Nessus 5.0 Vulnerability Scanner Releases

Nessus 5.0 Vulnerability Scanner

Tenable Network Security announced Nessus 5.0 vulnerability and configuration assessment solution for enterprises and security professionals. Nessus version 5.0 introduces key features and improvements, separated into the four major phases of the vulnerability scanning process: 

Installation and management (for enhanced usability) - Nessus 5.0 simplifies the installation and configuration for non-technical users. Configuration and management: Nessus v5.0 configuration and management is now done 100% through the GUI

Scan policy creation and design (for improved effectiveness) - Users now enjoy improved effectiveness when creating scan policies. Over two dozen new pre-built plugin filters make it easy for security and compliance professionals to simplify policy creation for laser-focused scans on the areas that matter most. Users can quickly select multiple filter criteria, such as, Vulnerability Publication Date, public vulnerability database ID (OSVDB, Bugtraq, CERT Advisory, and Secunia), Plugin type (local or remote), information assurance vulnerability alert (IAVA), and more, to quickly identify easily-exploitable vulnerabilities.Scan for all easily remotely-exploitable vulnerabilities for which there is an exploit published in your favorite exploit framework.

Scan execution (for improved efficiency) - Users can take advantage of real-time scan results, on-the-fly filtering and sorting, and streamlined results navigation. A new vulnerability summary and redesigned host summary make it easy to see risk level without even running a report. As the scan is being run, not only can you see the results as they are being gathered, but navigate and filter on them as well. This allows you to easily act upon the vulnerability data while the scan is happening.

Report customization and creation (for improved communication with all parts of the organization) - New reporting features allow for improved communication of vulnerability results with all parts of the organization:Results filtering and report creation: Results filtering and report creation is more flexible than ever before. Users can apply multiple result filtering criteria, and targeted reports can be generated against the filtered results. Reports can be generated in native Nessus formats, HTML, and now PDF formats, Multiple report templates can be combined into one report.

Nessus 5.0 Installation Guide and Download Nessus 5.0 via | thehackernews

download , hacking , software , tool

Nessus 5.0 Vulnerability Scanner Releases

takecy 2/17/2012

xSQL Scanner, Advanced SQL Audit Tool

xSQL Scanner is a advanced SQL audit tool that allows users to find weak passwords and vulnerabilities on MS-SQL and MySQL database servers.

The objective of xSQLScanner is to assist the Security Analyst or Penetration Tester in auditing the security of MS-SQL and MySQL database servers.

xSQL Scanner, Advanced SQL Audit Tool

Features :

• Test for weak password fast;
• Test for wear/user passwords;
• Wordlist option;
• Userlist option;
• Portscanner
• Range IP Address audit and more.

Windows – xsqlscanner-1.2.zip

Linux – xsqlscan-mono.tgz

Or read more here. via | darknet

download , hacking , software , tool

xSQL Scanner, Advanced SQL Audit Tool

takecy

Wordpress Plugin Easy Comment Uploads Vulnerability

Wordpress as you might know is one of the most widely used blogging platforms, As a reason of which it has became the favorite target of hackers. Wordpress itself is quite secure, however the plugins make it unsecure resulting in hack attacks, data loss etc, when they are created the developers do not think of the security or do not know how to write the secure code, hence skipping lots of necessary checks making the plugins vulnerable to attacks like SQLInjetion, Remote File inclusion etc.

One of those popular vulnerable plugin is Easy Comment Upload plugin, The version 0.61 and prior versions are affected with Arbitrary File Upload Vulnerability. The plugin fails to check the upload file type as a reason of which it can be exploited by uploading a Phtml file.

Easy Comment Upload plugin

Wordpress Plugin Easy Comment Uploads Vulnerability

There are thousands of wordpress blogs still vulnerable to this attack. The vulnerability can be fixed by updating the wordpress easy comments plugin to version 0.71.

