29.10.2009 von matti.

http://www.us-cert.gov/current/index.html#blackberry_phonesnoop_application_used_to

here in full:

BlackBerry PhoneSnoop Application Used to Spy on Users
added October 27, 2009 at 11:59 am

US-CERT is aware of public reports of a new software application called PhoneSnoop. This software allows an attacker to call a user’s BlackBerry and listen to personal conversations. In order to install and setup the PhoneSnoop application, attackers must have physical access to the user’s device or convince a user to install PhoneSnoop.

US-CERT encourages users to only download BlackBerry applications from trusted sources and to password protect and lock BlackBerry devices.

Geschrieben in link, general | Drucken | Keine Kommentare »

24.10.2009 von matti.

http://i8jesus.com/?p=10

and for some help on the exploiting side of things:

 http://www.businessinfo.co.uk/labs/hackvertor/hackvertor.php

Geschrieben in general | Drucken | Keine Kommentare »

21.10.2009 von matti.

http://www.metasploit.com/home/faq

Geschrieben in general | Drucken | Keine Kommentare »

15.10.2009 von matti.

http://googleonlinesecurity.blogspot.com/2009/10/show-me-malware.html

Geschrieben in general | Drucken | Keine Kommentare »

12.10.2009 von matti.

Geschrieben in humour, opinion, general | Drucken | Keine Kommentare »

12.10.2009 von matti.

http://www.librarything.com/tag/geek,+--nerds

http://www.librarything.com/tag/nerds,+--geek

Look at the related tags on the right

And then have fun comparing…But wait:

Ok now that I think about it this is actually not a bad thing.

I just remember http://www.infosecwriters.com/hhworld/hh10/dns.htm especially dnspredict.pl for finding new DNS entries. I used it also to make educated guesses for password attacks. So here is the new idea for educated password guesses. Profile your target and enter it into a search engine that comes up with related tags. Then of course the usual stuff with appending 2 numbers and so on…

Geschrieben in humour, link, hacking, general | Drucken | Keine Kommentare »

11.10.2009 von matti.

I know I am a bit late with this… but still worth a look

http://www.slideshare.net/jeremiahgrossman/top-ten-web-hacking-techniques-2008

Geschrieben in general | Drucken | Keine Kommentare »

11.10.2009 von matti.

Little reminder:

http://iase.disa.mil/stigs/SRR/index.html

http://www.cisecurity.org/

Geschrieben in link, general | Drucken | Keine Kommentare »

10.10.2009 von matti.

Looking on a system for some credit cards?
Maybe some grep action can help with this…

Visa: ^4[0-9]{12}(?:[0-9]{3})?$
Starting with 4 and either 13 digits (old cards) or 16 (new ones)

MasterCard: ^5[1-5][0-9]{14}$
Starting with 51, 52, .. 55. 16 digits.

American Express: ^3[47][0-9]{13}$
Starting with 34 or 37 15 digits.

Geschrieben in general | Drucken | Keine Kommentare »

9.10.2009 von matti.

 Can in such a simple picture about a complicated subject be any truth?

See for yourself…

Geschrieben in humour, general | Drucken | Keine Kommentare »