jetlib.sec » Tags » victim

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

11 items tagged "victim"

Related tags: attacker [+], based buffer overflow [+], traffic load [+], queue [+], pls file [+], module [+], information leaks [+], deepburner [+], dbr [+], audiotran [+], account [+], vulnerability analysis [+], toes [+], sslstrip [+], robbery [+], presentation [+], network trace [+], lumpsum [+], iptables [+], incident analysis [+], incident [+], ims [+], hacker [+], gateway [+], factor authentication [+], exploitation techniques [+], destination port [+], bound [+], arpspoof [+], andrzej dereszowski [+], analysis [+], Newbie [+], Area [+]

• January 18, 2012
• 15:35

  Reflection Scan: An Off-Path Attack On TCP

   » ‎ Packet Storm Security Recent Files
  The paper demonstrates how traffic load of a shared packet queue can be exploited as a side channel through which protected information leaks to an off-path attacker. The attacker sends to a victim a sequence of identical spoofed segments. The victim responds to each segment in the sequence (the sequence is reflected by the victim) if the segments satisfy a certain condition tested by the attacker. The responses do not reach the attacker directly, but induce extra load on a routing queue shared between the victim and the attacker. Increased processing time of packets traversing the queue reveal that the tested condition was true. The paper concentrates on the TCP, but the approach is generic and can be effective against other protocols that allow to construct requests which are conditionally answered by the victim.

  Tags:  attacker victim queue information-leaks traffic-load  

• 15:35

  Reflection Scan: An Off-Path Attack On TCP

   » ‎ Packet Storm Security Misc. Files
  The paper demonstrates how traffic load of a shared packet queue can be exploited as a side channel through which protected information leaks to an off-path attacker. The attacker sends to a victim a sequence of identical spoofed segments. The victim responds to each segment in the sequence (the sequence is reflected by the victim) if the segments satisfy a certain condition tested by the attacker. The responses do not reach the attacker directly, but induce extra load on a routing queue shared between the victim and the attacker. Increased processing time of packets traversing the queue reveal that the tested condition was true. The paper concentrates on the TCP, but the approach is generic and can be effective against other protocols that allow to construct requests which are conditionally answered by the victim.

  Tags:  attacker victim queue information-leaks traffic-load  

• June 15, 2011
• 20:36

  Incident Analysis: Million Dollars Lost In A Minute

   » ‎ Carnal0wnage
  Dudes, I and two other fellows have dealt with an incident about a victim whose online banking account has been compromised and a huge lumpsum of money is transferred out to eastern europe. In fact, the victim is still using the old two-factor authentication token, it means we cannot identify the generated passcode is for authentication, money transfer to a specific account , bill payment, etc, attacker manipulates it indeed. Please download it from here.
  goo.gl/FVFBO
  Enjoy it, mate ;-)

  Tags:  account incident victim factor-authentication incident-analysis lumpsum  

• August 06, 2010
• 0:00

  Bound Robbery Victim IMs For Help With Toes

   » ‎ Packet Storm Security Headlines
  Bound Robbery Victim IMs For Help With Toes

  Tags:  bound victim robbery ims toes  

• June 17, 2010
• 2:00

  [Slides] Targeted attacks: from being a victim to counter attacking

   » ‎ SecDocs
  Authors: Andrzej Dereszowski
  Tags: malware exploiting browser malware analysis
  Event: Black Hat EU 2010
  Abstract: This presentation is an analysis of a common sort of targeted attacks performed nowadays against many organizations. As it turns out, publicly available remote access tools - RAT (which we usually call trojans) are frequently used to maintain control over the victim after a successful penetration. The presentation and the white paper do not focus on a particular exploitation techniques used in these attacks. Instead, they aim to get a closer look at one of the most popular remote access trojans. The presentation describes a way to figure out which particular trojan has been used. It shows the architecture, capabilities and techniques employed by developers of the identified trojan, including mechanisms to hide its presence in the system, and to cover its network trace. It speaks about tools and techniques used to perform this analysis. Finally, it presents a vulnerability analysis and a proof of concept exploit to show that the intruders could also be an object of an attack.

  Tags:  analysis victim presentation andrzej-dereszowski vulnerability-analysis exploitation-techniques network-trace  

• February 05, 2010
• 17:00

  audiotran_pls.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a stack-based buffer overflow in Audiotran 1.4.1. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS extention is registered to Audiotran. This functionality has not been tested in this module.

  Tags:  audiotran victim module based-buffer-overflow pls-file attacker  

• 17:00

  deepburner_path.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a stack-based buffer overflow in versions 1.9.0.228, 1.8.0, and possibly other versions of AstonSoft's DeepBurner (Pro, Lite, etc). An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded DBR file within a browser, since the DBR extension is registered to DeepBurner.

  Tags:  victim dbr deepburner based-buffer-overflow attacker  

• 17:00

  audiotran_pls.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack-based buffer overflow in Audiotran 1.4.1. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS extention is registered to Audiotran. This functionality has not been tested in this module.

  Tags:  audiotran victim module based-buffer-overflow pls-file attacker  

• 17:00

  deepburner_path.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack-based buffer overflow in versions 1.9.0.228, 1.8.0, and possibly other versions of AstonSoft's DeepBurner (Pro, Lite, etc). An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded DBR file within a browser, since the DBR extension is registered to DeepBurner.

  Tags:  victim dbr deepburner based-buffer-overflow attacker  

• January 28, 2010
• 0:00

  7/7 Victim's Account Hacker Jailed

   » ‎ Packet Storm Security Headlines
  7/7 Victim's Account Hacker Jailed

  Tags:  hacker account victim  

• January 21, 2010
• 0:00

  sslstrip wired/wireless network

   » ‎ remote-exploit & backtrack
  I have the following setup works
  
  
  # Victim
  [My Laptop@10.0.0.2] < ---- > [My PC@10.0.0.1 & Gateway@10.0.0.138]
  
  Works fine running sslstrip & bt4 vm on my pc as the attacker on my eth0 interface.
  
  What im finding difficult is this setup, it effectively DoS attacks my router.
  
  # Victim on XP [My Laptop@10.0.0.2]
  >>>>>>>>>>>>>>>>>>>>>>> [Gateway@10.0.0.138]
  # bt4 VMware [My Laptop@10.0.0.4]
  
  
  - Victim on XP is connected to the gateway on my 1490 Mini WLAN Card.
  - bt4 VMware is using my ALFA'36H to connect to the gateway, so both wireless.
  
  arpspoof between XP@10.0.0.2 & Gateway@10.0.0.138 with interface wlan0 works. But as soon as i do the iptables i effectivly DoS the router and the victim cannot surf the net, so the attack becomes useless. Code: iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-ports 10000 So all im left with is a forum post from remote exploit i found the other day i cannot find again which breifly mentioned not needing sslstrip to do an attack like this because it is only encrypted with wpa/wep not ssl yet and that i can just run airdecap-ng to take off the encryption.
  
  So how can i get this working using either method.
  
  And going back to my original scenario with 1 client. If i reversed roles and used bt4 vmware on the laptop would i be able to do this sslstrip attack on the PC? or is it only limited to being ran from the wired side of the network?

  Tags:  gateway sslstrip victim arpspoof destination-port iptables Newbie Area