«
Expand/Collapse
1340 items tagged "web"
Related tags:
java [+],
firefox [+],
vulnerability [+],
xss [+],
web interface [+],
day [+],
cross site scripting [+],
webacoo [+],
web server version [+],
web gateway [+],
web application [+],
usa [+],
start [+],
sql injection [+],
relative web [+],
polycom [+],
owasp [+],
oracle [+],
nids [+],
network firewalls [+],
model g3 [+],
method implementation [+],
management interface [+],
management [+],
java web start [+],
injection [+],
cross [+],
apache tomcat [+],
sirmanet [+],
rich lundeen [+],
jesse ou [+],
indiana jones 4 [+],
indiana [+],
gateway [+],
edge cases [+],
directory traversal vulnerability [+],
directory [+],
code [+],
black hat [+],
web cms [+],
web application developers [+],
vulnerability scanner [+],
sourceone [+],
source [+],
savant [+],
penetration testers [+],
open source tools [+],
mantra [+],
emc [+],
cox web [+],
cox [+],
cms [+],
buffer overflow [+],
beta [+],
zayn [+],
yazilim [+],
xenon [+],
xcat [+],
webapps [+],
web solution [+],
web server directory [+],
web programming languages [+],
web portal [+],
web logic [+],
web experts [+],
web configurator [+],
web browser version [+],
web application servers [+],
vermont web design [+],
vermont [+],
vanguard [+],
vallarta [+],
utm [+],
unc path [+],
travis rhodes [+],
toronto web design [+],
toronto [+],
testing tool [+],
swedish army [+],
swedish [+],
sun java runtime environment [+],
sun java runtime [+],
sths [+],
sphinix [+],
solution group [+],
solution [+],
softeks [+],
security vulnerabilities [+],
security [+],
seamonkey [+],
scalable vector graphics [+],
s r [+],
ruben santamarta [+],
proof of concept [+],
portal [+],
port 4444 [+],
php web [+],
perl [+],
pdf report [+],
pale moon [+],
pale [+],
oracle web [+],
oracle java [+],
opentype fonts [+],
mozilla firefox [+],
moon web [+],
moon [+],
mobile web server [+],
mobile [+],
marketing [+],
manager unc [+],
mac os x [+],
mac os [+],
logic [+],
list [+],
kolkata [+],
julian wa [+],
jetty [+],
jetdirect [+],
java runtime environment [+],
java browser [+],
invalid urls [+],
interface command [+],
interactive web design [+],
interactive [+],
insidechannel [+],
input systems [+],
information disclosure [+],
information [+],
hp jetdirect printers [+],
hp jetdirect device [+],
host headers [+],
hash [+],
gold coast [+],
gold [+],
fabian mihailowitsch [+],
evasion [+],
don [+],
design web services [+],
database sql [+],
d zayn [+],
cyberoam [+],
company [+],
command execution [+],
code execution [+],
coast web [+],
coast [+],
cheshire [+],
bptsoft [+],
b xphone [+],
army web [+],
army [+],
arbitrary code execution [+],
application intelligence [+],
apple security [+],
alexander klink [+],
agence [+],
acti [+],
access sql [+],
abbott [+],
Tools [+],
writing secure code [+],
web tools [+],
web proxies [+],
web companion [+],
web application security [+],
vulnerability assessment [+],
vitalogy [+],
video [+],
traffic [+],
tor [+],
surveillance cameras [+],
sophos [+],
slides [+],
schoolcenter [+],
river web [+],
privacy event [+],
privacy [+],
peakflow [+],
networks [+],
inclusion [+],
hacks [+],
dominik herrmann [+],
design web site [+],
companion [+],
charles river [+],
bugtraq [+],
billy hoffman [+],
arbor networks [+],
analysis [+],
abu dhabi [+],
Software [+],
design [+],
sql [+],
red hat security [+],
zingiri [+],
zero day [+],
zero [+],
zane lackey [+],
wordpress [+],
whistler web [+],
whistler [+],
web user [+],
web shop [+],
web server application [+],
web server [+],
web proxy [+],
web mart [+],
web giant [+],
web evolution [+],
web developer [+],
web censorship [+],
web assessment [+],
web appliance [+],
weapon [+],
vulns [+],
virtualizes [+],
victor [+],
variable flow [+],
vanish [+],
user interface [+],
universal remote control [+],
uc web [+],
twitter [+],
trojan [+],
time developers [+],
talk [+],
symantec web [+],
symantec [+],
stefano zanero [+],
spoofing [+],
shawn moyer [+],
shah tags [+],
session attacks [+],
security scanner [+],
security gateway [+],
securing web applications [+],
secure web [+],
scanner [+],
saumil shah [+],
revolutions [+],
remote administration [+],
read [+],
pyme [+],
proxy [+],
news [+],
mart handling [+],
lackey [+],
keys [+],
kent web [+],
kent [+],
ir receiver [+],
interface [+],
information disclosure vulnerability [+],
indian web [+],
indian [+],
incident [+],
ibm [+],
hosting [+],
hordes [+],
home [+],
hacking [+],
hackaday [+],
gun smuggling [+],
google [+],
gateway url [+],
gateway protection [+],
game authors [+],
fyi [+],
forensic web [+],
flexible web [+],
file upload [+],
fbi [+],
fall [+],
facebook [+],
exploits [+],
evolution 1 [+],
evolution [+],
everyone [+],
enumeration [+],
entertainment [+],
ellasan [+],
effective [+],
dom [+],
directory traversal [+],
development [+],
detecting [+],
defeating [+],
darknet [+],
curiosity [+],
crypto [+],
crims [+],
could [+],
cookies [+],
configurator [+],
chuck willis rohyt [+],
chris eng [+],
china [+],
censorship [+],
building [+],
bravenet web services [+],
bravenet [+],
box web [+],
box [+],
book [+],
blames [+],
black [+],
big g [+],
belani [+],
automatically [+],
authoritative action [+],
authentication [+],
audio [+],
assessment web [+],
assessment [+],
asia [+],
ascii art [+],
ascii [+],
arian evans [+],
appliance [+],
antonio [+],
anonymous web [+],
anonymous [+],
analyzing data [+],
alex stamos [+],
ajax [+],
mcafee [+],
php [+],
web security [+],
security appliance [+],
email [+],
application [+],
service vulnerability [+],
open source web [+],
hash collision [+],
form [+],
denial of service [+],
web design [+],
red [+],
max [+],
jboss [+],
deployment platform [+],
apache [+],
web sql [+],
chaos communication congress [+],
site [+],
server [+],
zones,
zip proof,
zervit,
zaborowski,
ysd,
yops,
yektaweb,
ycrawler,
xsrf,
xpath,
xitami,
xerox workcentre,
xerox,
xbee,
xaurora,
x wcms,
x quicktime,
x evocam,
x cups,
www authors,
wvs,
wrvs,
worx,
world class web,
world,
workcentre,
wolf,
wiznet,
wiz,
windows security,
wikileaks,
wiki web,
wiki,
wiesbaden,
widgets,
wicked,
whitepaper,
whatweb,
wes brown,
websurgery,
websecurify,
webraider,
webos,
webenum,
webclient service,
web x,
web worx,
web worm,
web wiz guide,
web wiz forums,
web wiz forum,
web wiz,
web web,
web visitor,
web viewer,
web version,
web tours,
web toolbox,
web testing,
web template,
web system,
web suite,
web studio,
web statistics,
web solutions,
web slots,
web shell,
web service,
web servers,
web server engine,
web server component,
web server apache,
web scripts,
web script,
web scanner,
web scams,
web scam,
web runners,
web publishing system,
web publisher,
web proxy cache,
web products,
web privacy,
web poll,
web police,
web player,
web platforms,
web photo album,
web pages,
web module,
web messenger,
web manager,
web management,
web jetadmin,
web index,
web increases,
web image,
web ideas,
web hoster,
web host,
web help,
web hacks,
web hacking,
web hackers,
web group,
web graph,
web gallery,
web event,
web edition,
web development group,
web developers,
web developer community,
web designer,
web design sydney,
web design solutions,
web defacement,
web crawler,
web control,
web content manager,
web content management system,
web content management,
web content editor,
web conferencing,
web conference,
web communications,
web commerce,
web calendar,
web business directory,
web builder,
web browser,
web based software,
web based email,
web automation,
web authors,
web authentication,
web auction,
web attacks,
web attack,
web articles,
web art,
web apps,
web applications,
web application security assessment,
web application framework,
web application development,
web analytics,
web administration tool,
web administration interface,
web admin,
web accounts,
weaponizing,
weaning,
wcs,
wcms,
wavsep,
watobo,
watering system,
water saving,
warszawa,
warns,
wappalyzer,
w.e.b,
vupen,
vulnerable,
vulnerability tests,
vulnerability sun,
vulnerability research,
vulnerabilities,
vsr,
vmdirect,
visitor,
vision technologies,
vision,
virus search,
virtual security,
virtual folders,
video web,
vicnum,
version components,
version 6,
version,
vegas,
vega web,
vega,
validation errors,
val smith,
users,
user,
url,
uploadimage,
upload,
unspecified,
unlocking,
universal web,
universal software,
universal,
unauthorized access,
uk web users,
uk web,
uindia,
ubuntu,
txt,
twsl,
twitterpassworddecryptor,
turning,
turn,
troll,
trey ford,
transport security,
transmission rates,
trade,
tracking,
tours,
tornado,
toolbox,
tool evaluation,
tool,
tomcat,
toaster,
tn5250,
title web,
title,
tim mullen,
threats,
thomas akin,
the rise,
than,
thai duong,
tgz,
tftp servers,
testing tools,
testing,
test,
terminal,
template software,
template,
telia,
tehtri security,
technology web,
technology of the future,
technology,
technologies web,
technique,
technical infrastructures,
tavis ormandy,
tavis,
target host,
target,
tar bz2,
tar,
system web,
system products,
system languages,
system index,
system,
synapse web,
synapse,
symbian os,
symbian,
sydney,
swat samba,
swat,
sven vetsch,
sun java,
sun,
suite v1,
suite,
sue,
style,
studio,
streamer,
stralia,
store,
stock tags,
stephan chenette,
stender,
stealthiness,
stealth,
static files,
stack buffer,
srl,
squid,
sqli,
sprinkler,
spokane web,
spokane,
southburn,
source web server,
source codes,
something,
solution index,
software version,
software sql,
