Recent Post

Showing posts with label Security News. Show all posts
Showing posts with label Security News. Show all posts

Wednesday, October 5, 2011

OMG ! Bing stealing search results from Google !


There has been a rumor running around that Microsoft is using Google to improve Bing’s search results. The guys from Bing obviously denied everything and now, Google released their proof.
Google had created fake search results for some jibrish – never searched – queries and waited for Bing to eat the bait. And they did.
Here is one example where for the query “delhipublicschool40 chdjob” Google inserted a search result for a credit union:

A few days past and the same credit union showed up on Bing for that query:

Tuesday, October 4, 2011

Vulnerablity in wordpress : Giving Malware


Google up inurl:wp-content/1/ [Warning: just google it up, don't visit any of the site in the search results. They are full of activeX viruses!]. This is what I see now:
What you see is a list of sites that were hacked through the latest WordPress Vulnerabilitythat allows hackers to insert spam into your blog.
This is just great. WordPress is the most common blog software out there, and at this minute there are over 90,000 website that were spammed (still counting…) I’m sure that most of these sites owners never heard of this exploit and some of them will probably never will. The damage is enormous. This exploit made them look like spammers in Google eyes, and Google like Google – She never forgets anything. If you are a spammer, you are out of the index in one second.
In my opinion, the best way to deal with these hacks is Active Network Scanning. This kind of services are usually provided by an external company that scans your site for vulnerabilities on a daily basis (like Hacker Safe, but better). Once a new vulnerability is discovered to the world, it is automatically added to their scanning system and is tested on your site. This can definately help you sleep better.
Life shows that there is no way your web site can be safe. It is just the nature of software that it is full of holes. If only you scan your website for vulnerabilities, at least you know about it on time and hope there is something you can do about it…
Important comment: if you are not in this list, it does not mean that you are safe. There are lots of other URLS that were used for this attack… This IS fun!
update: (April 12 2008): Checked again the list, and it seems like most of the hacked pages were removed from Google’s index. It DOES NOT mean that the vulnerability is fixed, it just means that Google had identified that these pages as pages that should be ignored and removed from the index. This is semi good news for those that were hacked and afraid their ranking will go kaput. Just semi because they are still vulnerable and will surly be attacked again in the next wave…
It seems like the number of WordPress vulnerabilities is growing constantly. The most popular blogging software that exists is becoming a huge security hole. In fact, this post is written with WordPress and it feels less secure than ever. This makes me think about moving my blog to blogger or wordpress hosting site, instead of fighting the patches on my own server.

Saturday, October 1, 2011

OS X Lion bugs : change local user passwords



The latest version of OS X Lion allows any user to easily change the password of any local account, due to permissions oversights on Apple's part. The news comes less than a month after another Lion vulnerability that let users bypass LDAP without a password gained notoriety.

Originally reported by Defence in Depth blogger Patrick Dunstan, the root of the newly discovered problem in Mac OS X 10.7 is tied to the user-specific shadow files used in modern OS X platforms. These files are essentially hash databases and contain, among other things, the user's encrypted passwords. Ideally, they should be accessible only via high-privilege accounts.

According to Dunstan, Apple dropped the ball in terms of how Lion handles privilege. "Whilst non-root users are unable to access the shadow files directly, Lion actually provides non-root users the ability to still view password hash data," Dunstan wrote. "This is accomplished by extracting the data straight from Directory Services."

Any user can accomplish this trick by simply invoking the directory services listing using the /Search/ path -- for example, $ dscl localhost -read /Search/Users/bob (where "bob" is the username). This causes Lion OS X to spew out the contents of Bob's shadow hash file, including data that can be used to crack Bob's password with a simple script, such as a Python script written by Dunstan.

Making matters worse, running such a script wouldn't necessarily be required to gain access to Bob's account. Using Directory Services, a user could change a logged-in user's password -- without requiring authentication -- using this command: $ dscl localhost -passwd /Search/Users/bob

Notably, the targeted user's account could just as easily include admin privileges.

