Search:

Here is a neat trick (according to me) for people who are analyzing a suspected malicious website/watering hole attack. To fetch the source html/js code of the website, mostly we do wget and then...

Excellent. And maybe something for git sometime later, so this can be done easily >> Source code disclosure by .git in web application

BACKTRACK AND KALI LINUX cbtnuggets https://secure.cbtnuggets.com/it-training-videos/series/cbtn_backtrack_sec/

Here comes another webshell uploading technique which can cater to image restrictions and still your shell will be hidden in the image Encoding Web Shells in PNG IDAT chunks | Web App Security
...

I encountered a similar obfuscated javascript in a phishing e-mail which led to blackhole exploit kit.

...

Let us all list down the source and repositories of malware/viruses/worms/trojans/bad codes/APTs. Only files/dumps. No tutorials/articles. Please keep it updated with latest sources you get.
...

Also check out the blog posts of spiderlabs tagged with Physical Security. Awesome \m/ SpiderLabs Anterior: Physical Security

I just came across this for the first time on web. I thought of posting it, but it has been already done :)

I must say it is an excellent vulnerability. This would be like the first attack point...

Also List of Bug Bounty Programs >> Bug Bounty Programs | The HackaServer Blog

and

List of Bug Bounty Programs as a Service >> Bug Bounty Program as a Service | The HackaServer Blog

No one can know all the things. Keep learning.





exactly !

First of all, no one will flame you on this forum for posting stuff they already know. Just keep an eye that you post in proper section, and that the information you are posting is not being already...

Well, The thread is turning out to be quite a good discussion and here are my 2 cents.

From the wikipedia Principle of least privilege - Wikipedia, the free encyclopedia



This means, that...

Bad luck prince_indishell . Better luck next time ! You can also start an account on Bugcrowd - Crowdsourced security testing. We run managed bug bounty programs for business. where they give you the...

Would you be kind enough to extrapolate your observations and enlighten us truly as to what you would have posted in place of the topic starter. Unhappy as you are with the topic starter.

Looks like that, rather than understanding the situtation, you clearly want a article and video which you can replay to your client.(who maybe asked for that :p). Not cool buddy, not cool.

Nice forum for people interested in Rootkits >> KernelMode.info • Index page

Hi karthikp, looks like you are new to forum. It is advised to search the forum before posting. We already have 2 threads covering this question. If you have further questions, you can post in that...

Infractions added and 1st warning given.

Thread Locked. Moved to Noobs Corner.

Thrilling excerpt man ! And kudos to your crazy lockpicking skills \m/

Certainly, its can be possibility. Null meets are organized there. But I think we have to take prior permission from SICSR before organizing a meet there. Furthermore, it would be a waste of there...

MySQL Local/Remote FAST Account Password Cracking technique shared by kingcope

about 100000 passwords are tested in 20 seconds !!

There is a space between end of DOS stub and starting of PE header in a PE executable file. Would look garbage because it is undocumented(correct me if I am wrong) , but actually Microsoft had made...

Welcome pop3_zxcv to the forum. You must be knowing g4h community from quite before, if you know about orkut :)

Also, just a suggestion, do use the thanks button or add reputation button on posts...

Team g4h for this too :p http://www.garage4hackers.com/f30/rwth-ctf-1521.html#post9336

Infraction added for posting live IP address. Take care from next time ;)