Windows AUTOPWN (winAUTOPWN)

Wednesday, April 1st, 2009

Autohack your targets with least possible interaction.Features :- Contains already custom-compiled executables of famous and effective exploits alongwith a few original exploits. - No need to debug, script or compile the source codes. - Scans all ports 1 - 65535 after taking the IP address and tries all possible exploits according to ...

Attacking SMM Memory via Intel CPU Cache Poisoning

Saturday, March 21st, 2009

As promised, the paper and the proof of concept code has just been posted on the ITL website here.A quote from the paper: In this paper we have described practical exploitation of the CPU cache poisoning in order to read or write into (otherwise protected) SMRAM memory. We have implemented two ...

Firefox 3.0.7 Released

Wednesday, March 4th, 2009

Firefox 3.0.7 has been released today and this version fixes several issues found in Firefox 3.0.6.Fixed several security issues: -URL spoofing with invisible control characters -Upgrade PNG library to fix memory safety hazards -XML data theft via RDFXMLDataSource and cross-domain redirect -Mozilla Firefox XUL Linked Clones Double Free Vulnerability -Crashes with evidence of memory corruption (rv:1.9.0.7) Fixed ...

Fast-Track 4.0 – Automated Penetration Testing Suite

Wednesday, February 18th, 2009

For those of you new to Fast-Track, Fast-Track is a python based open-source project aimed at helping Penetration Testers in an effort to identify, exploit, and further penetrate a network. Fast-Track was originally conceived when David Kennedy was on a penetration test and found that there was generally a lack ...

Telnetd exploit on FreeBSD 7

Monday, February 16th, 2009

A posting on the Full Disclosure mailing list has revealed what the FreeBSD Security team call a semi-remote root exploit for the telnetd service in FreeBSD 7, and later. By default, this service is disabled.To exploit the vulnerability, a maliciously crafted library must be placed on the victim system beforehand, ...