Search the Community

Recently, EHN received a news report from Tunisian Cyber Army and Al Qaida Electronic Army in which the hackers claimed to have infected the Pentagon administrator, as part of their on going operation called "#opBlackSummer". The attack was happened after hackers identified a reflected cross site scripting(XSS) vulnerability in one of the sub domain of Pentagon (g1arng.army.pentagon.mil). POC: g1arng.army.pentagon.mil/Programs/Pages/Default.aspx?Category="><script>alert("xss by tca and AQECA on pentagon")</script> The hacker managed to exploit this vulnerability for sending malicious payload to the admin of Pentagon. Hackers claims that they got success in infecting them. Hackers said they compromised some important file and steal cookies from the pentagon mail. The security breach was done with collaboration with Chinese hackers. At the time of writing, the vulnerability is not fixed. If the TCA claim is true, then this one will be the best example that demonstrate the severity of simple reflected xss. Yesterday, i have sent notification to Pentagon team about the vulnerability but there is no response from them. In another mail, the team said the have hacked the state.gov with SQL injection vulnerability. Source: Hackers infect Pentagon admin by exploiting XSS vulnerability | Hacking News | Security updates

"Un britanic risc? pân? la 70 de ani de închisoare pentru c?, spune el, a încercat s? caute dovezi despre existen?a extratere?trilor. Gary McKinnon, considerat cel mai periculos hacker din lume dup? ce a spart sistemul Pentagonului de securitate informatic?, urmeaz? a fi extr?dat în Statele Unite dup? ani de procese în Marea Britanie." relateaza Realitatea.net A spart nenumarate calculatoare ale NASA si ale Pentagonului si ei vor sa-l aresteze?? Eu i-as da un premiu, l-as angaja la Microsoft, l-as stimula sa lucreze astfel incat programele sa fie din ce in ce mai eficiente. Nu l-as aresta pentru 70 de ani... Stirea e de prin 2009. O sa ma documentez sa vad ce s-a intamplat pana la urma. :confused: