MySqloit is a SQL Injection takeover tool focused on LAMP (Linux, Apache,MySql,PHP) and WAMP (Linux, Apache,MySql,PHP) platforms. It has the ability to upload and execute metasploit shellcodes through the MySql SQL Injection vulnerabilities
This tool is written to demostrate how remote code execution can be performed on a database connector that do not support stack queries.
Features:
SQL [...]
Trafscrambler is an anti-sniffer/IDS LKM(Network Kernel Extension) for OSX, licensed under BSD.
Version 0.2 implements following:
-all from version 0.1
-injection of packets with bogus data and with randomly selected bad TCP cksum or bad TCP sequences
-userland binary(tsctrl) for controlling trafscrambler NKE
Version 0.1 implements following:
• SYN decoy – sends out number of SYN pkts before the original SYN [...]
Wordpress is back in news again. It’s suspected some of the recent high profile breaches have come from Wordpress exploits. Which is in fact very simple but effective flaw.
An attacker could exploit this vulnerability to compromise the admin account of any wordpress/wordpress-mu <= 2.8.3
From what I can tell the vulnerability allows an attacker to reset [...]
Continue reading about Wordpress 2.8.3 Admin Password Reset Exploit
The Conficker worm has been stepping up its activities with reports made of distributed denial of service (DDoS) attacks on a number of Russian websites.
David Harley, director of malware research at ESET, working with researchers from Arbor Networks, claimed that a Russian newspaper is stating that attacks on tonks.ru, roem.ru and others are evidence of [...]
Continue reading about Russian website claims that Conficker is launching DDoS attacks
There are no ethics in business anymore! Those who thought that MNCs in India would be more ethical are smoking pot! Here is an interesting and a distasteful hijacking of the domain by Vodafone of Airtel’s domain name. Type Airtel.com and you will be directed to www.vodafone.es ! Domain Squatting in not uncommon but this [...]
Continue reading about Vodafone Hijacks Airtel's Domain Name
Online brokerage TD Ameritrade Holding Corp. announced today that a hacker broke into one of its databases and stole personally identifying information for some of its 6.3 million customers. An online advisory and letters to account holders disclosed that names, e-mail addresses, phone numbers and home addresses were taken in the data breach. Client [...]
Continue reading about Hacker Gained Access To Data On Millions Of TD Ameritrade Customers