In order to pull off this hack, the perpetrator would require local access, though an outsider using social engineering could dupe a user to surrender the information. Additionally, a malicious insider could use his or existing information and wreak havoc if an admin left a machine without first logging out. Further, the user would need to access Lion's Directory Services -- another feat that would not be overly difficult in an environment with relatively lackluster security.

MacFixIt blogger Topher Kessler offered advice on how organizations can avoid being subject to these vulnerabilities. They include disabling automatic log-ins in Mac OS X; enabling sleep and screensaver passwords; disabling guest accounts (as well as accounts not in use); and better managing user privileges, such as allowing no greater permissions than necessary.

Hackers Says : Facebook tracking your cookies even after logout



According to Australian technologist Nik Cubrilovic: 'Logging out of Facebook is not enough.' He added, Even after you are logged out, Facebook is able to track your browser's page every time you visit a website. He wrote in his blog 'With my browser logged out of Facebook, whenever I visit any page with a Facebook like button, or share button, or any other widget, the information, including my account ID, is still being sent to Facebook.'

After explaining the cookies behavior he also suggested a way to fix the tracking problem: 'The only solution to Facebook not knowing who you are is to delete all Facebook cookies.'
Give firefox addon for auto delete FB cookies after logging out.

Wednesday, September 7, 2011

UGC.AC.LK - University Grants Commission of Sri Lanka - DNSi Force AXFR Leaked



#Anonymous SriLanka AnonymousLK

The University Grants Commission (UGC) is the apex body of the University System in Sri Lanka
which was established on 22nd December 1978 under the Universities Act No. 16 of 1978.
The functions of the UGC are; planning and coordination of university education, allocation
of funds to Higher Educational Institutions (HEIs), maintenance of academic standards,
regulation of the administration of HEIs and regulation of admission of students to HEIs.

EXCLUSIVE FROM - Anonymous Sri Lanka

WWW.UGC.AC.LK -----> DNS Fuck3D and Bust3D

Primary DNS Server Hacked with DNS Force AXFR
with Force Transferring (Data Leak)....!!

Hail to Anonymous, Lulzsec and Operation Anti-Sec...

THIS ATTACK AGAINST UGC(s),

Bullshit Z-Score Selection Method...

Stupid Lecturer Selection Electives...

Stupid Student University Entrance Method...

Still you have 1978 University Act - How stupid you and you fucked the entire higher
education in Sri Lanka. WTF??? Add the latest state-of-the art stuffs in to our
University system, Let our student to learn worlds latest things, Amend all latest
educational things in the stupid OLD act. Through it away. Go and wipe the minister's
ass and grab the latest amendment of the act from cock-head parliament. Is that so
difficult....??? You give them some bribe then they will do it for you easily...
or give them your asses to them or lick their asses as you doing always...

Because of these stupid assholes our entire university network is failed...

Our poor students always suffering to have their own freedom...

Poor students are always having low resources in the universities and tons of
pressure on them....

Stupid cock-head authorities are sleeping and taking chances from most polluted
politicians.

Lecturers are suffering for their salary increments...

Always poor students having strikes to win their rights...

Famous Universities Ex. Colombo, Moratuwa, Jayawardenapura etc.. are fully geared
with skilled lecturers and they have given everything. And these universities does
not have much problems. But our poor universities at rural areas having tons of
problems and assholes, you never even look at them. Open your fucking eyes and see..
how our poor students and lecturers are suffering....

And none of the university grant commission asses are involving these problems...

So fuckheads eat this... There will be more complex attack against you....
If you not consider about these factors and rights of poor students and
lecturers....

Keep Warning....

http://www.ugc.ac.lk
http://en.wikipedia.org/wiki/University_Grants_Commission_(Sri_Lanka)

ugc.ac.lk

Trying AXFR...

