Sunday, December 19, 2010

[08/10] Linux Security Summit 2010 slides published

I've updated the papers section of the site to include my slides from the Linux Security Summit 2010. The title of the presentation was "Linux Security in 10 Years". In the presentation, I demonstrated the threat of kernel exploitation, how kernel exploitation subverts access control/container-based security, the need to have a broader view of system protection, in particular the need for kernel self-protection. # grsecur...

Thursday, December 9, 2010

Havij v1.13 Advanced SQL Injection

Description:Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page.It can take advantage of a vulnerable web application. By using this software user can perform back-end database fingerprint, retrieve DBMS users and password hashes, dump tables and columns, fetching data from the database, running SQL statements and even accessing the underlying file system and executing commands on the operating system. The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injectiong vulnerable targets using Havij.The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur...

Vigilantes Take Offensive in WikiLeaks Censorship Battle

Internet vigilantes stepped up attacks in support of WikiLeaks on Wednesday, downing Visa’s web site in a widening protest against a handful of companies that banned the secret-spilling site after it began publishing hundreds of secret U.S. diplomatic cables. The outages, organized by the group Anonymous under the banner “Operation Payback,” have taken the battle between WikiLeaks supporters and opponents over web censorship to the streets, so to speak, sparking a series of tit-for-tat retaliations that appeared to be growing at the time this article was posted. At stake is not just the future of WikiLeaks, the protesters seem to believe, but freedom on the net in general — a principle worth defending by any means possible, however dubious. “There are people that want to send a message that...

Maria Ozawa getting married?

...

GnackTrack RC2 Has Just Been Released

After a mad rush over the last few days we have managed to get GnackTrackR2 ready as a direct replacement for GnackTrackFinal. We have updated many of the tools within the feed and have also installed the 2.6.35 kernel with patched wireless drivers.This version, and version here after, will unfortunately not include Nessus but you can still download your copy from the NessusTenable website. Lets hope in the future Tenable will give us permission to re-integrate it.Click here to download the live CD GnackTrackR2.isoe3d144f39b3f912a508c6654656d8b88 GnackTrackR2.isoOr here to download the VMWare image GnackTrackR2.7z93566c5bcd8260f7dc8c2cc1e4bee6b6 GnackTrackR2...

PayPal banned WikiLeaks after US gov intervention

A PayPal executive said his company's decision to suspend payments to Wikileaks came after the US State Department said the whistle-blower site was engaged in illegal activity. The comment came shortly before PayPal agreed to release the remaining funds in the WikiLeaks fund-raising account.Press accounts from The Guardian and TechCrunch differ, but both claim that PayPal's move was influenced by statements from the State Department.“State Dept told us these were illegal activities,” PayPal VP of platform Osama Bedier told the LeWeb conference in Paris, according to this report from The Guardian. “It was straightforward. We ... comply with regulations around the world, making sure that we protect our brand.”TechCrunch reported much the same thing but later updated its post to say: “After talking...

Art is Not a Crime

Made by mattdbk#indonesiancoder....

Troubled Wikileaks Moves To Pirate Party Domain

After being cut off by its nameserver provider EveryDNS, Wikileaks has moved to a domain registered by Pirate Party Switzerland. EveryDNS was forced to stop its services to Wikileaks after continued DDoS attacks, creating yet another setback for the whistleblower site that has dominated the news this week.The release of thousands of US embassy cables and the many more that are expected to come has propelled the whistleblower site Wikileaks to the front page of every respectable news outlet this week. But for the site itself it hasn’t been a smooth ride thus far.After it suffered a continued DDoS attack on its servers earlier this week the site relocated to Amazon’s cloud hosting service, but just a day or two later it was pulled following complaints...

WikiLeaks fights to stay online after US company withdraws domain name

Everydns.net says attack against leaks site endangered other customers' service – effectively pushing site off the webWikiLeaks was removed from its wikileaks.org address. Photograph: Joe Raedle/Getty ImagesThe US was today accused of opening up a dramatic new front against WikiLeaks, effectively "killing" its web address just days after Amazon pulled the site from its servers following political pressure.The whistleblowers' website went offline for the third time in a week this morning, in the biggest threat to its online presence yet.Joe Lieberman, chairman of the Senate's committee on homeland security, earlier this week called for any organisation helping sustain WikiLeaks to "immediately terminate" its relationship with them.On Friday...

WikiLeaks cables: Live Q&A with Julian Assange

The founder of WikiLeaks, Julian Assange, will be live online from 1pm today to answer readers' questions about the release of more than 250,000 US diplomatic cablesRead Julian Assange's answers to your questionsJulian Assange, wikileaks founder. Photograph: GuardianUpdate: Thank you for all your questions. We have now closed comments on this article. Read Julian Assange's answers here.WikiLeaks founder Julian Assange is at the centre of intense media speculation and a hate campaign against him in America, following the leak of 250,000 US diplomatic cables.He will be live online to answer Guardian readers' questions at 1pm today, subject to his access to an internet connection - which is very much a live issue. His online interview comes at...

Pages 3123 »
Twitter Delicious Facebook Digg Stumbleupon Favorites More

 
Design by Free WordPress Themes | Bloggerized by Lasantha - Premium Blogger Themes | Sweet Tomatoes Printable Coupons