Exploit Writing

Exploit writing tutorials

whats-new-in-windows-8 ??

When Will Windows 8 be Released?

Create your own virus

A computer virus is a computer program that can copy itself and infect a computer. The term "virus" is also commonly but erroneously used to refer to other types of malware including but not limited to adware and spyware programs that do not have the reproductive ability. A true virus can spread from one computer to another (in some form of executable code) when its host is taken to the target computer; for instance because a user sent it over a network or the Internet, or carried it on a removable medium such as a floppy disk,CD,DVD, or USB drive

Man in the browser attack

The Man-in-the-Browser attack is the same approach as Man-in-the-middle attack, but in this case a Trojan Horse is used to intercept and manipulate calls between the main application’s executable (ex: the browser) and its security mechanisms or libraries on-the-fly.

Md5 Encryption

I have seen lots of people who are new to this information security field dnt know how to encrypt the text in md5 , here in my post i will tell you how to encrypt your desired text into md5

Google Two Way Verification

Google had previously announced the new 2-step verification for Google apps users. The same is now being rolled out to all the Google account users

Showing posts with label News. Show all posts
Showing posts with label News. Show all posts

Thursday, November 24, 2011

Google Now Censors the priated sites like priatebay and many more

10:03 AM Anonymous No comments

According to torrentfreak site  , Google has been filtering “piracy-related” terms from its ‘Autocomplete‘ and ‘Instant‘ services.
Google users searching for terms like “torrent”, “BitTorrent” and “RapidShare” will notice that no suggestions and search results appear before they type the full word. As a consequence, there’s sharp decrease in Google searches for these terms.

Searches referring to torrent sites such as “thepiratebay,” “the pirate bay,” “isohunt,” “torrentreactor,” “btjunkie,” “kickasstorrents,” “sumotorrent,” “btmon,” “extratorrent” and many others are now excluded from ‘Autocomplete‘ and ‘Instant‘. Interestingly, the full url “thepiratebay.org” is still offered as a suggestion. 

The new list further includes several cyberlocker websites that were previously left unfiltered, such as “4shared,” “filesonic” and “fileserve.” Although Google doesn’t censor the content of the websites in question, the Google searches for the affected terms drop significantly .

Despite of the criticisms from various groups and peoples , Google said it will continue to filter the sites and they will expand the censor list in coming years !!

 
Read more »

Posted in:

How does facebook Self XSS works ??

6:54 AM Anonymous No comments



If you are a facebook user , you may have definitely came across video posts on your wall that have a  title and an innocent thumbnail but upon clicking, the link redirects  you to a scam website. 

How does those links came on your wall ??? , Does that particluar person's account is hacked ?? or does he his PC contains virus which is posting those malicious links on his friends wall ??? 


Matt Jones, who works with the Data & Security team at Facebook, walks us through the various type of scams that happen on Facebook.com and why do they happen?? . Most scams require Facebook users to copy-paste some JavaScript code into the browser's address bar and as soon as they do that, the rogue post is automatically published to the walls of all their Facebook friends.

Facebook Self XSS 


According to Matt, Google Chrome and Safari are the only browsers that are susceptible to this kind of cross-site scripting (XSS) vulnerability while IE and Firefox are relatively safe. And since the malicious JavaScript code is often hidden inside Flash videos, Facebook isn’t able to detect it. 

Read more »

Posted in:

Wednesday, November 23, 2011

Facebook Messenger for your windows 7 desktop

6:49 AM Anonymous No comments

 Facebook has released a desktop messenger client for Windows 7 that brings you access to the site's chat, ticker feed and notifications without everyone in the office spotting the blue-bar-of-lost-productivity across the top of your browser.