Reverse DNS Used 4.2.2.3
Parallel DNS Query Enabled

RDNS Query Started

192.248.1.161 cache.ugc.ac.lk
192.248.84.1 ugcweb.ugc.ac.lk
192.248.84.4 mail.ugc.ac.lk <----- This is gonna be an easy target for us....!!
192.248.1.161 www.ugc.ac.lk

Shit they have only 4 Damn Domains....!!!



Thursday, August 25, 2011

DDOS tool of Anon #RefRef Source Code is Now Available #REFREF


A few months ago i had posted a post   Time to Replace LOIC  Anonymous is Developing a New DDoS Tool . LOIC will be replaced to #REFREF  DDOS tool of Anon Source Code is now available the tool had been programed in Perl, Python & Javascript. First it was tested on pastebin the pastebin twitter account tweeted about this



For More Information vist refref.org

Saturday, August 20, 2011

Zcompany Hacking Crew Support's Anna Hazare

http://profile.ak.fbcdn.net/hprofile-ak-snc4/276842_150821164995317_2991448_n.jpg
Pakistani Hacking Group Zcompany Hacking Crew Support the Anna Hazare . The ZHC tweeted that they support Anna Hazare .

A Message From ZHC



78000+ Indian blog websites hacked By ZHC to Support Kashmir Freedom Struggle and ANNA HAZARE End corruption Campaign...



All blogs were defaced but couldn't mirror all... some mirrors can be seen on mirror.sec-t.net website ..



i.e : http://mirror.sec-t.net/defacements/?id=64695



The list of all the websites that were hacked: http://www.2shared.com/document/pneC3OHn/blogcoin.html





Each and every blog of .co.in (All indian blogs) around 78000+ hacked by ZCOMPANY HACKING CREW to raise the awareness about Kashmir freedom struggle .. ANNA HAZARE End corruption Campaign... this is indeed the biggest ever hactivism ever done for such cause ...



Our message: "If you want to tell the untold stories, if you want to give voice to the voiceless, you've got to find a language and this is our language, this is how we speak to the whole world where we support people who have guts to stand for TRUTH, but alas they are oppressed and jailed by the corrupt governments."



We at ZHC have always tried to stand for truth and justice . We always have supported people. We are voices of voiceless.More the governments try to suppress the sane voices more firm we will be in our resolve to fight the corrupt governments and oppressors. This is the new world and let the oppressors know that we will never accept their corrupt decisions.



We appreciate what the civil society is doing in India and expect them to raise their voices in the same manner for Kashmir as well, for justice can not be selective.Those kids that were killed by during the protests did not deserve to die. Wake up before its too late and before Kashmir's generation NEXT chooses to fight for justice in a different way.



We have been closely looking at the developments taking place in India. Be it massacre of 120 innocent kids in kashmir in 2010 or be it suppressing the voice of people like Anna Hazare and Arundhati Roy.The only crime of Anna Hazare is that he is patrotic and have the guts to stand against his own government .We are voices of people who want to stand for TRUTH and JUSTICE.



Free KASHMIR .. Freedom is our goal.. End the Occupation. . . .

Stand with ANNA HAZARE .. for Justice and Truth.. End the Corruption. . . .



The dead cannot plead for justice. It is the duty of the living to do so for them..



UNITED WE STAND DIVIDED WE FALL.
 
Source 
 

Sunday, August 14, 2011

Anonymous attack the BART (Bay Area Rapid Transit) website #Op BART



https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSa-DelSZek0Wohps5F97kRgz3LpPOWx_3un91uliwAcexNA1v6rdLNAIBFyyZqQg1CDnNoIz_q4jTY2MF3qvj8duQQhDskuoy6oHhnWgVEYL1lwXTgcAf5AevJQ3qaJFtme0lF9e3PcFO/s1600/mybartdefaced500.png


Anonymous attack the BART (Bay Area Rapid Transit) website.myBART.org website belonging to San Francisco's BART (Bay Area Rapid Transit). SQLi attack against the websitesite and were able to extract more than 2,000 records containing names, usernames, passwords (plain text), emails, phone numbers, addresses and zip codes.

