Search the Community

Salutare tuturor. E?ti în c?utarea unui website profesional? Lua?i primul pas spre noul proiect al dvs. ?i contacta?i-m?. Prestez servicii web profesionale, atât front cât ?i back-end (@EAdrian) în conformitate cu standardele actuale. Ata?ez mai jos ni?te lucr?ri pentru a v? face o idee despre modul în care lucrez. A?adar: Automobile layout FaceTrips - Travel Elite Baseball Academy and Travel Teams Focus Kids Focus Kids - sign up page Website for a professional Call of Duty player Instant Teleseminar website Quiz game Clean, Relaxing Home Page for MassageTableRentals Personal website for Manuel Pasquato Vescovo Automotive Next Big Stock Video/Photo Site Travel hotels Wordpress theme Food Event Medical website Medical Marijuana layout The Neuromarketing Labs Dating sites and ranks Gaming website MMO Games Portal page Gaming website Online game forum (Baldur's Gate: Enhanced Edition Forums) Gaming website Landing page for Ray Junior Landing page for wedding website School auth. page Mul?umesc pentru timpul acordat ?i a?tept un feedback din partea voastr?. Toate cele bune, GPaul. P.S. : Îmi rezerv dreptul de a alege clien?ii.

Hi, Do you guys know good web security companies in Romania or surroundings? If so, please provide me their websites. Thank you

Al Salamu alaykom Recently, i've made this new tool for cpanel cracking - brute forcing.It's very easy to use just follow my pictures First of all you need to download this tool : Download On mediaFire Note : there is no trojans, viruses, you can scan it yourself ! Now open cpanel killer.exe, it will be like this. you can use the auto username grabber option on the configuration side, or i already included a python script for auto username grabber you can use it also it includes two options 1 - single site username grabber. 2 - Server Usernames Grabber For usage, you just need to put your passwords list, if you use the auto username grab option you don't need to add a usernames list either, you don't need to add the usernames list. Sorry for my bad english guys :">

OkayFreedom VPN. A simple VPN service enabling private, uncensored web surfing. Access websites blocked in your country Use all of your favorite websites when abroad Access the web securely – even in public hotspots Surf the Net anonymously Protect your privacy on the internet OkayFreedom VPN Premium (100% Discount)

Enfold WordPress Theme is a clean, super flexible and fully responsive Theme (try resizing your browser), suited for business websites, shop websites, and users who want to showcase their work on a neat portfolio site. It comes with a plethora of options so you can modify layout, styling, colors and fonts directly from within the backend. Build your own clean skin or use one of 18 predefined skins right out from your WordPress Admin Panel. Download

Researchers have seen an uptick in Adobe Flash .SWF files being used to trigger malicious iFrames across websites. Several hundred WordPress and Joomla websites have been swept up in the campaign, first observed by researchers at the firm Sucuri last November. “Though it’s uncertain how many iterations existed in the wild when we first reported the issue, this time we’ve found a lot of websites where the infection looks similar,” Peter Gramantik, a senior malware researcher at the firm wrote Thursday. According to Gramantik the infection is clearly marked by a .SWF file with three random characters as a name that’s stored in a site’s images/banners/ folder. As far as the firm has seen, each file has a random hashed ID parameter attached to the end of it. While the malware’s variable names, coding logic, and UserAgent remain the same, one of the main differences from last November’s version of the campaign and this one is that this incarnation has spread to from Joomla sites to WordPress sites. As is to be expected, the website delivering the malicious payload has changed as well. The .SWF files, also known as small web format files, inject an invisible iFrame, which can go on to drop other exploits. Source

Drupal, one of the widely used open source content management system is recommending its users to update their software to the latest versions 6.35 and 7.35 after the company discovered two moderately critical vulnerabilities that may allow an attacker to hack Drupal websites. According to a security advisory published yesterday, a flaw found in the Drupal core could allow a potential hacker under certain circumstances to bypass security restrictions by forging the password reset URLs. ACCESS BYPASS / PASSWORD RESET URLs VULNERABILITY Successful exploitation of this Access Bypass vulnerability could leverage the hacker to gain unauthorized access to user accounts without knowing their password. This vulnerability is considered as moderately critical in which an attacker can remotely trick a registered user of Drupal based website, such as an administrator, into launching a maliciously crafted URL in an attempt to take control of the target server. AFFECTED DRUPAL WEBSITES The exploitation of the access bypass vulnerability on Drupal 7 website is possible only if the account importing or programmatically editing process results in the password hash in the database being the same for multiple user accounts. The websites running Drupal 6 are at greater risk, because the administrators of the websites have created multiple new user accounts protected by the same password. Moreover, the security vulnerability can also be exploited in the Drupal 6 websites where accounts have been imported or programmatically edited in a way that results in the password hash field in the database being empty for at least for one user account. OPEN REDIRECT VULNERABILITY The affected versions of Drupal CMS are also susceptible to an open redirect vulnerability. Drupal action URLs contain a "destination" parameter in it, which can be used by cyber criminals to redirect users to a third-party location with malicious content. According to the Drupal team, there are multiple URL-related API functions in affected versions of Drupal 6 and 7 which can be used by attackers into passing through external URLs when not required. This could potentially lead to additional open redirect vulnerabilities. The issue is actually serious because Drupal is used to power over 1 billion websites on Internet, which puts Drupal in third place behind the Wordpress and Joomla. Drupal provides a Content management system for websites including MTV, Popular Science, Sony Music, Harvard and MIT. RECOMMENDATIONS Website administrators are strongly recommended to take some necessary steps: Update to the latest version of Drupal core, i.e. Drupal core 6.35 and Drupal core 7.35 Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack. Do not click on links from unknown sources. Do not open email attachments from unknown or untrusted sources. Consider implementing file extension whitelists for allowed e-mail attachments. Source

Beginning with April 21 2015, the biggest search company Google will use the mobile friendly websites in the ranking algorithm, which mean that if your website is mobile friendly,it will rank higher then the other websites. Surce: Goodweb

A new SSL/TLS vulnerability has been discovered that makes it possible to decrypt the HTTPS encryption protocols used between websites and browsers on Apple and Android devices. The flaw has been dubbed Freak (Factoring attack on RSA-Export Keys) and information on the specifically created freakattack.com website explains that it works by forcing a mobile device browser to use an older, breakable encryption standard. “The vulnerability allows attackers to intercept HTTPS connections between vulnerable clients and servers and force them to use ‘export-grade’ cryptography, which can then be decrypted or altered,” it said. “Vulnerable clients include many Google and Apple devices (which use unpatched OpenSSL), a large number of embedded systems, and many other software products that use TLS behind the scenes without disabling the vulnerable cryptographic suites.” The flaw was uncovered by a team of researchers at SmackTLS.com, who explained that the problem exists because of former US government policy concerning encryption technologies. “This attack targets a class of deliberately weak export cipher suites. As the name implies, this class of algorithms has been introduced under the pressure of US governments agencies to ensure that the National Security Agency would be able to decrypt all foreign encrypted communication, while stronger algorithms were banned from export as they were classified as weapons of war.” This means that attackers can force a server into deliberately using an encryption key that can be broken in about 12 hours. “Thus, if a server is willing to negotiate an export cipher suite, a man-in-the-middle [attack] may trick a browser (which normally doesn't allow it) to use a weak export key,” the team explained. Numerous high-profile websites are affected by the flaw, such as americanexpress.com, groupon.com and whitehouse.gov. Overall, almost 10 percent of the Alexa top million websites could be affected. V3 contacted Apple and Google for comment on the flaw but had received no reply at the time of publication. F-Secure researcher Sean Sullivan told V3 that the discovery underlined the risks of trying to control technology like encryption, something that David Cameron has recently made noises about in the UK. “In the 1990s there was this idea that they could control encryption and code as if it was a tangible thing and ban its export. Here we are 20 years later and you can see how that ideal has backfired,” he said. “Cameron is making this same point today, but our reliance on encryption is only increasing and, if you try to introduce some ‘weaker’ standards that you want to control, it will come back to haunt you.” Sullivan added that the risk to web users from the Freak flaw is more theoretical than anything else, as an attacker would need to compromise a website's server and then force a device to accept the older standard. Nevertheless, the incident demonstrates the risks posed by web browsers and the unintended consequences of trying to create two-tier technology systems. Source

More than one million websites that run on the WordPress content management application run the risk of being completely hijacked by attackers exploiting critical vulnerability in most versions of a plugin called WP-Slimstat. Versions prior to the recently released Slimstat 3.9.6 contain a readily guessable key that's used to sign data sent to and from visiting end-user computers, according to a blog post published Tuesday by Web security firm Sucuri. The result is a SQL injection vector that can be used to extract highly sensitive data, including encrypted passwords and the encryption keys used to remotely administer websites. "If your website uses a vulnerable version of the plugin, you’re at risk," Marc-Alexandre Montpas, a senior vulnerability researcher at Sucuri, wrote. "Successful exploitation of this bug could lead to Blind SQL Injection attacks, which means an attacker could grab sensitive information from your database, including username, (hashed) passwords and, in certain configurations, WordPress Secret Keys (which could result in a total site takeover)." The WP-Slimstat secret key is nothing more than the MD5 hash of the plugin’s installation timestamp. An attacker could use the Internet Archive or similar sites to determine the year a vulnerable site was put online. That would leave an attacker with about 30 million values to test, an undertaking that could be completed in about 10 minutes. Once the secret key has been divined, the attacker can use it to pull data out of the database. WP-Slimstat is an analytics tool. Its listing on WordPress shows it has been downloaded more than 1.3 million times. People who operate websites that use the plugin should update immediately. Post updated to change headline. It previously read: More than1 million WordPress websites imperiled by critical plugin bug. Source

dirs3arch is a simple command line tool designed to brute force the discovery of directories and files in websites. Changes: Ported to Python3. Fixed issue3. Fixed timeout exception. Other bugfixes. Download: Download: dirs3arch Directory Checker 0.3.0 ? Packet Storm

ofer servicii de web design / development , graphic design gratis. Daca este cineva interesat contactati-ma pe site-ul meu personal FeatherByte | Web Designer/Developer sviluppo siti web , logo e Gragica Web Roma sau PM Doresc sa imi creez un portofolio. !important - pot sa lucrez doar sambata , duminica si seara dupa ce revin de la lucru

O colectie mica de siteuri web pentru scheme si diverse proiecte electronice. - Scheme electronice simple si circuite electronice fundamentale - Scheme electronice pentru toti, electronica de la A la Z. Sisteme de securitate, generalitati - www.azp.ro - Electronics Projects Circuits - Miscellaneous electronic circuit diagrams / circuit schematics - Electronic Circuit Schematic Wiring Diagram - Electronics Forum (Circuits, Projects and Microcontrollers) - Homemade Circuit Designs Just for You - Elektronik Devreler Projeler 320 Volt | Elektronik Sitesi Daca doriti sa completati, o puteti face in acest thread