«
Expand/Collapse
137 items tagged "search"
Related tags:
search version [+],
cross [+],
sql injection [+],
search plugin [+],
wordpress [+],
network [+],
bing [+],
vbulletin [+],
sql [+],
search path [+],
proof of concept [+],
privilege escalation vulnerability [+],
local privilege escalation [+],
ghostscript [+],
vulnerability [+],
video [+],
seizure [+],
search result [+],
privacy event [+],
mp3 search engine [+],
mobile mp3 [+],
mobile [+],
linux [+],
hijacking [+],
file search [+],
file [+],
encoding [+],
effective [+],
drupal [+],
brown rob ragan [+],
authors [+],
zoom [+],
zerboard [+],
yolink [+],
whois search [+],
whois [+],
tyler [+],
siche [+],
search ui [+],
search queries [+],
search parameter [+],
search network [+],
search module [+],
search engine builder [+],
search api [+],
search and seizure [+],
search activity [+],
ragan [+],
phpmyadmin [+],
paydutchgroup [+],
network search engine [+],
nasty creature [+],
multisite [+],
malicious users [+],
malicious user [+],
job search [+],
job [+],
jaydeonline [+],
image search engine [+],
image [+],
goblin [+],
gggooglescan [+],
expression search [+],
expression [+],
exploits [+],
dns servers [+],
dns queries [+],
dns [+],
direct access [+],
destination search [+],
destination [+],
database search [+],
database [+],
conduit [+],
com [+],
builder [+],
boomge [+],
babylon [+],
automatic search [+],
audio [+],
api [+],
access [+],
x86 linux [+],
user [+],
slides [+],
shellcode [+],
searchlog [+],
search functionality [+],
search field [+],
pitchford [+],
php files [+],
perfect [+],
module [+],
kleinanzeigenmarkt [+],
key tags [+],
intelligence [+],
handcuffs [+],
google cache [+],
files search [+],
field [+],
component search [+],
code [+],
cache [+],
bible search [+],
bible [+],
arbitrary html [+],
apple safari [+],
cross site scripting [+],
engine [+],
xss [+],
xenon lamp [+],
xenon arc lamp [+],
xenon [+],
world war ii [+],
woc [+],
webedition [+],
warns [+],
virtual interface [+],
viewvc [+],
video search [+],
usa [+],
untrusted [+],
typo [+],
tax [+],
steve dunker [+],
stack overflow [+],
spotify [+],
sophos [+],
softwares [+],
social engineering [+],
serveur web [+],
serves [+],
security researchers [+],
security centre [+],
security [+],
search warrants [+],
search traffic [+],
search page [+],
search extension [+],
search engines [+],
search engine script [+],
search engine php [+],
search engine optimisation [+],
search data [+],
search command [+],
search bible [+],
scrutinise [+],
script v1 [+],
script sql [+],
script [+],
safari search [+],
revou [+],
result [+],
researchers [+],
remote [+],
regular expression [+],
quot [+],
python script [+],
python [+],
portal search [+],
portal [+],
plugin [+],
pirate web [+],
phpmyfaq [+],
php sql [+],
php nuke [+],
path [+],
paris [+],
page [+],
news [+],
nbsp [+],
multiple [+],
ms security [+],
mercury [+],
memory exhaustion [+],
manu [+],
lord [+],
list [+],
library search path [+],
library [+],
lamp [+],
knowledge base [+],
joomla [+],
jim rennie [+],
jevents [+],
isps [+],
ip search [+],
information intelligence [+],
information [+],
imapd [+],
huge list [+],
hosts [+],
hostnames [+],
holders [+],
history search [+],
history [+],
hijack [+],
health tax [+],
health [+],
hacks [+],
hacking search [+],
hackers [+],
hacker [+],
guide [+],
government search engine [+],
government [+],
google search [+],
glsa [+],
global search [+],
global [+],
func [+],
fbi [+],
explained [+],
eric rachner [+],
engine crawler [+],
edgephp [+],
ecshop [+],
dunker [+],
dorkmaster [+],
disclosure [+],
denial of service [+],
demand [+],
debutant [+],
day [+],
cruxcms [+],
crackdown [+],
content types [+],
consulting [+],
cobrascripts [+],
classic [+],
chans [+],
centre search [+],
centre [+],
canoy [+],
blog [+],
ben krasnow [+],
bat signal [+],
auth [+],
audio search [+],
asp [+],
arcade [+],
arbitrary code execution [+],
arbitrary [+],
apartmen [+],
a blog [+],
Software [+],
Espace [+],
google [+],
search engine [+],
php [+]
-
-
15:29
»
Packet Storm Security Advisories
