Darknet Archives
2009: Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
2008: Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
2007: Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
2006: Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
November 2009
- Windows 7 UAC (User Access Control) Ineffective Against Malware
- Using Cloud Computing To Crack Passwords – Amazon’s EC2
- Binging (BETA) – Footprinting & Discovery Tool (Google Hacking)
- RATS – Rough Auditing Tool for Security
- UCSniff 3.0 Released – VoIP/IP Video Sniffing Tool
October 2009
- Illegal File Sharers To Be Cut Off By 2011
- Facebook E-mail Spam Conceals Malware Attack
- KrbGuess – Guess/Enumerate Kerberos User Accounts
- Retarded E-mails – Credit Cards, Coins, Bombs & More!
- Web Application Security Consortium (WASC) 2008 Statistics Published
- Nikto 2.1.0 Released – Web Server Security Scanning Tool
- Firefox Blocks Microsoft .NET Framework Assistant Add-on
- UK Government To Launch ‘Hack Idol’
- Origami – Parse, Analyze & Forge PDF Documents
- Yokoso! – Web Infrastructure Fingerprinting & Delivery Tool
- VIPER Lab’s VAST Live Distro – VoIP Security Testing LiveCD
- AVG Stepping Up Consumer Anti-Virus Offerings
- No Emergency Patch For Latest Windows Exploit
- Deep Packet Inspection Engine Goes Open Source
- Naptha – TCP State Exhaustion Vulnerability & Tool
- Samhain v.2.5.9c – Open Source Host-Based Intrusion Detection System (HIDS)
- Nat Probe – NAT Detection Tool
September 2009
- Twitter DM Phishing Scam
- Nasty Trojan Zeus Evades Antivirus Software
- FreeBSD Local Root Escalation Vulnerability
- One Of The World’s Most Prolific Music Piracy Groups Busted
- Cisco & Microsoft Patch TCP Stack DoS Exploit
- 4f: The File Format Fuzzing Framework
- UK Has The Worst Internet Security In Europe
- FRHACK OS v1 alpha1 – Pentesting/Security LiveCD
- MySqloit – SQL Injection Takeover Tool For LAMP
- Apache.org Hacked Using Remote SSH Key
- Flawfinder – Source Code Auditing Tool
- SWFScan – Free Flash Application Security Scanner
- Haraldscan – BlueTooth Discovery Scanner
- Graudit – Code Audit Tool Using Grep
- Websecurify – Web Security Testing Framework
August 2009
- Mac OS X Snow Leopard Bundled With Malware Detector
- Trafscrambler – Anti-sniffer/IDS Tool
- TJX Hacker Albert “Segvec” Gonzalez Indicted By Federal Grand Jury
- Serious Linux Kernel Vulnerability For ALL 2.4 & 2.6 Kernels
- Twitter Being Used As Botnet Command Channel
- Wordpress 2.8.3 Admin Reset Exploit
- sslsniff v0.6 Released – SSL MITM Tool
- Xplico – Network Forensic Analysis Tool
- Stoned Bootkit – Windows XP, 2003, Vista, 7 MBR Rootkit
- Twitter & Facebook Taken Offline By DDoS Attacks
- IKECrack – IKE/IPSec Authentication Cracking Tool
- Dan Kaminsky & Kevin Mitnick Hacked
- FakeIKEd – Fake IKE Daemon Tool For MITM
July 2009
- Chinese Firm Writes First SMS Worm
- crack.pl – SHA1 & MD5 Hash Cracking Tool
- sqlmap 0.7 Released – Automatic SQL Injection Tool
- UAE Telco Etisalat Installs Spyware On Users Blackberries
- Hacker Group L0pht Making A Comeback
- GFI LANguard 9 Review – Network Security Scanner & Vulnerability Management Tool
- Mozilla Denies Firefox 3.5 Bug Is Exploitable
- Wireshark 1.2.1 Released – Network Protocol Analyzer
- MultiISO LiveDVD v1.0 – BackTrack, Knoppix & Ophcrack
- The Middler – User Session Cloning & MITM Tool
- Damn Vulnerable Web App – Learn & Practise Web Hacking
- Military Communications Hacking – Script Kiddy Style
- Smart Grid Security Risks – Not So Smart Electricity Meters
- Hospital Hacker GhostExodus Owns Himself – Arrested
- Chinese Company Shares Huge Malware Database
- bsqlbf v2.3 Released – Blind SQL Injection Brute Forcing Tool
June 2009
- Kon-Boot – Reset Windows & Linux Passwords
- Michael Jackon Spam/Malware – RIP The King Of Pop
- Twitter Hack Spreads Porn Trojan
- IT Managers Under-Estimate Impact Of Data Loss
- BackTrack 4 Pre Release Available For Download
- Acunetix Web Vulnerability Scanner (WVS) 6.5 Released
- Apple iPhone OS 3.0 Released – 46 Security Patches
- Slowloris – HTTP DoS Tool in PERL
- fm-fsf – Freakin’ Simple Fuzzer – Cross Platform Fuzzing Tool
- Honeysnap – Pcap Packet Capture File Parsing Tool
- FTPXerox v1.0 – FTP File Transfer Sniffer
- Apple Struggling With Security & Malware
- WEPBuster – Wireless Security Assessment Tool – WEP Cracking
- Massive Malware Outbreak Infects 30,000 Websites
- FBI Unclassified E-mail Network Owned By Virus
- Hackers Exploiting Unpatched DirectX Bug With Quicktime
May 2009
- Obama To Create Cyber Security Czar In White House
- Technitium FREE MAC Address Changer v5 R2 Released for Windows
- DNS DDoS Attack Takes Down China Internet
- Google Poisoning Attack Gumblar Still Causing Problems
- Retarded E-mails – Brute Force, Change School Grades, Hack US Military & MORE
- WarVOX 1.0.1 Released – Telephony Analysis & War Dialing Suite
- Samurai Web Testing Framework 0.6 Released – Web Application Security LiveCD
- Trojan in Counterfeit Copies of Windows 7 Builds Botnet
- Pangolin – Automatic SQL Injection Tool
- Ensuring Data Security During Hardware Disposal
- Explosion Of BlackBerry Trading In Nigeria – Data Theft
- Torpig Botnet Hijacking Reveals 70GB Of Stolen Data
- Durzosploit v0.1 – JavaScript Exploit Generation Framework
- FBController – The Ultimate Utility to Control Facebook Accounts
- BugSpy – Crawls The Web For Open Source Software Bugs
- Fiddler – Web Debugging Proxy For HTTP(S)
April 2009
- Industrial Control Systems Safe? I Think Not
- Spammers Recover from McColo Shutdown – Spam Back To 91%
- Hacker Develops Tool To Hide Malware in .NET Framework
- ScreenStamp! – Free Screenshot Tool With Timestamp
- EFIPW – Modify Apple EFI Firmware Passwords
- Twitter Battered By Powerful Worm Attacks – Mikeyy
- Amazon Disputes Hacker Claims of Ranking Manipulation
- Conficker Finally Awakes & Dumps Payload
- Microsoft Puts Hold on Forefront Security Product Range
- Multiple Bugs In Anti-Virus Software Revealed
- OAT (OCS Assessment Tool) – Office Communication Server Security Assessment Tool
- Conficker Day – April 1st – Uneventful
- winAUTOPWN – Windows Autohacking Tool
- How to Scan for Conficker Worm
- Lynis 1.2.6 Released – UNIX System & Security Auditing Tool
- Charles Web Debugging Proxy – HTTP Monitor & Reverse Proxy
- Watcher – Passive Analysis Tool For HTTP Web Applications
- Interceptor – Wireless Wired Network Tap (Fon+)
- Webtunnel 0.0.5 Released – HTTP Encapsulation and Tunnel Tool
- UCSniff – VoIP/IP Video Sniffing Tool
March 2009
- Israeli Hacker ‘The Analyzer’ Steals Over $10 Million USD
- Charlie Miller Does It Again At PWN2OWN
- Microsoft Open Source Security Tool – !exploitable Crash Analyzer
- Indian Credit Card Fraud Exposed – Linked to Symantec
- Deblaze – Remote Method Enumeration Tool For Flex Servers
- New Conficker Variant More Aggressive
- ProxyStrike v2.1 Released – Active Web Application Proxy Tool
- BBC Unleashes Botnet For ‘Investigation’
- WarVOX – Wardialing Tool Suite (Explore, Classify & Audit Telephone Systems)
- Malware Distributor & Botnet Master Sentenced To 4 Years
- sqlsus 0.2 Released – MySQL Injection & Takeover Tool
- Twitter Click-Jacking Vulnerability
- Google Native Client Security/Hacking Contest – Win $8,192 USD!
