opexxx
111.8K views | +3 today
opexxx
Your new post is loading...
Your new post is loading...
Rescooped by alexander knorr from ITSecurity
September 19, 2012 6:08 PM
Scoop.it!

PIN number analysis

PIN number analysis | opexxx | Scoop.it
A detailed analysis of four character PIN codes...

Via sachin
No comment yet.
Rescooped by alexander knorr from Raspberry Pi
September 19, 2012 6:08 PM
Scoop.it!

Raspberry Pi squeezes 50% performance boost with turbo mode - SlashGear

Raspberry Pi squeezes 50% performance boost with turbo mode - SlashGear | opexxx | Scoop.it
SlashGearRaspberry Pi squeezes 50% performance boost with turbo modeSlashGearRaspberry Pi has added a “turbo mode”, squeezing 50-percent more performance out of its fruity mini computer without dinging your warranty in the process.

Via F. Thunus
No comment yet.
Rescooped by alexander knorr from H4x0r5 Playground
September 17, 2012 4:32 PM
Scoop.it!

Add Malware Domains Block List to Firefox or Chrome

This is the easiest way to add a Malware Domains Block List to Firefox or Chrome. (Requires AdBlock Plus Plugin/Extension)
Just click on the following link. In Firefox you have to confirm the...

Via 0xerror
No comment yet.
Rescooped by alexander knorr from H4x0r5 Playground
September 17, 2012 4:30 PM
Scoop.it!

projects dnschef, DNS proxy for Penetration Testers and Malware Analysts | thesprawl.org

DNSChef is a highly configurable DNS proxy for Penetration Testers and Malware Analysts. A DNS proxy (aka "Fake DNS") is a tool used for application network traffic analysis among other uses. For example, a DNS proxy can be used to fake requests for "badguy.com" to point to a local machine for termination or interception instead of a real host somewhere on the Internet.


Via 0xerror
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 6:09 AM
Scoop.it!

Marco Ramilli's Blog: Windows Loader and ASLR on Binaries

Marco Ramilli's Blog: Windows Loader and ASLR on Binaries | opexxx | Scoop.it

Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:53 AM
Scoop.it!

waliedassar: Wow64 User-mode System Calls Hooking

waliedassar: Wow64 User-mode System Calls Hooking | opexxx | Scoop.it

The idea started as an attempt to implement "System Calls Hooking" from user-mode under Wow64 processes (32-bit processes running on 64-bit versions of Windows).


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:52 AM
Scoop.it!

ReverseEngineeringMalware

ReverseEngineeringMalware | opexxx | Scoop.it

Author Comments:

An email arrives in your inbox: "You have to check out this picture!" It came from your friends address, which you know and trust. It beckons you to open it. Maybe you weren't fooled this time, but it's likely at least one of the 50 other recipients couldn't resist.


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:50 AM
Scoop.it!

Password Secrets of Popular Windows Applications

In today's Internet driven world, all of us use one or other applications starting from browsers, mail clients to instant messengers. Most of these applications store the sensitive information such as user name, password in their private location using proprietary methods. This prevents hassle of entering the credentials every time during the authentication.

 

 


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:50 AM
Scoop.it!

Locating malware or binary hooks with vimdiff | Praty Blog | software archaeology

Locating malware or binary hooks with vimdiff | Praty Blog | software archaeology | opexxx | Scoop.it

Introduction

Sometimes its necessary to locate changes within a running binary or module. This can be for the reasons of a malware modifying your code, or you want to understand how a certain bot/hack/crack is working with your process. In both cases this information can be very valuable to you.


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:49 AM
Scoop.it!

VRT: CVE-2012-4681: bypassing built-in java security

VRT: CVE-2012-4681: bypassing built-in java security | opexxx | Scoop.it

A new Java 0-day is running rampant around the internet this week. With a code paste Sunday night and a Metasploit module coming in early yesterday morning, along with myriad research and blog posts, this Java vuln is sure to be the topic of the week. Based on information in the pastie link and the usage of the Gondzz and Gondvv class files in the alienvault blog post, plus analysis we've done on the samples we've seen in the wild, we've deduced that the exploit runs as follows:


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:48 AM
Scoop.it!

AutoIt and Malware: What’s the Connection? | Blog Central

Author Says,

During the last couple of weeks I’ve come across three malware samples packed using compiled AutoIt scripts, so I decided to explore the connection between AutoIt and the malware world. I took the latest 50 samples marked as AutoIt that were submitted to the free scanning site VirusTotal.


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:47 AM
Scoop.it!

Buffer Overflow - Explained

Over the last few months there has been a large increase of buffer overflow vulnerabilities being both discovered and exploited. Examples of these are syslog, splitvt, sendmail 8.7.5, Linux/FreeBSD mount, Xt library, at, etc. This paper attempts to explain what buffer overflows are, and how their exploits work.


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:46 AM
Scoop.it!

InitialValues - corkami - Initial values of x86 registers - reverse engineering experiments and documentations - Google Project Hosting

InitialValues - corkami - Initial values of x86 registers - reverse engineering experiments and documentations - Google Project Hosting | opexxx | Scoop.it

this page gathers the initial values of x86 registers, under Windows:

general registers, at specific execution pointsspecial registers

Note: some values may change slightly, depending on your exact configuration and settings.