software radio,
social web,
social networking,
social,
snow leopard,
snom,
smashing web,
smashing,
slooze,
skipfish,
sites,
simple web server,
simple,
signatures,
siddharth tags,
shopping,
shop,
shema,
shells,
shellcode,
shell,
shay chen,
shape web,
shape,
session management,
session hijacking,
session fixation,
session cookies,
session,
servlet code,
servlet,
service security,
service cross,
service,
servers,
server versions,
server v4,
server v2,
server source code,
server installations,
server firewall,
server compatibility,
server api,
serial connector,
sergio,
seizures,
security web,
security tool,
security threat,
security tags,
security suites,
security skills,
security risks,
security research,
security pros,
security message,
security lab,
security authors,
security audits,
security auditors,
security assessment,
security advisory,
security 2002,
security 2001,
secure,
secubat,
secret paths,
searle,
search result,
scripts,
script sql,
script,
screen scraper,
screen,
scraper,
scott stender,
scott,
school web,
school,
scanners,
scanner evaluation,
scan,
save,
sap web application server,
sap netweaver,
sap,
samurai,
samin,
samba web administration tool,
samba configuration,
samba,
sahi,
safer use,
ryan c. barnett,
russia,
run,
rueckwaerts,
ruby,
rotor system,
roomba,
rook,
robert,
rizzo tags,
ristic,
ricoh,
rich text editor,
rich text,
retired,
rest,
resource names,
reset password,
repository,
reporting,
repetitive elements,
remote shell,
remote exploit,
remote buffer overflow exploit,
remote buffer overflow,
remote,
redirectors,
red hat enterprise,
reconnaissance,
realtor web,
realtor,
ram space,
ram,
rafal los,
rabbit hole,
rabbit,
r57,
quickphp,
quick,
qualys,
quality web design,
quality,
quadcopter,
qtweb,
python programming language,
python,
publishing,
publishers,
publisher,
proximity,
protection group,
project,
progetto,
professional,
product,
prodotto,
prodotti,
pro web,
pro,
privilege escalation vulnerability,
privacy tools,
privacy protection,
printing methods,
pre,
potential security vulnerability,
portuguese,
portales web,
pooranee inspirations,
pooranee,
poll,
poison,
poc,
plus,
plugin archive,
player versions,
platform,
phone,
personal web server,
persistent web,
perl cgi program,
peripherals,
penny pincher,
penny,
penetration test,
penetration,
pen,
pc web,
pc proximity,
pc locks,
payloads,
payload,
paul stone,
patrick thomas tags,
patrick thomas,
part,
paper web,
paper,
pages,
page asp,
overview,
overflow code,
output management,
output,
outlook web access,
outlook,
other search engines,
osx,
os x,
ormandy,
originsoftech,
order of magnitude,
oracle web server,
oracle sql,
oracle 9i,
ops,
opera web browser,
opera web,
opera,
open web,
open source tool,
open source platform,
open,
onpub,
online,
onion router,
old software,
office web components,
office,
ofer shezaf,
ofer,
odd calendar,
occurrences,
o.s,
number,
ntwebserver,
novaya gazeta,
novaya,
nokia symbian,
nokia,
noida,
nitro,
nikto,
nike system,
nike,
next,
newspad,
new,
network sockets,
network,
netsparker,
netserve,
netscape web,
netscape,
net,
nessus,
nepal,
neil daswani,
negar,
neat tool,
navigator interface,
nathan hamiel,
nat,
name,
multiple,
mr.pantz,
mongoose,
module,
modern computer,
mod,
mitel,
misc,
miniature,
mine,
millions,
mike bailey,
middler,
microsoft outlook web access,
microsoft outlook web,
microsoft office web components,
microsoft,
microcontrollers,
michael sutton,
michael shema,
michael schrenk,
michael schmidt,
michael schearer,
metasploit,
messenger,
message,
memory leak,
memory corruption,
memorial web,
memorial,
meetingplace,
meditate,
media web,
media,
matt dickerson,
math server,
master thesis,
massive web,
mass web,
mass market,
mass,
marketing web,
market web,
market,
mariano nunez,
marco monaco,
mapping tool,
manual web,
manipulations,
manifattura,
mandriva linux,
manager version,
manager pro,
manager interface,
manager,
management gui,
malware,
malicious web,
malicious java,
malicious content,
malaysia,
making money on the web,
make,
magnitude improvements,
madni,
machine,
luxcal,
luch,
louis,
login credentials,
logical,
local buffer overflow,
local,
loadrunner,
lms,
little,
litespeed,
linux environment,
linux,
links,
link directory,
line web,
line,
lilith,
lib dems,
leonardo,
legitimate web,
legislative web,
least,
layering,
laurent oudot,
latin america,
lansa,
lang,
ladd harris,
lab,
knows,
kimia,
justin searle,
josh sokol,
joomla,
jonathan,
john terrill tags,
john terrill,
joe,
jetadmin,
jeremiah grossman,
jboss enterprise application platform,
jay beale,
javaserver pages technologies,
javascript users,
javascript content,
javascript,
java web server,
java web,
java system,
java plug,
jarlsberg,
ive,
ivan ristic,
itt,
israel,
isp customers,
ishikawa,
iscanner,
irc,
ipad,
intrusion,
internet transaction server,
internet explorer,
internet,
interna,
intermediate files,
intermedia web,
intermedia,
interface versions,
interface platform,
interface cable,
interactive web solutions,
interactive web application,
interactive sitemap,
intentional behavior,
intelligence initiative,
integer overflow vulnerability,
instinctive,
inspirations,
insecure,
input vectors,
input validation vulnerabilities,
input validation,
information overload,
infocus,
industry web,
industry,
indusoft,
indonesia web,
indonesia,
index,
independent module,
incorrectly,
incident database,
imperva,
ileys,
identifying,
idea,
icompendium,
icedtea web,
human rights,
https,
httpblitz,
http,
html,
hp web,
hp ux,
hoster,
host,
horizon web,
horizon,
honeypot,
homeserver,
hole,
hitbsecconf,
hitachi web,
hitachi,
hit,
hijacking,
help system,
hat europe,
hari kari,
hardware hacking,
hard core,
hacktivists,
hackers,
hacker web,
hacker attack,
hacker,
hacked,
hack in the box,
hack attack,
hack,
grupo,
group patterns,
group,
groundspeed,
grossman,
green,
grand idea,
gps data,
google maps,
good,
golive,
golismero,
glastopfng,
girlfriend,
getpage,
get,
generic mechanism,
gekko,
gefest,
gcp,
gazeta,
games,
game,
gallery,
fuzzer,
fusion,
funnel web,
funnel,
fundamental defense,
function buffer overflow,
ftp,
freebsd,
free open source,
free,
fraud,
framework,
forgery,
forensics,
fonera based,
flock,
flash hacks,
flash,
flags,
fireshark,
fingerprinting,
finger printing,
finger,
filray,
file browser,
file,
fifth beta,
feature,
fail,
ezequiel,
extrusion,
external server,
exposes,
exploitation techniques,
exploit,
example source,
evil,
evidalia,
europe,
etrinitee,
erik berls,
epidemic,
enterprise apps,
enterprise,
ensino,
endler,
encomposs,
encompass,
embedthis,
element,
eksi,
ego,
edward zaborowski,
edition web,
edition v1,
edition,
eden prairie high school,
eden prairie high,
ebuddy,
easyphp,
easy web,
easy file sharing web server,
easy,
eagerfeet,
e commerce software,
dynmedia,
dynamic technique,
dynamic php,
dynamic nature,
dubai,
dream vision,
downgroup,
doug,
doppelganger,
dojo,
document type definitions,
dll loading,
djm,
diy,
divx,
dispensing system,
discovery web,
disclosure,
dirtiest,
different,
di croce,
dhs,
development frameworks,
details web,
details,
designers web,
designers,
designer,
design index,
dems,
demonstration page,
defense,
default,
defacer,
defacement,
dca,
daybiz,
david rook,
david litchfield,
david endler,
datasets,
dataface,
database,
dangling pointer,
dangerous files,
dan kaminsky,
d. gutesman,
d link,
cyclomatic complexity,
cyber criminals,
custom shade,
cups,
csrf,
cripples,
creator web,
creator,
crawling,
crash,
covert channel,
couchdb,
cotton candy,
cotton,
core web,
copter,
cool web,
cool,
cookie authentication,
cookie,
cook,
control,
contexts,
content management systems cms,
content management systems,
content management system,
content length,
content authors,
content,
contacto,
constricting,
configuration tool,
config,
confidentiality,
conference,
concurrency,
computer associates arcserve,
computer,
compromising,
compromises,
compromise,
comodo,
communications,
commerce systems,
commerce,
collusion,
coliseum,
colin ames,
coldfusion,
codelab,
cms web,
clickjacking,
clearbox,
cleaning machine,
clash,
cisco unified,
cisco security advisory,
cisco security,
cisco rvs,
cisco internet,
cisco content,
cisco cds,
cisco,
chrome,
chris clark townsend,
chinese web,
child pornography,
chicopee,
cherokee web,
cherokee,
cheesy web,
cheapskates,
cgi irc,
cgi,
cat id,
cat,
cannot,
candy,
calendar versions,
calendar,
ca arcserve,
c announces,
business,
burp,
builder,
buffer overflows,
buffer overflow vulnerability,
buffer,
bt4,
bryan sullivan,
bruter,
brute,
browsing,
browsers,
browser v2,
browser user,
browser feature,
browser extensions,
browser dos,
browser,
brian martin matt dickerson,
brandon creighton,
branded,
brad hill,
bpconferencereporting,
boycott google,
boycott,
bowne,
boston,
bogdan,
bodgeit,
bocetar,
bmsa,
bluekey,
blindelephant,
blame,
black ops,
biocase,
binamic,
bill pennington jeremiah grossman,
bill pennington dennis groves,
bill pennington,
beta windows,
beta mac os,
beta linux,
basic,
based buffer overflow,
banks,
bank of america web site,
bank of america,
bank,
backdoors,
backdoor,
back doors,
b14,
axis,
axes,
avast,
automation tool,
automation application,
automated,
auto web,
auto,
authors,
authorities,
author,
authentication header,
authentication credentials,
audit tool,
audit framework,
audio web,
auction,
attacks,
attacking,
attackers,
attacker,
attack web,
attack patterns,
attack,
