Archive for the ‘Malware’ Category

Since I moved to UK, the number of phishing emails cluttering my inbox have dramatically increased. Some of them are pretty obvious to look and laugh upon, but this one was pretty interesting. The email looked like below. The interesting thing is that i WAS having problems signing in to my account since a couple [...]

Vidalia is a cross-platform controller for Tor (The Onion Router) for network anonymity, built using the Qt toolkit. It allows the user to start, stop, and view the status of Tor, monitor bandwidth usage, view, filter, and search log messages, and configure some aspects of Tor. The most feature of Vidalia is its Tor network [...]

Top 10 Web Hacks of 2006

Posted: December 16, 2006 in Malware, Security, Web Security

RSnake, Robert Auger, and Jeremiah of WhiteHatSecurity collected a list of the new 2006 web hacks. The term “hacks” loosely describe some of the more creative, useful, and interesting techniques/discoveries/compromises. Top 10 1. Web Browser Intranet Hacking / Port Scanning – (with JavaScript and with HTML-only and the improved model) 2. Internet Explorer 7 “mhtml:” [...]

Offensive Computing just released their presentation slides, videos and sample codes from their Defcon 14 talk. There paper Further Down the VM Spiral discusses several new tools and describes some new VM detection techniques including a generic virtual machine detector. This VM detector tries a variety of methods including the new machine status word (MSW) [...]

There have been a few blogs out there on the subject of Google indexing not only PDFs and Docs, but executable files as well. A simple query for “Signature: 00004550” results in 192,000 (if Google’s count is accurate) links to executable files. The reason this search works is because when Google indexes the executable file, [...]

An excellent resource for security research tools: http://research.eeye.com/html/tools/ Blogged with Flock

Did you ever had a need to know whether your Windows system is sniffing network traffic off the network without your knowledge? This type of passive attack can be very difficult to detect. There are numerous third party tools that try to detect network sniffers running on the network by looking for signs of systems [...]

Helios is a new rootkit detection tool that is designed to detect, remove and inoculate against windows rootkits. It uses behavioral analysis as opposed to signature based analysis to catch unknown threats. It is one of the only rootkit detection tools that can operate in the background. The website also has videos of the product [...]