7620 matches found
Create personalized free kill version firewall, anti-virus software-bug warning-the black bar safety net
Preface: As is well known, now more and more virus lovers in order to demonstrate individual ability or some of the hidden secrets and the production of a series of virus programs; however, since most of the domestic users on the network security have more understanding, will be in their own...
Crack MSSQL HASH password-vulnerability warning-the black bar safety net
Original name :Microsoft SQL Server Passwords Cracking the password hashes Original address :http://www.ngssoftware.com/papers/cracking-sql-passwords.pdf Author :David Litchfield [email protected] Term : FreeXploiT Author : ALLyeSNO Date : 2005-3-25 Translation:ALLyeSNO [email protected]...
Mysteriously clever to replace the Win XP user password-vulnerability warning-the black bar safety net
Windows XP startup scriptstartup scriptsis a computer in the login screen to appear before running the batch file, which functions similar to the Windows 9×and DOS automatically executed batch file, the autoexec. bat. Using this feature, you can write a batch file to re-set the user password, and...
The third trick is to determine the WWW service type-bug warning-the black bar safety net
Invasion of the target before there is a analysis target host stage, so now on to talk about the invasion front of the server is to how to analysis each other-that is, pre-invasion information gathering, of course, gathering the information, the more detailed the help the better, although now som...
Hack rampage the era of the URL address will lie-vulnerability warning-the black bar safety net
My name is URL, i.e.,“Uniform Resource Locators”, which means Uniform Resource Locator. In the address bar URL will belong to me the URL of an expression. Substantially all of the visit website the friends are used to me, so my role is very large. Perhaps many friends don't know that I'm very...
Covert insertion-type ASP-Trojan-vulnerability warning-the black bar safety net
Get website the webshell, if the administrator found, then your horse is useless, deleted! Administrators are also not are exists to eat, so we have to hide our WEBSHELL, the following is about ASP insert-Trojan several the use of method is not easy to be foundOh I got a webshell to everyone to d...
asp Trojan modification program-vulnerability warning-the black bar safety net
| --- /the asp Trojan modification program, referring to the super. hei articles, random change the character case, does not destroy the original password, Set hh=Server. CreateObject"Scrip"&"ting. file"&qsdsdsdf&"systemobject", the &,+ in the scripting. the filesystemobject appears in the locati...
Use MS0601 vulnerability do web Trojan generator-vulnerability warning-the black bar safety net
We first need to understand this vulnerability you! Applicable system: Microsoft Windows 2 0 0 0 Service Pack 4 – download the update Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 – Download the update Microsoft Windows XP Professional x64 Edition – download the upda...
Breakthrough in the users permissions broken star Lann-bug warning-the black bar safety net
users permissions are really so low? Our school room has restore card, USB are also sealed, and the BIOS has a super-long password, the external network is also nowhere. Installed VB and the star LAN multimedia network classroom. But with my generation is not going to use VB coding to a broken...
The use of the FTP server's vulnerability to find broiler-vulnerability warning-the black bar safety net
Scanning and determine the target As the saying goes,haste makes waste,in the shortest time period crack shot to get a large number of broilers. You must first determine the presence of the FTP service host,this is achieved by the Scan to complete FTPSCAN is a command line FTP weak passwords...
NBSI injection analysis of trace report the MSSQL article-the vulnerability warning-the black bar safety net
Preface: The preparation of a good tool is not easy, the preparation of an injection tool is not easy. This ArticleArticlesystem by tracking the NBSI of the injection process to analysis of cattle testing ideas. Rivals credits analysis of spying very helpful. Carefully track The NBSI of the Spy...
phpBB Forum program:the old revolution met the new problem-the vulnerability warning-the black bar safety net
phpBB 2.0.18 XSS and Full Path Disclosure Details: SecurityAlert There is a brute force tool, a single thread, there is no useful,it rivals had a what phpbb what also can be used to run the password 下载 :http://ftpzhangxue.w205.100dns.com/tools/phpbb.rar Topic : phpBB 2.0.18 XSS and Full Path...
Recommendation:and MYSQL play the time difference between the injection of game-bug warning-the black bar safety net
Herein the main idea is to through the structure of the statement is added to the execution time delay of the function, if we submit the judgment is correct, then the MYSQL query time on the emergence of delay, if the submitted judgment is correct, will not perform the time delay function, the...
The detection of a account on the default permissions of the directory is writable for the script-vulnerability warning-the black bar safety net
Author: invincible most lonelyE. S. T source: evil octal China in the web after the invasion,often be looking for a writable directory to upload the webshell or other things,this is a critical issue. Most of the administrators to some system directory, do the permissions to change settings,but...