If you want to know more about Protecting your wordpress blog from hackers you can refer the following posts, If you still think your blog is vulnerable drop me an email and I will perform a security assessment on your blog. via | rafayhackingarticles

hacking , vulnerable , wordpress

Wordpress Plugin Easy Comment Uploads Vulnerability

takecy 1/20/2012

DNS Cache Poisoning Attack on Google, Yahoo, Apple

DNS Cache Poisoning Attack on Google,  Yahoo, Apple

Hacker with nickname AlpHaNiX deface Google, Gmail, Youtube, Yahoo, Apple etc domains of Democratic Republic of Congo. Hacker use strategy so-called DNS cache poisoning.

DNS cache poisoning is a security or data integrity compromise in the Domain Name System (DNS). The compromise occurs when data is introduced into a DNS name server's cache database that did not originate from authoritative DNS sources. It may be a deliberate attempt of a maliciously crafted attack on a name server.

DNS Cache Poisoning Attack

Hacked websites are :

• http://apple.cd/
• http://yahoo.cd/
• http://gmail.cd/
• http://google.cd/
• http://youtube.cd/
• http://linux.cd/
• http://samsung.cd/
• http://hotmail.cd/
• http://microsoft.cd/

Source

apple , cyber news , google , hacking , vulnerable , youtube

DNS Cache Poisoning Attack on Google, Yahoo, Apple

takecy 12/06/2011

Download THC SSL DoS/DDoS Tool

THC-SSL-DOS is a tool to verify the performance of SSL. Establishing a secure SSLconnection requires 15x more processing power on the server than on the client. THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it off theInternet. This problem affects all SSL implementations today. The vendors are aware of this problem since 2003 and the topic has been widely discussed.

This attack further exploits the SSL secure Renegotiation feature to trigger thousands of renegotiations via single TCP connection.

Usage

./thc-ssl-dos 127.3.133.7 443 

Handshakes 0 [0.00 h/s], 0 Conn, 0 Err 

Secure Renegotiation support: yes 

Handshakes 0 [0.00 h/s], 97 Conn, 0 Err 

Handshakes 68 [67.39 h/s], 97 Conn, 0 Err 

Handshakes 148 [79.91 h/s], 97 Conn, 0 Err 

Handshakes 228 [80.32 h/s], 100 Conn, 0 Err 

Handshakes 308 [80.62 h/s], 100 Conn, 0 Err 

Handshakes 390 [81.10 h/s], 100 Conn, 0 Err 

Handshakes 470 [80.24 h/s], 100 Conn, 0 Err

Comparing flood DDoS vs. SSL-Exhaustion attack

A traditional flood DDoS attack cannot be mounted from a single DSL connection. This is because the bandwidth of a server is far superior to the bandwidth of a DSL connection: A DSL connection is not an equal opponent to challenge the bandwidth of a server.

This is turned upside down for THC-SSL-DOS: The processing capacity for SSL handshakes is far superior at the client side: A laptop on a DSL connection can challenge a server on a 30Gbit link. Traditional DDoS attacks based on flooding are sub optimal: Servers are prepared to handle large amount of traffic and clients are constantly sending requests to the server even when not under attack.

The SSL-handshake is only done at the beginning of a secure session and only if security is required. Servers are _not_ prepared to handle large amount of SSL Handshakes. The worst attack scenario is an SSL-Exhaustion attack mounted from thousands of clients (SSL-DDoS).

Tips & Tricks for Whitehats

The average server can do 300 handshakes per second. This would require 10-25% of your laptops CPU.

Use multiple hosts (SSL-DOS) if an SSL Accelerator is used.

Be smart in target acquisition: The HTTPS Port (443) is not always the best choice. Other SSL enabled ports are more unlikely to use an SSL Accelerator (like the POP3S, SMTPS, … or the secure database port).

Counter measurements

No real solutions exists. The following steps can mitigate (but not solve) the problem:

• Disable SSL-Renegotiation
• Invest into SSL Accelerator

Either of these countermeasures can be circumventing by modifying THC-SSL-DOS. A better solution is desireable. Somebody should fix this.

You can download THC-SSL-DOS here:

Windows: Download thc-ssl-dos-1.4-win-bin.zip

Linux: Download thc-ssl-dos-1.4.tar.gz

Or read more here. (via)

download , hacking , software , tool

Download THC SSL DoS/DDoS Tool

takecy 10/25/2011

LG Website Hacked

LG Website Hacked 

One of the Australian websites belonging to global electronics giant LG has been hacked by a collective calling itself the Intra Web Security Exploit Team.