atlantic city casinos,
atlantic city,
atar,
assorted files,
asoc,
arya,
art studio,
art,
argentina,
arduino,
arcserve,
arbitrary web,
arbitrary files,
arbitrary command,
arbitrary code,
arachni,
appweb,
apps,
application web,
application scanner,
application programming interfaces,
application development platform,
application compatibility,
apple mac os x,
apple mac os,
app,
apache web server,
apache myfaces,
apache based,
anonymisation,
annoying limitations,
announcing,
andrs pablo riancho,
andrew van der,
andiparos,
and,
analyzing,
analytics,
analyst,
america web site,
america,
alsco,
allomani,
alderney,
alarmpoint,
al qaida web site,
al qaida,
akamai report,
aim web,
agency index,
agency,
aficio,
advisory,
administration,
admin password,
admin panel,
admin,
added features,
add,
acunetix web vulnerability scanner,
acunetix,
activity,
activists,
active web,
account passwords,
access,
academic web,
academic,
abyss web server,
abyss,
Wireless,
Related,
Pentesting,
Newbie,
Learn,
Issues,
General,
Forums,
ExploitsVulnerabilities,
Discussion,
Countermeasures,
Bugs,
BackTrack,
Area
Skip to page:
1
2
3
...
6
-
-
14:54
»
Packet Storm Security Recent Files
WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These details include the status of the scan, the number of URLs found on the web application, the number of vulnerabilities found and details of the vulnerabilities found. After a scan is complete, a detailed PDF report is emailed to the user. The report includes descriptions of the vulnerabilities found, recommendations and details of where and how each vulnerability was exploited.
-
14:54
»
Packet Storm Security Tools
WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These details include the status of the scan, the number of URLs found on the web application, the number of vulnerabilities found and details of the vulnerabilities found. After a scan is complete, a detailed PDF report is emailed to the user. The report includes descriptions of the vulnerabilities found, recommendations and details of where and how each vulnerability was exploited.
-
14:54
»
Packet Storm Security Misc. Files
WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These details include the status of the scan, the number of URLs found on the web application, the number of vulnerabilities found and details of the vulnerabilities found. After a scan is complete, a detailed PDF report is emailed to the user. The report includes descriptions of the vulnerabilities found, recommendations and details of where and how each vulnerability was exploited.
-
9:01
»
Hack a Day
Like everyone else, we’re scattered all over the web. We would be silly not to be getting our information out there in as many ways as we can manage. We promise that the site always comes first, but you can also find us on Facebook, G+ (yes, we’re approved this time), twitter, and we even [...]
-
-
8:43
»
Packet Storm Security Recent Files
OWASP Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals, etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. This is the source code release.
-
-
15:49
»
Packet Storm Security Recent Files
The ACTi Web Configurator 3.0 for ACTi IP Surveillance Cameras contains a directory traversal vulnerability within the cgi-bin directory. An unauthenticated remote attacker can use this vulnerability to retrieve arbitrary files that are located outside the root of the web server.
-
15:49
»
Packet Storm Security Misc. Files
The ACTi Web Configurator 3.0 for ACTi IP Surveillance Cameras contains a directory traversal vulnerability within the cgi-bin directory. An unauthenticated remote attacker can use this vulnerability to retrieve arbitrary files that are located outside the root of the web server.
-
-
5:01
»
Hack a Day
As a web developer and designer, [Victor] has a habit of putting a very nice ASCII signature in an HTML comment at the top of every web page he designs. He was inspired by seeing others do this, Â and this piqued his curiosity to see who else was doing this. His idea was to scan [...]
-
-
19:09
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0515-01 - Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A flaw was found in Sanitiser for OpenType, used by Firefox to help prevent potential exploits in malformed OpenType fonts. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the privileges of the user running Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
19:09
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0515-01 - Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A flaw was found in Sanitiser for OpenType, used by Firefox to help prevent potential exploits in malformed OpenType fonts. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the privileges of the user running Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
19:09
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0515-01 - Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A flaw was found in Sanitiser for OpenType, used by Firefox to help prevent potential exploits in malformed OpenType fonts. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the privileges of the user running Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
-
21:33
»
SecDocs
Authors:
Dominik Herrmann Tags:
web application profiling privacy Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: This talk will provide a summary of recently discovered methods which allow to break the Internet's privacy and anonymity. We will show, amongst others: ways of distinguishing bots from humans. We use this technique to provide crawlers with false data or lure them into tar pits. Other than CAPTCHAs we introduce methods that profile the holistic behaviour within a single web session to distinguish users or bots within a longer timeframe based on subtle charactistics in most bots' implementations. breaking filtering of JavaScript in web-based proxies. While next to all web proxies advertise the capability of filtering JavaScript, the ubiqity of XSS and CSRF attacks have proven that correct filtering of arbitrary HTML is extremly difficult. track and re-identifying users based upon their web-profile. We show how a third-party observer (e. g. proxy server or DNS server) can create a long-term profile of roaming web users using only statistical patterns mined from their web traffic. These patterns are used to track users by linking multiple surfing sessions. Our attack does not rely on cookies or other unique identifiers, but exploits chatacteristic patterns of frequently accessed hosts. We demonstrate that such statistical attacks are practicable and we will also look into basic defense strategies. traffic analysis and fingerprinting attacks on users of anonymizing networks. Even if anonymizeres like Tor are used, a local adversary can measure the volume of transfered data and timing characteristics to e. g. determine the retrieved websites. We will shortly sketch the current state of the art in traffic analysis, which has been improved significantly within the last year
-
21:33
»
SecDocs
Authors:
Dominik Herrmann Tags:
web application profiling privacy Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: This talk will provide a summary of recently discovered methods which allow to break the Internet's privacy and anonymity. We will show, amongst others: ways of distinguishing bots from humans. We use this technique to provide crawlers with false data or lure them into tar pits. Other than CAPTCHAs we introduce methods that profile the holistic behaviour within a single web session to distinguish users or bots within a longer timeframe based on subtle charactistics in most bots' implementations. breaking filtering of JavaScript in web-based proxies. While next to all web proxies advertise the capability of filtering JavaScript, the ubiqity of XSS and CSRF attacks have proven that correct filtering of arbitrary HTML is extremly difficult. track and re-identifying users based upon their web-profile. We show how a third-party observer (e. g. proxy server or DNS server) can create a long-term profile of roaming web users using only statistical patterns mined from their web traffic. These patterns are used to track users by linking multiple surfing sessions. Our attack does not rely on cookies or other unique identifiers, but exploits chatacteristic patterns of frequently accessed hosts. We demonstrate that such statistical attacks are practicable and we will also look into basic defense strategies. traffic analysis and fingerprinting attacks on users of anonymizing networks. Even if anonymizeres like Tor are used, a local adversary can measure the volume of transfered data and timing characteristics to e. g. determine the retrieved websites. We will shortly sketch the current state of the art in traffic analysis, which has been improved significantly within the last year
-
-
15:07
»
Packet Storm Security Advisories
Apple Security Advisory 2012-04-12-1 - Java for OS X 2012-003 and Java for Mac OS X 10.6 Update 8 is now available. As a security hardening measure, the Java browser plugin and Java Web Start are deactivated if they are unused for 35 days. Installing this update will automatically deactivate the Java browser plugin and Java Web Start. Users may re-enable Java if they encounter Java applets on a web page or Java Web Start applications.
