Why you should try to join some of the underground hacker forums that are out there

Even if you are considered to be a white hat hacker, you are always still walking a fine line between being a bad guy and a good guy in many people eyes. There are a lot of people out there who believe that there should be no hacking at all being done and everyone who does it should be considered...

vBGarage Pro vBulletin Mod - SQL Injection

vBGarage Pro search parameter "modelyear" is unsanitzed, which can lead to an SQL Injection. !/bin/bash MegaManSec InterNot echo "MegaManSec @ www.internot.info" echo "White-Hat Hacker :" if -z "$1" ; then echo "Usage: $0 http://link.to/forum/" echo "Example: $0 http://f800riders.org/forum/" exit...

DEFCON Kids Returns, Now With 0-Day

DEFCON is inviting the kids back again this year for the second edition of DEFCON Kids, and this time, there’s zero-days involved. The not-for-profit conference is dedicated to teaching kids about white-hat hacking, security, privacy and hardware skills. The learning starts at DEFCONKids.org, whe...

Critical Sqli Vulnerability in channel [V] Website

Critical Sqli Vulnerability in channel V Website A 16 years old White Hat Hacker "Arjun Siyag" from India discover a Critical Sqli Vulnerability in channel V Website https://www.channelv.in. Proof of the hack is as shown in above image. Hacker disclose only the admin username and password, which...

Android Network Toolkit (ANTI) Review - Pentest at the push of a button

This Post reviews the newly released ANTI3 version. We've received a platinum account of ANTI3, before its official release, and this is our review: Recently White-Hat Hacker, Itzhak "Zuk" Avraham, the founder of zImperium unveiled its new app in Blackhat / Defcon19, introducing a new concept whe...

International Conference on Cyber Security (ICCS) 2012 : Protecting the Cyber World

International Conference on Cyber Security ICCS 2012 : Protecting the Cyber World The FBI is teaming up with Fordham University for the International Conference on Cyber Security. It's an effort to identify emerging cyber threats and develop ways to mitigate those threats. The ZeuS Trojan has...

Facebook distributing White Hat Debit Card to Bug Bounty Winners

Facebook distributing White Hat Debit Card to Bug Bounty Winners Polish IT security portal Niebezpiecznik.pl, which recently published an image of a bug bounty card given to Szymon Gruszecki, a Polish security researcher and penetration tester. Neal Poole, a junior at Brown University, has report...

XSS Vulnerability in Interactive YouTube API Demo Beta

XSS Vulnerability in Interactive YouTube API Demo Beta There is a Critical Cross site XSS Vulnerability in Interactive YouTube API Demo Beta, Discovered by various sources. One of the White Hat Hacker "Vansh Sharma " Inform us about this XSS Vulnerability with proof of concept. Proof Of Concept :...

Phishing Site hacked for teaching lesson to Scam Lovers

Phishing Site hacked for teaching lesson to Scam Lovers Researchers at the security firm GFI Labs found an email used to lure people to a phishing site called "canal-i. " The message attempts to scare unsuspecting readers by telling them they have exceeded the storage limit on their inbox, and...

Nodesforum 1.059 remote file inclusion defect and repair-vulnerability warning-the black bar safety net

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / Windows Vista...

Nodesforum 1.059 Remote File Inclusion

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / WinVista...

nodesforum 1.059 - Remote File Inclusion

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / WinVista...

Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal

Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA- 5.5.1294-i386-DVD.iso Discovery Date: 27/05/2011 Remote: Yes Author Site Email:...

Irfan Shakeel has found xss vulnerability in EESL and Harvard University's Website !

Irfan Shakeel has found xss vulnerability in EESL and Harvard University's Website ! Who is Irfan Shakeel ? Well , Irfan Shakeel ,is a telecommunication engineer from Pakistan, He is a White hat Hacker. He is working as a security researcher for a while. His blog at .The main objective of his...

White hat hack breaks Windows Phone Marketplace security !

Video shows how Windows Phone 7 apps can be easily swiped and stripped of DRM protections Once more, Microsoft finds itself in the unenviable position of having one of its security flaws shared with the world. WPCentral has posted a video made by a "'white hat' developer" that shows how cyber...

Irfan Shakeel has found xss vulnerability on Dailymotion.com and RFI on Google !

Irfan Shakeel has found xss vulnerability on Dailymotion.com RFI on Google ! Who is Irfan Shakeel ? Well , Irfan Shakeel ,student of telecommunication engineering from Pakistan, He is a White hat Hacker. He is working as a security researcher for a while. His blog at The main objective of his...

Cisco Packet Tracer 5.2 DLL Hijacking Exploit (wintab32.dll)

Exploit for windows platform in category local exploits ============================================================ Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll ============================================================ / Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit...

PHprojekt Module CMS 0.6.1 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================================== PHprojekt Module CMS 0.6.1 Remote File Inclusion Vulnerability ============================================================== Contact: bd0rkatschool-of-hack.net or...

Proof of Concept Pen Testing Tools Coming

A researcher is working on tools for penetration testers that’s a first step toward ultimately integrating and correlating data among different types of penetration-testing products. Josh Abraham, a.k.a. “Jabra,” will release some proof-of-concept tools at the OWASP AppSec Conference in Washingto...

Researcher Banished For Showing How to Hack PayPal

PayPal suspended the account of a white-hat hacker on Tuesday, a day after someone used his research into website authentication to publish a counterfeit certificate for the online payment processor. “Under the Acceptable Use Policy, PayPal may not be used to send or receive payments for items th...