Via sachin
No comment yet.
Rescooped by alexander knorr from comp-sec
September 19, 2012 6:08 PM
Scoop.it!

Scan Linux for Vulnerable Packages

Scan Linux for Vulnerable Packages | opexxx | Scoop.it

How do you know wether your Linux server (which has no desktop update notifier or unattended security updates running) does need to be updated? ...


Via cheron guillaume
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 19, 2012 12:45 PM
Scoop.it!

Owning Dell DRAC for ONE AWESOME HACK! -

Owning Dell DRAC for ONE AWESOME HACK! - | opexxx | Scoop.it

When a new Dell Chassis hardware infrastructure is installed, a web interface is also present to help with management of the Chassis. Each blade has its own web interface that gets installed by default on 443 (HTTPS).


Via sachin
No comment yet.
Rescooped by alexander knorr from H4x0r5 Playground
September 17, 2012 4:31 PM
Scoop.it!

XSS ChEF v1.0 – Chrome Extension Exploitation Framework | ToolsWatch.org

XSS ChEF v1.0 – Chrome Extension Exploitation Framework | ToolsWatch.org | opexxx | Scoop.it

Via 0xerror
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 6:10 AM
Scoop.it!

sei-uno-zero-nove » Blog Archive » use google spreadsheet as a proxy

sei-uno-zero-nove » Blog Archive » use google spreadsheet as a proxy | opexxx | Scoop.it

Applications of Google spreadsheet functions for external data are virtually endless, and my previous article on how =IMPORTXML() can help to automate the process of collecting web data is just an example. Since fantasy has no limits, I want to show that another possibility is to build… a proxy. Yes, a proxy inside Google preadsheet.


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 6:09 AM
Scoop.it!

Rapid7 Community: Metasploit: "Pass the hash" with Nexpose and ...

Rapid7 Community: Metasploit: "Pass the hash" with Nexpose and ... | opexxx | Scoop.it
Nexpose is able to use the hashes to perform credentialed scans to produce very detailed scan results of all sorts of local and remote vulnerabilities that may otherwise not be detectable. ...

Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:52 AM
Scoop.it!

Investigation report for metasploit’s windows/upexec/find_tag shellcode encoded by x86/shikata_ga_nai encoder | Quttera blog

Quttera investigation engine statistics of the windows/upexec/find_tag shellcode encoded by x86/shikata_ga_nai encoder


Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:50 AM
Scoop.it!

Joe Document Dissector

Joe Document Dissector is an automated malware analysis platform for detecting malicious documents...

Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:50 AM
Scoop.it!

HowTo Decompile / Reverse Engineer Android APK | prosoxi.com

HowTo Decompile / Reverse Engineer Android APK | prosoxi.com | opexxx | Scoop.it
HowTo Decompile / Reverse Engineer Android APK...

Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:49 AM
Scoop.it!

Sendrawpdu - iPhone SMS spoofing tool - Slashdot

Sendrawpdu - iPhone SMS spoofing tool - Slashdot | opexxx | Scoop.it
A French #hacker has released a tool capable of sending SMSes with #spoofed sender details on the #iPhone 4.

Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:48 AM
Scoop.it!

Free Shells with Plink and Pageant - Blog - Room362.com

Free Shells with Plink and Pageant - Blog - Room362.com | opexxx | Scoop.it
Watching Egypt ’s talk at DEFCON 20 he mentioned the ability to jump on on a system when pag...

Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:47 AM
Scoop.it!

Well-known security identifiers in Windows operating systems

A security identifier (SID) is a unique value of variable length that is used to identify a security principal or security group in Windows operating systems. Well-known SIDs are a group of SIDs that identify generic users or generic groups.

Via sachin
No comment yet.
Rescooped by alexander knorr from ITSecurity
September 15, 2012 5:46 AM
Scoop.it!

portable-executable-library - Portable Executable C++ Library - Google Project Hosting

portable-executable-library - Portable Executable C++ Library - Google Project Hosting | opexxx | Scoop.it

Current version: 0.1.1

Summary

[+] Read 32- and 64-bit PE files (PE, PE+) for Windows, work similar with both formats

[+] Rebuild 32- and 64-bit PE files

[+] Work with directories and headers

[+] Convert addresses

[+] Read and write PE sections

[+] Read and write imports

[+] Read and write exports

[+] Read and write relocations

[+] Read and write resources

[+] Read and write TLS

[+] Read and write image config

[+] Read and write basic .NET information

[+] Read bound imports

[+] Read exception directory (PE+ only)

[+] Read debug directory and extended debug information

[+] Calculate entropy

[+] Change file alignment

[+] Change base address

[+] Work with DOS Stub and Rich overlay

[+] High-level resource reading: bitmaps, icons, cursors, version info, string and message tables

[+] High-level resource editing: bitmaps, icons, cursors, version info

Library doesn't use WinAPI and doesn't execute PE files, so it's safe to use it with suspicious binaries.


Via sachin
No comment yet.