-
15:07
»
Packet Storm Security Recent Files
Apple Security Advisory 2012-04-12-1 - Java for OS X 2012-003 and Java for Mac OS X 10.6 Update 8 is now available. As a security hardening measure, the Java browser plugin and Java Web Start are deactivated if they are unused for 35 days. Installing this update will automatically deactivate the Java browser plugin and Java Web Start. Users may re-enable Java if they encounter Java applets on a web page or Java Web Start applications.
-
15:07
»
Packet Storm Security Misc. Files
Apple Security Advisory 2012-04-12-1 - Java for OS X 2012-003 and Java for Mac OS X 10.6 Update 8 is now available. As a security hardening measure, the Java browser plugin and Java Web Start are deactivated if they are unused for 35 days. Installing this update will automatically deactivate the Java browser plugin and Java Web Start. Users may re-enable Java if they encounter Java applets on a web page or Java Web Start applications.
-
14:55
»
Packet Storm Security Exploits
McAfee Web Gateway and Squid Proxy version 3.1.19 suffers from a bypass vulnerability due to putting trust in Host headers. Proof of concept tool included.
-
14:55
»
Packet Storm Security Recent Files
McAfee Web Gateway and Squid Proxy version 3.1.19 suffers from a bypass vulnerability due to putting trust in Host headers. Proof of concept tool included.
-
14:55
»
Packet Storm Security Misc. Files
McAfee Web Gateway and Squid Proxy version 3.1.19 suffers from a bypass vulnerability due to putting trust in Host headers. Proof of concept tool included.
-
-
20:17
»
Packet Storm Security Exploits
SchoolCenter Web Tools version 11.0.27 suffers from a cross site scripting vulnerability. This is an old issue that was never fixed by the vendor in earlier releases.
-
20:17
»
Packet Storm Security Recent Files
SchoolCenter Web Tools version 11.0.27 suffers from a cross site scripting vulnerability. This is an old issue that was never fixed by the vendor in earlier releases.
-
-
21:29
»
SecDocs
Authors:
Jesse Ou Rich Lundeen Travis Rhodes Tags:
web application XSS Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: Writing secure code is hard. Even when people do it basically right there are sometimes edge cases that can be exploited. Most the time writing code that works isn’t even the hard part, it’s keeping up with the changing attack techniques while still keeping an eye on all the old issues that can come back to bite you, straddling the ancient world of the 90’s RFCs and 2010’s HTML5 compatible browsers. A lot like how Indiana Jones bridges the ancient and the modern... Except for Indiana Jones 4. Let’s never talk about that again. Ever. Take Facebook, Office 365, Wordpress, Exchange, and Live. These are applications that had decent mitigations to standard threats, but they all had edge cases. Using a mix of old and new ingredients, we’ll provide a sampler plate of clickjacking protection bypasses, CSRF mitigation bypasses, "non-exploitable" XSS attacks that are suddenly exploitable and XML attacks where you can actually get a shell; and we'll talk about how to defend against these attacks. The best description is probably via the slides linked below. We've put a lot of effort into these, and they have video clips making the slide deck pretty big (why we're linking to it and not attaching it).
-
21:29
»
SecDocs
Authors:
Jesse Ou Rich Lundeen Travis Rhodes Tags:
web application XSS Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: Writing secure code is hard. Even when people do it basically right there are sometimes edge cases that can be exploited. Most the time writing code that works isn’t even the hard part, it’s keeping up with the changing attack techniques while still keeping an eye on all the old issues that can come back to bite you, straddling the ancient world of the 90’s RFCs and 2010’s HTML5 compatible browsers. A lot like how Indiana Jones bridges the ancient and the modern... Except for Indiana Jones 4. Let’s never talk about that again. Ever. Take Facebook, Office 365, Wordpress, Exchange, and Live. These are applications that had decent mitigations to standard threats, but they all had edge cases. Using a mix of old and new ingredients, we’ll provide a sampler plate of clickjacking protection bypasses, CSRF mitigation bypasses, "non-exploitable" XSS attacks that are suddenly exploitable and XML attacks where you can actually get a shell; and we'll talk about how to defend against these attacks. The best description is probably via the slides linked below. We've put a lot of effort into these, and they have video clips making the slide deck pretty big (why we're linking to it and not attaching it).
-
21:29
»
SecDocs
Authors:
Jesse Ou Rich Lundeen Travis Rhodes Tags:
web application XSS Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: Writing secure code is hard. Even when people do it basically right there are sometimes edge cases that can be exploited. Most the time writing code that works isn’t even the hard part, it’s keeping up with the changing attack techniques while still keeping an eye on all the old issues that can come back to bite you, straddling the ancient world of the 90’s RFCs and 2010’s HTML5 compatible browsers. A lot like how Indiana Jones bridges the ancient and the modern... Except for Indiana Jones 4. Let’s never talk about that again. Ever. Take Facebook, Office 365, Wordpress, Exchange, and Live. These are applications that had decent mitigations to standard threats, but they all had edge cases. Using a mix of old and new ingredients, we’ll provide a sampler plate of clickjacking protection bypasses, CSRF mitigation bypasses, "non-exploitable" XSS attacks that are suddenly exploitable and XML attacks where you can actually get a shell; and we'll talk about how to defend against these attacks. The best description is probably via the slides linked below. We've put a lot of effort into these, and they have video clips making the slide deck pretty big (why we're linking to it and not attaching it).
-
-
17:09
»
Packet Storm Security Advisories
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a file download vulnerability.
-
17:09
»
Packet Storm Security Recent Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a file download vulnerability.
-
17:09
»
Packet Storm Security Misc. Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a file download vulnerability.
-
17:08
»
Packet Storm Security Advisories
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a password cracking vulnerability.
-
17:08
»
Packet Storm Security Recent Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a password cracking vulnerability.
-
17:08
»
Packet Storm Security Misc. Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a password cracking vulnerability.
-
17:07
»
Packet Storm Security Advisories
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a token disclosure vulnerability.
-
17:07
»
Packet Storm Security Misc. Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a token disclosure vulnerability.
-
17:06
»
Packet Storm Security Advisories
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from an access bypass vulnerability.
-
17:06
»
Packet Storm Security Recent Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from an access bypass vulnerability.
-
17:06
»
Packet Storm Security Misc. Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from an access bypass vulnerability.
-
16:55
»
Packet Storm Security Advisories
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a session hijacking vulnerability.
-
16:55
»
Packet Storm Security Misc. Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a session hijacking vulnerability.
-
16:53
»
Packet Storm Security Advisories
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a cross site scripting vulnerability.
-
16:53
»
Packet Storm Security Misc. Files
McAfee Email and Web Security Appliance versions prior to 5.5 Patch 6, Email and Web Security 5.6 Patch 3, and McAfee Email Gateway 7.0 Patch 1 suffer from a cross site scripting vulnerability.
-
-
12:22
»
Packet Storm Security Exploits
The Cyberoam UTM exposes a web interface through a Jetty web server and this interface allows authenticated users to perform network diagnostic actions such as ping, traceroute, name lookup and so on. These actions are accessible to authenticated users, and are vulnerable to command injection attacks.
-
12:22
»
Packet Storm Security Recent Files
The Cyberoam UTM exposes a web interface through a Jetty web server and this interface allows authenticated users to perform network diagnostic actions such as ping, traceroute, name lookup and so on. These actions are accessible to authenticated users, and are vulnerable to command injection attacks.
-
12:22
»
Packet Storm Security Misc. Files
The Cyberoam UTM exposes a web interface through a Jetty web server and this interface allows authenticated users to perform network diagnostic actions such as ping, traceroute, name lookup and so on. These actions are accessible to authenticated users, and are vulnerable to command injection attacks.
