Archive | July, 2011


29 July 2011 | 12,762 views

Facebook To Start Paying Bug Bounties

We’ve covered various stories about companies offering hackers and security researchers bounties for giving them working exploits for their software/website etc. Early runners in the game were – Google Willing To Pay Bounty For Chrome Browser Bugs Now, 2 years down the road, Facebook has decided it’s a good idea to offer up a $500 […]

Continue Reading


27 July 2011 | 10,777 views

iViZ On Demand Penetration Testing

Introduction iViZ is the industry’s first company to position themselves as an on-demand penetration testing service for web applications. This is very different from the normal low cost vulnerability assessment services like Qualys, Hackersafe, Hackerguardian etc.  Unlike conventional solutions, iViZ delivers consultant-grade quality with an on-demand experience. iViZ provides a hybrid solution that integrates automation […]

Continue Reading


26 July 2011 | 11,356 views

NfSpy – ID-spoofing NFS Client – Falsify NFS Credentials

NfSpy is a FUSE filesystem written in Python that automatically changes UID and GID to give you full access to any file on an NFS share. Use it to mount an NFS export and act as the owner of every file and directory. Vulnerability Exploited NFS before version 4 is reliant upon host trust relationships […]

Continue Reading


21 July 2011 | 12,266 views

OS X Lion Brings Major Security Overhaul To Apple Users

It’s been a long time coming but with the latest release of Max OS X Lion – Apple has really stepped it up in terms of security and pro-active protection. Just a few months back in May we reported that – Mac Malware is Becoming a Serious Threat and back in march Day One At […]

Continue Reading


20 July 2011 | 12,668 views

exploitdbee.py – Easily Search For Exploits In BackTrack’s Exploitdb (files.csv).

This is a simple Python tool to help you search for exploits in the BackTrack Exploit Database. Features Search the exploitdb archive Case sensitive & insensitive Change output mode Automatically copy your exploits Requirements python (tested with python 2.7.1 and 2.5.2) local exploitdb (pre-installed on BackTrack Linux) Usage

You can download exploitdbee.py […]

Continue Reading


18 July 2011 | 23,385 views

AnonPlus/Anon+ – The Anonymous Social Network

We’ve reported a few times on the Anonymous collective, with the most recent being the rumoured attacks by Anonymous against the Malaysian Government. The latest story is following Google+ banning numerous Anonymous members, they have spawned their own social network called Anon+/Anonplus. As is normal with these things, it’d hard to say if it really […]

Continue Reading


15 July 2011 | 14,862 views

Mantra Security Toolkit 0.6.1 Released – Browser Based Hacking Framework

Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. The software is intended to be lite, flexible, portable and user […]

Continue Reading


13 July 2011 | 10,872 views

French Company Intego Release First iPhone Malware Scanner

This is quite an interesting story as it’s very closely related to the story we published earlier this week – Malicious PDF Files To Exploit iPhone & iPad Zero Day In The Wild. Hot on the tail of that news is the first-ever malware scanning app for iOS devices (iPhone/iPad etc) from a French security […]

Continue Reading


12 July 2011 | 16,812 views

WPScan – WordPress Security/Vulnerability Scanner

WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach (scanning without any prior knowledge of what has been installed etc). Features Username enumeration (from author querystring and location header) Weak password cracking (multithreaded) Version enumeration (from generator meta tag) Vulnerability enumeration (based on version) Plugin enumeration (2220 […]

Continue Reading


11 July 2011 | 12,050 views

Malicious PDF Files To Exploit iPhone & iPad Zero Day In The Wild

Well everyone has been waiting for a Jailbreak for the iPad 2 with the latest version of iOS – it happened and only hours later the malformed PDF files that were used in the exploit were circulating the Internet. It’s not the first time this has happened, last time jailbreakme did the same thing back […]

Continue Reading