News Source

Mibbit Server Compromised


Last day i had posted about Mibbit Hack . The Mibbit had detected the unauthorized access to the server which runs their blog. The Mibbit had opened a new blog at Blogger  .In response to this Mibbit shut it down and began investigating . Later today at around 8pm GMT Mibbit shutdown the IRC services after it became clear that several pieces of backed up data had been accessed maliciously from another server, tools.mibbit.com. Mibbit now know the data's  included The personal information of 9 Mibbit operators including their names, accounts and e-mail addresses . A backup of nickserv data from April 2011 with up to 10,000 user nicknames and their credentials andTwo sets of backup data for one operator user account PMs and Channel logs, used for testing are Leaked. Currently Mibbit are working on securing and restoring the affected services.  Mibbit are treating this as a significant and malicious attack on Mibbit services which impacts  users and which has placed user data at risk.  Mibbit are continuing to work to remedy this situation and bring back affected services online as quickly as possible.  Mibbit asked apologies for the disruption, inconvenience and difficulty this attack has caused to you and your users. As Mibbit have updates about the attack, the backup data which was stolen from tools.mibbit and the next steps to recover services we will share it via the blog and the #help channel.


Saturday, August 13, 2011

The Famous Chat network Mibbit Hacked



The Famous Chat network Mibbit was Hacked. Mibbit is a web-based client for modern web browsers that supports Internet Relay Chat (IRC).Mibbit connects to IRC from anywhere on almost any device.There are  Mibbit and hundreds of IRC networks for places to chat. The Anonymous sabu tweet that the Mibbit Chat network was Hacked and he had posted a Pastebin link on the tweet about the Mibbit details. On the pastebin Data there where many Personal Data and many links

LEEDS College of Business Studies Pakistan Website Hacked By Unknown Soldier


LEEDS College of Business Studies Pakistan Website was Hacked By  Unknown Soldier from India


URL:- http://leeds.pk/
Mirror http://legend-h.org/mirror/205349/leeds.pk/

Wednesday, August 10, 2011

Participate on Team NUTS "Show Your Programer Skills"



http://teamnuts.in/nuts/styles/extremedarkred/imageset/site_logo.gif

 

 

Indian Ethical Hacking Team TeamNuts Organize Programing Quiz who think's or want's to test his skill participate in it and win

  • Devil Tools (Devil Complete Shell,Underground Tool Password Decrypt)

  • Moderator or trusted Member in Team Nuts

  • Bundle of Other scripts & Tools

  • My PHP notes & Scripts and many more


Compition Date : 20th August 2011

Quiz Categories : Gamerz* , Hacking Coder*, I'm Best Programers*,Instant Programer*, web builder*, Challenge Acceptor*


Competition Criteria : No age Limit : No Eligibility Require,
you can participate in more then one categories,you just have to submit your code or tool to us before 20th August or for instant programer or Challenge Acceptor or in web builder you have to make script which provide at the spot on 15 august at 10am time would to complete challenge is 3 hrs (language choose by you)

Summary 

Gamerz* : Make Game in any language flash,C,JAVA any one ,and also mention team size ,leader and other members and time taken by you.. you must have to submit your game or source before 20th august

Hacking Coder* : Make a any hacking tool in any programing and submit to us before 15 august , only single work no team work

I'm Best Programers* : submit your best tool or project before 20th august mention team size ,leader and other members and time taken by you.