Read more »

Posted in:

Friday, November 18, 2011

Social Engineering Toolkit 2.4.1

8:40 PM Anonymous No comments



The Social Engineering Toolkit (SET) is set of python programs which focuses on attacking the human element of penetration testing. It's main purpose is to perform social-engineering attacks and allow the tester to effectively test how a targeted attack may succeed.
Release change log :- 

  • Fixed a timing delay bug in port scanner for slow connections, would timeout and not recognize port
  • Fixed a parsing error in portscanner when using single ip addresses
  • Added optimization around mssql-bruter in Fast-Track
  • Added new windows shell option on compromised systems as an alterantive option to debug/powershell attack
  • Tuned mssql bruter to work better with SQL Server 2007
  • Added automatic enable of xp_cmdshell through show advanced options in the windows shell
  • Added better error handling through mssql bruter forcer
  • Added error handling around xp_cmdhshell enablement
  • Fixed a bug that would cause mssql bruter to not stop after it successfully brute forced an account
  • Added better stability all around to the fast-track mssql bruter
Read more »

Posted in:

Thursday, November 17, 2011

Google Music Store is Now Open

8:37 AM Anonymous No comments




Last May Google launched Music Beta  which helps people to access their music collections easily from any device. Music Beta enabled you to upload your personal music collection (up to 20,000 songs) for free to the cloud so you could stream it anywhere, any time. Today, the beta service evolves into aplatform: Google 
 Music.Google Music helps you spend more time on listening to your favorites  and less time managing them.


Music  artists can also share there  collections or albums through Google Music Artisthub ,and use the artist hub interface to build an artist page, upload original tracks, set prices and sell content directly to fans .

As of now Google music store is only open in  USA and in next few days it will be available for the Android devices . Google Music Apps also be released very soon!!


Read more »

Posted in:

Wednesday, November 16, 2011

Google Strange Links

10:36 PM Anonymous No comments

Though Google is a search engine , it has its own index elements  and i am listing some of the links which i got it from the other forums .


1.Following shows some of the misspellings detected by our spelling correction system for the query [ britney spears 
http://www.google.com/jobs/britney.html
2. These two links are to fun Google games
http://www.google.com/Easter/feature_easter.html
3. Quench your thirst for knowledge with Google Gulp
www.google.com/googlegulp
4. Check out Google’s latest ideas
http://www.google.com/experimental
5. If you are fond of puzzles
http://www.google.com/puzzles
6. Tribute to Moms
http://www.google.com/moms01
9. Are you scary smart?
http://www.google.com/scarysmart
10. Google press center
http://www.google.com/press
12. Mind-racing problems
http://www.google.com/indiacodejam
16. Urchin Software from Google
http://www.google.com/urchin
18. Inside google
http://www.google.com/plex
22. Google’s next Coding Competition site
http://www.google.com/codejam
28.Microsoft on google
http://www.google.com/microsoft
36. Google 3d warehouse
http://www.google.com/sketchup/3dwh
37. Google & Dilbert Doodle
http://www.google.com/dilbert.html
38. Google in Kannada
www.google.com/intl/kn
40.Win Registry files in google
http://www.google.com/google_rsearch.reg
Read more »

Posted in:

Google Programming Language GO is expected to Launch By early 2012

3:56 PM Anonymous No comments

Next year, a new language will get the official  from Google. Google has first introduced Go in 2009. With its new language, Mountain View set out to create a programming environment that's easier and faster to use, without sacrificing efficiency. Programmers may need to wait until early 2012 for Go to launch out of experimental status.

Read more »

Posted in:

Uniscan 5.2 is released !!!

3:47 PM Anonymous No comments

The Uniscan vulnerability scanner is aimed at information security, which aims at finding vulnerabilities in Web systems. The Uniscan was developed using the Perl programming language to be easier to work with text, has an easy to use regular expressions and is also multi-threaded.
It is dedicated for web application security find vulnerabilities before other do. Can easliy find known vulnerabilities gets regularly updated and bugs and news features are added on regular intervals.

You Can download it from here  
Read more »

Posted in:

Sunday, November 13, 2011

BRAINWAVE - Headache Relief app for Iphone

10:18 PM Anonymous No comments


Are you suffering from severe headache then your Iphone has a remedy for your headache and it is BrainWave Application , Which is a third party application that will omit audible tones that supposedly synchronize your brainwaves to deeply relaxing low-frequency waves.  

Is it really possible ??? 