-
-
18:17
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0387-01 - Mozilla Firefox is an open source web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. Two flaws were found in the way Firefox parsed certain Scalable Vector Graphics image files. A web page containing a malicious SVG image file could cause an information leak, or cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
18:17
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0387-01 - Mozilla Firefox is an open source web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. Two flaws were found in the way Firefox parsed certain Scalable Vector Graphics image files. A web page containing a malicious SVG image file could cause an information leak, or cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
18:17
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0387-01 - Mozilla Firefox is an open source web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. Two flaws were found in the way Firefox parsed certain Scalable Vector Graphics image files. A web page containing a malicious SVG image file could cause an information leak, or cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
-
22:52
»
SecDocs
Authors:
Alexander Klink Julian Wälde Tags:
web application DoS Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: This talk will show how a common flaw in the implementation of most of the popular web programming languages and platforms (including PHP, ASP.NET, Java, etc.) can be (ab)used to force web application servers to use 99% of CPU for several minutes to hours for a single HTTP request. This attack is mostly independent of the underlying web application and just relies on a common fact of how web application servers typically work.
-
22:52
»
SecDocs
Authors:
Alexander Klink Julian Wälde Tags:
web application DoS Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: This talk will show how a common flaw in the implementation of most of the popular web programming languages and platforms (including PHP, ASP.NET, Java, etc.) can be (ab)used to force web application servers to use 99% of CPU for several minutes to hours for a single HTTP request. This attack is mostly independent of the underlying web application and just relies on a common fact of how web application servers typically work.
-
22:52
»
SecDocs
Authors:
Alexander Klink Julian Wälde Tags:
web application DoS Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: This talk will show how a common flaw in the implementation of most of the popular web programming languages and platforms (including PHP, ASP.NET, Java, etc.) can be (ab)used to force web application servers to use 99% of CPU for several minutes to hours for a single HTTP request. This attack is mostly independent of the underlying web application and just relies on a common fact of how web application servers typically work.
-
-
22:36
»
SecDocs
Authors:
Fabian Mihailowitsch Tags:
web application intelligence Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: For years, we tried to identify vulnerable systems in company networks by getting all the companies netblocks / ip addresses and scanning them for vulnerable services. Then with the growing importance of web applications and of course search engines, a new way of identifying vulnerable systems was introduced: "Google hacking". However this approach of identifying and scanning companies ip addresses as well as doing some Google hacking for the (known) URLs of the company doesn't take all aspects into account and has some limitations. At first we just check the systems which are obvious, the ones that are in the companies netblocks, the IP addresses that were provided by the company and the URLs that are known or can be resolved using reverse DNS. However how about URLs and systems that aren't obvious? Systems maybe even the company in focus forgot? Second, the current techniques are pretty technical. They don't take the business view into account at any point. Therefore we developed a new technique as well as framework to identify companies’ web pages based on a scored keyword list. In other words: From zero to owning all of a company’s existing web pages, even the pages not hosted by the company itself, with just a scored keyword list as input. Systems that are hosted by third parties, web pages that were just released for a marketing campaign, maybe even by a third party marketing company but within the name of the company we want to check? Possibly not even the company does remember all the web applications and domains that are running under his name. These systems/applications won’t be detected using traditional techniques and thus impose a potential security risk for the company. Second, the current techniques are pretty technical. They don't take the business view into account. That means, we try to identify certain applications using technical information like version banner or the comapnies ip addresses in order to identify his systems. But how about the other way around, trying to identify applications and systems by using the company’s business data (e.g. product names, company names, tax identification numbers, contact persons, …) and then test the identified systems and applications for vulnerabilities? That is what we did. The idea is to build up a scored keyword list for the company in focus. This list contains general keywords like the company name, product names, more detailed keywords like an address contained in imprints and very specific keywords like the companies tax number. Every keyword in that list is then rated by human intelligence. Which means specific keywords do have a higher scoring than general keywords. In the next step a spider uses these keywords to query search engines like bing, google, etc. for the keywords and stores all the web sites URLs identified in a database with their scoring. If a web site that already is in the database is found for another keyword, just the score of that entry is increased. At the end, we get a list of websites that contained one or more of the keywords, along with a scoring for each web site. Then the URL is taken and checked whether it contains one of the keywords (e.g. company name). If this is the case, the scoring of the page is increased again. Then for each entry the FQDN as well as the ip is resolved and a whois query is executed. If that whois record does contain the company name, the scoring is increased again. Furthermore the country codes are used to remove results which are not in the target country. At the end of that process, we do have a list of URLs and FQDNs that could be found using company specific key words. Furthermore that list is scored. Since during that process you get (based on your keyword list) hundred thousands of unique hits, you have to minimize that list. Therefore we did some research on the results generated and found a decent way to minimize the results to an amount that can be checked manually by a human. Then those identified company web pages are passed to a crawler that just extracts external links from those pages, with the idea that correct company pages might link to other company pages, and integrates them to the results list. Using these technique in practice it is possible to identify a lot of web sites hosted (even by third parties) for one company. During the crawling process not just external links are extracted but all forms, HTTP parameters as well as certain parts of the web content are stored. Thus besides a list, we do have a "mirror" of the web page as well as the forms and dynamic functions that pose an attack surface. The information collected can then be used as input to special analysis modules. For some of our projects we integrated WAFP (Web Application Finger Printer), SQLMap and other well known tools as well as some other self written fuzzers and fingerprinters into that process. This way the whole process, from identifying web pages belonging to a certain company up to analyzing those for vulnerabilities can be totally automated. In other words: From zero to owning all of a company’s existing web pages, even the pages not hosted by the company itself, with just a scored keyword list as input. During our talk we will present our idea as well as our approach of identifying vulnerable web applications that belong to a certain company, based on business data. Furthermore we will explain how our framework is structured and how it does the searching as well as the vulnerability assessment in an automated way. So everybody who is interested will be able to implement his own version or adapt certain ideas for his projects. Besides just telling you how it could work, we will also present our framework that performs all of the steps described above automatically in a demo.
-
22:36
»
SecDocs
Authors:
Fabian Mihailowitsch Tags:
web application intelligence Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: For years, we tried to identify vulnerable systems in company networks by getting all the companies netblocks / ip addresses and scanning them for vulnerable services. Then with the growing importance of web applications and of course search engines, a new way of identifying vulnerable systems was introduced: "Google hacking". However this approach of identifying and scanning companies ip addresses as well as doing some Google hacking for the (known) URLs of the company doesn't take all aspects into account and has some limitations. At first we just check the systems which are obvious, the ones that are in the companies netblocks, the IP addresses that were provided by the company and the URLs that are known or can be resolved using reverse DNS. However how about URLs and systems that aren't obvious? Systems maybe even the company in focus forgot? Second, the current techniques are pretty technical. They don't take the business view into account at any point. Therefore we developed a new technique as well as framework to identify companies’ web pages based on a scored keyword list. In other words: From zero to owning all of a company’s existing web pages, even the pages not hosted by the company itself, with just a scored keyword list as input. Systems that are hosted by third parties, web pages that were just released for a marketing campaign, maybe even by a third party marketing company but within the name of the company we want to check? Possibly not even the company does remember all the web applications and domains that are running under his name. These systems/applications won’t be detected using traditional techniques and thus impose a potential security risk for the company. Second, the current techniques are pretty technical. They don't take the business view into account. That means, we try to identify certain applications using technical information like version banner or the comapnies ip addresses in order to identify his systems. But how about the other way around, trying to identify applications and systems by using the company’s business data (e.g. product names, company names, tax identification numbers, contact persons, …) and then test the identified systems and applications for vulnerabilities? That is what we did. The idea is to build up a scored keyword list for the company in focus. This list contains general keywords like the company name, product names, more detailed keywords like an address contained in imprints and very specific keywords like the companies tax number. Every keyword in that list is then rated by human intelligence. Which means specific keywords do have a higher scoring than general keywords. In the next step a spider uses these keywords to query search engines like bing, google, etc. for the keywords and stores all the web sites URLs identified in a database with their scoring. If a web site that already is in the database is found for another keyword, just the score of that entry is increased. At the end, we get a list of websites that contained one or more of the keywords, along with a scoring for each web site. Then the URL is taken and checked whether it contains one of the keywords (e.g. company name). If this is the case, the scoring of the page is increased again. Then for each entry the FQDN as well as the ip is resolved and a whois query is executed. If that whois record does contain the company name, the scoring is increased again. Furthermore the country codes are used to remove results which are not in the target country. At the end of that process, we do have a list of URLs and FQDNs that could be found using company specific key words. Furthermore that list is scored. Since during that process you get (based on your keyword list) hundred thousands of unique hits, you have to minimize that list. Therefore we did some research on the results generated and found a decent way to minimize the results to an amount that can be checked manually by a human. Then those identified company web pages are passed to a crawler that just extracts external links from those pages, with the idea that correct company pages might link to other company pages, and integrates them to the results list. Using these technique in practice it is possible to identify a lot of web sites hosted (even by third parties) for one company. During the crawling process not just external links are extracted but all forms, HTTP parameters as well as certain parts of the web content are stored. Thus besides a list, we do have a "mirror" of the web page as well as the forms and dynamic functions that pose an attack surface. The information collected can then be used as input to special analysis modules. For some of our projects we integrated WAFP (Web Application Finger Printer), SQLMap and other well known tools as well as some other self written fuzzers and fingerprinters into that process. This way the whole process, from identifying web pages belonging to a certain company up to analyzing those for vulnerabilities can be totally automated. In other words: From zero to owning all of a company’s existing web pages, even the pages not hosted by the company itself, with just a scored keyword list as input. During our talk we will present our idea as well as our approach of identifying vulnerable web applications that belong to a certain company, based on business data. Furthermore we will explain how our framework is structured and how it does the searching as well as the vulnerability assessment in an automated way. So everybody who is interested will be able to implement his own version or adapt certain ideas for his projects. Besides just telling you how it could work, we will also present our framework that performs all of the steps described above automatically in a demo.
