Comments Posted By eM3rC

Displaying 1 To 30 Of 201 Comments

Next-Gen Botnets Taking The Place of Storm and Srizbi

God it’s amazing to see how much botnets have evolved.

I wonder what the different AV companies have in store to counter these additions to the botnets.

» Posted By eM3rC On January 16, 2009 @ 3:06 am

Phishing Attacks Hits Twitter Users – Utilising Direct Messages

God, it seems like hackers seem to be hitting up every form of social networks. First its the google groups (orhut?), then myspace, facebook, and now twitter

Also, the spam business has a yearly income of around ~401 billion US dollars. I guess some people are that oblivious regardless of how obvious the scam is…

» Posted By eM3rC On January 7, 2009 @ 5:16 am

Happy New Year For 2009 From Darknet

There is a show on the History channel which is talking about all the ways the world is predicted to in (in apocalypses and such).

It’s a fun watch

» Posted By eM3rC On January 8, 2009 @ 6:34 am

Happy new year everyone!!!

3 years left until the end of the world! (just kidding)

» Posted By eM3rC On January 7, 2009 @ 5:17 am

Happy new year everyone!

» Posted By eM3rC On January 1, 2009 @ 6:09 pm

Retarded E-mails – ATM Cards, Very Important Details, VOIP Testing Tools and MORE!

I would have to say concerned is one of the people that posted or some other person who doesn’t want to spend any time or effort learning the stuff they need to get their task accomplished.

Is it worth it to give them so much attention?

» Posted By eM3rC On December 25, 2008 @ 4:59 am

Retarded E-mails – Crack Hotmail? Hack Facebook? Boyfriend Cheating?

Wow this is a great post

Looking forward to the stuff your gonna add to this!

A really sad example of this is the Raymond CC blog on almost every post… It’s always people saying stuff like the things listed above.

Good to be back

» Posted By eM3rC On December 5, 2008 @ 12:36 am

OpenVAS – Open Vulnerability Assessment System (Nessus is Back!)

Cool tool

Thanks Darknet!

» Posted By eM3rC On August 27, 2008 @ 11:34 pm

New MySpace and Facebook Worm Target Social Networks

I understand that people will fall for the nude pics or free games but there are also the people that had their kids set up a facebook profile for them or were convinced by their kids to set up an email.

With this in mind, many people will fall for these scams just because they have no knowledge of the computer world, period. This includes random things they get on social networks to getting basic protection for their computer.

Knowledge is power and protection, too many people don’t have this

» Posted By eM3rC On August 19, 2008 @ 5:29 am

TJX Credit Card Hackers Busted – Largest US Data Breach

The thing that scares me the most about busts like this is the information. Although the criminals have been caught there is no knowing where the information may have gone.

Consider this. When they got the information they uploaded it to a file hosting server or some high tier hacker forum for their close colleagues to view and work with. The question is how many people had/have access to the information and what is still being done with it.

I would also be willing to bet that some of it has been sold off for extra profit.

» Posted By eM3rC On August 13, 2008 @ 6:11 pm

July Commenter of the Month Competition Winner!

Random topic!

I wonder if anyone will pass my comment record

» Posted By eM3rC On August 20, 2008 @ 8:17 pm

@zupa

I can tell you this isn’t a sham considering I got my package of goodies. All I can say is you have to give it a lot of time because of all the shipping complications the packages will go through. I would say it took around a month + to receive the stuff.

@Morgan
I realize it tunneling but rather than burrowing/tunneling through the server, its doing something less detectable in my opinion because its just streaming data between computers rather than redirecting information through unused ports. (A good IT could just check the number of packets being sent through the ports and realize one of the unused high ones have more than normal activity, right?)

@Pantagruel
So true. I think the packages sweeten the deal but overall the the dedicated members which make this blog great.

» Posted By eM3rC On August 20, 2008 @ 8:16 pm

About the prizes, I think its amazing that Darknet actually gives out prizes and am honored to be one of the winners.

As big or small as it may be, I think he (I assume, sorry if I’m wrong) is one of the few sites that actually gives away things for participating on a monthly basis.

And another random tangent, could we have some kind of story submitting section or email?

» Posted By eM3rC On August 19, 2008 @ 5:37 am

Thanks for the comments guys.

I am working in a DMZ zone so security is really tight but there is one method that might just work. Rather than tunneling or proxying where some red flags might go up what about connecting to a running machine outside the network and streaming my data through that?

I read an article about that in one of the 2600 articles so might try and dig that up

» Posted By eM3rC On August 19, 2008 @ 5:32 am

@ Iyz

Been overseas with restricted internet access

And hence, I have a question. What would be the best way to avoid restricted internet access? I have been reading some articles about server tunneling and port forwarding (for applications) but all of this seems like it would throw up a lot of red flags. Any suggestions?

» Posted By eM3rC On August 13, 2008 @ 6:16 pm

Gratz on the win zupa!

Took you long enough

» Posted By eM3rC On August 13, 2008 @ 6:14 pm

PuttyHijack V1.0 – Hijack SSH/PuTTY Connections on Windows

Yay Pantagruel!

Thanks for the log and thank you Darknet for the post!

» Posted By eM3rC On August 13, 2008 @ 6:13 pm

raWPacket HeX – Network Security Monitoring & Analysis LiveCD

Amazing find!

Thanks Darknet!