According to Asher Moses of the Sydney Morning Herald, the site, lge dot com dot au, was pwned over the weekend, and was still in embarrassing post-hack distress this morning:

The attackers replaced the site with some lightly-obfuscated JavaScript. The script pretends to be conducting an injection attack as you watch, whilst an expletive-laden track by nerdcore hacker-rapper BeWiz plays in the background.

(The BeWiz track is called TwistedWanted. I'm not sure if that's a reference to Twisted Matrix, the event-driven networking engine written in Python, to UK indie music company Twisted Music, or something else. Listening to BeWiz's whole track was a mission I was unwilling to accept.)

When the simulated attack is complete, the attackers announce, perhaps not without some justification:

It seems as though your website has been hacked.

How did we get past your security?

What security? ;)

cyber news , hacking , internet

LG Website Hacked

takecy

Anonymous Hits Boston Police Websites

Anonymous Hits Boston Police Websites

A politically motivated computer hacker group attacked and brought down dozens of police websites around the country and said it posted e-mail information about nearly 1,000 Boston police officers Friday, claiming it was working in support of the Occupy protest movement.

Anonymous, the group taking credit for the computer intrusions, said in a statement, “In solidarity with the Occupation Movement and the International Day of Action Against Police Brutality, [we] aim at the corrupt bootboys of the 1 percent: the police.”

Specifically, the group said it attacked multiple Boston police websites. Most notably, Anonymous claimed to have hacked the Boston Police Patrolmen’s Association website and its web-based e-mail portal, posting the names, e-mail addresses, and passwords of Boston police officers on the Internet for all to see.

In the statement, Anonymous said it attacked BPD sites in response to “the unprovoked mass arrests and brutality experienced by those at Occupy Boston.”

“Let this be a warning to BPD and police everywhere: future acts of aggression against our movements will be met with a vengeance ... ,” the statement read.

Early on Oct. 11, Boston police moved in on some of the Occupy Boston protesters on the Rose Fitzgerald Kennedy Greenway and arrested 141 demonstrators.

Late Friday night, Boston police acknowledged the cyber attack, saying in a statement: “It has come to the attention of the Boston Police Department that various websites used by members of the BPD -- including the website belonging to the Boston Police Patrolmen’s Association -- have been hacked into and possibly compromised. In light of this information, the Boston Police Department is requiring all department personnel to secure their login information by resetting their passwords on the BPD network.”

The department recommended that police officers change their e-mail passwords and any other Internet, e-mail, and wireless device passwords.

A Boston police spokeswoman could not be reached for comment early this morning.

The group claimed that it “hacked, defaced, and destroyed several law enforcement targets, leaking over 600MB of private information including internal documents, membership rosters, addresses, passwords, Social Security numbers, and other confidential data.”

It claimed to take down at least 40 police-related websites.

The International Association of Chief of Police website was also targeted. The website was down and unreachable early this morning.

Anonymous also took aim at the website of Matrix Group International, which provides Internet services for government agencies. The Matrix website was down early this morning.

Anonymous also claimed to have hacked Birmingham/Jefferson County, Ala., police websites, releasing the names, addresses, and Social Security numbers of nearly 1,000 police officers.

Described as “e-Robin Hoods,” the Internet group Anonymous is known for its hacking skills and online activism. 

In a video regarding the police clashes with occupiers on Wall Street, Anonymous said, “This event serves to remind us that we’re living in a police state with absolutely no respect for the right of the people to peacefully assemble and exercise their constitutional free speech. But we will not be scared away… This abuse of authority by the NYPD only serves to strengthen our resolve and reinforce our belief that corruption and injustice in America must be fought.”

“We are Anonymous,” said the masked, computerized voice. “We do not forgive. We do not forget. Expect us.”Globe Correspondent Derek J. Anderson contributed to this report. (via)

anonymous , cyber news , hacking

Anonymous Hits Boston Police Websites

Unknown 10/23/2011