-
22:36
»
SecDocs
Authors:
Fabian Mihailowitsch Tags:
web application intelligence Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: For years, we tried to identify vulnerable systems in company networks by getting all the companies netblocks / ip addresses and scanning them for vulnerable services. Then with the growing importance of web applications and of course search engines, a new way of identifying vulnerable systems was introduced: "Google hacking". However this approach of identifying and scanning companies ip addresses as well as doing some Google hacking for the (known) URLs of the company doesn't take all aspects into account and has some limitations. At first we just check the systems which are obvious, the ones that are in the companies netblocks, the IP addresses that were provided by the company and the URLs that are known or can be resolved using reverse DNS. However how about URLs and systems that aren't obvious? Systems maybe even the company in focus forgot? Second, the current techniques are pretty technical. They don't take the business view into account at any point. Therefore we developed a new technique as well as framework to identify companies’ web pages based on a scored keyword list. In other words: From zero to owning all of a company’s existing web pages, even the pages not hosted by the company itself, with just a scored keyword list as input. Systems that are hosted by third parties, web pages that were just released for a marketing campaign, maybe even by a third party marketing company but within the name of the company we want to check? Possibly not even the company does remember all the web applications and domains that are running under his name. These systems/applications won’t be detected using traditional techniques and thus impose a potential security risk for the company. Second, the current techniques are pretty technical. They don't take the business view into account. That means, we try to identify certain applications using technical information like version banner or the comapnies ip addresses in order to identify his systems. But how about the other way around, trying to identify applications and systems by using the company’s business data (e.g. product names, company names, tax identification numbers, contact persons, …) and then test the identified systems and applications for vulnerabilities? That is what we did. The idea is to build up a scored keyword list for the company in focus. This list contains general keywords like the company name, product names, more detailed keywords like an address contained in imprints and very specific keywords like the companies tax number. Every keyword in that list is then rated by human intelligence. Which means specific keywords do have a higher scoring than general keywords. In the next step a spider uses these keywords to query search engines like bing, google, etc. for the keywords and stores all the web sites URLs identified in a database with their scoring. If a web site that already is in the database is found for another keyword, just the score of that entry is increased. At the end, we get a list of websites that contained one or more of the keywords, along with a scoring for each web site. Then the URL is taken and checked whether it contains one of the keywords (e.g. company name). If this is the case, the scoring of the page is increased again. Then for each entry the FQDN as well as the ip is resolved and a whois query is executed. If that whois record does contain the company name, the scoring is increased again. Furthermore the country codes are used to remove results which are not in the target country. At the end of that process, we do have a list of URLs and FQDNs that could be found using company specific key words. Furthermore that list is scored. Since during that process you get (based on your keyword list) hundred thousands of unique hits, you have to minimize that list. Therefore we did some research on the results generated and found a decent way to minimize the results to an amount that can be checked manually by a human. Then those identified company web pages are passed to a crawler that just extracts external links from those pages, with the idea that correct company pages might link to other company pages, and integrates them to the results list. Using these technique in practice it is possible to identify a lot of web sites hosted (even by third parties) for one company. During the crawling process not just external links are extracted but all forms, HTTP parameters as well as certain parts of the web content are stored. Thus besides a list, we do have a "mirror" of the web page as well as the forms and dynamic functions that pose an attack surface. The information collected can then be used as input to special analysis modules. For some of our projects we integrated WAFP (Web Application Finger Printer), SQLMap and other well known tools as well as some other self written fuzzers and fingerprinters into that process. This way the whole process, from identifying web pages belonging to a certain company up to analyzing those for vulnerabilities can be totally automated. In other words: From zero to owning all of a company’s existing web pages, even the pages not hosted by the company itself, with just a scored keyword list as input. During our talk we will present our idea as well as our approach of identifying vulnerable web applications that belong to a certain company, based on business data. Furthermore we will explain how our framework is structured and how it does the searching as well as the vulnerability assessment in an automated way. So everybody who is interested will be able to implement his own version or adapt certain ideas for his projects. Besides just telling you how it could work, we will also present our framework that performs all of the steps described above automatically in a demo.
-
17:40
»
Packet Storm Security Recent Files
WeBaCoo (Web Backdoor Cookie) is a web backdoor script-kit, aiming to provide a stealth terminal-like connection over HTTP between client and web server. It is a post exploitation tool capable to maintain access to a compromised web server. WeBaCoo was designed to operate under the radar of modern up-to-dated AV, NIDS, IPS, Network Firewalls and Application Firewalls, proving a stealth mechanism to execute system commands to the compromised server. The obfuscated communication is accomplished using HTTP header's Cookie fields under valid client HTTP requests and relative web server's responses.
-
17:40
»
Packet Storm Security Tools
WeBaCoo (Web Backdoor Cookie) is a web backdoor script-kit, aiming to provide a stealth terminal-like connection over HTTP between client and web server. It is a post exploitation tool capable to maintain access to a compromised web server. WeBaCoo was designed to operate under the radar of modern up-to-dated AV, NIDS, IPS, Network Firewalls and Application Firewalls, proving a stealth mechanism to execute system commands to the compromised server. The obfuscated communication is accomplished using HTTP header's Cookie fields under valid client HTTP requests and relative web server's responses.
-
17:40
»
Packet Storm Security Misc. Files
WeBaCoo (Web Backdoor Cookie) is a web backdoor script-kit, aiming to provide a stealth terminal-like connection over HTTP between client and web server. It is a post exploitation tool capable to maintain access to a compromised web server. WeBaCoo was designed to operate under the radar of modern up-to-dated AV, NIDS, IPS, Network Firewalls and Application Firewalls, proving a stealth mechanism to execute system commands to the compromised server. The obfuscated communication is accomplished using HTTP header's Cookie fields under valid client HTTP requests and relative web server's responses.
-
-
21:17
»
Packet Storm Security Recent Files
Vanguard is a comprehensive web penetration testing tool written in Perl that identifies vulnerabilities in web applications. It provides crawling, uses LibWhisker2 for HTTP IDS evasion, and checks for issues like SQL injection, XSS, LDAP injection and more.
-
21:17
»
Packet Storm Security Tools
Vanguard is a comprehensive web penetration testing tool written in Perl that identifies vulnerabilities in web applications. It provides crawling, uses LibWhisker2 for HTTP IDS evasion, and checks for issues like SQL injection, XSS, LDAP injection and more.
-
21:17
»
Packet Storm Security Misc. Files
Vanguard is a comprehensive web penetration testing tool written in Perl that identifies vulnerabilities in web applications. It provides crawling, uses LibWhisker2 for HTTP IDS evasion, and checks for issues like SQL injection, XSS, LDAP injection and more.
-
-
4:12
»
Packet Storm Security Exploits
Bravenet Web Services suffers from a cross site scripting vulnerability.
-
-
22:12
»
Packet Storm Security Exploits
This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.
-
22:12
»
Packet Storm Security Recent Files
This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.
-
22:12
»
Packet Storm Security Misc. Files
This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. The arguments passed to Java Web Start are not properly validated, allowing injection of arbitrary arguments to the JVM. By utilizing the lesser known -J option, an attacker can take advantage of the -XXaltjvm option, as discussed previously by Ruben Santamarta. This method allows an attacker to execute arbitrary code in the context of an unsuspecting browser user. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.
-
-
19:33
»
Packet Storm Security Advisories
A Java Web Start vulnerability exists in Oracle Java. The vulnerability can be exploited by remote unauthenticated attackers to execute arbitrary code on a vulnerable system.
-
19:33
»
Packet Storm Security Recent Files
A Java Web Start vulnerability exists in Oracle Java. The vulnerability can be exploited by remote unauthenticated attackers to execute arbitrary code on a vulnerable system.
-
19:33
»
Packet Storm Security Misc. Files
A Java Web Start vulnerability exists in Oracle Java. The vulnerability can be exploited by remote unauthenticated attackers to execute arbitrary code on a vulnerable system.
-
-
22:59
»
Packet Storm Security Headlines
: $49.95
If you are a security engineer, a researcher, a hacker or just someone who keeps your ear to the ground when it comes to computer security, chances are you have seen the name Michal Zalewski. He has been responsible for an to many over the years. He recently released a book called "The Tangled Web - A Guide To Securing Modern Web Applications".
