Snack Attack: Analyzing Flame's Replication Pattern

The Flame malware uses several methods to replicate itself. The most interesting one is the use of the Microsoft Windows Update service. This is implemented in Flame’s “SNACK”, “MUNCH” and “GADGET” modules. Being parts of Flame, these modules are easily reconfigurable. The behavior of these modul...

NetBIOS Name Service Spoofer

This module forges NetBIOS Name Service NBNS responses. It will listen for NBNS requests sent to the local subnet's broadcast address and spoof a response, redirecting the querying machine to an IP of the attacker's choosing. Combined with auxiliary/server/capture/smb or...

Wireshark 1.4.2 & Wireshark 1.2.13 - new version released !

"Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education." The following protocols have been updated – AgentX, ANCP, DIAMETER, HTTP, IP, LDSS, MIME, NBNS, PROFINET, SIP, TCP, Telnet, ZigBee. This update also fixes many...

CVE-2003-0661

The CVE-2003-0661 entry concerns the NetBIOS NBNS information disclosure vulnerability in Windows NT 4.0, 2000, XP, and Server 2003. The NBNS response may leak random memory contents from the target, potentially revealing sensitive data to remote attackers. Public details across connected documen...

CVE-2000-0673

The CVE-2000-0673 issue affects NetBIOS Name Server (NBNS) where the protocol lacks authentication, allowing remote attackers to cause a denial of service by sending spoofed Name Conflict or Name Release datagrams. Documented impact is DoS on affected hosts, e.g., NetBIOS name resolution disrupti...