1666 matches found
Attackers Exploiting Critical Flash Bug Via Drive-By Download
Attackers have begun actively exploiting the critical Adobe Flash vulnerability that Adobe patched last week, using rigged Web pages and phishing techniques to compromise vulnerable machines. The attack code is being hosted on a number of sites around the Web right now, researchers said. Adobe...
Interview with Team Inj3ct0r ( 1337day )
Interview with Team Inj3ct0r 1337day Inj3ct0r provides useful information to people who perform penetration testing, IDS signature development, and exploit research. This project was created to provide information on exploit techniques and to create a useful resource for exploit developers and...
Check Point Response to Stonesoft IPS Evasion Techniques published on June 14, 2011
...
Hackers Pinch Obfuscation Technique From DEFCON Presentation
UPDATE: Feds aren’t the only ones who are paying attention to the demonstrations at security conferences like Black Hat and DEFCON – the folks who actually don the black hats are, also. That point was driven home this week by Kaspersky Lab researcher Marta Janus, who blogged about an interesting...
RKAnalyzer - kernel level rootkit analyzer !
RKAnalyzer - kernel level rootkit analyzer ! RKAnalyzer is a kernel level rootkit analyzer and defender using Hardware Virtualization Techniques, based on the BitVisor ProjectA VMM developed by Tsukuba University and open-sourced under BSD License. It tries to monitor kernel level rootkits'...
Microsoft Releases Version 2.1 of EMET Mitigation Toolkit
Microsoft has released a new version of its Enhanced Mitigation Experience Toolkit, a free download that gives IT staffs the ability to better defend against exploit attempts. The EMET now includes support, as well. EMET is a toolkit that essentially is designed to add exploit mitigation...
Report: Google May Face $500m Fine Over Rogue Pharma Ads
The Wall Street Journal is reporting that search giant Google is close to reaching a settlement with the U.S. Justice Department over an investigation of the company’s policy of running ads from online pharmacies that operate outside U.S. borders and in violation of U.S. law. Google has not made ...
Preview : Web App Hacker's Handbook 2nd Edition !
Preview : Web App Hacker's Handbook 2nd Edition ! The first draft of the new edition of WAHH is now completed, and the lengthy editing and production process is underway. Just to whet everyone's appetite, I'm posting below an exclusive extract from the Introduction, describing what has changed in...
Audit Finds FBI Doing a Poor Job with Cyber Investigations
A U.S. Department of Justice audit of the FBI’s ability to investigate cyber intrusions concluded that the agency is not doing an adequate job. The audit, which reviewed 36 field agents in 10 FBI offices across the country found that the agency’s cyber investigations are hampered by difficulties...
Researchers Propose New Steganography System for Hiding Data
A group of researchers has developed a new application that can hide sensitive data on a hard drive without encrypting it or leaving any obvious signs that the data is present. The new steganography system relies on the old principle of hiding valuables in plain sight. Developed by a group of...
Mozilla Firefox Crash Handler
=============================================================================== 80 8o 8oO80oO8 080808 080808080 80o 08 8080080880 08 0o 08 8 08 8O O8 08o8 O0 0O 80 0o 8o 0 0 0o o0 80 Oo 08 O0 08o0o 08 8 8 8O O8 08 0o 80 88 80o0o 8Oo80O80 0 0 0oOoOoOo0 80 8o 80 o8o 08 0o 08O08oO8 8 8 8O80808O8 08 ...
Hackers Exploit BlackBerry Browser Bug !
Research in Motion has found a security flaw and recommended that user disable JavaScript in browsers on certain phones, threatening the BlackBerry maker's iron-clad reputation for security. "The issue could result in remote code execution on affected BlackBerry smartphones," the Waterloo,...
Expert: Malicious Mobile App Fears Overblown
“It’s the code, stupid!” At least that’s what application security expert Andy Chou observes about go-go world of mobile devices. In this interview with Threatpost’s Paul Roberts, recorded at the RSA Security Conference in San Francisco, Chou said that mobile device software vendors face many of...
Reverse Engineering of Proprietary Protocols, Tools and Techniques !
Reverse Engineering of Proprietary Protocols, Tools and Techniques ! This talk is about reverse engineering a proprietary network protocol, and then creating my own implementation. The talk will cover the tools used to take binary data apart, capture the data, and techniques I use for decoding...
Security Event : Recon 2011 Conference !
Security Event : Recon 2011 Conference ! WHAT RECON is a computer security conference held annually in Montreal, Canada. It offers a single track of presentations over the span of three days with a focus on reverse engineering and advanced exploitation techniques. The registration fee includes an...
Stonesoft Claims To Find More Evasion Techniques in Security Products
Four months after it first went public with a warning about widespread vulnerabilities in network security products, Stonesoft said it has found more than 100 new holes, and that security vendors are doing little to address the problem. The company on Monday announced that it has submitted...
Multiple Vulnerabilities in Podcast Generator
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Podcast Generator which could be exploited to perform cross-site scripting attacks, disclose potentially sensitive information and compromise vulnerable system. 1 Cross-site scripting vulnerability in Podcast...
Metasploit 3.5.1 adds Cisco device exploitation !
Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...
MS10-090 Microsoft Internet Explorer CSS SetUserClip Memory Corruption
This module exploits a memory corruption vulnerability within Microsoft's HTML engine mshtml. When parsing an HTML page containing a specially crafted CSS tag, memory corruption occurs that can lead arbitrary code execution. It seems like Microsoft code inadvertently increments a vtable pointer t...