Researchers Discovery Data-Stealing Malware That Likes to Nap

Researchers at FireEye’s Malware Intelligence Lab say they’ve found malware that attempts to evade detection with extended sleep calls and uses “the fast flux technique” to hide the attacker’s identity. They are calling the malicious downloader “Trojan Nap” and notes it uses a technique akin to t...

Malware in your Mouse can act as RAT for Cyber Criminals

Recently we reported about that Symantec provide overview and analysis of the year in global threat activity via its Internet Security Threat Report ISTR, with a exclusive details that 400 million new variants of malware were created in 2011, which is an average of 33 million new variants of...

CVE-2011-3214

IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors...

Security feature bypass

IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors...

CVE-2011-3214

CVE-2011-3214: IOGraphics in Apple Mac OS X up to 10.6.8 exposes a locked-screen bypass when an Apple Cinema Display is in display sleep. A physically proximate attacker could bypass the password requirement. Apple issued a security update (Security Update 2011-006 / OS X 10.7.2) addressing the l...

CVE-2011-3214

IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors...

CVE-2011-3214: Undefined Security Weakness

IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors...

Wordtrainer 3.0 Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

Wake-on-LAN

This script will send a WoL Wake-On-LAN packet to each MAC address listed in file uploaded via its preference. To use this feature : - The scanner must be located on the same physical subnet as the targets. - The MAC addresses of the targets must be listed in a text file supplied via the policy...

CVE-2010-4012

Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button...

Магические методы, сериализация, инъекции в сессию и все-все-все

==-1== Введение Изначально писал для себя, как небольшой сборник полезных идей, в итоге вылилось вот в такую статью. Особого опыта в написании публикаций у меня нет, так что ногами не пинать, я старался Перед переходом к практическим примерам рассмотрим теоретически основы используемых функций...

Metasploit Web Crawler

This auxiliary module is a modular web crawler, to be used in conjunction with wmap someday or standalone. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Web Crawler. Author: Efrain Torres et at metasploit.com 2010...

MDVA-2009:177 : x11-server

Display keeps sleeping. Settings set not to but within seconds on being idle screen sleeps or hibernates. This update fixes this issue making the users settings about display respected. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

win32/xp sp3 (FR) Sleep 14 bytes

Exploit for win32 platform in category shellcode =============================== win32/xp sp3 FR Sleep 14 bytes =============================== / win32/xp sp3 FR Sleep 14 bytes Author : optix hacker notice Tested Under Windows XP SP3 fr this shellcode makes a sleep for 90000ms=90s=1,5min this is...

Windows/x86 (XP SP3) (French) - Sleep 90 Seconds Shellcode (14 bytes)

Windows/x86 XP SP3 French - Sleep 90 Seconds Shellcode 14 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF / win32/xp sp3 FR Sleep 14 bytes Author : optix hacker Mail : [email protected] notice Tested Under Windows XP SP3 fr this shellcode makes a sleep for...

CVE-2008-2314: Undefined Security Weakness

Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot corners is enabled, allows physically proximate attackers to gain access to a locked session in 1 sleep mode or 2 screen saver mode via unspecified vectors...

PHP 5.2.6 sleep() Local Memory Exhaust Exploit

No description provided by source. ?php sleep9999999; echo 'Hello World'; ? Will print hello world after 9999999 seconds... so maxexecutiontime simply dosnt work :P Why? we can find in manual:...

function sleep() in all versions of PHP

There is a quite big problem with sleep function in php, The maxexecutiontime set to 60sec. in safe mode can be easy passed by using sleep funcion, for example this script: ?php sleep9999999; echo 'Hello World'; ? Will print hello world after 9999999 seconds... so maxexecutiontime simply dosnt wo...

PHP 5.2.6 - sleep() Local Memory Exhaust

PHP 5.2.6 - sleep Local Memory Exhaust There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum of memory and go to sleep for, let's say 9999999 seconds. sleep pass 'maxexecutiontime' setting. Ram eater sploit ? if ! $purl = @parseurl$url die'sorry,...

PHP 5.2.6 - 'sleep()' Local Memory Exhaust

There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum of memory and go to sleep for, let's say 9999999 seconds. sleep pass 'maxexecutiontime' setting. Ram eater sploit ? if ! $purl = @parseurl$url die'sorry, parseurl function disabled Oo'; if !...