RSS Feed » January 12, 2010

• Home
• Portal
• Forums
• Search
• Admin

13718 items (89 unread) in 18 feeds

• security-focus (8 unread)
• secunia
• darkc0de (7 unread)
• remote-exploit (15 unread)
• darknet (2 unread)
• milw0rm
• hack-a-day (11 unread)
• register (13 unread)
• packetstorm-tools (7 unread)
• packetstorm-exploits (10 unread)
• packetstorm-headlines (12 unread)
• packetstorm-misc (3 unread)
• kernel-fun
• sophos-security (1 unread)
• sophos-top-viruses
• carnal0wnage
• securiteam
• wirevolution

• January 12, 2010
• 17:17

  'Sandwich attack' busts new cellphone crypto

   » ‎ register
  Kasumi cipher cracked (in theory)

  A new encryption scheme for protecting 3G phone networks hasn't even gone into commercial use and already cryptographers have cracked it - at least theoretically.…

  Web threats: Why conventional protection doesn't work

• 17:12

  Google may exit China after 'highly targeted' attack

   » ‎ register
  Activists hit in 20-company dragnet

  Updated  Google plans to curb its controversial practice of censoring search results in China after uncovering a "highly sophisticated and targeted attack" designed to steal information about human rights activists from its Gmail service and at least 20 other large companies.…

  Offloading malware protection to the cloud

• 16:07

  Gateway NV5329h

   » ‎ remote-exploit

  Tags:  BackTrack 4 WORKING HARDWARE  

  Store spec info:
  Quote:

  Processor - AMD Athlon II X2 dual-core processor M500 Processor Speed - 2.2GHz Memory - 4096MB DDR2 Memory Hard Drive - 320GB 5400RPM SATA CD-DVD Drive - 8x Multi-Format Dual Layer DVD-RW Graphics Chipset - ATI Mobility Radeon HD 4570 Video Memory - Up to 2304 MB of HyperMemory Display - 15.6" HD WXGA Ultrabright LED-backlit Display 1366x768 resolution, 16:9 aspect ratio Network Capable - 802.11 b/g/Draft-N Wireless LAN, V.92 Modem, 10/100 Ethernet LAN (RJ-45 port) Ports - Media card reader, 4x USB 2.0 ports, HDMI port with HDCP support, External display (VGA) port, Headphone/speaker/line-out jack with S/PDIF support, Microphone-in jack, Ethernet (RJ-45) port, Modem (RJ-11) port DC-in jack for AC adapter Operating System - Microsoft Windows 7 Home Premium 64 bit Edition DUAL BOOT - English OR French Dimensions - 28.5 /37mm(H) x 372mm(W) x 250mm(D) Weight - 2.65kg Warranty - 1-year limited

  lspci:
  Quote:

  00:00.0 Host bridge: Advanced Micro Devices [AMD] RS780 Host Bridge Alternate 00:02.0 PCI bridge: Advanced Micro Devices [AMD] RS780 PCI to PCI bridge (ext gfx port 0) 00:04.0 PCI bridge: Advanced Micro Devices [AMD] RS780 PCI to PCI bridge (PCIE port 0) 00:06.0 PCI bridge: Advanced Micro Devices [AMD] RS780 PCI to PCI bridge (PCIE port 2) 00:11.0 SATA controller: ATI Technologies Inc SB700/SB800 SATA Controller [AHCI mode] 00:12.0 USB Controller: ATI Technologies Inc SB700/SB800 USB OHCI0 Controller 00:12.1 USB Controller: ATI Technologies Inc SB700 USB OHCI1 Controller 00:12.2 USB Controller: ATI Technologies Inc SB700/SB800 USB EHCI Controller 00:13.0 USB Controller: ATI Technologies Inc SB700/SB800 USB OHCI0 Controller 00:13.1 USB Controller: ATI Technologies Inc SB700 USB OHCI1 Controller 00:13.2 USB Controller: ATI Technologies Inc SB700/SB800 USB EHCI Controller 00:14.0 SMBus: ATI Technologies Inc SBx00 SMBus Controller (rev 3c) 00:14.2 Audio device: ATI Technologies Inc SBx00 Azalia (Intel HDA) 00:14.3 ISA bridge: ATI Technologies Inc SB700/SB800 LPC host controller 00:14.4 PCI bridge: ATI Technologies Inc SBx00 PCI to PCI Bridge 00:18.0 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] HyperTransport Configuration 00:18.1 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Address Map 00:18.2 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] DRAM Controller 00:18.3 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Miscellaneous Control 00:18.4 Host bridge: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Link Control 02:00.0 VGA compatible controller: ATI Technologies Inc M92 [Mobility Radeon HD 4500 Series] 02:00.1 Audio device: ATI Technologies Inc R700 Audio Device [Radeon HD 4000 Series] 03:00.0 Ethernet controller: Broadcom Corporation NetLink BCM5784M Gigabit Ethernet PCIe (rev 10) 09:00.0 Network controller: Atheros Communications Inc. AR928X Wireless Network Adapter (PCI-Express) (rev 01)

