and Charlie...
Canada NRC Hit by Apparent Chinese Cyber Attack
One of Canada’s premier research and technology organizations was hit with a cyber-attack recently that forced the cooperative offline; the attack – which appears to be Chinese in origin – was so serious the organization is being forced to rebuild its entire system. The National Research Council ...
Facebook Self-XSS Scam Fools Users into Hacking Themselves
Scammers have again targeted more than one billion active users of the popular social networking giant Facebook, to infect as many victims as possible. Not by serving fake post, neither by providing malicious video link, instead this time scammers have used a new way of tricking Facebook users in...
Israeli Defense Firms Hacked For 10-Month Span
Detailed schematics for a particular type of anti-ballistic missile, information about rockets, and pages upon pages of other mechanical documents were allegedly stolen from a trio of Israeli defense contractors between 2011 and 2012, it was revealed today. A Maryland-based threat intelligence fi...
DEF CON SOHOpelessly Broken Wireless Router Hacking Contest
Home and small office wireless routers are feature-rich networking devices, providing consumers and mom-and-pop shops with much more than an Internet gateway. Some, for example, have a print server function, while others store personal files—and very few are secure out of the box. Hackers and...
NWHT - Network Wireless Hacking Tools
Network Wireless Hacking Tools, new version and support your kali linux. Download NWHT...
PayPal MOShipping API - Bypass & Multiple Vulnerabilities
Document Title: =============== PayPal MOShipping API - Bypass & Multiple Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1273 Video: https://www.youtube.com/watch?v=GRvUsKWkIs Advisory 1: http://www.vulnerability-lab.com/getcontent.php?id=1049 Advisory ...
PayPal MOShipping API - Bypass & Multiple Vulnerabilities
Document Title: =============== PayPal MOShipping API - Bypass & Multiple Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1273 Video: https://www.youtube.com/watch?v=GRvUsKWkIs Advisory 1: http://www.vulnerability-lab.com/getcontent.php?id=1049 Advisory ...
Destoon前台getshell(CSRF任意代码执行)
简要描述： 测试版本 DESTOON B2B Version 5.0 Release 20140625 UTF-8 ZH-CN 详细说明： 0.问题文件 admin/tag.inc.php 95行 eval$tagcode; 未对用户提交的执行代码tagcode做安全限制 1.前台注册会员 2.进入会员中心，发布一条求购信息 信息标题：随意 行业分类：随意 产品图片：通过审查元素，修改 postthumb 的value为...
Daphne - Tool for killing, controlling and debugging processes in Windows
Daphne is a small application for killing, controlling and debugging Windows’ processes. It was born to kill a windows process and became almost a task manager replacement. You can kill a process by dragging the mouse over the windows, by right-clicking the process in the main process list, or by...
Miniduke APT Campaigh Returns with New Targets, Hacking Tools
The Miniduke advanced persistent threat APT campaign uncovered by researchers at Kaspersky Lab and CrySys Lab in February 2013 is back after a year-long hiatus in which attacks abated almost entirely. While the initial Miniduke operations primarily targeted government organizations in Europe, thi...
UltraISO 9.3.6.2750 Local Buffer Overflow Exploit (0day)
No description provided by source. / Ultraiso local buffer overflow exploit0day This 0day is kickass from fl0 fl0w a.k.a Stefan! Run calc.exe or bind port and hack ,fuck antisecurity. Thanks to George Nicolaou one of the best there is! / includestdio.h includestring.h includegetopt.h void...
redaxscript 0.3.2 - Multiple Vulnerabilities
No description provided by source. ================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor Notification: ...
GNU Emacs 22.1 Local Variable Handling Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26327/info Emacs is prone to a vulnerability that lets attackers execute arbitrary code. Due to a design error, the application ignores certain security settings and modifies local variables. By supplying a malicious file...
Car Portal 2.0 - BLIND SQL Injection Vulnerability
No description provided by source. +Title Car Portal v2.0 BLIND SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew...
WebAPP 0.9.9.2.1 - Remote Command Execution Exploit (1st)
No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a Backdoor in...
TLM CMS 3.2 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vendor : http://tlm.hebserv.fr/ Download : http://tlm.hebserv.fr/modfile/upload/tlmcms32.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Kutu pada...
Joomla Component (com_jgen) SQL Injection Vulnerability
No description provided by source. +Title Joomla JGen Component comjgen SQL-i Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew...