News
Back to life
It was some time since I was not able to blog, but now online again – welcoming myself back …duh
New Forensics challenge by Honeynet project
If you enjoy challenges, especially forensic ones – here is another one brought by Honeynet project. It is suitable even for beginners :). The solutions should be submitted by 30th of March so hurry up 🙂
Online Banking targeted by new Zeus version for Windows mobile
For those of you that never heard for Zeus trojan – this is special bread that targets online banking users, stealing their credentials. It does implement pretty old idea for key logging. Zeus botnet however is huge and estimated to contain millions of compromised computer. Internet is full of detailed information. The trojan is active…
Long live GSM insecurity
During the second day of the 27th Chaos Communication Congress Karsten Nohl and Sylvain Munaut demonstrated why gsm calls and messaging should be considered insecure more than ever. For details visit the congress website. Enjoy!
Mozilla launches bug hunting program
Bug hunting programs seem to gain more and more popularity those days. The new kid on the block is the Mozilla one, which official guidelines can be find on https://www.mozilla.org/security/bug-bounty.html So for all of you hunters I would like to wish you good luck and happy hunting 😉 Enjoy!
Statistics and Crime reduction technologies
IBM statistical based CRUSH system is going to be tested in real life: http://www.techwatch.co.uk/2010/07/26/police-to-use-%E2%80%9Cminority-report%E2%80%9D-style-crime-prediction-software/
Don’t ever do this 🙂
To miss the target and to hit someone else instead can happen easily in a mil operation, but to deface a site believing that it is your real target and to make a mistake should be a shame for every so called hacker. The lesson from the story: http://www.itproportal.com/portal/news/article/2010/9/1/algerian-hackers-attack-wrong-website/ Do your homework!
Acrobat Reader under siege again or Why to update Acrobat Reader?
Adobe still fights the ripples from the vulnerability announced on 15.12.2009. All the versions prior 9.2 are vulnerable to malicious Javascripts that allow shell execution attack to be successfully performed. The colleagues from Trend Micro had spotted a new malware able to exploit this particular vulnerability. More info on: http://blog.trendmicro.com/unpatched-adobe-vulnerability-is-still-being-exploited-in-the-wild/
Pangolin – нова програмка за тестване на сигурността на база данни
NOSEC anonced a new DB security testing tool, called Pangolin. The free version of the product is able to test only Microsoft databases – have to find a way to crack it. Let’s hope that Pangolin will behave better than Matrix assessment tool. Enjoy http://www.nosec.org/en/pangolin.html
Recent Posts
Tags
bruteforce bug bounty bug hunting Burp Suite d3 data leak data recovery dictionary entropy pool fix fuzzing hackaday image processing Journalistic tools log analysis malware mindmap online courses Practical Reverse Engineering randomness sandbox skype SQL injection SSL technical visualisaiton visualisation Vulnerability Management Wanda the fish Zeus