Archive for the ‘Windows Hacking’ Category.
12/15/2011, 10:41
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
It looks like Microsoft originally had a patch for the BEAST vulnerability, but for some reason they have withdrawn it for the December Patch Tuesday. It’s a pretty bumper crop of patches though with 13 bulletins and 19 vulnerabilities fixed, the highest profile one being a patch for the zero-day vulnerability exploited by Duqu. The [...]
Read the full post at darknet.org.uk
Category:
beast,
beast bug,
Countermeasures,
duqu,
duqu bug,
exploits,
Exploits/Vulnerabilities,
hacking microsoft,
hacking-windows,
Malware,
microsoft,
microsoft security,
patch-tuesday,
patches,
vulnerabilities,
Windows Hacking,
windows-security |
Comment
10/18/2011, 19:27
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
I wanted to post this a while back, but the site (and thus the download) was down again – it seems to be a common occurrence. Someone get this guy some proper hosting! winAUTOPWN and bsdAUTOPWN are minimal Interactive Frameworks which act as a frontend for quick systems vulnerability exploitation. It takes inputs like IP [...]
Read the full post at darknet.org.uk
Category:
auto hacking,
auto hacking tool,
automated exploit,
exploit,
exploit tool,
Exploits/Vulnerabilities,
Hacking Tools,
hacking-windows,
vulnerabilities,
win hacking tool,
winautopwn,
Windows Hacking,
windows-exploit |
Comment
09/20/2011, 17:09
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the network. NetworkMiner can also parse PCAP files for off-line analysis and to…
Read the full post at darknet.org.uk
Category:
Forensics,
Hacking Tools,
hacking-networks,
Network Hacking,
network miner,
network-forensics,
network-security,
network-sniffing,
networkminer,
packet-sniffer,
passive network sniffer,
Windows Hacking,
windows network sniffer,
windows packet capture tool,
windows packet sniffer |
Comment
09/06/2011, 12:45
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
I’ve always been skeptical about this tool, especially seen as though the first version was released on April Fools day in 2009, anyway it’s 2 years later now and it still seems to be around so I think it’s worth publishing an update. If any of you have actually tested this tool out, do drop [...]
Read the full post at darknet.org.uk
Category:
auto hacking,
auto hacking tool,
automated exploit,
exploit,
exploit tool,
Exploits/Vulnerabilities,
Hacking Tools,
hacking-windows,
vulnerabilities,
win hacking tool,
winautopwn,
Windows Hacking,
windows-exploit |
Comment
07/04/2011, 13:06
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
It’s been recently uncovered that there’s a HUGE botnet, which is extremely advanced and constantly evolving a variant of the ever popular (and usually quite advanced) TDL strain. We did write about a TDL variant earlier in 2010 – TDL AKA Alureon Rootkit Now Infecting 64-Bit Windows 7 Platform. TDL itself has been around several…
Read the full post at darknet.org.uk
Category:
alureon,
botnet,
botnets,
cast iron botnet,
huge botnet,
Malware,
tdl,
tdl botnet,
tdl malware,
tdl trojan,
tdl-4,
tdss,
trojans,
Windows Hacking |
Comment
06/01/2011, 12:38
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
The enhanced Mitigation Experience Toolkit (EMET) is designed to help prevent hackers from gaining access to your system. Software vulnerabilities and exploits have become an everyday part of life. Virtually every product has to deal with them and consequently, users are faced with a stream of security updates. For users who get attacked before…
Read the full post at darknet.org.uk
Category:
Countermeasures,
emet,
enhanced mitigiation evaluation toolkit,
hacking-windows,
microsoft,
microsoft emet,
microsoft security,
microsoft-hacking,
security mitigation,
Security Software,
Windows Hacking,
windows-security |
Comment
04/20/2011, 13:22
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
Microsoft has implemented a new company policy regarding vulnerability disclosure in non-Microsoft products (third-party products). Unsurprisingly they are following the ‘responsible disclosure’ line rather than the ‘full disclosure’ line favoured by the infosec community. It’s fair enough though, as they say treat…