- Koobface Worm Variant Hits Facebook
- Webshag 1.10 Released – Free Web Server Audit Tool
- Medusa v1.5 Released – Parallel, Modular Login Brute Forcing Tool
- dnsmap 0.22 Released – Subdomain Bruteforcing Tool
- VideoJak – IP Video Security Assessment Tool
- fzem – MUA (Mail User Agent) / Mail Client Fuzzer
February 2009
- SSLstrip – HTTPS Stripping Attack Tool
- Hackers Targeting Xbox Live Players with DoS Attacks
- WMAT Released – Web Mail Auth Tool For Testing Web Mail Logins
- Hackers Target 0-Day Vulnerability In Adobe PDF Reader & Acrobat
- Fast-Track 4.0 – Automated Penetration Testing Suite
- DShield Web Honeypot Project – Alpha Version Released
- Satellite Feed Hacking – Your Data Isn’t Private!
- BackTrack BETA 4 Released for Public Download
- Microsoft Offers $250K Bounty for Conficker Author
- NSA Together With Mitre CWE and SANS Identifies Top 25 Programming Errors
- Webtunnel 0.0.2 – HTTP Encapsulation and Tunnel Tool
- Kaspersky Lab Alleged Customer Database Hack From SQL Injection Flaw
- Cisco Enterprise Wireless (Wi-Fi) Equipment DoS Vulnerability Discovered
- FlowMatrix – Free Network Behavior Analysis System
- Windows 7 UAC Vulnerable – User Mode Program Can Disable User Access Control
- dradis v2.0 Released – Open Source Security Reporting Tool
- Chrome and Firefox Face Clickjacking Exploit
January 2009
- Complemento v0.6 – LetDown TCP Flooder, ReverseRaider Subdomain Scanner & Httsquash HTTP Server Scanner Tool
- Kyrgyzstan Taken Offline by DDoS Attacks
- Independent Web Vulnerability Scanner Comparison – Acunetix WVS, IBM Rational AppScan & HP WebInspect
- Gary McKinnon Wins Right to Appeal Against Extradition
- List of Famous Hackers in Computer History Both White Hat and Black Hat
- CeWL – Custom Word List Generator Tool for Password Cracking
- Using Twitter for Data Mining and Information Gathering
- Conficker (AKA Downadup or Kido) Infections Skyrocket To An Estimate 9 Million
- FireCAT 1.5 Released – Firefox Catalog of Auditing Extensions
- Acunetix Web Vulnerability Scanner 6 Review
- Next-Gen Botnets Taking The Place of Storm and Srizbi
- The Associative Word List Generator (AWLG) – Create Related Wordlists for Password Cracking
- Fake CNN Site From Phishing E-mail Serves Trojan
- OWASP (Open Web Application Security Project) Testing Guide v3 Released
- TJX (T.J. Maxx and Marshall’s) Hacker Jailed For 30 Years
- Time and Attack Mapper AKA TA-Mapper – Time/Effort Estimator Tool For Blackbox Security Assessment
- Cisco Vulnerability Given ‘Write Once, Run Anywhere’ Treatement
- WITOOL v0.1 – GUI Based SQL Injection Tool in .NET
- Phishing Attacks Hits Twitter Users – Utilising Direct Messages
December 2008
- Happy New Year For 2009 From Darknet
- Burp Suite v1.2 Released – Web Application Security Testing & Attack Platform
- Retarded E-mails – ATM Cards, Very Important Details, VOIP Testing Tools and MORE!
- Microsoft Warns of Serious MS-SQL 2000 & 2005 Vulnerability
- MultiInjector v0.3 Released – Automatic SQL Injection and Defacement Tool
- Virtualization Security – IT Managers and Security Experts Disagree
- sqlmap 0.6.3 Released – Automatic SQL Injection Tool
- Microsoft Breaks Patch Cycle to Issue IE Patch
- IE7 Exploit Also Affects IE5, IE6 and IE8! More Users In Trouble
- sapyto v0.98 Released – SAP Penetration Testing Framework Tool
- Complemento v0.4b – LetDown TCP Flooder, ReverseRaider Subdomain Scanner & Httsquash HTTP Server Scanner Tool
- Microsoft IE7 Exploit Allows Remote Code Execution on XP & Vista
- Scammers Using Asterisk VoIP Systems to Make Calls
- Secunia Personal Software Inspector (PSI) 1.0
- The World’s Fastest MD5 Cracker – BarsWF
- Retarded E-mails – Crack Hotmail? Hack Facebook? Boyfriend Cheating?
- Confused by WEP, WPA, TKIP, AES & Other Wireless Security Acronyms?
- Microsoft Baseline Security Analyzer – Free Windows Tool
- Malware Researchers Discover Rootkit HKTL-BRUDEVIC Similar to Sony CD Malware
November 2008
- FireCAT 1.4 Released – Firefox Catalog of Auditing Extensions
- Spam Back on the Rise with Srizbi Resurrected
- Browser Rider – Web Browser Exploitation Framework
- Julie Amero Spyware Case Finally Comes To An End
- ike-scan – IPsec VPN Scanning, Fingerprinting and Testing Tool
- Dshocker AKA Aush0k Hacker Pleads Guilty to Computer Felonies
- Microsoft Security Assessment Tool – Free for Windows
- Spam ISP McColo Cut Off From the Internet
- Express Scripts Offers $1million Reward for Cyber Extortionists
- Maltego – Forensics and Intelligence Application & Information Gathering Tool
- Samurai Web Testing Framework – Web Application Security LiveCD
- WPA Wi-Fi Encryption Scheme Partially Cracked
- SARA – Security Auditor’s Research Assistant – Network Analysis Tool
- Malware Authors Jumping on the Obama Bandwagon
- Twitter Squatting – The New Domain Jacking?
- MultiInjector – Automated Stealth SQL Injection Tool
- Gooscan – Automated Google Hacking Tool
October 2008
- Morris Worm To Turn 20 – How Far Things Have Come
- Sam Spade – Network Investigation Tool for Windows
- Google Hacking Back in The News – Google Takes Action
- Microsoft Rushes Out Critical RPC Bug Fix
- Swiss Researchers Sniff Password from Wired Keyboard
- lm2ntcrack – Microsoft Windows NT Hash Cracker (MD4 -LM)
- sqlmap 0.6.1 released – Automatic SQL Injection Tool
- DarkMarket Carding (Credit Card Fraud) Site Part of FBI Sting
- Web-Harvest – Web Data Extraction Tool
- E-mail Scammers Target Microsoft Users
- Firewalk – Firewall Ruleset Testing Tool
- Hacker Posts List of Compromised User Accounts Online
- p0f – Advanced Passive OS Fingerprinting Tool
- XSS-Proxy – Cross Site Scripting Attack Tool
- Symantec to Buy MessageLabs (Email Spam and Web Traffic Filter)
- NetStumbler – Windows Freeware to Detects Insecure Wireless Networks
- THC-ePassports – THC Clones Biometric ePassport – Elvis Presley Passport
- MI6 Sells Digital Camera on Ebay Containing Terrorist Images
- fwknop – Port Knocking Tool with Single Packet Authorization
- Superscan v4.0 – Fast TCP & UDP Port Scanner for Windows
September 2008
- Pro ATM Hacker ‘Chao’ Gives Out ATM Hacking Tips
- Brits Give Up Passwords For a £5 Gift Voucher
- Intercage – Spam/Malware Friendly ISP Back Online
- Web Application Security Statistics for 2008
- dnsscan – DNS Open Recursive Resolver Scanner/Scanning Tool
- onesixtyone 0.3.2 – An Efficient SNMP Scanner
- Google Releases New Browser Chrome – Vulnerabilities on First Day
- International Space Station Infected by Virus!