  lshw snippets:
  Quote:

  description: Notebook product: NV53 vendor: Gateway description: Motherboard product: SJV50TR description: BIOS vendor: Phoenix Technologies LTD version: V1.02 (08/11/2009) description: CPU product: AMD Turion(tm) II Dual-Core Mobile M500 vendor: Advanced Micro Devices [AMD] width: 64 bits clock: 200MHz description: L1 cache size: 128KiB capacity: 256KiB clock: 1GHz (1.0ns) description: L2 cache size: 512KiB capacity: 1MiB clock: 1GHz (1.0ns) description: System Memory size: 4GiB bank:0 description: DIMM Synchronous 667 MHz (1.5 ns) size: 2GiB width: 64 bits clock: 667MHz (1.5ns) bank:1 description: DIMM Synchronous 667 MHz (1.5 ns) size: 2GiB width: 64 bits clock: 667MHz (1.5ns) description: VGA compatible controller product: M92 [Mobility Radeon HD 4500 Series] vendor: ATI Technologies Inc description: Audio device product: R700 Audio Device [Radeon HD 4000 Series] vendor: ATI Technologies Inc description: Ethernet interface product: NetLink BCM5784M Gigabit Ethernet PCIe vendor: Broadcom Corporation size: 100MB/s capacity: 1GB/s description: Wireless interface product: AR928X Wireless Network Adapter (PCI-Express) vendor: Atheros Communications Inc. description: SATA controller product: SB700/SB800 SATA Controller [AHCI mode] vendor: ATI Technologies Inc description: ATA Disk product: Hitachi HTS54503 vendor: Hitachi size: 298GiB (320GB) description: DVD-RAM writer product: CDDVDW TS-L633B vendor: TSSTcorp capabilities: removable audio cd-r cd-rw dvd dvd-r dvd-ram

  Running dual boot: BT4 Final & Win 7 Ultimate.
  
  BT4 looks beautiful on the 1366x768 HD screen. I used the apt-get method to install the ATI drivers because of failed attempts in the past with the drivers from ATI.
  
  Everything runs great, I have not run into any errors or snags.... yet :p
  
  All ports are fully functional, even the HDMI with my Samsung 50" Plasma HD TV as the secondary at 1920 x 1080.
  
  Everything I've tried has run quickly and smoothly, so it's an all around ++ review for this system from me.
  
  I'm not sure what else to say, so I'll tell the tale of this laptop.
  So I went to the local business depot and checked out the lappys, this one caught my eye. The price was decent @ CAD $729.96 +Tax so I went for it.
  Well the first one was a lemon of a laptop. Couldn't even handle a simple .exe install while browsing the web. By the end of the first day I had seen 20 BSOD!!! So I took it back and got a replacement then and there.
  The new one was great, then, not even 2 days after I got it, a new flyer came out, it was on sale.
  LOL, the best thing about that was the one on sale had a matching model name but it was lower specs than mine. The people @ the store didn't realize and I got refunded the difference. It actually only cost me CAD $599.96 +Tax
  
  Let me know if anyone wants any more info or if I missed any specs.

• 15:56

  kismet-2010-01-R1.tar.gz

   » ‎ packetstorm-tools
  Kismet is an 802.11 layer 2 wireless network sniffer. It can sniff 802.11b, 802.11a, and 802.11g traffic. It is capable of sniffing using almost any wireless card supported in Linux, which currently divide into cards handled by libpcap and the Linux-Wireless extensions (such as Cisco Aironet), and cards supported by the Wlan-NG project which use the Prism/2 chipset (such as Linksys, Dlink, and Zoom). Besides Linux, Kismet also supports FreeBSD, OpenBSD and Mac OS X systems. Features Multiple packet capture sources, Runtime network sorting by AP MAC address (bssid), IP block detection via ARP and DHCP packet dissection, Cisco product detection via CDP, Ethereal and tcpdump compatible file logging, Airsnort-compatible interesting (cryptographically weak) logging, Secure SUID behavior, GPS devices and wireless devices fingerprinting. Kismet also includes a tool called gpsmap that can be used to create maps from logged GPS data.

