jetlib.sec » Tags » account-passwords

Feeds

133337 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

3 items tagged "account passwords"

Related tags: read [+], worm [+], web [+], twitterpassworddecryptor [+], twitter [+], malware [+], login credentials [+], hacking [+], google [+], facebook [+], employee directories [+], e mail address [+], darknet [+], bank information [+], bank [+], Tools [+], Pentesting [+]

• May 07, 2012
• 5:00

  From LOW to PWNED [6] SharePoint

   » ‎ Carnal0wnage
  
  Post [6] SharePoint
  
  Misconfigured SharePoint  can be *really* useful. Examples of things you can do with it are:
  

  • User/Domain Enumeration
  • Access to useful files

  Regular / Auth Protected SharePoint also gives you a point to conduct brute-force attacks against AD or SharePoint users.
  
  
  We regularly find awesome stuff  once we have access to SharePoint. Its not uncommon to find service account passwords, alarm information, employee directories, all kinds of useful stuff.
  
  LOW?
  
  
  Finding SharePoint servers
  
  random targets...lots of interesting things can be found with google dorks.
  
  
  If you need to look at specific servers:
  
  Stach and Liu's has released their SharePoint Diggity tools
  http://www.stachliu.com/resources/tools/sharepoint-hacking-diggity-project/
  
  you can also roll your own
  http://code.google.com/p/fuzzdb/source/browse/trunk/Discovery/PredictableRes/Sharepoint.fuzz.txt
  
  
  Examples of open access
  
  
  
  If you have credentials you can use web services calls to pull information from AD, from: http://blog.mindedsecurity.com/2011/07/athcon-2011-presentation.html
  
  
  Stuff to read:
  http://www.mindedsecurity.com/fileshare/Fedon_Athcon_June11.pdf
  http://www.stachliu.com/resources/tools/sharepoint-hacking-diggity-project/
  https://www.owasp.org/index.php/Research_for_SharePoint_%28MOSS%29
  
  
  
  
  

  Tags:  employee-directories account-passwords google Pentesting  

• January 05, 2012
• 8:38

  Ramnit Worm Stealing Facebook Account Passwords, E-mail Address & Bank Details

   » ‎ Darknet
  Oh look, another Facebook worm – this one seems pretty nasty and as usual it’s going for Facebook access details and then diving into banking credentials if it can find them. It’s mostly targeted at the UK though, worms of these type usually are geographically limited as they are targeting bank information – it’s...
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  facebook worm bank read e-mail-address account-passwords bank-information malware  

• December 08, 2010
• 4:31

  TwitterPasswordDecryptor – Instantly Recover Twitter Account Passwords

   » ‎ Darknet
  TwitterPasswordDecryptor is the FREE tool to instantly recover Twitter account passwords stored by popular web browsers. Most web browsers store the login credentials for visited websites so that user don’t have to remember and enter the password every time. Each of these web browsers use their own proprietary encryption mechanism to store...
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  twitter web twitterpassworddecryptor read login-credentials account-passwords darknet hacking Tools