Normally, when I read books about securing web applications, I find many parallels where authors will give an initial lay of the land, dictating what technologies they will address, what programming languages they will encompass and a decent amount of detail on vulnerabilities that exist along with some remediation tactics. Such books are invaluable for people in this line of work, but there is a bigger picture that needs to be addressed and it includes quite a bit of secret knowledge rarely divulged in the security community. You hear it in passing conversation over beers with colleagues or discover it through random tests on your own. But rarely are the oddities documented anywhere in a thorough manner.
Before we go any further, let us take a step back in time. Well over a decade ago, the web was still in its infancy and an amusing vulnerability known as the surfaced. It was nothing more than a simple input validation bug that resulted in arbitrary code execution. The average hacker enjoyed this (and many more bugs like it) during this golden age. At the time, developers of web applications had a hard enough time getting their code to work and rarely took security implications into account. Years later, cross site scripting was discovered and there was much debate about whether or not a cross site scripting vulnerability was that important. After all, it was an issue that restricted itself to the web ecosystem and did not give us a shell on the server. Rhetoric on mailing lists mocked such findings and we (Packet Storm) received many emails saying that by archiving these issues we were degrading the quality of the site. But as the web evolved, people starting banking online, their credit records were online and before you knew it, people were checking their social network updates on their phone every five minutes. All of a sudden, something as small as a cross site scripting vulnerability mattered greatly.
To make the situation worse, many programs were developed to support web-related technologies. In the corporate world, being first to market or putting out a new feature in a timely fashion trumphs security. Backwards compatibility that feeds poor design became a must for any of the larger browser vendors. The "browser wars" began and everyone had different ideas on how to solve different issues. To say web-related technologies brought many levels of complexity to the modern computing experience is a great understatement. Browser-side programming languages, such as JavaScript, became a playground for hackers. Understanding the Document Object Model (DOM) and the implications of poorly coded applications became one of those lunch discussions that could cause you to put your face into your mashed potatoes. Enter "The Tangled Web".
This book puts some very complicated nuances in plain (enough) english. It starts out with Zalewski giving a brief synopsis of the security industry and the web. Breakdowns of the basics are provided and it is written in a way that is inviting for anyone to read. It goes on to cover a wide array of topics inclusive to the operation of browsers, the protocols involved, the various types of documents handled and the languages supported. Armed with this knowledge, the reader is enabled to tackle the next section detailing browser security features. As the author puts it, it covers "everything from the well-known but often misunderstood same-origin policy to the obscure and proprietary zone settings of Internet Explorer". Browsers, it ends up, have a ridiculous amount of odd dynamics for even the simplest acts. The last section wraps things up with upcoming security features and various browser mechanisms to note.
I found it a credit to the diversity of the book that technical discussion could also trail off to give historical notes on poor industry behavior. When it noted DNS hijacking by various providers it reminded me of the very distinct and constantly apparent disconnect between business and knowledge of technology. When noting how non-HTTP servers were being leveraged to commit cross site scripting attacks, Zalewski also made it a point to note how the Internet Explorer releases only have a handful of prohibited ports but all other browsers have dozens that they block. The delicate balance of understanding alongside context is vital when using information from this book and applying it to design.
Every page offers some bit of interesting knowledge that dives deep. It takes the time to note the odd behaviors small mistakes can cause and also points out where flawed security implementations exist. This book touches on the old and the new and many things other security books have overlooked. Another nice addition is that it provides security engineering cheatsheets at the end of each chapter. To be thorough, it explains both the initiatives set out by RFCs while it also documents different paths various browser vendors have taken in tackling tricky security issues. Google's Chrome, Mozilla's Firefox, Microsoft's Internet Explorer, Apple's Safari and Opera are compared and contrasted greatly throughout this book.
In my opinion, the web has become a layer cake over the years. New shiny technologies and add-ons have been thrown into the user experience and with each of them comes a new set of security implications. One-off findings are constantly discovered and documented (and at Packet Storm we try to archive every one of them), but this is the first time I have seen a comprehensive guide that focuses on everything from cross-domain content inclusion to content-sniffing. It is the sort of book that should be required reading for every web developer.
-
8:09
»
SecDocs
Authors:
Jesse Ou Rich Lundeen Tags:
web application cookie vulnerability XSS Event:
Black Hat Abu Dhabi 2011 Abstract: Writing secure code is hard. Even when people do it basically right there are sometimes edge cases that can be exploited. Most the time writing code that works isn't even the hard part, it's keeping up with the changing attack techniques while still keeping an eye on all the old issues that can come back to bite you, straddling the ancient world of the 90's RFCs and 2010's HTML5 compatible browsers. A lot like how Indiana Jones bridges the ancient and the modern... Except for Indiana Jones 4. Let's never talk about that again. Ever. Take Facebook, Office 365, MSN, and Wordpress. These are applications that had decent mitigations to standard threats, but they all had edge cases. Using a mix of old and new ingredients, we'll provide a sampler plate of clickjacking protection bypasses, CSRF mitigation bypasses, "non-exploitable" XSS attacks that are suddenly exploitable and XML attacks where you can actually get a shell; and we'll talk about how to defend against these attacks.
-
8:09
»
SecDocs
Authors:
Jesse Ou Rich Lundeen Tags:
web application cookie vulnerability XSS Event:
Black Hat Abu Dhabi 2011 Abstract: Writing secure code is hard. Even when people do it basically right there are sometimes edge cases that can be exploited. Most the time writing code that works isn't even the hard part, it's keeping up with the changing attack techniques while still keeping an eye on all the old issues that can come back to bite you, straddling the ancient world of the 90's RFCs and 2010's HTML5 compatible browsers. A lot like how Indiana Jones bridges the ancient and the modern... Except for Indiana Jones 4. Let's never talk about that again. Ever. Take Facebook, Office 365, MSN, and Wordpress. These are applications that had decent mitigations to standard threats, but they all had edge cases. Using a mix of old and new ingredients, we'll provide a sampler plate of clickjacking protection bypasses, CSRF mitigation bypasses, "non-exploitable" XSS attacks that are suddenly exploitable and XML attacks where you can actually get a shell; and we'll talk about how to defend against these attacks.
-
-
18:03
»
Packet Storm Security Recent Files
WeBaCoo (Web Backdoor Cookie) is a web backdoor script-kit, aiming to provide a stealth terminal-like connection over HTTP between client and web server. It is a post exploitation tool capable to maintain access to a compromised web server. WeBaCoo was designed to operate under the radar of modern up-to-dated AV, NIDS, IPS, Network Firewalls and Application Firewalls, proving a stealth mechanism to execute system commands to the compromised server. The obfuscated communication is accomplished using HTTP header's Cookie fields under valid client HTTP requests and relative web server's responses.
-
18:03
»
Packet Storm Security Tools
WeBaCoo (Web Backdoor Cookie) is a web backdoor script-kit, aiming to provide a stealth terminal-like connection over HTTP between client and web server. It is a post exploitation tool capable to maintain access to a compromised web server. WeBaCoo was designed to operate under the radar of modern up-to-dated AV, NIDS, IPS, Network Firewalls and Application Firewalls, proving a stealth mechanism to execute system commands to the compromised server. The obfuscated communication is accomplished using HTTP header's Cookie fields under valid client HTTP requests and relative web server's responses.
-
18:03
»
Packet Storm Security Misc. Files
WeBaCoo (Web Backdoor Cookie) is a web backdoor script-kit, aiming to provide a stealth terminal-like connection over HTTP between client and web server. It is a post exploitation tool capable to maintain access to a compromised web server. WeBaCoo was designed to operate under the radar of modern up-to-dated AV, NIDS, IPS, Network Firewalls and Application Firewalls, proving a stealth mechanism to execute system commands to the compromised server. The obfuscated communication is accomplished using HTTP header's Cookie fields under valid client HTTP requests and relative web server's responses.
-
17:20
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0084-01 - SeaMonkey is an open source web browser, e-mail and newsgroup client, IRC chat client, and HTML editor. A flaw was found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. The same-origin policy in SeaMonkey treated http://example.com and http://[example.com] as interchangeable. A malicious script could possibly use this flaw to gain access to sensitive information that may be included in HTTP proxy error replies, generated in response to invalid URLs using square brackets.
-
17:20
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0084-01 - SeaMonkey is an open source web browser, e-mail and newsgroup client, IRC chat client, and HTML editor. A flaw was found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. The same-origin policy in SeaMonkey treated http://example.com and http://[example.com] as interchangeable. A malicious script could possibly use this flaw to gain access to sensitive information that may be included in HTTP proxy error replies, generated in response to invalid URLs using square brackets.
-
17:20
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0084-01 - SeaMonkey is an open source web browser, e-mail and newsgroup client, IRC chat client, and HTML editor. A flaw was found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. The same-origin policy in SeaMonkey treated http://example.com and http://[example.com] as interchangeable. A malicious script could possibly use this flaw to gain access to sensitive information that may be included in HTTP proxy error replies, generated in response to invalid URLs using square brackets.