Instant Programer*: choose your language and make tool or script provide at the spot only single entry

web builder* : make web page weather dynamic or static provide at the spot you can choose HTML ,CSS,PHP or ASP at the spot on 20th August


Challenge Acceptor* : just accept the challenge and make the script provide to you at spot and also language will provided by us .team size would be 1 to 5


Note: Only competition held in particular categories if volunteer or team would be more then 5 in each category

Place for compition is : Teamnuts.in

Result will declare at : 5pm on 20 August

For more information contact Under Ground Devil


Best of Luck .....

Tuesday, August 9, 2011

War Texting Allows Hackers To Unlock Car Doors Via SMS







Senior iSec researcher Don Bailey has developed an exploit which can allow the attacker to unlock car doors, hack car alarm system and even start their car, this method has been named as "War Texting", it took a time span of less than two hours for Don Bailey to hijack into Car's Alaram system and remotely start the car.





Resources claim that bailey will demonstrate this hack next week in Black Hat Security Conference at Los vegas where he will show the live demonstration of this attack. The presentation is named as "War Texting"







According To ISEC partners



We are seeing more GSM [Global System for Mobile Communications]-enabled systems popping up in consumer culture and industrial control systems. They're not just in Zoombak [Global Positioning System] location devices and personal security control systems, but also in sensors deployed for waste treatment facilities, SCADA [Supervisory Control and Data Acquisition] and call-back systems, physical security systems, industrial control systems

Saturday, August 6, 2011

Lulzsec Brazil Leaks the Federal Police 8 GB of Data #AntiSec


Lulzsec Brazil today leaks 8Gb of Documents data of Federal Police on their website. The Data includes the various Documents,Zipped files,Audios,Pdf and Photographs  related to Federal Office. This is another mass leak after , 10GB data of law enforcement agencies leaked by #AntiSec

Lulzsec and Anonymous Hackers leak over 10GB of Law Enforcement Agency Details


http://www.geekword.net/wp-content/uploads/2011/07/Anonymous-LulzSec.jpg
The Contents of Leaked Data

  • Over 300 mail accounts from 56 law enforcement domains
  • Missouri Sheriff account dump (mosheriffs.com)
  • 7000+ usernames, passwords, home addresses, phones and SSNs
  •  Online Police Training Academy files PDFs, videos, HTML files
  • “Report a Crime” snitch list compilation (60+ entries)
  • Plesk plaintext server passwords (ftp/ssh, email, cpanel, protected dirs)
All leaked information can be Find at https://vv7pabmmyr2vnflf.tor2web.org/

Friday, August 5, 2011

Indishell Facebook page Hacked is a fake news !



I had saw a fake news that Indishell Facebook page had been hacked by Albanian Cyber Army. when i saw the facebook page i feel Funny because the info about indishell posts published on the facebook page was  on Wednesday August 3 , 2011 at 4.21 am . actually the Real indishell facebook like page has been created some years ago . In real  like page of indishell  i had also posted some  URLs of my blog some months ago for getting publicity. i had looked for that posts on the facebook page but i cant find it on that Facebook . so i am sure that that the  Albanian Cyber Army had maked a fake page and they are looking pity publicity on Internet and Facebook