Read the full post at darknet.org.uk
Category:
disclosure policy,
Legal Issues,
microsoft,
microsoft disclosure policy,
microsoft employee,
microsoft employees,
microsoft vulnerability disclosure,
microsoft vulnerability disclosure policy,
vulnerability disclosure,
vulnerability disclosure policy,
Windows Hacking |
Comment
04/13/2011, 12:19
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
We all love Patch Tuesday – no doubt about that right? Well Microsoft has blessed us this month with the biggest Patch Tuesday in the history of the program. That’s a good thing because it’s had some horribly effective vulnerabilities revealed lately. It managed to package up a massive bundle of patches for 64 vulnerabilities…
Read the full post at darknet.org.uk
Category:
april 2011 patch tuesday,
black tuesday,
Countermeasures,
Exploits/Vulnerabilities,
microsoft,
microsoft patch tuesday,
microsoft patches,
microsoft security,
patch-tuesday,
Security Software,
windows 0day,
Windows Hacking,
windows zero day,
windows zeroday,
windows-exploits,
windows-security |
Comment
04/12/2011, 11:58
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
RawCap is a free command line network sniffer for Windows that uses raw sockets. Features Can sniff any interface that has got an IP address, including 127.0.0.1 (localhost/loopback) RawCap.exe is just 17 kB No external libraries or DLL’s needed other than .NET Framework 2.0 No installation required, just download RawCap.exe and sniff Can…
Read the full post at darknet.org.uk
Category:
Hacking Tools,
Network Hacking,
pcap,
raw sockets,
rawcap,
tcpcap,
wincap,
Windows Hacking,
windows network sniffer,
windows packet sniffer,
winpcap |
Comment
03/10/2011, 11:39
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
Well it’s March again and well we love March because it’s Pwn2Own time! Every year around this time we get some goodies to discuss way back since: 2008 – Mac owned on 2nd day of Pwn2Own hack contest 2009 – Charlie Miller Does It Again At PWN2OWN 2010 – Mozilla Beats Apple & Microsoft to [...]
Read the full post at darknet.org.uk
Category:
Apple,
chaouki bekrar,
charlie miller,
Exploits/Vulnerabilities,
hacking apple,
hacking macbook,
IE,
internet explorer hack,
internet-explorer,
pwn2own,
return oriented programming,
safari,
safari-exploit,
safari-security,
use-after-free flaw,
vulnerability,
Windows Hacking |
Comment
03/03/2011, 13:01
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
Attack Surface Analyzer is developed by the Security Engineering group, building on the work of our Security Science team. It is the same tool used by Microsoft’s internal product groups to catalogue changes made to operating system attack surface by the installation of new software. Attack Surface Analyzer takes a snapshot of your system…
Read the full post at darknet.org.uk
Category:
attack surface,
attack surface analyzer,
Countermeasures,
Exploits/Vulnerabilities,
manage attack surface,
microsoft,
microsoft asa,
microsoft attack surface analyzer,
microsoft security,
risk management,
security audit tool,
security management,
Security Software,
security-audit,
Windows,
Windows Hacking,
windows-security |
Comment
02/08/2011, 09:55
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
Proxocket is a dll proxy project for the main Winsock functions which allows to capture any type of packet and data sent/received by a specific software of your choice and optionally modifying its content or the connect, bind and accept functions through a custom dll very easy to create. Proxocket handles the following functions for [...]
Read the full post at darknet.org.uk
01/20/2011, 09:45
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
It’s pretty rare to read about malware on the Linux or Mac OSX platforms and even more rare to read about cross-platform malware which targets both AND Windows by using Java. A neat piece of coding indeed, it targets vulnerabilities in all 3 operating systems – the sad thing? The malware itself is vulnerable to [...]