The United States Postal Service, the Amazon company due to API defects lead to a large number of customer data exposure-vulnerability warning-the black bar safety net
The United States is an annual holiday shopping carnival on Friday officially kicked off, and at the same time, the United States Postal Service and Amazon but there were two security incidents, both with the API using the improper about this event affected millions of people, at the same time...
See how I dig in and successfully exploited India's Popular Sports company web site Host header SQL injection vulnerability-vulnerability warning-the black bar safety net
Today I want to share one I'm doing bugbounty project, discovered a very interesting vulnerability, and this vulnerability appeared in India, a popular sports company website. This article is about“how do I use the host header to find out theSQL injectionvulnerabilities, and the use of sqlmap...
A and Nintendo for 0-day vulnerabilities, probably the most Linux system impact-vulnerability warning-the black bar safety net
! Last month, we published an article related to red and white machine to the Ubuntu vulnerabilities, and using malicious build of the red and white machine music files can be triggered--this is the famous security expert, Chris Evans masterpiece; in fact, the super any also the existence of such...
iOS also exposed new vulnerabilities, play a particular video led to the automatic shutdown-bug warning-the black bar safety net
! Following the iPhone shut the door after the event, the Apple iOS device has been broke there is a new vulnerability. Useful the user found, if by iOS devices in the Safari browser to play a particular MP4 Video, it will cause the device to run slower and will eventually cause the device to...
Apple fixes malicious JPEG exploit and a large number of security vulnerabilities-vulnerability warning-the black bar safety net
Foreword According to the foreign media to the latest reports, Apple in the U.S. local time on Monday officially fixes the iOS system in a code execution vulnerability. It is understood that the attacker or the use of a carefully crafted JPEG file exploit this vulnerability to attack. In addition...
Joomla! There is not authorized to create account/privilege elevation vulnerability please update-vulnerability warning-the black bar safety net
! Vulnerability description Account creation the Account Creation） Affected version: 3.4. 4 to 3. 6. 3 Report Date: 2 0 1 6 years 1 0 months 1 No. 8 Fix the date: 2 0 1 6 years 1 0 month 2 5 Number CVE number: CVE-2 0 1 6-8 8 7 0 Description: not strictly check the Allow users on the site does no...
WordPress <= 4.6.1 use the theme file to trigger stored XSS vulnerability analysis-vulnerability warning-the black bar safety net
Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-10-08 0x00 vulnerability overview 1. Vulnerability description WordPress is a PHP and MySQL as a platform free and open source blogging software and content management systems, recently researchers found that in their=4.6.1 version, by...
Django CSRF Bypass vulnerability analysis(CVE-2 0 1 6-7 4 0 1)-vulnerability warning-the black bar safety net
Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-28 0x00 vulnerability overview 1. Vulnerability description Django is a Python written open source Web application framework. Two years ago researchers at hackerone on the submission of a use of Google Analytics to bypass Django's CSRF...
CVE-XX-XX:“an Atom of the truncated Hu”the Windows kernel to mention the right vulnerability analysis-vulnerability warning-the black bar safety net
! Author: PlayBoy23333 Royalties of: 500RMB（not taking you to the contributor!） Submission methods: send an email to linwei3 6 0. cn, or visit the web version of the online submission aintroduction A few days ago the Internet fooling around when found Rookitsmm on Github to share a mention the...
A simple four-step, teach you do-it-yourself porting Cisco ASA exploits EXTRABACON-vulnerability warning-the black bar safety net
! In the past few days,We carefully analysed by the Shadow Brokers leaked NSA exploit code EXTRABACON it. According to XORcat derived from the initial analysis,the exploit code can use the SNMP service memory corruption vulnerability to bypass the Cisco ASA device authentication. We in the lab fo...
On the iOS system“Trident”vulnerability briefings-vulnerability warning-the black bar safety net
! Recently, on the Internet to disclose about the iOS operating system there is“Trident”vulnerability, CNNVD-2 0 1 6 0 8-4 6 0, the CNNVD-2 0 1 6 0 8-4 6 1, THE CNNVD-2 0 1 6 0 8-4 6 2. 8 on 1 5 December, by the Canadian citizen lab the Citizen Lab and the U.S. Lookout mobile security companies...
