< Back to JetLib.com

jetlib.sec » Tags » source-address

« Expand/Collapse

5 items tagged "source address"

Related tags: security technologies [+], security [+], denial of service [+], core [+], advisory [+], tcp wrappers [+], tcp [+], read [+], pwb [+], original source [+], nsdecoder [+], malware [+], detection [+], darknet [+], chris [+], acl [+], Pentesting [+], Countermeasures [+]

December 13, 2010
5:19
Core Security Technologies Advisory 2010.0728
» ‎ Packet Storm Security Advisories

Core Security Technologies Advisory - The Intel Alert Handler service ('hndlrsvc.exe') fails to correctly process the 'CommandLine' field in the AMS request. A source address in a 'MOV' instruction is calculated from values present in the request, causing a remote denial-of-service.
Tags: advisory core security denial-of-service security-technologies source-address

5:19
Core Security Technologies Advisory 2010.0728
» ‎ Packet Storm Security Recent Files

Core Security Technologies Advisory - The Intel Alert Handler service ('hndlrsvc.exe') fails to correctly process the 'CommandLine' field in the AMS request. A source address in a 'MOV' instruction is calculated from values present in the request, causing a remote denial-of-service.
Tags: advisory core security denial-of-service security-technologies source-address

5:19
Core Security Technologies Advisory 2010.0728
» ‎ Packet Storm Security Misc. Files

Core Security Technologies Advisory - The Intel Alert Handler service ('hndlrsvc.exe') fails to correctly process the 'CommandLine' field in the AMS request. A source address in a 'MOV' instruction is calculated from values present in the request, causing a remote denial-of-service.
Tags: advisory core security denial-of-service security-technologies source-address

October 20, 2010
2:14
NSDECODER – Automated Website Malware Detection Tool
» ‎ Darknet

NSDECODER is a automated website malware detection tool. It can be used to decode and analyze an URL to see if it host to malware. Also, NSDECODER will analyze which vulnerability has been exploited and the original source address of malware. Functions Automated analysis and detection of website malware. Detection for plenty of vulnerabilities....

Read the full post at darknet.org.uk

Tags: detection malware nsdecoder read source-address darknet original-source Countermeasures

March 09, 2010
15:54
TCP Wrappers
» ‎ remote-exploit & backtrack

Hello, I posted this in the OffSec PWB forum, but I don't think it's frequented that often hence no response. Apologies for the re-post if you've already come across this.

I've been doing some research into tcp wrappers recently, having noticed that a few services within the pwb lab are wrapped. As I understand it tcpwrappers are a method of applying an ACL to a service, based on IP address.

I've figured that I can only talk to wrapped services if i'm bouncing through another host, but is there a reliable way of determining which hosts are in the ACL? The only ideas i've had on this so far seem to require some cache poisoning, which seems more than likely to mess things up (and poisoning is not allowed in the labs anyway!).

Spoofing my source address could be an option I suppose, but that would mean responses are directed elsewhere I guess...

Can anyone share any insights into this? Even a nudge in the right direction would be appreciated.

Thanks

Chris
Tags: tcp acl pwb chris tcp-wrappers source-address Pentesting