• 15:56

  googlemaps-xss.txt

   » ‎ packetstorm-exploits
  Google Maps suffered from a cross site scripting vulnerability. This was patched the same day as it was publicly disclosed.
• 15:56

  calendarexpress2-xss.txt

   » ‎ packetstorm-exploits
  Calendar Express 2 version 2.0 suffers from a cross site scripting vulnerability.
• 15:56

  CORELAN-10-003.txt

   » ‎ packetstorm-exploits
  Apple Iphone/Ipod Udisk FTP Basic Edition version 1.0 suffers from a remote pre-authentication denial of service vulnerability. Proof of concept included.
• 15:56

  layoutcms-sqlxss.txt

   » ‎ packetstorm-exploits
  LayoutCMS version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities.
• 15:56

  phpeppershopws-xss.txt

   » ‎ packetstorm-exploits
  PhPepperShop Webshop version 2.5 suffers from a cross site scripting vulnerability.
• 15:56

  visiosight-sql.txt

   » ‎ packetstorm-exploits
  VisioSight Script version 1.0 suffers from a remote SQL injection vulnerability.
• 15:56

  commercialcms-xss.txt

   » ‎ packetstorm-exploits
  Commercial CMS version 1.0 suffers from a cross site scripting vulnerability.
• 15:56

  docmintcms-xss.txt

   » ‎ packetstorm-exploits
  Docmint CMS version 1.0 suffers from a cross site scripting vulnerability.
• 15:56

  sbddirectory-xss.txt

   » ‎ packetstorm-exploits
  SBD Directory version 4.0 suffers from a cross site scripting vulnerability.

• 15:55

  Admin Logins - icedzomby

   » ‎ darkc0de
  Admin Logins - icedzomby
• 15:55

  Sh0p hacked.

   » ‎ darkc0de
  Sh0p hacked.
• 15:55

  Acces Telefonica Peru

   » ‎ darkc0de
  Acces Telefonica Peru
• 15:55

  gob sql injec

   » ‎ darkc0de
  gob sql injec
• 15:55

  Best Paper for Understanding XSS with Samples

   » ‎ darkc0de
  Best Paper for Understanding XSS with Samples
• 15:55

  sh permission denied

   » ‎ darkc0de
  sh permission denied

• 15:55

  Bugtraq: Invitation: nullcon Goa 2010 International Security & Hacking Conference

   » ‎ security-focus
  Invitation: nullcon Goa 2010 International Security & Hacking Conference
• 15:55

  Bugtraq: [ MDVSA-2010:002 ] pidgin

   » ‎ security-focus
  [ MDVSA-2010:002 ] pidgin
• 15:55

  Bugtraq: [ MDVSA-2010:001 ] pidgin

   » ‎ security-focus
  [ MDVSA-2010:001 ] pidgin

• 15:55

  Who Know Blind MSSQL Injection?

   » ‎ darkc0de
  Who Know Blind MSSQL Injection?

• 15:29

  Hackers pluck 8,300 customer logins from bank server

   » ‎ register
  New variation on an old theme scheme

  Hackers have stolen the login credentials for more than 8,300 customers of small New York bank after breaching its security and accessing a server that hosted its online banking system.…

• 14:22

  MSFPAYLOAD - Creating Executable Files For MAC OS X & Linux Targets?

   » ‎ remote-exploit

  Tags:  Newbie Area  

  Hello:
  
  I was just wondering if anyone knows how to create a linux executable or mac os x executable with ./msfpayload? Are these formats supported, or would you need to build the packages after using ./msfpayload? I have searched online and wasn't able to find much information on this, but I'm guessing you would need to convert the exe's to a suitable format for each target OS (Mac's being harder, because you would probably need to build it on a Mac system or Mac VM). Please let me know if you have any info that may help or can point me in the right direction.
  
  Sorry for posting so many questions about ettercap in the HowTo's - If any forum admins. see them, feel free to remove/clean them up.
  
  Thank you,
  
  mcurran