- BSQL Hacker – Automated SQL Injection Framework
- ohrwurm – RTP Fuzzing Tool (SIP Phones)
- UK Hacker Gary McKinnon Loses Appeal Against Extradition
- Productive Botnets
- Surf Jack – Cookie Session Stealing Tool
- psad – Intrusion Detection and Log Analysis with iptables
- PorkBind v1.3 – Nameserver (DNS) Security Scanner
- Modern Exploits – Do You Still Need To Learn Assembly Language (ASM)
- reDuh – TCP Redirection over HTTP
- CSRF Vulnerability in Twitter Allows Forced Following
- Twitter Targeted by Malware Distributors
- XTest – VoIP Infrastructure Security Testing Tool
August 2008
- Webcam Hacker Jailed for 4 Years for Spying on Teenager
- ISR-evilgrade – Inject Updates to Exploit Software
- OpenVAS – Open Vulnerability Assessment System (Nessus is Back!)
- New MySpace and Facebook Worm Target Social Networks
- TJX Credit Card Hackers Busted – Largest US Data Breach
- HD Moore’s Company BreakingPoint Suffers DNS Attack
- July Commenter of the Month Competition Winner!
- UK Hacker Gary McKinnon to Fight Extradition
- SIPcrack – SIP Login Dumper & Hash/Password Cracker
- PuttyHijack V1.0 – Hijack SSH/PuTTY Connections on Windows
- raWPacket HeX – Network Security Monitoring & Analysis LiveCD
July 2008
- Site Guesses Your Gender via Browsing History
- Widespread Flaws in Online Banking Systems
- Exploit for Kaminsky DNS Bug Goes Wild
- San Fransisco Mayor Regains Control of the Network
- nUbuntu Development Kicking Off Again – Security LiveCD
- San Fransisco Officials Locked Out of Their Own Network
- Facebook Bug Leaks Birthday Data
- TSGrinder – Brute Force Terminal Services Server
- Zodiac – DNS Protocol Monitoring and Spoofing Tool
- Lynis – Security & System Auditing Tool for UNIX/Linux
- June Commenter of the Month Competition Winner!
- UK’s Most Spammed Man – 44,000 Junk Mails a DAY!
- Google to Reveal Youtube Viewing Details to Viacom
- Which Browser Users Are More Secure?
- FWAuto v1.1 – Firewall Auditing & Ruleset Analyzer Tool
- DNSenum – Domain Information Gathering Tool
- Pantera – Web Application Analysis Engine
- Pass-The-Hash Toolkit v1.4 Released for Download
- ratproxy – Passive Web Application Security Audit Tool
- Google Calendar a New Target for Phishing
- PAW/PAWS – Python Advanced Wardialing System
- MoocherHunter – Detect & Track Rogue Wifi Users
June 2008
- Hackers Crack London Tube Oyster Card
- NDR or Backscatter Spam – How Non Delivery Reports Become a Nuisance
- China Home to at Least HALF of Malicious Web Sites
- Bsqlbf V2 – Blind SQL Injection Brute Forcer Tool
- BackTrack Final 3 Hacking LiveCD Released For Download
- 16 Year Old Indian Hacker Busted for eBay Scam
- Disgruntled IT Worker Gets Heavy Prison Sentence
- May Commenter of the Month Competition Winner!
- Botmaster Robert Matthew Bentley AKA LSDigital Sentenced
- New Zlob Trojan Alters Your Router Settings
- Virus Variant Extorts You by Encrypting Your Files
- Metasploit Site Hijacked by ARP Poisoning Attack
- ‘Untraceable’ Phone Frauders Vishing for Credit Cards
- SIPVicious v0.2.3 – VoIP/SIP Auditing Toolkit
- ArpON – ARP Handler Detect and Block ARP Poisoning/Spoofing
- Don’t Sweat or Scratch Your Face Whilst Flying
- Sipflanker – Locate SIP (VoIP) Device Web Interfaces
- Angry IP Scanner – Cross Platform Port Scanner
- WikiScanner – Find Interesting Anonymous Edits on Wikipedia
- OSWA Assistant – Wireless Hacking & Auditing LiveCD Toolkit
- Technitium FREE MAC Address Changer v5 Released
May 2008
- sqlninja 0.2.3 released – Advanced Automated SQL Injection Tool for MS-SQL
- TJX Employee Fired for Trying to Fix Things
- UK to Become Even More Draconian with Privacy Laws
- Three Charged With Hacking Dave & Buster’s Chain
- New Botnet Malware Spreading SQL Injection Attack Tool
- Spammers Target Social Networking Sites
- thc-Amap – Application Protocol Detection & Fingerprinting
- Xprobe2 – Active OS Fingerprinting Tool
- Want Some COFEE? Microsoft Computer Online Forensic Evidence Extractor
- browserrecon – Passive Browser Fingerprinting
- April Commenter of the Month Competition Winner!
- oCERT – Responsing to Flaws in Open Source Software
- Tmin – Test Case Optimizer for Automated Security Testing
- US Really Owns Your Data Now!
- fgdump 2.1.0 and pwdump 1.7.1 Released – Dump LanMan & NTLM Hashes
- Patch Window Shrinking – Semi-Automated Reverse Engineering
- Metagoofil v1.4 Released – Metadata and Information Gathering Tool
- rtpbreak 1.3a Released – RTP Analysis and Hacking
- Sandman – Read the Windows Hibernation File
April 2008
- AV Firms Split Over Defcon Contest
- Chocolate Owns Your Passwords
- Shelling our way up
- Russia Heavy Handed Registration for Wifi
- Microsoft Opens the Gates to Hack Their Web Services
- Hackers Could Become The Hacked?
- Spammers Harnessing Web Mail Servers – Gmail & Yahoo! Throttled
- Keep on Fuzzing! Advice
- Kraken Botnet Twice The Size Of Storm
- March Commenter of the Month Competition Winner!
- Biometric Keylogger Can Grab Fingerprints
- ProxyStrike – Active Web Application Proxy
- Wireshark v1.0.0 Released – Cross Platform Graphical Packet Sniffer
- iFrame Piggybacking on Google Searches to Install Malware
- CDPSnarf – CDP Packet Sniffer
- Technitium MAC Address Changer v4.8 Released for Download – Free
- Wfuzz v1.4 Released for Download – Bruteforcing & Fuzzing Web Applications
- Pass-The-Hash Toolkit v1.3 is Available for Download
- WifiZoo v1.3 Released – Passive Info Gathering for Wifi
- sqlninja 0.2.2 Released for Download – SQL Injection Tool
- HDIV – Java Web Application Security Framework
- WSGW – Web Security Gateway for Secure Apache
March 2008
- Mac owned on 2nd day of Pwn2Own hack contest
- Hacking Windows NT Through IIS & FTP
- WSFuzzer – Web Services Fuzzing Tool for HTTP and SOAP
- Webshag v1.00 – Web Server Auditing Tool (Scanner and File Fuzzer)
- Inguma 0.0.7.2 Released for Download – Penetration Testing Toolkit
- Cyber Storm II – US, UK & 3 Others Involved in Mock Cyberwar
- Core Security to Expand Market with Mark Hatton
- VXers Group 29A Calls it Quits
- February Commenter of the Month Competition Winner!
