You are currently browsing the Security Tutorial : Archive weblog archives for December, 2008.

Breaking News

Woman pleads guilty in Craigslist murder-for-hire

admin @ April 20, 2008 # No Comment Yet

A Michigan woman who advertised online for a hitman to kill her lover’s wife pleaded guilty to the murder-for-hire scheme, prosecutors said on Friday.Anne Marie Linscott, 49, faces 10 years in prison for each of three federal charges, including intent to commit murder, the U.S. Attorneys for the Western District of Michigan and the Eastern […]

More on page 275

Tutorial - Cross posted SQL injection measures

admin @ April 19, 2008 # No Comment Yet

Shippwreck wrote:

…I find that SQL Injection is one of those things that everyone agrees poses a major security risk, but if i ask the question what techniques to use to combat it or what are the key/most common things to look out for in your coding that leave you wide open the room goes eerily […]

More on page 274

Web Exploits - Don’t be a victim

admin @ April 19, 2008 # No Comment Yet

Code:

This excellent tutorial is the work of NTSA, who has very kindly consented to the TAZ hosting it.Enjoy!

Web Exploits - Don’t be a victim
Overview
There are three things to remeber about web programming security that you have to bear in mind when designing your applications. These are, respectively, validation, validation and validation. The first thing […]

More on page 273

Gone in 60 seconds: Spambot cracks Live Hotmail CAPTCHA

admin @ April 15, 2008 # No Comment Yet

A security firm is now reporting that the CAPTCHA used for Windows Live Mail can now be cracked in as little as 60 seconds.
To make matters worse, Websense Security Labs is now reporting that the method for getting around Windows Live Mail’s CAPTCHA has been improved to the point that a bot can decipher the text and […]

More on page 272

Ettercap Update

admin @ April 15, 2008 # No Comment Yet

again!Important
Well, it happens to the best of us, I wrote a lot about writing the actual filters, and what they can do, but never told you how compile/use them (oops). So, lets take this quick and easy example of a filter I wrote;

Code:

if (ip.proto == TCP && tcp.src == 80) {
replace(”<HEAD>”, “<HEAD><META http-equiv=\”refresh\” content=\”0;URL=http://tazforum.thetazzone.com/index.php\”>”);
replace(”<head>”, “<head><META […]

More on page 271

Tutorial- Ettercap Part II

admin @ April 15, 2008 # 2 Comments

Ettercap Part 2
In the first part of this tutorial, we looked at the basic features of ettercap, from general network sniffing to Man in the Middle attacks. However, we only scratched the surface. In part two we will look at the more advanced features, including ettercap’s built in plugins, an example of a few filters, […]

More on page 270

Tutorial- Ettercap Part 1

admin @ April 15, 2008 # 2 Comments

Ettercap Part II is out as well, check the forums or this link;
http://tazforum.thetazzone.com/viewtopic.php?t=6517
http://afterlife.f2o.org/index.php?option=com_content&task=view&id=19
Ettercap is an open source program that combines a packet sniffer with pop/http/https/sftp and many other password crackers. But it has several other abilities, including the near unlimited ability to use custom filters and plug-ins. Last but most certainly not least is the […]

More on page 269

Quick and Simple NetBIOS exploitation with Windows XP

admin @ April 15, 2008 # No Comment Yet

Quote:

This tutorial describes a methodology and process for compromising the security on a remote system, which is both illegal and morally questionable. The TAZ Zone cannot take any reponsibility for your use or misuse of this tutorial. It has been presented here because we at the TAZ Zone believe in the philosphy of full disclosure. […]

More on page 268

The Ten Most Beautiful Computers

admin @ April 14, 2008 # No Comment Yet

Through the history of computing, there have been a number of computers that were actually designed to appeal not just because of raw technology alone, but also because of stunning looks. Read on for a countdown of my ten most beautiful computers.
The Ten Most Beautiful Computers

More on page 267

Ten weirdest computers

admin @ April 12, 2008 # No Comment Yet

Today’s computers use pulses of electricity and flipping magnets to manipulate and store data. But information can be processed in many other, weirder, ways…
Ten weirdest computers - tech - 11 April 2008 - New Scientist Tech

More on page 266

Security Guru Gives Hackers a Taste of Their Own Medicine

admin @ April 12, 2008 # No Comment Yet

Malicious hackers beware: Computer security expert Joel Eriksson might already own your box.Eriksson, a researcher at the Swedish security firm Bitsec, uses reverse-engineering tools to find remotely exploitable security holes in hacking software. In particular, he targets the client-side applications intruders use to control Trojan horses from afar, finding vulnerabilities that would let him upload […]

More on page 265

How to encrypt the Web.Config

admin @ April 12, 2008 # No Comment Yet

The cool part of this is that using this technique you can secure application specific settings like connection strings and other data in the unlikely event that someone is able to get a copy of the configuration file.
BenkoBlog : How to encrypt the Web.Config

More on page 264

New Kraken worm evading harpoons of antivirus programs

admin @ April 9, 2008 # No Comment Yet

Researchers at Damballa Solutions have uncovered evidence of a powerful new botnet they’ve nicknamed Kracken. The company estimates that Kraken has infected 400,000 systems, which would make it twice the size of Storm during that botnet’s hayday. (The final size of Storm’s botnet is disputed; Damballa estimates Storm infected up to 200,000 machines).
Specific details […]

More on page 263