BOT24, Inc.

Extracting Windows Users Password Hints with PowerShell

9/05/2015 07:31:00 AM 1 Comment Edit

This is a quick blog post about extracting Password Hints for Windows users using PowerShell. Recently, while playing with Windows Registry...

HTTP Evader - Automate Firewall and IDS Evasion Tests

9/05/2015 07:23:00 AM Add Comment Edit

While HTTP is defined in RFC2616 (HTTP/1.1) the specification does not address every tiny detail. This makes browsers behave similar for t...

Extracting Digital Signatures from Signed Malware with pf

9/05/2015 07:13:00 AM Add Comment Edit

Lot of malware/PUP (Potential Unwanted Programs)/Adwares are now digitally signed. Those signatures can contain interesting properties that...

Zhone ADSL2+ 4P Bridge&Router - Multiple Vulnerabilities

9/04/2015 08:08:00 AM Add Comment Edit

Document Title: =============== Zhone ADSL2+ 4P Bridge&Router - Multiple Vulnerabilities References (Source): ==================== ht...

Virtual Freer v1.57 - Authentication Bypass Vulnerability

9/04/2015 08:05:00 AM Add Comment Edit

Document Title: =============== Virtual Freer v1.57 - Authentication Bypass Vulnerability References (Source): ==================== http:...

[CVE-2014-7216] Yahoo! Messenger emoticons.xml Multiple Key Value Handling Local Buffer Overflow

9/04/2015 08:02:00 AM Add Comment Edit

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: Yahoo! Messenger Ven...

Analyzing Popular Layer 7 Application DDoS Attacks

9/04/2015 08:00:00 AM Add Comment Edit

Distributed Denial of Service (DDoS) attacks have been a major concern for website owners for a while. All types of sites, from small to bi...

Metasploit: Windows Escalate UAC Protection Bypass

9/04/2015 07:58:00 AM Add Comment Edit

## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ##...

LinkedIn Sockpuppets Are Targeting Security Researchers

9/04/2015 07:56:00 AM Add Comment Edit

Multiple LinkedIn accounts recently targeted numerous security specialists in an attempt to map their social graphs. Several of our researc...

W^X policy violation affecting all Windows drivers compiled in Visual Studio 2013 and previous

9/04/2015 07:54:00 AM Add Comment Edit

Back in June, I was doing some analysis on a Windows driver and discovered that the INIT section had the read, write, and executable charac...

Paper: Automating Information Flow Analysis of Low Level Code

9/04/2015 07:51:00 AM Add Comment Edit

ABSTRACT Low level code is challenging: It lacks structure, it uses jumps and symbolic addresses, the control flow is often highly optim...

Checkmarx CxQL Sandbox bypass (CVE-2014-8778)

9/03/2015 10:41:00 AM Add Comment Edit

Checkmarx CxQL Sandbox bypass (CVE-2014-8778) Vendor: Checkmarx - www.checkmarx.com Product: CxSuite Version affected: 7.1.5 and prior Cr...

Tiny Banker hidden in modified WinObj tool from Sysinternals

9/03/2015 10:35:00 AM Add Comment Edit

Tiny Banker aka Tinba Trojan made a name for itself targeting banking customers worldwide. The Avast Virus Lab first analyzed the malware f...

Shifu: A new interesting Banking Trojan

9/03/2015 10:33:00 AM Add Comment Edit

Hello everybody, today I'd like to share some infos on "Shifu" a new incredibly interesting banking trojan. At this point you...

Cross-Site Request Forgery in Cerb

9/02/2015 01:51:00 PM Add Comment Edit

Advisory ID: HTB23269 Product: Cerb Vendor: Webgroup Media LLC Vulnerable Version(s): 7.0.3 and probably prior Tested Version: 7.0.3 Adviso...

PayPal Inc - SecApproval & 2FA Auth Bypass Vulnerability

9/02/2015 01:47:00 PM Add Comment Edit

Document Title: =============== PayPal Inc - SecApproval & 2FA Auth Bypass Vulnerability References (Source): ==================== ht...

Netflix Sleepy Puppy XSS Payload Management Framework

9/02/2015 06:28:00 AM Add Comment Edit

Sleepy Puppy is a cross-site scripting (XSS) payload management framework which simplifies the ability to capture, manage, and track XSS pr...

About the “tpwn” Local Privilege Escalation

9/02/2015 06:23:00 AM Add Comment Edit

This post had to come out two weeks ago, but due to school exams I haven’t had the time to write this down. So, tpwn gains root on any OS...

Flash Exploit Detector

9/02/2015 06:19:00 AM Add Comment Edit

Flash Exploit Detector(FED), or named FlashProtector. A BHO of IE, detect Flash Vector Exploit and print logs in c:\fp. You need create...

KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation

9/01/2015 07:08:00 PM Add Comment Edit

KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Title: XGI Windows VGA Display Manager Arbitrary Wr...

KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation

9/01/2015 04:39:00 PM Add Comment Edit

KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation Title: SiS Windows VGA Display Manager Multiple Privilege ...

[CORE-2015-0013] - FortiClient Antivirus Multiple Vulnerabilities

9/01/2015 03:19:00 PM Add Comment Edit

1. Advisory Information Title: FortiClient Antivirus Multiple Vulnerabilities Advisory ID: CORE-2015-0013 Advisory URL: http://www.coresec...

Disclaim and Disclose

Sign up to receive the date of publication on Disclaim & Disclose, the most anticipated & revealing Memoir to come out in years. Due out by year end, "Disclaim and Disclose" is the true story of how the effects of early childhood and a deceptive business associate landed my name on the top of a Securities Criminal Indictment stemming from a Panamanian Drug Cartel Investigation. Click on the above image or copy and paste the following link here...http://www.disclaimanddisclose.com/2016/03/disclaim-and-disclose.html

BOT24

Date and Time

Keyword Search

Recent posts

Sponsor

Labels

Welcome

Total Pageviews

Google+ Followers

Follow by Email

About Me

Google+ Badge

Translate

Blog Archive