- New Windows XP & Vista Full Take-over Hack with Firewire
- Goolag – GUI Tool for Google Hacking
- Australia to Follow the UK in Terminating Content Pirates
- New Sophisticated Botnets Discovered
- Nipper 0.11.5 Released – Network Device Configuration Security Auditing Tool
- httprecon – Advanced Web Server Fingerprinting
- Burp Suite v1.1 Available for Download
- SecurityCompass Exploit-Me – Firefox Web Application Testing Tools
- Fusil Fuzzer 0.7 – Fuzzing Functions in Python
- Ferret Version 1.1 – Data Seepage Detection Tool
- .NETIDS – .NET Intrusion Detection System
February 2008
- laptop and data theft protection
- Hacking Does Pay! US Law Let’s Hacker Keep Fraudulent Earnings
- UK Proposing to Disconnect Those Involved in Piracy from the Internet
- US Customs Owns Your Data?
- Apple iPhone Unlocked Again – 1.1.2 and 1.1.3 Firmware
- Teenage Bot Herder Admits to Infecting Military Computers
- Adobe Reader Vulnerability Being Actively Exploited
- January Commenter of the Month Competition Winner!
- German Police Creating Law Enforcement Trojan
- Nessconnect 1.0.1 Released – GUI, CLI & API Client for Nessus
- Russix – LiveCD Linux Distro for Wireless Penetration Testing & WEP Cracking
- SWFIntruder – Analysis and Security Testing of Flash Applications
- SCARE – Source Code Analysis Risk Evaluation Tool
- NetworkMiner – Passive Sniffer & Packet Analysis Tool for Windows
- FireCAT 1.3 Released – Firefox Catalog of Auditing Extensions
- Kismet – Wireless Network Hacking, Sniffing & Monitoring
- PHPIDS – Security Layer & Intrusion Detection for PHP Based Web Applications
- Password Cracking Wordlists and Tools for Brute Forcing
- Password Hasher Firefox Extension
January 2008
- Metasploit Framework v3.1 Released for Download
- Data Leakage Bug in Mozilla Firefox Confirmed
- Multilingual Worm Spreads Over MSN Messenger
- Hacked Embassy Websites Delivering Malware
- Perl.com Sends Visitors to Porn Site!
- BackTrack Live Hacking CD BETA 3 Released
- New Rootkits Infecting the MBR
- GFI Survey – 4 in 10 US Companies are NOT Secure!
- Uber Spammer Alan Ralsky Back In The News
- The First Reported Facebook Worm/Malware Pops Up – Secret Crush
- UK Government Set to Make ‘Hacking Tools’ Illegal
- Nugache – The Next Big Storm?
- Happy New Year – Best Wishes from Darknet!
- December Commenter of the Month Competition Winner!
- Unicornscan v0.4.7 Released for Download – Fast Port Scanner
- argus – Auditing Network Activity – Performance & Status Monitoring
- Bruter 1.0 Released – Parallel Windows Password Brute Forcing Tool
- sqlmap 0.5 – Automated SQL Injection Tool
- mod_anti_tamper – Anti Tamper Module for Apache 2.x
- The Revisionist – Metadata Retrieval Tool
- gotroot modsecurity Rules for Apache – Anti-spam and Security
- w3af Fifth BETA for Download – Automated Web Auditing and Exploitation Framework
- VoIP Hopper – VLAN Hopping Tool
December 2007
- Storm Worm Spreading Some Holiday Cheer
- Merry Xmas From Darknet
- Worm Spreading Fast on Google’s Orkut Social Network
- Trojan Targets Google Text Based Adverts
- Nmap Port Scanner 4.50 Released for Download
- DNS Poisoning Getting Serious – Phishing from Open Recursive DNS Servers
- Microsoft Plugs 11 Serious Flaws in December Update
- Serious Flaw in Popular Media Players from Microsoft and AOL
- November Commenter of the Month Competition Winner!
- SANS Top 20 Vulnerabilities Published for 2007
- Malware Numbers Still Increasing Rapidly
- Inguma 0.0.6 Released for Download – Free Pen-testing Framework
- WabiSabiLabi Pimping ClamAV Vulnerability & Exploit
- Nikto 2 Released – Web Server Scanning Tool
- Whitetrash – Dynamic Web White-listing for Squid
- wsScanner – Web Services Footprinting, Discovery, Enumeration, Scanning and Fuzzing tool
- Pcapy – Python Interface to LibPcap
- Technitium FREE MAC Address Changer v4.7 – Released for Download
- KisMAC – Free WiFi Stumbler/Scanner for Mac OS X
- MSF eXploit Builder – Free Win32 Exploit Development Platform
- scanrand – Download Stateless TCP Scanner with Syn Cookies
November 2007
- UK Consumers Lose Faith in ‘Phished’ Brands
- Security Software Moves to Consoles – Web Filtering for PS3
- Apple Fixes ‘Misleading’ Leopard Firewall Settings
- Wi-Fi Jacking Extremely Common (45% of People Do!)
- Doubleclick Involved in Malware Distribution
- ‘Security Consultant’ Caught for Running Large Botnet
- Skavenger – source code auditing tool!
- The World’s Biggest Botnets – Peer to Peer
- October Commenter of the Month Competition Winner!
- Thousands Hooked by Malware from Big Sites
- GFI End of Year Offer – Up to 50% Off
- Medusa 1.4 – Parallel Password Cracker Released for Download
- Graphics Cards – The Next Big Thing for Password Cracking?
- MPAA Hacker Robert Anderson Revealed
- WifiZoo v1.2 – Gather Wifi Information Passively
- WSBang – Python Based SOAP Services Testing Tool
- Inguma 0.0.5 Released for Download – Penetration Testing Toolkit
- Tutorial for Fuzzled – Writing a Fuzzer with the Fuzzled Framework
- Pass-The-Hash Toolkit v1.1 Available for Download
- sqlninja 0.2.1-r1 – SQL Injection Tool for MS-SQL Released for Download
- fwtest – Firewall Testing Toolkit
- Chaosreader – Trace TCP/UDP Sessions from tcpdump
- tcpflow – TCP Flow Recorder for Protocol Analysis and Debugging
- SSA Version 1.5.2 – OVAL Vulnerability Assessment Software
- untidy – XML Fuzzer
October 2007
- Scavenging for project members on Darknet
- VPS – Virtual Private Server for Darknet
- The Next Evolution – GFI Uncovers MP3 Spam
- Posts Restored & Business (almost) Back to Usual
- SSA Version 1.5.2 – OVAL Vulnerability Assessment Software
- Storm Worm Descends on Blogspot
- Official release of SQL Power Injector 1.2 – Download Now!
- New German Hacking Law 202(c) – Sites Close & Possible Backfire
- unmask.py – Statistical E-mail & Blog Profiling
- September Commenter of the Month Competition Winner!
