Tag Archives | exploits

ISR-evilgrade – Inject Updates to Exploit Software

August 29, 2008 | 8,206 views

ISR-evilgrade is a modular framework that allow us to take advantage of poor upgrade implementations by injecting fake updates and exploiting the system or software. How does it work? It works with modules, each module implements the structure needed to emulate a false update of specific applications/systems. Evilgrade needs the manipulation of the victims DNS […]

Share1

Shares 1

Tags: evilgrade, exploits, fake updates, infobyte, isr, isr-evilgrade, man-in-the-middle, mitm, spoofing, vulnerabilities, xploit updates

Posted in: Exploits/Vulnerabilities, Hacking Tools, Programming | Add a Comment

Exploit for Kaminsky DNS Bug Goes Wild

July 25, 2008 | 26,390 views

There has been a lot of hype about this one, but this flaw is a real threat and the working exploits are now available in the wild. To top that, they have already been ported into Metasploit! I hope all the major ISPs are in a patching frenzy right now and not thinking to themselves […]

Shares 0

Tags: dan-kaminsky, dns exploit, dns vulnerability, dns-hacking, exploits, hacking dns, hd-moore, metasploit, Network Hacking, vulnerabilities, Web Hacking

Posted in: Exploits/Vulnerabilities, Network Hacking, Web Hacking | Add a Comment

oCERT – Responsing to Flaws in Open Source Software

May 13, 2008 | 3,772 views

So a new initiative – the Open Source Computer Emergency Response Team known as oCERT has been set up one of the main sponsors being Google (read more here – Contributing to Open Source Software Security). The oCERT project is a public effort providing security handling support to Open Source projects affected by security incidents […]

Shares 0

Tags: exploits, flaws, google, ocert, open source cert, Open-Source-Software, vulnerabilities

Posted in: Exploits/Vulnerabilities, General Hacking | Add a Comment

Patch Window Shrinking – Semi-Automated Reverse Engineering

May 6, 2008 | 6,236 views

As far as I know this has been happening for some time, sometimes a patch comes out for a vulnerability that many people don’t know about (including the hackers) so they will see what problem the patch fixes (possibly through reverse engineering) then develop an exploit to leverage on the flaw. It seems things are […]

Shares 0

Tags: exploit-development, exploits, hackers, hacking, patch window, patching, reverse-engineering, security holes, security-patches, vulnerabilities

Posted in: Exploits/Vulnerabilities, Programming | Add a Comment

Hackers Could Become The Hacked?

April 16, 2008 | 24,402 views

It looks like someone is going after the bad guys in a new way, by hacking them back! It’s no news to us that many hacking tools and script kiddy trojan kits are badly programmed..a lot of them have back-doors and the client-side tools have easy exploits that enable you to take over the ‘hackers’ […]

Share1

Shares 1

Tags: bitsec, exploits, hackers, hacking, hacking the hacker, joel eriksson, reverse-engineering, trojans, vulnerabilities

Posted in: Exploits/Vulnerabilities, Malware | Add a Comment

SCARE – Source Code Analysis Risk Evaluation Tool

February 29, 2008 | 5,516 views

The Source Code Analysis Risk Evaluation project is a study to create a security complexity metric that will analyze source code and provide a realistic and factual representation of the potential of that source code to create a problematic binary. This metric will not say that the binary will be exploited nor does it do […]

Shares 0

Tags: code auditing tool, code-auditing, exploits, Programming, risk, risk evaluation, scare, software-security, source code auditing, source-code-analysis, vulnerability

Posted in: Countermeasures, Exploits/Vulnerabilities, Programming | Add a Comment

Serious Flaw in Popular Media Players from Microsoft and AOL

December 11, 2007 | 5,207 views

It looks like there is a fairly serious vulnerability in some of the popular media player packages out in the wild packaged as a MP4 file (due to the MP4 codec from 3ivx), it effects Windows Media Player 6.4 and Windows Media Player Classic, which are made by Microsoft, and AOL’s Winamp version 3.5. All […]

Shares 0

Tags: aol, aol winamp, exploits, malware, media player, media player exploit, microsoft, mp4, MS, vulnerabilities, windows-media-player, wmp, wmp-exploit

Posted in: Exploits/Vulnerabilities, Malware, Windows Hacking | Add a Comment

SANS Top 20 Vulnerabilities Published for 2007

December 7, 2007 | 4,075 views

It’s that time of the year, our annual christmas present – the Sans Top 20 Vulnerabilities for 2007. The SANS Top 2007 list is not “cumulative.” We include only critical vulnerabilities from the past year or so. If you have not patched your systems for long time, it would be wise to patch the vulnerabilities […]

Shares 0

Tags: exploits, sans, top 20 vulnerabilities, vulnerabilities, vulnerabilities 2007

Posted in: Exploits/Vulnerabilities, General Hacking | Add a Comment

WabiSabiLabi Pimping ClamAV Vulnerability & Exploit

December 3, 2007 | 4,623 views

Interesting, a new arena for marketing spin and sales talk – the auctioning of exploits. WabiSabiLabi is pushing hard for a good price for a ClamAV vulnerability and exploit that it has gotten hold of, it’s dosing it up with a good portion of spin to make it seem like the next big thing – […]

Shares 0

Tags: clamav exploit, clamav vulnerability, exploit auction, exploits, hacking-linux, selling exploits, vulnerabilities, wabisabilabi

Posted in: Exploits/Vulnerabilities, Legal Issues, Linux Hacking | Add a Comment

Voting Machines Lose to Hackers Again

September 24, 2007 | 4,398 views

I’m sure everyone remembers the Diebold voting fiasco with their system getting pwned multiple times. Back in May 2006 it was announced from multiple sources that the Diebold system was critically flawed. Then more recently Hackers in the Philippines were Invited to Crack Internet Voting, which is definitely positive step to increase security in voting […]