Mobile payment software is now vulnerabilities hackers use Siri to steal your money-vulnerability warning-the black bar safety net
! Venmo's security holes is by the Salesforce security engineer Martin Vigo found, and this vulnerability using the“medium”is very special, Siri in this process is very unfortunately become a hackers attack our tools. The hackers have to do things very simple, he just need to ask Siri to send a...
See how I use LastPass to get to all your password-vulnerability warning-the black bar safety net
! Please note:the manufacturer has successfully fixed this issue,and the relevant information to inform a Lastpass user. Vulnerability status:has been fixed Repair time frame:9 0 days Vulnerability level:severe Manufacturer:LastPass Product:LastPass Report Date:2 0 1 6 7 2 6, Vulnerability overvi...
LastPass Password Manager exposed a major vulnerability please upgrade your Firefox add-ons-bug warning-the black bar safety net
Focus on finding vulnerabilities a security researcher, has discovered well-known online Password Manager LastPass is a potential risk that an attacker can take the contact to the user's online account. Fortunately, LastPass has fixed this allow an attacker remote access to the millions of accoun...
Siemens ICS present in the device security validation vulnerability-vulnerability warning-the black bar safety net
! Recently,the German company Siemens to inform the user,due to ICSindustrial control systemdevice there is a security vulnerability,don't be networked use. The U.S. industrial control system computer Emergency Response TeamICS-CERTrecently said,in Siemens SIMATIC WinCCWindows Control...
Famous hacker and aeration iOS 9.3.2 jailbreak video-based Safari-bug warning-the black bar safety net
Today the Italian hackers Luca Todesco once again in the jailbreak community set off waves, because he discharged for a period running iOS 9.3.2 6th generation iPod touch jailbreak video. It is worth mentioning that Todesco the use of the method is clearly directly from Safari to jailbreak, no...
Microsoft“WebDAV”to mention the right Vulnerability, cve-2 0 1 6-0 0 5 1）The century-vulnerability and early warning-the black bar safety net
On cve-2 0 1 6-0 0 5 1 In Microsoft's official DESCRIPTION is as follows: If Microsoft Web Distributed Authoring and Versioning WebDAV client to validate the input properly, then which will present elevation of privilege vulnerability. Successful exploitation of this vulnerability an attacker...
Technical analysis: Apple syslogd to mention the right vulnerability, affecting numerous iOS and OSX version of the CVE-2 0 1 6-1 7 2 2-a vulnerability warning-the black bar safety net
! This iOS 9.2.1 the latest update, Apple fixes a code execution vulnerability, and is by Zimperium zLabs two fellows Nikias Bassen and Joshua J. Drake in syslogd in the discovery. In this article, we will share how to determine the vulnerability and the vulnerability behind can allow an attacker...
Fortinet SSH back door further using the method-vulnerability warning-the black bar safety net
How to use this SSH Backdoor into the network? Well this is what this article is going to speak something. This Backdoor access to the firewall is the root, that is, all firewall operation we can do, here we use a firewall a vpn service to access to the internal network, so for further penetratio...
Joomla object injection vulnerability analysis report-vulnerability warning-the black bar safety net
Recently, Joomla and then exposed to high-risk 0day vulnerability for remote command execution, Ali cloud cloud shield yesterday has been on the line corresponding to the blocking rules against the vulnerability. At the same time,the cloud hosting customer has made a phone call and automatically...
Adobe Flash AS2 MovieClip setMask after the release of the heavy interest with a remote code execution vulnerability(CVE-2 0 1 5-7 6 6 0)-vulnerability warning-the black bar safety net
CVECAN ID: CVE-2 0 1 5-7 6 6 0 FlashPlayer is a high-performance, lightweight and extremely expressive client runtime player. Adobe Flash setMask method in the presence of security vulnerabilities. By manipulating the transfer to the setMask method's parameter, the attacker can force the use of h...
Cisco IOS XE privilege elevation Vulnerability(CVE-2 0 1 5-6 3 8 3)-vulnerability warning-the black bar safety net
CVECAN ID: CVE-2 0 1 5-6 3 8 3 Cisco IOS is most Cisco Systems routers and network switches are used on the Internetoperating system. ASR 1 0 0 0 on the device, Cisco IOS XE 15.43S did not load properly package, local users through CLI, enter the configuration file name, use this vulnerability to...
PNG image processing library libpng exposed vulnerability-a vulnerability warning-the black bar safety net
! According to the report: image processing library libpng recently exposed vulnerabilities, currently has a preliminary fix vulnerabilities. Currently the main problem is the libpng the popularity of the range is too wide: operating systemthe browser any with generating a thumbnail associated...