- Common Criteria Web Application Security Scoring (CCWAPSS) Released
- aircrack-ng – WEP and WPA-PSK Key Cracking Program
- bookmark me
- Server Crash
- Police to Monitor Indian Cyber-Cafes
- Cyber Crime Toolkits Go On Sale
- FireCAT 1.2 Released – Firefox Catalog of Auditing Extensions
- Metagoofil 1.2 – Metadata Extractor Tool
- CORE GRASP – PHP Web Application Protection Software
- HttpBee – Web Application Hacking Toolkit
- Web Integrity Checker – ISPs Inserting Ads Into Web Content
September 2007
- TJX (T.J. Maxx and Marshall’s) Largest Breach of Customer Data in U.S. History
- httprint v301 – Web Server Fingerprinting Tool – Download
- aircrack-ptw – Fast WEP Cracking Tool for Wireless Hacking
- Voting Machines Lose to Hackers Again
- LORCON (Loss Of Radio CONnectivity) 802.11 Packet Library
- Major Web Vulnerability Effects Yahoo, MSN, Google and More
- IPAudit – Network Activity Monitor with Web Interface
- Im In Your Leenucks Box Changing Your Password
- Foremost – Recover Files From Drive or Drive Image AKA Carving
- PSP All Version Firmware Homebrew Hack Surfaces
- FLARE – Flash Decompiler to Extract ActionScript
- France Complaining of China Hacks Too
- Pentagon Hacked by Chinese Miltary
- August Commenter of the Month Competition Winner!
- 2007 Hacker Reverse Engineering Challenge
- Gentoo Pulls the Plug after Getting Pwned
- PIRANA – Exploitation Framework for Email Content Filters
- Driftnet – View Images From Live Network Traffic
- ServiceCapture – HTTP Traffic Capture for Debugging Flash
August 2007
- KGB Keylogger from Refog Software – Review
- PDF & Image Attachment Spam – The New Problem with E-mail
- German Hacker Successfully Clones E-Passports
- June Commenter of the Month Competition Winner Daniel and his Prizes
- Immunity Debugger v1.0 (immdbg) Release – Download it Now!
- NASA Hacker Gary McKinnon Wins Right to Lords Appeal Extradition Hearing
- OpenMusic – Free Music for a free World
- July Commenter of the Month Competition Winner!
- Microsoft UK Defaced by Saudi Hackers
- Caller ID Spoofing to be Made Illegal in the USA
- Vista Security Feature – Teredo Protocol Analysis
- Vista Security Claims Debunked – Figures Skewed
- Russian Elcomsoft Finds Backdoor in Quicken Passwords
- The Homeland Security Department Suffered More Than 800 Successful Hack Attacks
- Vista more secure than Mac OSX and Linux?
- Download pwdump6 and fgdump version 1.6.0 available now.
- Pixy – New & Free Open-source XSS and SQL Injection Scanner for PHP Programs
- FireCAT 1.1 Released – Turn Firefox into a Security Platform
- w3af – Web Application Attack and Audit Framework
- rtpBreak – RTP Analysis & Hacking Tool
- Security Freak Video Lectures – Hacking, Programming, Networking & More
- mssql-hax0r v0.9 – Multi-purpose MS-SQL injection script
- XSS Warning – A Security Extension/Add-on for Firefox
- Inguma – Penetration Testing Toolkit
- LLDP – Link Layer Discovery Protocol Fuzzer
July 2007
- TimeWarner DNS Hijacking IRC Servers to Stop DDoS Attacks
- The greatest virus of all time
- Hackers Steal U.S. Government Corporate Data from PCs – AGAIN
- PowerShell – More than the command prompt
- Pentagon E-mail System HACKED
- Piping Data in DOS on Windows – Video
- June Commenter of the Month Competition Winner!
- tcpxtract – Extract Files from Network Traffic AKA Carving
- The Soft Underbelly? – Database Security
- Intel Core 2 Duo Vulnerabilities Serious say Theo de Raadt
- sqlget v1.0.0 – Blind SQL Injection Tool in PERL
- Some Guidelines on How to Secure your Ubuntu Installation
- Learn to use Metasploit – Tutorials, Docs & Videos
- Wfuzz – A Tool for Bruteforcing/Fuzzing Web Applications
- Trojan Mimicks Windows Activation Interface – KardPhisher
- Babel Enterprise – Cross Platform System Auditing Tool
- piggy – Download MS-SQL Password Brute Forcing Tool
- Dr. Morena – Firewall Configuration Testing Tool
- FTester – Firewall Tester and IDS Testing tool
- Apparently 8/10 High Traffic or ‘Big’ Websites are Vulnerable
- FG-Injector – SQL Injection & Proxy Tool
- Sandcat by Syhunt – Web Server & Application Vulnerability Scanner
- Proxmon – Proxy Log Monitoring Tool
- Selenium – JavaScript Web Application Security Testing Tool
- Hacking with Ramzi
June 2007
- sqlninja 0.1.2 Released for Download – SQL Injection Tool
- Netstat Revealed!
- Darknet Videos
- stealth techniques – syn
- yahoo password grabber
- Zalewski (lcamtuf) Strikes Again – More Vulnerabilites in IE and Firefox
- Michigan Man Fined $400 for Using Coffee Shop’s Wi-Fi Network
- Win GFI T-shirts, Mugs and Keychains along with your iPod or PSP!
- Government Accountability Office Report Slams FBI Internal Security
- Phrack 64 Released – It’s been a long time..
- AOL Has An Odd Password System
- Hackers Invited to Crack Internet Voting
- ProxyFuzz – MITM Network Fuzzer in Python
- OAPScan – Oracle Application Server Scanner
- VBootkit Bypasses Vista’s Digital Code Signing
- The Kcpentrix Project – Penetration Testing Toolkit LiveDVD
- Fake NetBIOS Tool – Simulate Windows Hosts
- Trinity Rescue Kit – Free Recovery and Repair for Windows
- Fuzzled – PERL Fuzzing Framework
- Priamos Project – SQL Injector and Scanner
- SQLBrute – SQL Injection Brute Force Tool
- Sguil – Intuitive GUI for Network Security Monitoring with Snort
May 2007
- Google Acquires Web Security Startup GreenBorder
- Commenter of the Month Competition
- Consulting Licence Offer From Redseal – Security Risk Manager (SRM)
- Google Launches Online Security & Malware Blog
- Cisco IOS FTP Backdoor Ripe for Hackers
- Recent Down-time at Darknet
- Outpost Security Suite PRO Review
- GFI Free Endpoint Scanner – Online Portable Storage Device Scanning
- That ‘magic’ number
- pwdump6 1.5.0 as well as fgdump 1.5.0 Released for Download
- Hacker Files, Tools & Software Repository – leetupload.com
- OWASP – SQLiX Project – SQL Injection Scanner
- Technitium Free MAC Address Changer v4.5 Released
- Foundstone Blast – TCP Network Service Stress Test Tool
- Nemesis – Packet Injection Suite
- ISIC – IP Stack Integrity & Stability Checker
- Scapy – Interactive Network Packet Manipulation
- Ubuntu Ultimate Edition is Cool
- Comprehensive SQL Injection Cheat Sheet
- VoIP Security Testing Tools List from VoIPSA
April 2007
- login (security through obscurity) – weird PHP script
- The Black & White Ball UK – Whitehat vs Blackhat
- Bot Infections Surges to 1.2 Million
- Social Engineering Gets a Big Diamond Heist
- Google’s Blogger Platform Used to Aid Phishing Attacks
- Techm4sters Releases ProTech Security Distribution
- LLTD – Link Layer Topology Discovery Protocol
- SSA 1.5.1 Released – Security System Analyzer an OVAL Based Scanner
- IE 7 Flaw Could Help Phishers – Error Message Processing
- Microsoft Loves you to Pirate Their Software
- Legal to Unlock Cell Phones Since November 2006
- Damn Vulnerable Linux – DVL – IT-Security Attack and Defense
- BackTrack v2.0 – Hackers LiveCD Finally Released
- Chaos Communication Camp (CCC) 2007 – Germany
- Slavasoft FSUM and Hashcalc md5 & File Integrity for Windows
- Smart Trojan Targets eBay Users
- DNS Brute Force eXtract – WS-DNS-BFX
- PHProxy 0.5 Beta Released – Web HTTP Proxy to Bypass Firewalls
- (in)Secure 1.10 Magazine – Infosec E-zine Released
- SSA 1.5.1 – Security System Analyzer an OVAL Based Scanner
March 2007
- Agnitum Outpost Firewall PRO Review
- Metasploit Exploit Framework Version 3.0 Released
- FireCAT – Firefox Catalog of Auditing Tools
- Backup Platinum – CD, FTP & LAN Backup Software Review
- Microsoft’s Live OneCare the WORST Anti-Virus Solution
- Wordpress Download Server Compromised (2.1.1) – Get 2.1.2 NOW!
