1781 matches found
Skype Software Vulnerabilities - 0 Day Exploitation 2011
Document Title: =============== Skype Software Vulnerabilities - 0 Day Exploitation 2011 References: =========== Document: https://www.vulnerability-lab.com/resources/documents/293.pdf Speaker: https://conference.hitb.org/hitbsecconf2011kul/?pageid=1757 Conference Mirror:...
[Call for Article] The Hacker News Magazine - November 2011 Edition
Call for Article The Hacker News Magazine - November 2011 Edition The Hacker News is starting to prepare the next issue of 'The Hacker News Magazine'. Submissions are invited for a 6th up coming special November Issue as "Anniversary Edition ". If you have something interesting to write, please...
New Mac OS X Trojan Imuler Hides Inside Malicious PDF
Malware that targets Mac OS X isn’t anywhere near catching up to Windows-based malware in terms of volume and variety, but it seems that OS X malware may be adopting some of the more successful tactics that Windows viruses have been using to trick users. Researchers have come across a sample of a...
Malcon 2011 - Call for Papers
Malcon 2011 - Call for Papers Malcon is the worlds first platform bringing together Malware and Information Security Researchers from across the globe to share key research insights into building and containment of the next generation malwares . Call for Papers: Malcon 2011 are looking for new...
Malcon 2011 - Call for Papers
Malcon 2011 - Call for Papers Malcon is the worlds first platform bringing together Malware and Information Security Researchers from across the globe to share key research insights into building and containment of the next generation malwares . Call for Papers: Malcon 2011 are looking for new...
Repeated Character Conversion Obfuscation
Although various security products provide coverage against many web vulnerabilities, Metasploit exploits could potentially bypass these security products by using JavaScript obfuscation techniques. An example of such a technique is the repeated character conversion obfuscation. Such techniques...
DDoS Attack Using Google Plus Servers
A Security expert at Italian security firm AIR Sicurezza Informatica has claimed that Google's servers vulnerability allows a hacker to exploit the search giant's bandwidth to launch a distributed denial-of-service DDoS attack on any targeted server. On the IHTeam Security Blog , the author of th...
Hacking a Facebook Account using Facebook
Hacking a Facebook Account using Facebook Many of us know that phishing is also a trick to hack a facebook and session hijicking but hacker can do both at a same time. This vulnerability was happened on Facebook static FBML .Example here . Here you can get that Facebook FBML script :...
Infographic: A Deeper Look at Malware Networks
Blue Coat’s Senior malware researcher Chris Larsen has pulled data from the company’s Mid-Year Security Report for an infographic on malware networks. Read on to get an idea of some of the larger networks, their points of entry and a list of prevention techniques...
Cross Site Scripting - Dokumentation, Analyse & Techniken
Document Title: =============== Cross Site Scripting - Dokumentation, Analyse & Techniken References: =========== http://www.vulnerability-lab.com/resources/documents/198.pdf http://de.wikipedia.org/wiki/Cross-SiteScriptingWeblinks ; Release Date: ============= 2011-07-19 Vulnerability Laboratory...
Computerviren - Arten, Verfahren, Technik & Geschichte
Document Title: =============== Computerviren - Arten, Verfahren, Technik & Geschichte References: =========== http://www.vulnerability-lab.com/resources/documents/194.pdf Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 194 Discovery...
Computerviren - Arten, Verfahren, Technik & Geschichte
Document Title: =============== Computerviren - Arten, Verfahren, Technik & Geschichte References: =========== https://www.vulnerability-lab.com/resources/documents/194.pdf Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 194 Discovery...
SQL Server Takeover Tool: Sqlninja
Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end.Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help an...
Analysis of the postgresql database attack techniques II-vulnerability warning-the black bar safety net
You can see we broke up in a field for the name, then we continue incrementing the offset value, to obtain the other field, as shown in Figure 9 and 1=2 union select 1,columnname,'3','4' from informationschema. the columns where tablename='admins' offset 2 limit 1-- ! Figure 9 Field passowrd is...
Forget APT, Mass Malware is Still the Big Threat
MALAGA, SPAIN–While the high-profile attacks against RSA, Google and others over the last couple of years has focused a lot of attention on defending against advanced, targeted attacks, the fact remains that most attackers are in fact relying on crimeware packs loaded with commodity exploits for...
Attackers Exploiting Critical Flash Bug Via Drive-By Download
Attackers have begun actively exploiting the critical Adobe Flash vulnerability that Adobe patched last week, using rigged Web pages and phishing techniques to compromise vulnerable machines. The attack code is being hosted on a number of sites around the Web right now, researchers said. Adobe...
Interview with Team Inj3ct0r ( 1337day )
Interview with Team Inj3ct0r 1337day Inj3ct0r provides useful information to people who perform penetration testing, IDS signature development, and exploit research. This project was created to provide information on exploit techniques and to create a useful resource for exploit developers and...
Check Point Response to Stonesoft IPS Evasion Techniques published on June 14, 2011
...
Hackers Pinch Obfuscation Technique From DEFCON Presentation
UPDATE: Feds aren’t the only ones who are paying attention to the demonstrations at security conferences like Black Hat and DEFCON – the folks who actually don the black hats are, also. That point was driven home this week by Kaspersky Lab researcher Marta Janus, who blogged about an interesting...
RKAnalyzer - kernel level rootkit analyzer !
RKAnalyzer - kernel level rootkit analyzer ! RKAnalyzer is a kernel level rootkit analyzer and defender using Hardware Virtualization Techniques, based on the BitVisor ProjectA VMM developed by Tsukuba University and open-sourced under BSD License. It tries to monitor kernel level rootkits'...