Stephen Toulouse on the MSRC, the Evolution of Security at Microsoft and Securing Xbox Live

Dennis Fisher talks with Stephen Toulouse, director of policy and enforcement for Xbox Live at Microsoft, about his years at the Microsoft Security Response Center, the evolution of security at Microsoft and the joy and pain of being the bad guy on Xbox Live. Download Subscribe to the Digital...

Amit Yoran on Cyberwar, Federal Cybersecurity and the Evolution of Threats

Dennis Fisher talks with Amit Yoran, former director of the National Cyber Security Division at DHS and CEO of NetWitness, about state-sponsored attacks, federal cybersecurity and the changing nature of security threats. Download Subscribe to the Digital Underground podcast on Podcast audio...

Botmasters Holding Summer Clearance Sale

How much does a bot cost these days? Like everything else in our economy, the price of a bot-infected PC fluctuates significantly, based on supply, demand, volume purchased and any number of other factors. But according to research done by the folks at Cisco, bots can be had for as little as 10...

2WIRE Gateway Authentication Bypass & Password Reset

2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET ==================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously set. By setting a n...

WINMOD 1.4 (.lst) Local Stack Overflow Exploit

Exploit for unknown platform in category local exploits ============================================== WINMOD 1.4 .lst Local Stack Overflow Exploit ============================================== !/usr/bin/perl Winmod 1.4 .lst Local Stack Overflow Exploit Exploit by CWH Underground Tested on Win X...

WINMOD 1.4 - '.lst' Local Stack Overflow

!/usr/bin/perl Winmod 1.4 .lst Local Stack Overflow Exploit Exploit by CWH Underground Tested on Win XP SP2 EN Download: http://www.software112.com/products/winmod+download.html print "\n==================================================\n"; print " Winmod 1.4 .lst Local Stack Overflow Exploit \n...

WINMOD 1.4 - .lst Local Stack Overflow

WINMOD 1.4 - .lst Local Stack Overflow !/usr/bin/perl Winmod 1.4 .lst Local Stack Overflow Exploit Exploit by CWH Underground Tested on Win XP SP2 EN Download: http://www.software112.com/products/winmod+download.html print "\n==================================================\n"; print " Winmod 1...

WINMOD 1.4 Stack Overflow

!/usr/bin/perl Winmod 1.4 .lst Local Stack Overflow Exploit Exploit by CWH Underground Tested on Win XP SP2 EN Download: http://www.software112.com/products/winmod+download.html print "\n==================================================\n"; print " Winmod 1.4 .lst Local Stack Overflow Exploit \n...

Robert "Rsnake" Hansen On Slowloris, DoS Attacks And RFC-1918 Networks

Dennis Fisher talks with Robert “Rsnake” Hansen about his Slowloris tool, low-bandwidth DoS attacks and the law of unintended consequences. Download SHOW NOTES: Mitigating the Slowloris HTTP DoS Attack New attack class exploits intranet weaknesses Subscribe to the Digital Underground podcast on...

Jeff Moss on the History of DEFCON, Black Hat and the Security Underground

Dennis Fisher talks with Jeff Moss, the founder of DEFCON and Black Hat, about the history of the shows, the Michael Lynn-Cisco incident and the evolution of the hacker culture. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...

Cormac Herley on the Underground Economy, IRC Economics and the Externalities of Cybercrime

Dennis Fisher talks with Cormac Herley of Microsoft Research about the paper he co-authored on the realities of the underground economy, why sales of stolen credit cards resemble a market for lemons and how we can get better data on cybercrime activities. Podcast audio courtesy of sykboy65 Downlo...

David Mortman on compliance, the changing job of the CSO and baking bread

Digital Underground podcast with Dennis Fisher In this episode of the Digital Underground podcast, Dennis Fisher talks with David Mortman, CSO-in-residence at Echelon One and longtime security executive, about whether we’ve become too reliant on compliance, the changing nature of the CSO’s job an...

Chris Hoff on the Cloud Security Alliance, Virtualization Security and Cage Matches

Dennis Fisher talks to Chris Hoff, author of the Rational Survivability blog and well-known speaker on cloud security and virtualization security issues. Download Subscribe to the Digital Underground podcast on...

BBC botnet buy: What were they thinking?

By Roel Schouwenberg As Dancho Danchev pointed out, the BBC leased itself a botnet zdnet.com. I couldn’t quite believe it when I read it. The BBC, arguably one of the very best TV producers in the world, surely should have known better? There are so many things wrong about this that I hardly know...

Wbstreet v.1.0 (SQL/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= Wbstreet v.1.0 SQL/DD Multiple Remote Vulnerabilities ======================================================= ===================================================================...

wbstreet 1.0 - SQL Injection File Disclosure

wbstreet 1.0 - SQL Injection File Disclosure =================================================================== Wbstreet v.1.0 show.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

checknew-sql.txt

!/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...

wbstreet 1.0 - SQL Injection / File Disclosure

=================================================================== Wbstreet v.1.0 show.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Check New 4.52 (findoffice.php search) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit =====================================================================...

Wbstreet v.1.0 (SQL/DD) Multiple Remote Vulnerabilities

No description provided by source. =================================================================== Wbstreet v.1.0 show.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...