- Let’s Digest Some Messages – md5 Hash Checker for Windows
- the Art of Virology 03h
- Handy Recovery for Recovering Deleted Data on Windows
- JBroFuzz 0.5 from OWASP – Stateless Network Protocol Fuzzer
- Hackers Attack Root Servers and Slow Internet Key Traffic
- ObiWaN – Web Server Brute Forcing from Phenoelit
- Technika – Automate Common Exploit Tasks
- ADN – Win32 Active Directory Navigator
- Check Point VPN-1 Power VSX NGX – Virtual Firewalls Get Clustered
- Stompy – The Web Application Session Analyzer Tool
- PwdHash from Stanford – Generate Passwords by Hashing the URL
- Up to a Quarter of Internet Connected Machines Could be Zombies
- MSN Password Stealing Trojan Becomes Public
- Huge Online Loss by Swedish Bank Nordea – Claimed to be Biggest Loss?
- Blue-Ray DRM Cracked Already?
- SHA-1 Cracked – Old News, But People Still Talk
- PReplay – A pcap Network Traffic Replay Tool for Windows
- Massive Security Breach Leaks Credit Card Info
- A Collection of Web Backdoors & Shells – cmdasp cmdjsp jsp-reverse php-backdoor
February 2007
- Serious XSS Flaw in Google Desktop Allows Data Theft
- 0-day Vulnerability Effects Solaris – Disable Telnet NOW!
- Happy 1 Year Anniversary to the Relaunch of Darknet
- Sun Solaris 10 – Free Offer – Media DVD
- Defense Workers Warned About Spy Coins for Espionage
- ADTool – Active Directory Domain Listing Tool
- Why Blurring or Mosaicing Important Information is a BAD Idea
- Another 0-day MySpace XSS Exploit
- LFT – Layer Four Traceroute and WhoB
- The RFID Song from Monochrom
- Google Fixes Serious Vulnerability in Gmail
- sqlmap – Automated Blind SQL Injection Tool
- Secunia Releases Software Inspector
- Fierce Domain Scanner Released – Domain Reconnaissance Tool
- THC-Hydra – The Fast and Flexible Network Login Hacking Tool
- AccessDiver – Web Site Security Testing Tool
- Caecus – Web Brute Forcing Tool with OCR Support
- Spam on the Increase – Image Spam Accounting for More
- Cafepress.com Under Heavy DDoS Attack
- Odysseus Win32 Proxy & Telemachus HTTP Transaction Analysis
January 2007
- Wep0ff – Wireless WEP Key Cracker Tool
- Data Recovery – A Decent Article
- Wordpress 2.0.7 Follows Hot on the Tail of Wordpress 2.0.6
- Wordpress 2.0.5 Trackback Vulnerability with Exploit
- Malware Outbreak During New Year – Dref-V and Trojan downloader Tibs-jy
- Visa Security Flaws Prior to Consumer Release
- Technitium MAC Address Changer v4 (TMACv4) Released
- SIP Proxy – VoIP Security Testing Tool
- Hacking your $60 Router into a $600 Router
- Phishing Fraud Cases Growing in the UK
- Logic Bomb Backfires on Hacker Employee
- Class President Hacks School Grades
- PHP Security Specialist (Stefan Esser) Resigns
- Pentagon Hacker Gary McKinnon Appeals against US Extradition
- Router/Switch Default Password List Updated
- Rock Phishing Group Accounts for 50% of Phishing Attacks?
- Organised Cyber Criminals Recruiting Fresh Grads
- Microsoft Word 0-day Exploits – QUESTION.DOC
- Serious Exploit in Windows Media Player (WMP)
- eEye Launches 0-Day Exploit Tracker
- Nmapview – Graphical Interface (GUI) for Nmap on Windows
- AttackAPI 2.0 Alpha – JavaScript Hacking Suite
- SIFT Web Services Security Testing Framework
- MTR – Traceroute on Steroids
- Cain & Abel – Download the Super Fast and Flexible Password Cracker with Network Sniffing
- LMCrack – Windows LanMan Hash Cracking Tool with Download
- SPIKE Proxy – Application Level Security Assessment
- Burp Proxy & Burp Suite – Attacking Web Applications
- Introducing WHCC – Web Hack Control Center
December 2006
- wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool
- GoldenEye (GoldEye) Password Cracker – Download goldeye.zip or goldeneye.zip
- Merry Christmas to All
- projectBypass
- Firefox Patches 8 Security Vulnerabilities with 2.0.0.1
- Skype Worm in the Wild – W32.Chatosky
- the Art of Virology 02h
- NMAP 4.20 released
- (IN)SECURE Magazine ISSUE 1.9 – December 2006
- Writing Worms for Fun or Profit
- IE & Firefox Both Effected by Fake Login Flaw
- Some Relaxing on the DMCA Regulations
- TXDNS 2.0.0 Released – DNS Digger for Brute Force
- Awareness of Phishing is on the Up – But so are Monetary Losses
- Save Your Reputation Online with ReputationDefender
- XSS Shell v0.3.9 – Cross Site Scripting Backdoor Tool
- SinFP 2.0.4 – OS Detection – Now Works On Windows
- Metasploit 3.0 Beta 3 Released
- Backframe (Formerly Backweb) JavaScript Attack Console
- Hackers Break Into Water Processing Plant Network
- Massive Data Theft Operation Uncovered
- Linux Reverse Engineering Hacker Challenge
- Internet Explorer 7 (IE7) Vulnerability Hits the Streets
November 2006
- the Art of Virology 01h
- Web 2.0 Hacking with Firefox and it’s plugins
- Windows XP ToolBox
- the Art of Virology 00h
- Installing Nessus on Debian-based OSs like Ubuntu
- Metasploit 2.7 Released – Automated Hacking
- AttackAPI 0.8 JavaScript Hacking Suite Available
- w3bfukk0r 0.2 Forced Browsing Tool Released
- Medusa Fast Parallel Password Cracker 1.3 Released
- Hacking Tor – A Flaw Appears?
- Oracle MEGA Patch Fixes 101 Security Bugs
- Hackers’ Project – Browser Exploit Code Hiding
- McAfee buying Tel Aviv startup Onigma for $15-25 million cash
- Taof 0.1 Network Protocol Fuzzer Released
- Vulnerability Assessment and Operational Security Testing Methodology (VAOST) – version 0.2 released
- MySpace Paedo Caught by PERL Script
- Spamhaus & e360 Battle is Heating Up
- McDonalds Japan Spreads Malware on MP3 Player
- Wyd – Automated Password Profiling Tool
- Hackers Target Home Users for Cash
October 2006
- New Firefox vulnerability – DoS and [DELETED] – UPDATED
- BobCat SQL Injection Tool based on Data Thief
- ARPWatch-NG ARP Flooding/Spoofing Protection/Detection
- PMD – Java Source Code Scanner
- FindBugs – Find Bugs in Java Programs
- LAPSE Sourcecode Analysis for JAVA J2EE Web Applications
- Odysseus Proxy for MITM Attacks Testing Security of Web Applications.