Microsoft to fix the Bitlocker Drive Encryption tool bypass vulnerability-vulnerability warning-the black bar safety net
! Microsoft recently fix for Windows Bitlocker Drive Encryption in a vulnerability, this vulnerability can be used to quickly bypass the encryption function to obtain to the victims of the encryption of important information. Encryption vulnerabilities in software Disk encryption tool is an...
Gmail Android APP vulnerability allows anyone to send fraudulent mail-vulnerability warning-the black bar safety net
! Security researcher Yan Zhu in the Gmail Android APP and found an interesting vulnerability that allows anyone to send an e-mail, leaving the e-mail looks to be other people sent, which is likely for phishers have opened a door for malicious activity. Gmail Android APP the presence of mail frau...
AndroidVTS: Android cell phone vulnerabilities the defect detection App-vulnerability warning-the black bar safety net
Android users now have a light weight cell phone vulnerabilities the defect inspection tool to help users check their phone if there is a corresponding vulnerability. The tool is called Android VTS Vulnerability Test Suite, is Nownature released an app of the application tool. Android VTS is base...
OpenSMTPD after the release of the heavy interest with vulnerability-vulnerability warning-the black bar safety net
Affected system: opensmtpd opensmtpd Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-7 6 8 7 OpenSMTPD is an RFC 5 3 2 1 definition of server-side SMTP Protocol is free to implement. OpenSMTPD in PROCLKA achieve on there after...
Trinity Chipset line card denial of service vulnerability-vulnerability warning-the black bar safety net
Affected system: Juniper Networks Trinity Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-7 7 4 8 Juniper Networks is a network communications equipment company, a major supplier of IP network and information security solutions...
Outlook in classic authentication engine security vulnerabilities, has been the reward of the discoverer 2. 5 million dollars-vulnerability warning-the black bar safety net
Synack, a senior security researcher Wesley Wineberg has received a Microsoft award 2 5 0 0 0$, which is to reward him to Microsoft to report a bug, this is a CSRF vulnerability that can hijack any Hotmail account. CSRF（cross-site request forgery）vulnerability means that any access to the malicio...
BlackHat topics: SMBS not only to share your files-bug warning-the black bar safety net
In this paper, we show a new attack method to crack the Windows SSO Single Sign On feature, affecting all versions of Windows including the latest Windows 10, Microsoft's SMB（Server Message Block Protocol, within the network to attack the SMB technology has appear a long time, this new type of...
American Internet Emergency Response Center CERT: Seagate wireless hard drive to a vulnerability-vulnerability warning-the black bar safety net
! American Internet emergency center released a on Seagate wireless hard drive with a warning, because the products were found to have multiple vulnerabilities could be exploited by attackers to download to disk all of the files. The default“root”login American Internet emergency center noted:...
UPnP exposure Filet-O-Firewall vulnerabilities, millions of home routers at risk of attack-vulnerability warning-the black bar safety net
UPnP exposure security vulnerability Filet-O-Firewall, the millions of home network devices in the network attack risk. Cause the UPnP vulnerability the main reason is that its lack of adequate authentication mechanisms. myhack58 Wikipedia: UPnP UPnP is a wide variety of smart devices, wireless...
Reverse router firmware of sensitive information leaked Part2-vulnerability warning-the black bar safety net
Previous articledescribes in detail the various unpacking the router firmware tools. Unpacking after you get the firmware file. The next step is to analyze the files looking for vulnerabilities. This time the goal of the analysis is a Trendnet Router, the analysis of the vulnerability is a remote...
ZigBee is exposed a serious security vulnerability-vulnerability warning-the black bar safety net
1, ZigBee is exposed a serious security vulnerability Along with technology the rapid evolution of IOTThe Internet of Things, IoTthe concept once again on the rise, people all around the daily necessities, terminal equipment, and household appliances also gradually been given of the network...
Metasploit CVE-2 0 1 5-5 1 2 2 Flash exploit tutorials-vulnerability warning-the black bar safety net
Some time ago, the Hacking Team Arsenal leaked much noise hubbub of the big security companies are also scrambling to release a variety of attack code analysis, but features as a WEB Dog, simply can't read binary. With vulnerability analysis, understanding the vulnerability details, but is to tel...
Format string exploits, Part 1-the vulnerability warning-the black bar safety net
Format string vulnerabilities are a class allows an attacker at an arbitrary memory address to perform read or write operations of the software defects. This tutorial is the main concern of the C programming the program and for the formatted string function to use. Before we start understanding...