-
11:41
»
Hack a Day
[Fall Deaf] built an Arduino based universal remote control system. It uses a shield which has both an IR receiver and transmitter. This gives it the tools to learn codes from your existing remotes and play them back in order to control the devices. This functionality is really nothing new, but we think the user [...]
-
-
18:55
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0079-01 - Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A use-after-free flaw was found in the way Firefox removed nsDOMAttribute child nodes. In certain circumstances, due to the premature notification of AttributeChildRemoved, a malicious script could possibly use this flaw to cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
18:55
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0079-01 - Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A use-after-free flaw was found in the way Firefox removed nsDOMAttribute child nodes. In certain circumstances, due to the premature notification of AttributeChildRemoved, a malicious script could possibly use this flaw to cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
18:55
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0079-01 - Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A use-after-free flaw was found in the way Firefox removed nsDOMAttribute child nodes. In certain circumstances, due to the premature notification of AttributeChildRemoved, a malicious script could possibly use this flaw to cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
-
18:55
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0074-01 - JBoss Web is the web container, based on Apache Tomcat, in JBoss Enterprise Application Platform. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the org.apache.tomcat.util.http.Parameters.MAX_COUNT and org.apache.tomcat.util.http.MimeHeaders.MAX_COUNT system properties in "jboss-as/server/[PROFILE]/deploy/properties-service.xml".
-
18:55
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0074-01 - JBoss Web is the web container, based on Apache Tomcat, in JBoss Enterprise Application Platform. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the org.apache.tomcat.util.http.Parameters.MAX_COUNT and org.apache.tomcat.util.http.MimeHeaders.MAX_COUNT system properties in "jboss-as/server/[PROFILE]/deploy/properties-service.xml".
-
18:55
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0074-01 - JBoss Web is the web container, based on Apache Tomcat, in JBoss Enterprise Application Platform. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the org.apache.tomcat.util.http.Parameters.MAX_COUNT and org.apache.tomcat.util.http.MimeHeaders.MAX_COUNT system properties in "jboss-as/server/[PROFILE]/deploy/properties-service.xml".
-
18:54
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0075-01 - JBoss Web is the web container, based on Apache Tomcat, in JBoss Enterprise Application Platform. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the org.apache.tomcat.util.http.Parameters.MAX_COUNT and org.apache.tomcat.util.http.MimeHeaders.MAX_COUNT system properties in "jboss-as/server/[PROFILE]/deploy/properties-service.xml".
-
18:54
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0075-01 - JBoss Web is the web container, based on Apache Tomcat, in JBoss Enterprise Application Platform. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the org.apache.tomcat.util.http.Parameters.MAX_COUNT and org.apache.tomcat.util.http.MimeHeaders.MAX_COUNT system properties in "jboss-as/server/[PROFILE]/deploy/properties-service.xml".
-
18:54
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0075-01 - JBoss Web is the web container, based on Apache Tomcat, in JBoss Enterprise Application Platform. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the org.apache.tomcat.util.http.Parameters.MAX_COUNT and org.apache.tomcat.util.http.MimeHeaders.MAX_COUNT system properties in "jboss-as/server/[PROFILE]/deploy/properties-service.xml".
-
18:54
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0077-01 - JBoss Web is a web container based on Apache Tomcat. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the "-Dorg.apache.tomcat.util.http.Parameters.MAX_COUNT=x" and "-Dorg.apache.tomcat.util.http.MimeHeaders.MAX_COUNT=x" system properties as JAVA_OPTS entries in "jboss-as-web/bin/run.conf".
-
18:54
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0077-01 - JBoss Web is a web container based on Apache Tomcat. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the "-Dorg.apache.tomcat.util.http.Parameters.MAX_COUNT=x" and "-Dorg.apache.tomcat.util.http.MimeHeaders.MAX_COUNT=x" system properties as JAVA_OPTS entries in "jboss-as-web/bin/run.conf".
-
18:54
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0077-01 - JBoss Web is a web container based on Apache Tomcat. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the "-Dorg.apache.tomcat.util.http.Parameters.MAX_COUNT=x" and "-Dorg.apache.tomcat.util.http.MimeHeaders.MAX_COUNT=x" system properties as JAVA_OPTS entries in "jboss-as-web/bin/run.conf".
-
18:53
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0076-01 - JBoss Web is a web container based on Apache Tomcat. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the "-Dorg.apache.tomcat.util.http.Parameters.MAX_COUNT=x" and "-Dorg.apache.tomcat.util.http.MimeHeaders.MAX_COUNT=x" system properties as JAVA_OPTS entries in "jboss-as-web/bin/run.conf".
-
18:53
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0076-01 - JBoss Web is a web container based on Apache Tomcat. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the "-Dorg.apache.tomcat.util.http.Parameters.MAX_COUNT=x" and "-Dorg.apache.tomcat.util.http.MimeHeaders.MAX_COUNT=x" system properties as JAVA_OPTS entries in "jboss-as-web/bin/run.conf".
-
18:53
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0076-01 - JBoss Web is a web container based on Apache Tomcat. It provides a single deployment platform for the JavaServer Pages and Java Servlet technologies. A flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a remote attacker could use this flaw to cause a denial of service on the JBoss Web server. It was found that the Java hashCode() method implementation was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause JBoss Web to use an excessive amount of CPU time by sending an HTTP request with a large number of parameters whose names map to the same hash value. This update introduces a limit on the number of parameters and headers processed per request to mitigate this issue. The default limit is 512 for parameters and 128 for headers. These defaults can be changed by setting the "-Dorg.apache.tomcat.util.http.Parameters.MAX_COUNT=x" and "-Dorg.apache.tomcat.util.http.MimeHeaders.MAX_COUNT=x" system properties as JAVA_OPTS entries in "jboss-as-web/bin/run.conf".
-
10:01
»
Hack a Day
As weird as it might sound, there’s a way to use Google documents as a web proxy. The image above is a screenshot of [Antonio] demonstrating how he can view text data from any site through the web giant’s cloud applications. Certain sites may be blocked from your location, but the big G can load [...]
-
16:54
»
Packet Storm Security Advisories
EMC SourceOne Web Search contains a vulnerability that may, under certain circumstances, log sensitive user credential information in plain text to the OS log of the web server. This can potentially be exploited by an unprivileged user with access to log information to gain access to the protected SourceOne components.
-
16:54
»
Packet Storm Security Recent Files
EMC SourceOne Web Search contains a vulnerability that may, under certain circumstances, log sensitive user credential information in plain text to the OS log of the web server. This can potentially be exploited by an unprivileged user with access to log information to gain access to the protected SourceOne components.
-
16:54
»
Packet Storm Security Misc. Files
EMC SourceOne Web Search contains a vulnerability that may, under certain circumstances, log sensitive user credential information in plain text to the OS log of the web server. This can potentially be exploited by an unprivileged user with access to log information to gain access to the protected SourceOne components.
-
15:00
»
Sophos security news
Safe and compliant browsing assured with advanced web malware detection, and URL and content-based filtering in a virtual appliance
-
-
14:37
»
Packet Storm Security Advisories
The HP-ChaiSOE/1.0 embedded web server on certain HP JetDirect printers allows a potential attacker to gain read only access to directories and files outside of the web root, different from CVE-2008-4419. An attacker can leverage this flaw to read arbitrary system configuration files, cached documents, etc. Information obtained from an affected host may facilitate further attacks against the host. Exploitation of this flaw is trivial using common web server directory traversal techniques.
-
14:37
»
Packet Storm Security Recent Files
The HP-ChaiSOE/1.0 embedded web server on certain HP JetDirect printers allows a potential attacker to gain read only access to directories and files outside of the web root, different from CVE-2008-4419. An attacker can leverage this flaw to read arbitrary system configuration files, cached documents, etc. Information obtained from an affected host may facilitate further attacks against the host. Exploitation of this flaw is trivial using common web server directory traversal techniques.
-
14:37
»
Packet Storm Security Misc. Files
The HP-ChaiSOE/1.0 embedded web server on certain HP JetDirect printers allows a potential attacker to gain read only access to directories and files outside of the web root, different from CVE-2008-4419. An attacker can leverage this flaw to read arbitrary system configuration files, cached documents, etc. Information obtained from an affected host may facilitate further attacks against the host. Exploitation of this flaw is trivial using common web server directory traversal techniques.
-
6:22
»
Packet Storm Security Recent Files
OWASP Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. This is the platform independent release.
-
6:22
»
Packet Storm Security Tools
OWASP Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. This is the platform independent release.
-
6:22
»
Packet Storm Security Misc. Files
OWASP Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. This is the platform independent release.
-
-
13:17
»
Packet Storm Security Exploits
The IBM TS3200/TS3200 Web User Interface is vulnerable to an authentication bypass attack. By sending a series of requests to the authentication function, it is possible to trigger a condition which causes the application to grant an access cookie which permits remote administration. Firmware less than A.60 is affected.
Skip to page:
1
2
3
...
6