Thursday, August 4, 2011

Chinese hackers take on the world . Campaign hits 72 organisations



Insecurity experts at the anti-virus outfit McAfee said that they have discovered the world's biggest series of cyber attacks.The attacks have seen the infiltration of the networks of 72 organisations including the United Nations, governments and companies worldwide.McAfee believes that there was one "state actor" behind the attacks. It did not name it but it appears to be talking about China.What McAfee has discovered is a five-year campaign against the United States, Taiwan, India, South Korea, Vietnam and Canada; the Association of Southeast Asian Nations (ASEAN); the International Olympic Committee (IOC); the World Anti-Doping Agency; and shedloads of companies ranging from defence contractors to high-tech enterprises.
Hackers broke into the computer system of the UN Secretariat in Geneva in 2008, and hid there unnoticed for nearly two years. Shedloads of secret data wrtr sent to China before the attack was noticed.
McAfee's vice president of threat research, Dmitri Alperovitch, wrote in a 14-page report that he was stunned by the diversity of the victim organisations and taken aback by the audacity of the perpetrators.
It is not clear what is happening to all the data. Some of it might be being used to build better products or beat a competitor at a key negotiation. But the data loss represents a massive economic threat, Alperovitch warned.McAfee first found evidence of the hacking campaign in March, when its researchers discovered logs of the attacks while reviewing the contents of a "command and control" server that they had discovered in 2009.
The attacks have been dubbed "Operation Shady RAT", although we would have thought Chinese Takeaway would have been better. The earliest breaches date back to mid-2006, though there might have been other intrusions as yet undetected.
The longest attack was on the Olympic Committee of an unidentified Asian nation which lasted for 28 months, McAfee said.
Alperovitch told Reuters  that this is the biggest transfer of wealth in terms of intellectual property in history. He said that the scale at which this is occurring is frightening. Jim Lewis, a cyber expert with the Center for Strategic and International Studies,said that it was likely that China was behind the campaign because some of the targets had information that would be of particular interest to Beijing.
While the US and Britain have capabilities to pull off this kind of campaign, they would not  spy on each other. 

Tuesday, August 2, 2011

Next week a half of SAP systems, available in Internet, can be hacked


 
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4kzpRXSLCzcqGD-7856Yswripl_djFV3P_vgIH7-Sh_NIkntA5OWeUfbE0mTsqgxyu8fDjh7ZigD24BQQigujbMxcV-lo0oKRUyiZSfjJnpMUEMhGtMU7Pgx4MXWkbw7Mocx-7gVTSRs/s320/bh.jpg 

On the 4th of august at the world largest technical security conference - BlackHat USA 2011, which will take place in Las Vegas, SAP security expert and CTO of ERPScan Alexander Polyakov will show how any malicious attacker can get access to the systems running on SAP via Internet using new critical vulnerability.
SAP systems are used in more than 100 000 world companies to handle business-critical data and processes. Almost in each company from Forbes 500 system data are set for the handling of any process beginning from purchasing, human resources and financial reporting and ending with communication with other business systems. Thus receiving an access by the malicious attacker leads to complete control over the financial flow of the company, which can be used for espionage, sabotage and fraudful actions against hacked company.
The given attack is possible due to dangerous vulnerability of the new type, detected by Alexander in J2EE engine of SAP NetWeaver software, which allows bypassing authorization checks. For example it is possible to create a user and assign him to the administrators group using two unauthorized requests to the system. It is also dangerous because that attack is possible on systems, protected by the two-factor authentication systems, in which it is needed to know secret key and password to get access. To prove it researchers from ERPScan created a program, which detects SAP servers in the Internet with help of secret Google keyword and checks found servers on potential dangerous vulnerability. As the result, more than half of available servers could be hacked with help of found vulnerability.
“Danger is in that it is not only a new vulnerability, but a whole class of vulnerabilities that was theoretically described earlier but not popular in practice. During our research we only detected several examples in standard system configuration, and because each company customizes the system under its own business processes, new examples of vulnerabilities of the given class can be potentially detected at each company in the future. We have developed a free program which can detect unique vulnerabilities of such type in order to protect companies on time and it is also included in our professional product – ERPScan Security Scanner for SAP.” — noted Alexander.

Monday, August 1, 2011

New Operation By Anonymous & Lulsec #FreeTopiary




Two Days before Accused LulzSec Hacker "Topiary" had arrested and today he released on bail. Jake Davis, an 18-year-old from the Shetland Islands, He was released on bail after being charged with five offences relating to computer attacks and break-ins by the LulzSec and Anonymous hacking groups.Today all Anonymous and Lulzsec hackers stand together once again with a new operation #FreeTopiary on Twitter. Anonymous Call everyone for Show their support to @atopiary on IRC Chat. Anonymous also call for Anonymous Legal Help also.