Read the full post at darknet.org.uk
Category:
Apple,
cross platform malware,
cross platform trojan,
cross platform virus,
java based malware,
java based trojan,
jnanabot,
koobface,
Linux Hacking,
linux malware,
linux trojan,
mac malware,
mac trojan,
mac-virus,
macbook-pro,
Malware,
osx trojan,
osx.koobface,
trojan.jnanabot,
Windows Hacking,
windows-virus |
Comment
01/04/2011, 13:02
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
First up, happy new year – let’s hope 2011 is an interesting year for the infosec community. Anyway today’s story is about the recently released tool cross_fuzz by Michal Zalewski and an inadvertent leak that have occurred. tl;dr version is something like this: Michal Zalewski writes a DOM fuzzer, fuzzes IE, finds flaws, Chinese…
Read the full post at darknet.org.uk
Category:
0day,
breakaaspecial,
breakcircularmemoryreferences,
cross_fuzz,
Exploits/Vulnerabilities,
IE,
ie 0day,
ie zero day,
IE-exploit,
IE-vulnerability,
internet explorer 0day,
internet-explorer-exploit,
lcamtuf,
michal-zalewski,
Windows Hacking,
zalewski,
zero-day |
Comment
12/29/2010, 21:53
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
IOCTL Fuzzer is a tool designed to automate the task of searching vulnerabilities in Windows kernel drivers by performing fuzz tests on them. The fuzzer’s own driver hooks NtDeviceIoControlFile in order to take control of all IOCTL requests throughout the system. While processing IOCTLs, the fuzzer will spoof those IOCTLs conforming to conditions…
Read the full post at darknet.org.uk
Category:
Exploits/Vulnerabilities,
fuzzer,
fuzzer tool,
fuzzing,
fuzzing ioctl,
fuzzing windows,
fuzzing windows kernel,
fuzzing-tool,
ioctl,
ioctl exploit,
ioctl fuzzer,
ioctl vulnerability,
Programming,
reverse-engineering,
ring 0,
Windows Hacking,
windows kernel driver fuzzing,
windows kernel fuzzing tool |
Comment
11/30/2010, 11:11
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
Now this is not the first time Windows UAC has hit the news for being flawed, back in February 2009 it was discovered that Windows 7 UAC Vulnerable – User Mode Program Can Disable User Access Control and after that in November 2009 it was demonstrated that Windows 7 UAC (User Access Control) Ineffective Against [...]
Read the full post at darknet.org.uk
Category:
0day,
bypass uac,
Exploits/Vulnerabilities,
Malware,
prevx,
sophos,
uac,
user access control,
win7 0day,
windows 7 exploit,
windows 7 zero-day,
Windows Hacking,
windows kernel exploit,
windows kernel vulnerability,
windows uac,
windows vista exploit,
windows-security,
zero-day |
Comment
11/17/2010, 09:09
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
As we’ve come to expect, the malware guys are always at the leading edge of technological development. Now there are rootkits infecting 64-Bit versions of Windows, which have been thought of as fairly safe by most parties. The rootkit in questions is a fairly well known variant (TDL/Alureon) and has been around for several years, [...]
Read the full post at darknet.org.uk
Category:
64-bit windows rootkit,
alureon,
alureon rootkit,
Malware,
prevx,
root kit,
rootkit,
rootkits,
tdl,
tdl rootkit,
win7,
win7 malware,
win7 rootkit,
windows 7,
windows 7 rootkit,
windows 7 security,
Windows Hacking |
Comment
10/29/2010, 12:35
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
Well this seems to be a frequently recurring theme, yes there is yet another critical 0day vulnerability in Adobe products – pretty much across the board this time. It was that long ago that a critical flaw in Flash put Android phones at risk. The core vulnerability exists in Flash but it’s being actively exploited [...]
Read the full post at darknet.org.uk
Category:
0-day,
0day,
adobe,
adobe flash 0day,
adobe flash exploit,
adobe flash security,
adobe reader,
adobe reader 0day,
adobe reader exploit,
adobe reader vulnerability,
adobe security,
authplay,
authplay exploit,
Exploits/Vulnerabilities,
flash,
Malware,
Windows Hacking,
zeroday |
Comment
10/18/2010, 11:24
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
PoC to generate Reverse TCP backdoors (x86, x64, all ports), running Autorun or LNK USB infections, but also dumping all USB files remotely on multiple targets at the same time. USBsploit works through Meterpreter sessions with a light (27MB) modified version of Metasploit. The interface is a mod of SET (The Social Engineering Toolkit). The [...]