UC PayDutchGroup / WeDeal payment integrates the PayDutchGroup / WeDeal payment gateway with Ubercart. The module exposes account credentials for the store's PayDutchGroup account under certain circumstances allowing a malicious user to login to the PayDutchGroup site as the store owner and manage the store owner's account. The vulnerability is mitigated by an attacker needing to gain an account with the ability to checkout of the store. Multisite Search allows you to index and search content from all sites in a Multisite configuration. The module doesn't sufficiently escape user input when constructing queries. The vulnerability is mitigated by the fact that in order to execute arbitrary sql injection malicious users must have the ability to administer multisite search.
-
15:29
»
Packet Storm Security Recent Files
UC PayDutchGroup / WeDeal payment integrates the PayDutchGroup / WeDeal payment gateway with Ubercart. The module exposes account credentials for the store's PayDutchGroup account under certain circumstances allowing a malicious user to login to the PayDutchGroup site as the store owner and manage the store owner's account. The vulnerability is mitigated by an attacker needing to gain an account with the ability to checkout of the store. Multisite Search allows you to index and search content from all sites in a Multisite configuration. The module doesn't sufficiently escape user input when constructing queries. The vulnerability is mitigated by the fact that in order to execute arbitrary sql injection malicious users must have the ability to administer multisite search.
-
15:29
»
Packet Storm Security Misc. Files
UC PayDutchGroup / WeDeal payment integrates the PayDutchGroup / WeDeal payment gateway with Ubercart. The module exposes account credentials for the store's PayDutchGroup account under certain circumstances allowing a malicious user to login to the PayDutchGroup site as the store owner and manage the store owner's account. The vulnerability is mitigated by an attacker needing to gain an account with the ability to checkout of the store. Multisite Search allows you to index and search content from all sites in a Multisite configuration. The module doesn't sufficiently escape user input when constructing queries. The vulnerability is mitigated by the fact that in order to execute arbitrary sql injection malicious users must have the ability to administer multisite search.
-
-
17:07
»
Packet Storm Security Recent Files
This shellcode writes down your code in the end of found files. Your code will be added only .html and .php files. Search for files is carried out recursively.
-
17:07
»
Packet Storm Security Misc. Files
This shellcode writes down your code in the end of found files. Your code will be added only .html and .php files. Search for files is carried out recursively.
-
-
12:03
»
SecDocs
Authors:
Francis Brown Rob Ragan Tags:
intelligence Event:
Black Hat USA 2010 Abstract: During World War II the CIA created a special information intelligence unit to exploit information gathered from openly available sources. One classic example of the team’s resourcefulness was the ability to determine whether Allied forces had successfully bombed bridges leading into Paris based on increasing orange prices. Since then OSINT sources have surged in number and diversity, but none can compare to the wealth of information provided by the Internet. Attackers have been clever enough in the past to take advantage of search engines to filter this information to identify vulnerabilities. However, current search hacking techniques have been stymied by search provider efforts to curb this type of behavior. Not anymore - our demonstration-heavy presentation picks up the subtle art of search engine hacking at the current state and discusses why these techniques fail. We will then reveal several new search engine hacking techniques that have resulted in remarkable breakthroughs against both Google and Bing. Come ready to engage with us as we release two new tools, GoogleDiggity and BingDiggity, which take full advantage of the new hacking techniques. We’ll also be releasing the first ever “live vulnerability feed”, which will quickly become the new standard on how to detect and protect yourself against these types of attacks. This presentation will change the way you've previously thought about search engine hacking, so put on your helmets. We don't want a mess when we blow your minds.
