jetlib.sec » Tags » compromise

Feeds

133354 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

18 items tagged "compromise"

Related tags: security issues [+], security [+], roms [+], custom [+], safer use [+], ryan jones thomas mackenzie [+], rootkit [+], novel strategy [+], joanna rutkowska [+], hunting [+], hp ux [+], framework level [+], evidence [+], black hat [+], bind [+], application profiling [+], application [+], abu dhabi [+], windows [+], web [+], video [+], vendor [+], today [+], suffers [+], store [+], site [+], shields [+], servers [+], security event [+], sec [+], reality [+], pwn [+], pays [+], own [+], microsoft windows [+], microsoft [+], legislative web [+], internet explorer [+], hackers [+], hacker [+], google [+], china [+], charlie shields [+], apple [+], app [+]

• February 15, 2012
• 19:42

  Mobile App Download Bots Compromise Apple's App Store

   » ‎ Packet Storm Security Headlines
  Mobile App Download Bots Compromise Apple's App Store

  Tags:  store app compromise apple  

• February 04, 2012
• 8:45

  [Slides] Stealth Attacks - Detection and Investigation

   » ‎ SecDocs
  Authors: Ryan Jones Thomas Mackenzie
  Tags: exploiting
  Event: Black Hat Abu Dhabi 2011
  Abstract: Meticulous attackers can subvert audit controls to the point where a compromise is almost undetectable. We look at the tools and techniques which can be used by attackers to minimise evidence left behind and propose a novel strategy for managing this issue. Fully identifying the method and impact of a data compromise is heavily reliant on the forensic information available to investigators. Commonly this is dependent on having logs for the compromised period. However, in the cases where an attacker has taken steps to reduce their footprint on the system, investigations can be more challenging. We explore the various evidential sources which are commonly used to identify the extent and method of a web application compromise. We then discuss an attack which, due to its nature, is more complicated to identify and understand. The presentation will draw together the techniques used in investigating a data compromise and create an attack which is designed to completely compromise the web server while leaving the least amount of evidence on the system. Incident readiness specialists can often recommend that verbose logging is put in place. Logging such as full http request and response logging fits the bill for the investigator but by their nature these logs have serious drawbacks for the day to day management of the server; large storage requirements, incidental storage of sensitive data and performance issues are common problems. We suggest a new approach, restricting access or logging anomalies at the framework level. By blending the information gained at the framework level with automated application profiling techniques we can create heavily targeted logs bespoke to the specific application. This can be implemented for all applications regardless of whether source code is available. This method gives us the best chance of keeping logging to an absolute minimum whilst ensuring that techniques used to minimise forensic evidence left by an attack are unsuccessful.

  Tags:  evidence compromise application ryan-jones-thomas-mackenzie abu-dhabi novel-strategy framework-level application-profiling  

• 8:44

  [Paper] Stealth Attacks - Detection and Investigation

   » ‎ SecDocs
  Authors: Ryan Jones Thomas Mackenzie
  Tags: exploiting
  Event: Black Hat Abu Dhabi 2011
  Abstract: Meticulous attackers can subvert audit controls to the point where a compromise is almost undetectable. We look at the tools and techniques which can be used by attackers to minimise evidence left behind and propose a novel strategy for managing this issue. Fully identifying the method and impact of a data compromise is heavily reliant on the forensic information available to investigators. Commonly this is dependent on having logs for the compromised period. However, in the cases where an attacker has taken steps to reduce their footprint on the system, investigations can be more challenging. We explore the various evidential sources which are commonly used to identify the extent and method of a web application compromise. We then discuss an attack which, due to its nature, is more complicated to identify and understand. The presentation will draw together the techniques used in investigating a data compromise and create an attack which is designed to completely compromise the web server while leaving the least amount of evidence on the system. Incident readiness specialists can often recommend that verbose logging is put in place. Logging such as full http request and response logging fits the bill for the investigator but by their nature these logs have serious drawbacks for the day to day management of the server; large storage requirements, incidental storage of sensitive data and performance issues are common problems. We suggest a new approach, restricting access or logging anomalies at the framework level. By blending the information gained at the framework level with automated application profiling techniques we can create heavily targeted logs bespoke to the specific application. This can be implemented for all applications regardless of whether source code is available. This method gives us the best chance of keeping logging to an absolute minimum whilst ensuring that techniques used to minimise forensic evidence left by an attack are unsuccessful.