- Inprotect 0.22.5 Released – Web Interface for Nessus & Nmap
- Download pwdump 1.4.2 and fgdump 1.3.4 – Windows Password Dumping
- Echo Mirage – A Generic Network Proxy
- arp-sk – ARP Swiss Army Knife Tool
- Anti-Spyware Groups Still Require Legislation
- Security Companies Fight Against Microsoft Security Center
- The Top 5 Causes of Data Loss
- Tracking Users Via the Browser Cache
- A Politically Tight Situation? Blame a HACKER!
- BeEF – Browser Exploitation Framework
- Mozilla Hires Ex-Microsoft Security Strategist Window Snyder
- Facebook Privacy Fears
- zCodec Video Codec is a TROJAN
- California Passes Wi-Fi Security Guidance Law – War-Driving going down?
- Security Boom Post 9/11
- Browzar is Bullshit
September 2006
- FIS [File Inclusion Scanner] v0.1 – PHP Vulnerability
- Domain Stealing or How to Hijack a Domain
- SIFT Web Method Search Tool
- Security Compass Web Application Analysis Tool – SWAAT
- LCP – A Good FREE Alternative to L0phtcrack (LC5)
- Brutus Password Cracker – Download brutus-aet2.zip AET2
- Web Based E-mail (Hotmail Yahoo Gmail) Hack/Hacking with JavaScript
- Google Eavesdropping Software
- Super Mega Wi-Fi Hacking Machine – Janus Project
- Remote Network Penetration via NetBios Hack/Hacking
- Nerdcore Hits the Streets – Geek Music for the Masses
- Teen Data Exposed on Myspace
- Most Damaging Computer Attacks Rely on Stolen Logins
- The Top 10 PHP Security Vulnerabilities from OWASP
- Charity Computers May Fuel Malware Wars
- DOE Hit By Hackers and Covered Up
- China Outlaws Private E-mail Servers
- Former Hacker Irks Microsoft in EU Dispute
- Impressive Open Source Intrusion Prevention – HLBR
- Using the capture command in a Cisco Systems PIX firewall.
- Hacking Still Can’t Outdo Stupidity for Data Leaks
- Moving Ahead in the War Against Botnets
- What Responsibility do Anti-Spyware Researchers Have?
August 2006
- AT&T Hack Exposes 19,000 Identities
- How to get Ops and takeover a channel on IRC Hack Hacking
- AttackAPI 0.5 – JavaScript Security Tools
- Link & Comment Spamming – A possible solution.
- Sophos Offers Free Rootkit Detection Tool/Software
- Anonymous Connections Over the Internet – Using Socks Chains Proxy Proxies
- libtiff Vulnerability gives hope for a new GTA-less PSP exploit
- Bot Herders Go After MS06-40 Exploit
- OpenOffice.org Security ‘Insufficient’
- TCPReplay suite 3.0.beta10. Released
- Wapiti – Web Application Scanner / Black-box testing
- eEye Duster – Dead/Uninitialized Stack Eraser
- eEye Binary Diffing Suite (EBDS)
- OWASP – Fortify Bug Taxonomy
- SpikeSource Spike PHP Security Audit Tool
- 419 Scammers Duplicate Interpol Site
- Cyberwar Efforts Step-Up – NASA Sites Hacked
- Firefox Extension Spyware – FormSpy
- Israeli Hackers Join the War Against Palestinian Sites
- Microsoft Takes an Effort at Cutting Down Blogspam – Splogs
July 2006
- Wordpress 2.0.4 Released – Fixes Security Issues
- BASE 1.2.6 Released (Basic Analysis & Security Engine)
- Serious Wordpress Vulnerability/Exploit Verion 2.0.3 and Below
- Netscape.com HACKED With Cross Site Scripting (XSS) Vulnerability
- HOPE Speak Steven Rombom (Rambam) Charged
- Hping 2 Fixed for Windows XP SP2 (Service Pack 2)
- Freeware MAC Address Changer – Technitium v3.1
- Vista more insecure than XP
- CAPTCHA – Safer and better looking
- Play v2.71 Games on your v1.5 PSP
- IBM Accused of Hacking
- Linux Kernel 2.6.x PRCTL Core Dump Handling – Local r00t Exploit ( BID 18874 / CVE-2006-2451 )
- Debian Development Machine ‘gluck’ Hacked!
- Ticketcharge.com.my website hacked
- A Day in the Life of a Spyware Company – DirectRevenue
- Next Up – Hacking Nuclear Powerstations!
- WebScarab – Web Application Analysis – New Version
- Consultant Breached FBI’s Computers
- Darknet – Subscribe by E-mail
- Veterans Administration Chief Says Laptop Recovered
- A Forensic Analysis of the Stolen Veteran’s Administration Laptop
- Month of Browser Bugs (MoBB)
- Absinthe Blind SQL Injection Tool/Software
- Universal Hooker – An Ollydbg Plugin
- Data Mining MySpace Bulletins
- Downgrade PSP v2.6 to v1.5 to play homebrew & ISO games
- HoneyBot – A Windows Based Honeypot
- ‘Free’ USB Drives Defeat Company Security
June 2006
- ARP Scanning and Fingerprinting Tool – arp-scan
- sqlninja 0.1.0alpha – MS-SQL Injection Tool
- SANS Gateway Asia 2006
- Web Services Attack Frequency Increasing
- LiveJournal Advert Installs Malware
- US Sailors Information Leaked on The Web
- Researchers hack Wi-Fi driver to breach laptop
- UFO ‘Hacker’ Gary McKinnon Reveals What He Found
- FireMaster 2.1 – A Firefox Master Password Recovery Tool
- Google’s Orkut Hit by Data Stealing Worm – Mw.Orc
- 3Com’s TippingPoint Finds New IE Vulnerabilities
- Yersinia 0.7 Released with 802.1x Support – Layer 2 Attack Framework
- SinFP v2.00 Released – Next Generation OS Detection Tool
- Microsoft got Defaced
- Botnets and Phishing Numbers Increasing Despite Crackdown
- British Workers Love to Snoop Salary Info, Personal Notes & Colleagues Data
- New MSN Worm Hitting Users – BlackAngel.B
- CLR and SQL Server 2005
- Money Lost Due to Cybercrime Down Again This Year!
- Kevin Mitnick Interview on Social Engineering
- Trojan Compromises 2,200 Oregon Tax Payers
- SQL Power Injector v1.1 Released
- Security Events Around the World
- Spam – A Simple Guide To Keeping Your Inbox Clean
- Windows Vista Preview Release Download & Torrent
- Taiwan Kings of Spam from CipherTrust
- Academic Papers on Web Application Security
- Oedipus – Open Source Web Application Security Analysis
- Custom Trojans – Isn’t it Old News?
- Predicting Malware – Events Trigger Malware/Phishing Spikes
- THC Releases Nokia Phone ROM Images
- RFID & Biometrics Used At World Cup in Germany
- SyScan’06 – The Asian Hackers’ Conference
- New Spyware Blackmails Users Into Purchasing Software
- Cross Site Scripting (XSS)
- The Top 10 Most Common Passwords
- The MPAA TorrentSpy Hacker – $15,000!
- Graph Analysis of Stolen Credit Cards
- My SQL2005 Diary – Part 2
- Shadowserver Battles the Botnets
May 2006
- Without OneCare in the World.
- Fake Microsoft Patch – BeastPWS-C
- Barclays Rolls Out Free Anti-Virus Protection for Customers
- Viruses & Malware Monitored on a Dynamic World Map
- Malicious Cryptography – Cryptology & Cryptovirology
- Amnesty International Irrepresible Internet Campaign
- Cambodia Bans 3G So The People Can’t Get Porn
- MySpace Hackers in Police Custody
- Serious Symantec Anti-Virus Vulnerability
- Carders Scamming Spammers!
- Security Researchers Afraid to Reveal Vulnerabilities
- Trojan for the Word Vulnerability in the Wild
- Ohio University Compromised for Over a Year!