Yes it is possible ,Studies have shown that various states of mind can be associated with certain types of low frequency sounds. If you want to try it out for yourself, the best specimen for this type of software is Banzai Labs‘ BrainWave Headache Relief.

It is a freeware  app and loaded with many interesting features  , you can choose multiple background sounds which includes ocean ,rain etc and interesting part is that it also has a timer so you can fall asleep while using this app.

Though users have given different comments on this app , but majority of the people have given positive comments and several users found that it worked much better with over-the-ear headphones.
Read more »

Posted in: ,

DUQU ( MALWARE DETECTION TOOL)

5:59 AM Anonymous No comments



A Free Malware Detector Toolkit comes from the CrySyS Lab at the Budapest University of Technology and Economics , which was the group to discover Dugu, as well as to discover a dropper file (installer) for Duqu that offered additional clues into how the malware would infect computers and spread its. Notably, the installer recovered by CrySyS was a malicious Word document (.doc) file, although security researchers said the malware may have been spread through other means as well.

This tool includes four command-line-executable components, which are easy to use , simple programs  . To check that there is no backdoor or malicious code inside. That way, potential users can easily validate the source code before using it in highly specialized environments.
 Zero day vulnerability detectors are also included in  Duqu source code, which involves a font parsing flaw in the TrueType engine in 32-bit versions of Windows. That vulnerability would have helped the malware to spread and infect its target without being detected. But Microsoft has yet to issue a patch that fixes the flaw exploited by Duqu.

You can download it from here
Read more »

Posted in:

Saturday, November 12, 2011

Google Earth Natural Clock in your browser

9:05 PM Anonymous No comments

The Google earth clock  is a live clock that displays the current local time in your browser using satellite imagery from Google earth and Google Maps .

It picks the aerial view of buildings around the world that look like numerical digits and uses them to represent the hours and minutes of this automated clock .  You can drag and zoom in or zoom out like
regular Google earth software . 


So try this and have fun !! :D 
Read more »

Posted in:

Firefox 9 beta available !!!

9:25 AM Anonymous No comments

After Tuesday's Firefox 8.0 launch, Mozilla has rolled out the beta of Firefox 9.0. This update brings a significant boost to JavaScript performance, UI improvements for the OS X Lion version, and Do Not Track opt-out detection for developers. 9.0 beta also "supports chunking for XHR requests so websites can receive data that’s part of a large XHR download in progress. This helps developers make websites and Web apps faster, especially those that download large sets of data or via AJAX.

 You can download the Firefox beta from here 
Read more »

Posted in:

Friday, November 11, 2011

Computer Memory bytes (mega byte , giga byte , terra byte , peta byte , exa byte , zetta byte ,yotta byte , bronto byte , geop byte)

9:34 PM Anonymous 2 comments

Computer memory bytes conversions are very important for every technical guy  , so i am listing the memory conversions below
 

 
1 Bit = Binary Digit
8 Bits = 1 Byte
1024 Bytes = 1 KB (Kilo Byte)
1024 KB = 1 MB (Mega Byte)
1024 MB = 1 GB(Giga Byte)
1024 GB = 1 TB(Terra Byte)
1024 TB = 1 PB(Peta Byte)
1024 PB = 1 EB(Exa Byte)
1024 EB = 1 ZB(Zetta Byte)
1024 ZB = 1 YB (Yotta Byte)
1024 YB = 1 (Bronto Byte)
1024 Brontobyte = 1 (Geop Byte)
Read more »

Posted in:

w3af v.1.1 ( Web Application Attack and Audit Framework Released)

7:04 PM Anonymous No comments


w3af is a Web Application Attack and Audit Framework. This project  is to create a framework to find and exploit web application vulnerabilities that is easy to use . w3af frame work is much more than a software . For more details please visit w3af sitehttp://w3af.sourceforge.net/

         You can download this tool from here
Read more »

Posted in:

Hotspot Shield VPN for your Iphone

6:42 AM Anonymous No comments

Hotspot Shield VPN which offers services to Windows and Mac users alike, but the company has entered more secure mobile space with the release of their eponymous iOS app.

