jetlib.sec » Tags » plug-ins

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

5 items tagged "plug ins"

Related tags: read [+], google [+], darknet [+], chrome [+], will [+], taking security [+], spreading [+], scams [+], saved [+], protocol [+], password [+], owa [+], news [+], mozilla firefox [+], http [+], general idea [+], firefox [+], facebook [+], backfuzz [+], Pentesting [+], ExploitsVulnerabilities [+], Countermeasures [+]

• March 16, 2012
• 4:58

  backfuzz – Multi-Protocol Fuzzing Toolkit (Supports HTTP/FTP/IMAP etc)

   » ‎ Darknet
  backfuzz is a fuzzing tool for different protocols (FTP, HTTP, IMAP, etc) but also has no-protocol plug-ins (Example: File Fuzzer). The general idea is that this script has several functions already predefined in the file “functions.py”, so whoever wants to write their own plugin’s (for another protocol) you can do so in a few...
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  protocol backfuzz http read plug-ins darknet general-idea ExploitsVulnerabilities  

• December 22, 2011
• 11:57

  Facebook Scams Now Spreading By Dodgy Browser Plug-Ins

   » ‎ Packet Storm Security Headlines
  Facebook Scams Now Spreading By Dodgy Browser Plug-Ins

  Tags:  facebook spreading scams plug-ins  

• June 30, 2010
• 3:52

  Google Chrome Set To Follow Firefox In Blocking Out-of-date Plug-ins

   » ‎ Darknet
  It’s good news to see that Google is taking security issues seriously when it comes to its Chrome browser. This has been shown before when Google was Willing To Pay Bounty For Chrome Browser Bugs. And well honestly, we haven’t had a lot of news of exploits in Chrome. Perhaps it’s because the user-base just [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  chrome google news read taking-security plug-ins darknet Countermeasures  

• 0:00

  Google Chrome Will Block Out-Of-Date Plug-Ins

   » ‎ Packet Storm Security Headlines
  Google Chrome Will Block Out-Of-Date Plug-Ins

  Tags:  chrome google will plug-ins  

• June 28, 2010
• 11:58

  Firefox Saved Passwords

   » ‎ Carnal0wnage
  Nothing earth shattering, but since this is a place for my notes...
  
  Sometimes while you are on a box and pilfering through all the documents doesn't yield anything useful for you to move laterally you can sometimes grab the Firefox saved passwords. Lots of times someone will save their password to the corporate OWA, wiki, helpdesk page, or whatever. Even if doesn't give you a *great* lead you'll at least get an idea if they are a password re-user or not.
  
  So how to do it?
  
  Actually its simple. Inside of the mozilla\firefox directory will be somethingrandom.default. Inside that folder you'll find:
  
  key3.db
  signons.sqlite
  
  If there is no master password set, all you have to do is replace the files on your test VM with the two files you downloaded, open firefox, go to preferences, security, and do a view saved passwords.
  
  I think there are some fancy Firefox plug-ins that can pull this info out and I'm sure there are some binaries you can push up that will dump this for you as well. But this is quick and easy and you're probably already downloading files (at least you probably *should* be) anyway...
  
  -thanks to Mubix for telling me about this.

  Tags:  saved password firefox mozilla-firefox plug-ins owa Pentesting