- South-East Asia Vulnerable to Cyber Terrorism
- PBNJ 1.14 Released – Diff Your Nmap Results
- The Biggest Web Defacement Ever
- What Next? The Poker Rootkit of Course!
- The Ultimate Net Monitoring Tool – Semantic Traffic Analyzer
- Paros Proxy 3.2.12 Released – MITM HTTP and HTTPS Proxy
- Sprajax – An Open Source AJAX Security Scanner
- hackers playground… windows?
- Source Code & Software Security Analysis with BogoSec
- OSSEC HIDS – Open Source Host-based Intrusion System
- SecureDVD – Multiboot Live Security Distro’s
- UK hackers condemn McKinnon trial
- ASP.NET Memberships and Roles
- The Next 50 Years of Computer Security
- MORE Sendmail Problems – Signal Handling Vulnerability
- SinFP – Next Generation OS Detection Tool
- New Trojan Targets World Cup Fans – Troj/Haxdoor-IN
- McAfee Seeds Mac Virus Threat FUD
- The RFID Hackers Revealed – Real RFID Hacking
- No Your Car CANNOT get a Bluetooth Virus
- I’m gonna h4×0r j00r Ferrari
- New Password Stealing Trojan Targets WoW Players
- Homeland Security Uncovers Critical Flaw in X11
- The MIT IP Packet Spoofing Project – Can We Spoof IP Packets?
- Who is Gouki?
- Medusa Password Cracker Version 1.1 Now Available For Download
- Microsoft Shelves Support for RSA SecurID in Vista
- Browser Security Test – Check Your Browser NOW!
- Proof of Concept for Internet Explorer Modal Dialog Exploit
- AV Firms Say Windows Vista Security Claims are Bullsh*t
- Open Source Blamed for Rootkits?
- Microsoft Patching Practises Come Under Fire
- The Enemy Within The Firewall
- Caller ID Spoofing is Still Easy- FCC Investigates
- Anonymity – Hiding Your Identity in 2006
April 2006
- Trojan Writers Coding for Money – Freezes PC for Ransom
- Gary McKinnon Busted Because he Forgot the Time Difference
- Paros Proxy 3.2.11 Released – MITM HTTP and HTTPS Proxy
- Oracle Releases a Default Password Scanner
- MS and the new IE vulnerability – Object Tag
- British Hacker Gary McKinnon Fears Guantanamo
- New Critical MEGApatch fixes 10 Vulnerabilities in Internet Explorer
- bsqlbf 1.1 – Blind SQL Injection Tool
- Download Youtube.com & Google Videos With 1 Click
- Paros Proxy 3.2.10 Released – MITM HTTP and HTTPS Proxy
- AJAX: Is your application secure enough?
- IE Address Bar Spoofing
- The Tale of a Real Malaysian E-mail Spammer Exposed – Webflexx
- Slashdot Effect vs Digg Effect Traffic Report
- DIY Spyware – Get Into it for just $15
- Good Password Guidelines – How to Make a Strong/Secure Password
- Alternatives to FrSIRT – Where to Download Exploits?
- Homeland Security Scores an F for Internal Security AGAIN
- Symantec Dumps L0phtcrack Password Cracker
- Kids Learn About Cyber Security – About Time Too!
- CIA Employees Identified Online
- Google Safe Browsing Extension for Firefox & Netcraft Toolbar – Anti-Phishing
- Serious Vulnerability/Flaw Found in GPG – GnuPG
- Photos as Visual Passwords Could Foil Hackers?
- Porn Database Hacked – Buyers Exposed!
- Some Good Tips to Secure Linux
- Oracle on the Quest for ‘Secure Search’ – Rival for Google Desktop?
- China taking control of it’s own DNS servers
- Penetration Testing vs Vulnerability Assessment
- Top 15 Security/Hacking Tools & Utilities
March 2006
- Information about the Internet Explorer Exploit createTextRange Code Execution
- Ophcrack 2.2 Password Cracker Released
- Download youtube.com videos?
- My SQL2005 Diary – Part1
- kArp – Linux Kernel Level ARP Hijacking/Spoofing Utility
- pwdump6 version 1.2 BETA Released
- FrSIRT Starts Charging for OTHER Peoples Work (Exploits)
- Whos is tonyenkiducx? Who the hell are you?
- Appledoz
- An Introduction to AJAX
- Elevator/Lift Hacking !!!!!
- Who is Haydies? Me my self and quite possibly some one else.
- Who is Darknet?
- Sealing Wafter – Defend Against OS Fingerprinting for OpenBSD
- Security Cloak – Mask Against TCP/IP Fingerprinting for Windows
- VMWare Rootkits, The Next Big Threat?
- Windows Rootkits
- UK Could be Going TOO Far With Digital Laws
- US Investigates Snort Sale as a Security Risk
- SSL VPNs and OpenVPN – Part IV
- Norton Internet Security ‘Keylogger’ IRC Bug
- SSL VPNs and OpenVPN – Part III
- SSL VPNs and OpenVPN – Part II
- SSL VPNs and Using OpenVPN
- Donations Flood in for Guilty Security Researcher Guillaume Tena
- The RSS Tools That Diggers Use
- Is Open Source Really More Secure?
- Why Windows Vista ‘might’ Actually be Good
- JTR (Password Cracking) – John the Ripper 1.7 Released – FINALLY
- Norton Antivirus Funny Bug
- Jacking Wifi is ‘OK’ say Ethics Expert
- Who is Navaho Gunleg?
- Spammer gets 8 years in Jail for Identity theft
- Anti-Spyware Software Wars – Can’t they get along?!
- Post-Mortem Data Destruction
- Measuring up the Security Risks for Mac – Are Apple Prepared?
- Latest RIAA Bullshit – Fair Use Policy – Can’t Use YOUR CDs on YOUR iPod
- Prostitutes want GTA (Grand Theft Auto) Banned
- How Computers Work – Free E-book
- RIAA Dirty Tricks: Gathering Private Info On Kids Of Accused File Sharer
- Your Employees Don’t Care About Your Data
- 10 Best Security Live CD Distros (Pen-Test, Forensics & Recovery)
- Should Social Engineering be a part of Penetration Testing?
February 2006
- Free Prep Material for LPI Linux Certification (LPI 201 and 202)
- mIRC Backdoor
- Malware Honeypot Projects Merge – mwcollect and nepenthes
- Firefox Confuses UK Government Piracy Laws
- Google Desktop 3 Enterprise
- The new Macbook Pro 15″ 2.0Ghz taken apart
- who is backbone?
- Google has no license for China service
- US considers banning DRM rootkits – Sony BMG
- Severe Security Hole in Apple Mac Safari Web Browser
- Passwords Passe at RSA
- Browse Anonymously at Work or School – Bypass Firewall & Proxy
- Google’s Defense of Privacy – Tells Feds to BACK OFF
- UK Wants Backdoor in Next Version of Microsoft Windows
- Jan 2006 Virus and Spam Statistics
- Phishing Sites Getting More Advanced with SSL
- Google Desktop Privacy? OR Lack Of..
- Old Darknet Pages – Links List, Secure Win2k etc.
- NSA Tracking Nmap and Other Open Source Tools
- Advertisers may face public humiliation over adware
- Dumbest Thief Ever Busted by E-mail Habit
- Antitrust case against Apple approved
- Nmap 4.01 Released – New Features
- Get the ball rollin’
- Spanish ‘Super’ Hacker Jailed for 2 Years over DoS attack
- Locate anyone in the UK via SMS
- Password Cracking with Rainbowcrack and Rainbow Tables
- BackTrack – A merger between WHAX and Auditor
- Call for Authors and New Members for Relaunch of Darknet
- Welcome to Darknet – The REBIRTH
| 36,753 views |