  Tags:  evidence compromise application ryan-jones-thomas-mackenzie abu-dhabi novel-strategy framework-level application-profiling  

• January 18, 2012
• 21:49

  [Slides] Rootkit Hunting vs. Compromise Detection

   » ‎ SecDocs
  Authors: Joanna Rutkowska
  Tags: rootkit
  Event: Black Hat Federal 2006
  

  Tags:  compromise rootkit hunting joanna-rutkowska black-hat  

• January 15, 2012
• 21:31

  [Slides] Rootkit Hunting vs. Compromise Detection

   » ‎ SecDocs
  Authors: Joanna Rutkowska
  Tags: rootkit
  Event: Black Hat EU 2006
  

  Tags:  compromise rootkit hunting joanna-rutkowska black-hat  

• October 17, 2011
• 7:46

  Security Issues In Android Custom ROMs

   » ‎ Packet Storm Security Recent Files
  This is a whitepaper called Security Issues in Android Custom ROMs. This paper keeps a special focus on custom ROMs by checking for security misconfigurations that can lead to device compromise.

  Tags:  custom roms security security-issues compromise  

• 7:46

  Security Issues In Android Custom ROMs

   » ‎ Packet Storm Security Recent Files
  This is a whitepaper called Security Issues in Android Custom ROMs. This paper keeps a special focus on custom ROMs by checking for security misconfigurations that can lead to device compromise.

  Tags:  custom roms security security-issues compromise  

• 7:46

  Security Issues In Android Custom ROMs

   » ‎ Packet Storm Security Misc. Files
  This is a whitepaper called Security Issues in Android Custom ROMs. This paper keeps a special focus on custom ROMs by checking for security misconfigurations that can lead to device compromise.

  Tags:  custom roms security security-issues compromise  

• 7:46

  Security Issues In Android Custom ROMs

   » ‎ Packet Storm Security Misc. Files
  This is a whitepaper called Security Issues in Android Custom ROMs. This paper keeps a special focus on custom ROMs by checking for security misconfigurations that can lead to device compromise.

  Tags:  custom roms security security-issues compromise  

• April 14, 2011
• 8:32

  WordPress Suffers Server Compromise

   » ‎ Packet Storm Security Headlines
  WordPress Suffers Server Compromise

  Tags:  suffers compromise  

• March 07, 2011
• 20:34

  Vendor-Sec Closed After Hacker Compromise

   » ‎ Packet Storm Security Headlines
  Vendor-Sec Closed After Hacker Compromise

  Tags:  sec hacker vendor compromise  

• December 19, 2010
• 21:25

  [Video] Today's Reality: Living in Compromise to Advanced Persistent Threats

   » ‎ SecDocs
  Authors: Charlie Shields
  Tags: security
  Event: SecTor 2010
  

  Tags:  video reality today charlie-shields security-event shields compromise  

• December 02, 2010
• 12:00

  Bugtraq: Flaw in Microsoft Windows SAM Processing Allows Continued Administrative Access Using Hidden Regular User Masquerading After Compromise (2010-M$-001)

   » ‎ SecurityFocus Vulnerabilities
  Flaw in Microsoft Windows SAM Processing Allows Continued Administrative Access Using Hidden Regular User Masquerading After Compromise (2010-M$-001)

  Tags:  microsoft-windows compromise microsoft  

• July 09, 2010
• 0:00

  Google Compromise Pays Off With Renewal Of License In China

   » ‎ Packet Storm Security Headlines
  Google Compromise Pays Off With Renewal Of License In China

  Tags:  compromise google pays china  

• June 29, 2010
• 0:00

  Hackers Compromise UMaine Servers, Legislative Web Site

   » ‎ Packet Storm Security Headlines
  Hackers Compromise UMaine Servers, Legislative Web Site

  Tags:  servers web site legislative-web compromise hackers  

• June 28, 2010
• 16:56

  HP-UX Running BIND compromise of NXDOMAIN Responses

   » ‎ SecuriTeam
  A potential vulnerability was discovered on HP-UX running BIND.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  hp-ux bind compromise safer-use  

• 16:41

  HP-UX Running BIND compromise of NXDOMAIN Responses

   » ‎ SecuriTeam
  A potential vulnerability was discovered on HP-UX running BIND.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  hp-ux bind compromise safer-use  

• March 28, 2010
• 14:42

  Pwn2Own-2010-Windows7-InternetExplorer8.pdf

   » ‎ Packet Storm Security Misc. Files
  Whitepaper documenting the recent Pwn2Own 2010 Windows 7 Internet Explorer compromise.

  Tags:  own pwn windows compromise internet-explorer