Working of this app is much similar to our windows and mac Hotspot Shield VPN .Once you launched the app on your iphone , app itself creates a secured connection and  encrypts all the data moving between your iDevice of choice and the internet, including data coming from apps running in the background , this will persists until you turnoff the app by yourslef .

This new app works on any iPhone, iPod Touch, or iPad that runs iOS 4.0 or later. The app itself is free, but the service will cost users $.99/month or $9.99/year for those who like thinking long term usage.


Read more »

Posted in: ,

Thursday, November 10, 2011

AddressSanitizer : Fastest memory error detector

7:26 PM Anonymous No comments

While developing exploits, it is highly mandatory  to monitor the memory address space for memory conditions such as buffer/heap overflow/underflow, etc. Through which we can generate exploits for buffer overflows, you can even at which location can you execute your arbitrary code, etc. AddressSanitizer will help you find memory irregularities very easily.

AddressSanitizer (ASan) the memory error detector for C/C++ consists of two parts:

  • A compiler which performs instrumentation - currently a modified LLV</Clang
  • A run-time library that replaces malloc(), free()and friends. 
You can download it from here.

You can get more information ASan here
Read more »

Posted in:

Wednesday, November 9, 2011

Firefox 8 is available for public and it includes built in twitter search

11:51 AM Anonymous No comments


The new version of the Firefox Web browser, Firefox 8 for Windows, Mac and Linux is available for public officially . The update, which actually became available a couple of days ago via Mozilla’s FTP servers, introduces several new features, including a built-in Twitter search option, better management of add-ons and tabs, plus the usual performance and stability fixes.
Mozilla has also updated Firefox for Android, which offers password management and support for saving bookmarks to the device’s homescreen.
The newly added Twitter search functionality is probably the most immediately useful feature of the updated browser, as it lets you search for topics, @usernames and #hashtags directly from Firefox’s combined search/address bar. At launch, Twitter search is available in the English, Portuguese, Slovenian and Japanese versions of Firefox.
Read more »

Posted in:

Tuesday, November 8, 2011

Google + has launched pages for business and brands

9:45 AM Anonymous No comments

Though it took really long for google + to launch pages for business like other social networking sites , it came up with really interesting features like , you will be able to add Pages to any of your regular Circles, and Page owners are able to post as usual and take part in Hangouts. Pages also naturally turn up in Google search results, and the company's introduced a new Direct Connect as well that lets you search specifically for Google+ Pages -- just type "+Google" or "+Vamshikrishnamrajublogspotcom" in a Google search box and you'll be taken directly to the respective page.


Read more »

Posted in:

New IOS vulnerability allows intruders to capture the user credentials

9:23 AM Anonymous No comments

Security expert Charlie Miller has found a flaw in code signing on iOS devices that allows developers to inject malware apps into the apple app store without being detected by Apple . If any IOS user downloads that app and installs that app in there IOS device then intruders can read user’s contacts, make the phone to vibrate , they can change your phone ringtone, steal user’s photos whenever they needed .

Hope Apple introduces more security in there App Store , as of now we suggest you to stay away from unknown apps .


Read more »

Posted in: ,

Monday, November 7, 2011

SQL ninja 0.2.6 released

7:59 PM Anonymous No comments

Sqlninja is a tool which is used to exploit SQL Injection vulnerabilities on a web application that users Microsoft SQL Server as its back-end. It's main goal is to provide a remote access  on the vulnerable DB server, even in a very hostile environment. It will  be used by penetration testers to  automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered.


Additional feautures in the latest version :-



  • ICMP-based shell.
  • CVE-2010-0232 support to escalate the sqlservr.exe process to SYSTEM.
  • Header-based injection support. 


    • You can download SQLNinja from here .
    Read more »

    Posted in:
    Twitter Delicious Facebook Digg Stumbleupon Favorites More

     
    Design by Vamshi krishnam raju | Bloggerized by Vamshi krishnam raju - Vamshi krishnam raju | Vamshi krishnam raju