Read the full post at darknet.org.uk
10/14/2010, 12:00
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
Windows Credentials Editor (WCE) allows to list logon sessions and add, change, list and delete associated credentials (ex.: LM/NT hashes). This can be used, for example, to perform pass-the-hash on Windows and also obtain NT/LM hashes from memory (from interactive logons, services, remote desktop connections, etc.) which can be used in further…
Read the full post at darknet.org.uk
Category:
get ntlm hash,
get windows hash,
Hacking Tools,
hacking-windows,
ntlm hash,
pass the hash,
Password Cracking,
wce,
windows credential editor,
Windows Hacking,
windows hash cracker,
windows-security |
Comment
10/12/2010, 09:41
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
SQL Server fingerprinting can be a time consuming process. It involves a lot many trial and error methods to fingerprint the exact SQL Server version. Intentionally inserting an invalid input to obtain a typical error message or using certain alphabets that are unique for a certain server are two of the ways to possibly fingerprint [...]
Read the full post at darknet.org.uk
Category:
database fingerprinting,
database fingerprinting tool,
Database Hacking,
database hacking tool,
esf,
hacking,
Hacking Tools,
microsoft sql,
microsoft sql server,
ms-sql,
ms-sql server fingerprint,
ms-sql server fingerprinting,
sql server fingerprint,
sql server fingerprinting,
Windows Hacking |
Comment
09/24/2010, 12:50
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
There seems to be a fairly serious attack being exploited in the wild that targets vulnerable ASP.Net web applications, so far there is a temporary fix but no official announcement on when a patch will be issued. The next scheduled patches should be pushed out on October 12th. If you had set up your server [...]
Read the full post at darknet.org.uk
Category:
asp,
asp exploit,
asp flaw,
asp security,
ASP.net,
cryptographic attack,
cryptographic padding attack,
Cryptography,
Exploits/Vulnerabilities,
hacking asp,
hacking microsoft,
hacking-websites,
hacking-windows,
microsoft,
microsoft security,
side channel,
side channel attack,
Web Hacking,
web-application-security,
Windows Hacking |
Comment
08/11/2010, 11:27
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
Well this flaw was first publicized in November last year, it was successfully used against Twitter in the same month. IETF completed the SSL vulnerability fix in January this year and now in August – 10 months after the original release of the flaw – Microsoft has stepped up and fixed it. The fix is [...]
Read the full post at darknet.org.uk
Category:
Exploits/Vulnerabilities,
microsoft,
microsoft patch,
microsoft vulnerability,
microsoft-exploit,
ms10-049,
Network Hacking,
patch-tuesday,
schannel,
schannel bug,
schannel exploit,
secure channel,
ssl bug,
ssl exploit,
ssl flaw,
ssl renegotiation,
ssl renegotiation bug,
ssl spoofing,
ssl vulnerability,
Windows Hacking,
windows schannel bug,
windows schannel exploit,
windows ssl,
windows ssl bug,
windows ssl vulnerability |
Comments Off
07/23/2010, 11:51
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
This is a pretty nasty attack and for once Microsoft have actually acknowledged and confirmed this is a critical unpatched vulnerability. Incidentally Microsoft also recently retired Windows XP SP2 from the support cycle, and this vulnerability effects that system and they have stated they will not be patching it. It’s a pretty serious bug…
Read the full post at darknet.org.uk
Category:
0-day,
0-day windows exploit,
0day,
Exploits/Vulnerabilities,
oob patch,
out of band,
out of band patch,
root kit,
stuxnet,
Windows Hacking,
windows shortcut exploit,
windows vulnerability,
windows xp sp2,
windows-exploit,
windows-security |
Comments Off
07/16/2010, 11:03
This post was syndicated from: Darknet - The Darkside and was written by: Darknet. Original post: at Darknet - The Darkside
The Metasploit Project is proud to announce the release of the Metasploit Framework version 3.4.1. This release sees the first official non-Windows Meterpreter payload, in PHP as discussed last month here. Rest assured that more is in store for Meterpreter on other platforms. A new extension called Railgun is now integrated into Meterpreter…
Read the full post at darknet.org.uk
Category:
automated-hacking,
automatic hacking,
download metasploit,
exploit payload,
exploit techniques,
exploit-framework,
exploitation-framework,
Exploits/Vulnerabilities,
hacking,
Hacking Tools,
hacking-software,
Linux Hacking,
metasploit,
metasploit 3.4,
metasploit 3.4.1,
metasploit express,
metasploit-exploit-framework,
metasploit-framework,
meterpreter,
security-tools,
shellcode,
vulnerabilities,
Windows Hacking |
Comments Off