-
-
17:50
»
Packet Storm Security Recent Files
GGGooglescan is a Google scraper which performs automated searches and returns results of search queries in the form of URLs or hostnames. Datamining Google's search index is useful for many applications. Despite this, Google makes it difficult for researchers to perform automatic search queries. The aim of GGGooglescan is to make automated searches possible by avoiding the search activity that is detected as bot behavior.
-
17:50
»
Packet Storm Security Tools
GGGooglescan is a Google scraper which performs automated searches and returns results of search queries in the form of URLs or hostnames. Datamining Google's search index is useful for many applications. Despite this, Google makes it difficult for researchers to perform automatic search queries. The aim of GGGooglescan is to make automated searches possible by avoiding the search activity that is detected as bot behavior.
-
17:50
»
Packet Storm Security Misc. Files
GGGooglescan is a Google scraper which performs automated searches and returns results of search queries in the form of URLs or hostnames. Datamining Google's search index is useful for many applications. Despite this, Google makes it difficult for researchers to perform automatic search queries. The aim of GGGooglescan is to make automated searches possible by avoiding the search activity that is detected as bot behavior.
-
-
8:00
»
Hack a Day
Forget flashlights, and leave those burning lasers at home, [Ben Krasnow] built a search light using a 1000W xenon arc lamp. That box you see on the side of the trash-can housing countains a starting circuit that shoots 30 kilovolts through the xenon lamp to get it started but it is separate from the power [...]
-
-
19:51
»
Packet Storm Security Tools
Dorkmaster is a python script that crawls Google and Bing results looking for various pieces of software that has historically had vulnerabilities. This is useful for verifying that your company is in compliance with software run on a given site.
-
-
21:03
»
Packet Storm Security Tools
Download Indexed Cache is a proof of concept script that implements the Google SOAP Search API to retrieve content indexed within the Google Cache to support the Search Engine Reconnaissance section of the OWASP Testing Guide version 3.
-
21:02
»
Packet Storm Security Recent Files
Download Indexed Cache is a proof of concept script that implements the Google SOAP Search API to retrieve content indexed within the Google Cache to support the Search Engine Reconnaissance section of the OWASP Testing Guide version 3.
-
-
21:00
»
Packet Storm Security Tools
This tool enumerates hostnames from Bing.com for an IP address. Bing.com is Microsoft's search engine which has an IP: search parameter. Written in Bash for Linux. Requires wget.
-
-
10:00
»
Packet Storm Security Recent Files
Secunia Research has discovered a vulnerability in ViewVC, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the regular expression search functionality is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Successful exploitation requires that the regular expression search functionality is enabled (disabled by default).
-
10:00
»
Packet Storm Security Advisories
Secunia Research has discovered a vulnerability in ViewVC, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the regular expression search functionality is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Successful exploitation requires that the regular expression search functionality is enabled (disabled by default).
-
-
4:46
»
remote-exploit & backtrack
Bonjour.
J'ai un petit soucis avec etterfilter. quand je veux utiliser al fonction search(), il ne found rien.
Par exemple. J'ai deux Vm's, un client et un serveur web, sur deux subnet différents (deux virtual interface) et mon pc entre les deux qui fait routeur.
Voici un exemple de script qui ne fonctionne pas :
Code:
if (search(DATA.data, "<title>")){
msg("! \n");
}
else{
msg(". \n");
}
Je lance ettercap comme cela :
Code:
ettercap -T -F ~/Filtre.ef -i vboxnet0 -q
Alors que en regardant avec wireshark, j'ai bien des paquets contenant "<title>" qui circulent.
Ca fait une semaine que je galère avec ça.
J'ai déja demandé sur des chans irc (dont le backtrackfr), forums et amis...
Rien.
Si quelqu'un a une solution
Merci d'avance
Manu404