Very usefull resource for Z-days.

Thanks and Credits to http://80vul.com/#

What Vulnerabilities Do You Need? Welcome to the 80vul team homepage. If you are looking for a Team Member or Knowledge Base, check out the links to the right. Knowledge Base 2011-01-16 Hacking with mhtml protocol handler 2011-01-16 走向本地的邪恶之路 2010-12-05 WEB2.0下的渗透测试 2010-10-14 Gmail JSON Hijacking Attack Technique 2010-10-14 IE8 Css Cross-Domain Information Disclosure Vulnerability 2010-07-10 Zend studio location Cross-Domain Scripting Vulnerability 2010-05-11 [SOBB]Some Of Baidu Bugs 2010-02-28 [pasc2at]高级PHP应用程序漏洞审核技术 2010-02-24 Sablog-X 2.X 后台管理权限欺骗漏洞 2010-02-18 Sablog-X v2.x 任意变量覆盖漏洞 2010-01-10 MyBB 1.4 admin remote code execution vulnerability 2010-01-10 phpwind 7.5 Multiple Include Vulnerabilities 2009-06-22 Multiple Exploiting IE8/IE7 XSS Vulnerability 2009-06-18 QQmail Multiple Xss Vulnerabilities 2009-04-29 [PCH]Php Codz Hacking 2009-01-07 Flash getURL XSS attacks--Bypass Access in IE 2008-12-18 Wordpress 2.7.0 admin remote code execution exploit 2008-12-12 [WGXE]Word Gmail Xss Exp [fixed] 2008-10-28 [SODB]Some Of Discuz! Bugs Web application source code audits services. Mail:5up3rh3i@gmail.com

Using tor in backtrack 4 R2

Step 1 :

Make sure tor and privoxy are installed.

apt-get install tor privoxy

Step 2 :

nano /etc/privoxy/config

Append the following line to the file.

forward-socks4a / localhost:9050 .

Step 3 :

/etc/init.d/privoxy start
/etc/init.d/tor start

Step 4 :

Install tor button on firefox

https://addons.mozilla.org/zh-TW/firefox/addon/torbutton/

Go to Tor Button perference and set as the following.

Select "Use custom proxy settings"

HTTP Proxy : 127.0.0.1 Port : 8118
SSL Proxy : 127.0.0.1 Port : 8118
SOCKS host : 127.0.0.1 Port : 9050

Step 5 :

Click on the "Tor enable" at the right bottom of the Firefox to enable the Tor Button.

Hints : You should repeat the Step 3 and Step 5 when you are using Tor to surf the internet next time.

Bugtraq: Vulnerabilities in some SCADA server softwares

Bugtraq: Vulnerabilities in some SCADA server softwares

Cyber attacks on US federal networks on the rise

The number of cyber attacks against federal government systems and networks has increased nearly 40 percent, says in the annual report on federal cybersecurity efforts compiled by the Office of Management Budget.

The concrete number of attacks suffered in 2010 is 41,776, which is a marked increase from the 30,000 attacks executed in 2009. The statistic has been provided by the US-CERT, and a breakdown of the number according to type of attack goes like this:

• Malicious code - 12,864 (31%)
• Under investigation or labeled as "other - 11,336 (27%)
• Denial of service, unauthorized and/or attempted access, improper usage and scans probes, etc. - 17,576 (42%).

"DHS anticipates that malicious cyber activity will continue to become more common, more sophisticated and more targeted — and range from unsophisticated hackers to very technically competent intruders using state-of-the-art techniques," said DHS spokesman Chris Ortman.

According to the Federal Times, US-CERT has pointed out that the attackers often try to leverage zero-day vulnerabilities in various apps and products to gain access to federal networks.

Most government agencies could and should do a better job when it comes to protecting their networks. Shockingly, 8 percent of the agencies still doesn't have an around-the-clock program for monitoring intrusions. And among those that do, the continuity of monitoring leaves much to be desired.

OWASP Top 10 Tools and Tactics | InfoSec Resources

OWASP Top 10 Tools and Tactics | InfoSec Resources

URGENT!!!

THIS IS AN ANNOUNCEMENT TO ALL OF MY NON-ISRAELI FRIENDS: in the last 72 hours, more than 70 rockets where shot by Hamas organization into Israel, probably Israel will have to react soon- probably it's gonna get ugly- PROBABLY you'll hear about it for the first time few days later when the biased media in your country will present Israel again as a cruel aggressive country.

SMB Relay and Network Scanner Attacks

SMB Relay and Network Scanner Attacks