» Posted By eM3rC On August 14, 2008 @ 3:10 am

TJX Employee Fired for Trying to Fix Things

That is a really funny and really good point razta. Just make sure person information is the next breech

» Posted By eM3rC On May 30, 2008 @ 1:13 am

New Botnet Malware Spreading SQL Injection Attack Tool

When I first found out about botnets I though it was an amazing concept.

Not that their being used to distribute files a whole new market of exploiting has just opened. I wonder what the next step is.

» Posted By eM3rC On May 16, 2008 @ 12:01 am

Want Some COFEE? Microsoft Computer Online Forensic Evidence Extractor

Just thought I’d recommend a good program for those of you on a computer that you can log into and can run .msi/.exe programs.

Its called SIW.

This program will basically tell you about every aspect of the computer including saved password, registry keys used for all the software, WEP/WPA keys, hardware, etc etc. You get where I’m going with this.

» Posted By eM3rC On May 13, 2008 @ 4:22 am

Couple of quick points here.

@Darknet
Thanks for doing that! It was always a pain reentering posts because of that anti-spam feature.

As for the security issue, I stumbled upon a very interest 2600 article in their most recent issue. Using a copy of Knoppix (the live CD) and a removable hard drive/USB key one can gain access to any computer as long as the bios is configured correctly. Basically all you have to do is run the live OS, access the windows hard drive through Knoppix and simply copy and paste the files onto the removable hard drive. No passwords required. Only requirement is the removable hard drive is formatted in FAT32.

Hope this helps some people out.

eM3rC out.

» Posted By eM3rC On May 13, 2008 @ 4:19 am

Very cool CD/USB compilation.

Right now I use a combination of Ophcrack, Hirens Boot CD and a couple other tools to get into computers that have passwords that the owner has forgotten, etc.

Thanks for the post, nice to finally find a pack with everything someone could need for this kind of stuff.

Just noticed there aren’t any more number verification boxes to prevent spamming

» Posted By eM3rC On May 9, 2008 @ 11:48 pm

April Commenter of the Month Competition Winner!

Hey everyone,

Thought I’d make a comeback at the beginning of a new month. Reason for being gone so long is a shit ton of testing, finals, work applications, college stuff and relationship drama ;P

@ zupakomputer
I didn’t use a fake email. Just one of my slave ones. I have a few emails set aside. The first one for personal stuff, second for spam stuff, and the last one for everything hacking related. I dont check the spam and hacking ones regularly so that’s why I didn’t respond quickly to Darknet’s emails. Also had problems with my cell (which is my home phone) so calls also were a problem. Hopefully that’s all worked out now.

Gratz fever on winning the competition!

Looking forward to posting again and good luck to those of you who should win but haven’t yet (you know who you are).

» Posted By eM3rC On May 9, 2008 @ 4:33 am

Metagoofil v1.4 Released – Metadata and Information Gathering Tool

Thanks for all the replies guys!

I think I’ll start out with Ubuntu and work on that for a while then start testing out the different linux OSs.

How am I the second highest poster when I’m not even trying?!?

» Posted By eM3rC On May 19, 2008 @ 10:34 pm

@Changlinn
Thanks, I’ve tried out Ubuntu out and really liking it. I’ve heard a lot about distros like Fedora and SuSe but I’ll stick with the big U for now.

@matt
I think I might try out Ubuntu and do dual boot with ArchLinux, XP, and Ubuntu. Thanks for the suggestions!

» Posted By eM3rC On May 13, 2008 @ 6:29 pm

Very cool!

It’s amazing to see how black hat software is developing and what white hats are doing to counter it. Keep up these security articles, really enjoy reading them!

Ooooo Random post!

Ok so I have been a windows/hackintosh user for quite some time and I now want to make a switch (or triple boot) to linux. My question is which distro would be a good match for my needs (I know there is no best).

For now it would be used for basic tasks like music editing/playing, word processing, video editing, programming (c++, java for now), and hopefully gaming (I will prob have to use wine or codeweavers for this though).

Thanks!

» Posted By eM3rC On May 13, 2008 @ 4:24 am

Cyber Storm II – US, UK & 3 Others Involved in Mock Cyberwar

Actually, you can have an attack and have some positive results. Take the military for example, they know there is going to be an attack yet it still helps the soldiers. I know know how many members here have heard of an event called DEFCON (if not check it out!) but basically it uses mock hacking events. Although stealth can be part of the hacking attack it is not the only part. Even if these countries know about the attacks there are several factors that you might not be thinking of. First, the techniques. They might know about it but they don’t know how the hackers plan to get in. There are hundreds of thousands of possible things that could be done so they would have to be watching everything at once, all the time. Next, the period set aside for the operation. They might be on standby or ordered to act as though they do not really know about an attack. To rule this out the amount of time set aside for the attack could be some were around a month so although they might be somewhat prepared, they wouldn’t know when the hackers would hit. Basically what I’m getting at is the drill is excellent and although the governments might be anticipating the attack, it would still be very helpful for the security teams.

» Posted By eM3rC On March 12, 2008 @ 11:08 pm

VXers Group 29A Calls it Quits

This topic has gone off on an amazing digression.

» Posted By eM3rC On March 12, 2008 @ 11:12 pm

February Commenter of the Month Competition Winner!

Thank you everyone!

Sarah thank you for your motivation in the community

Looks like it will be a fight between Pantagruel and zupakomper. Good luck to you both!

» Posted By eM3rC On March 7, 2008 @ 5:46 am