Facebook Attach EXE Vulnerability
Posted on 5, Dec | 
Posted by sahilkhan | 
0 comments
When using the Facebook ‘Messages’ tab, there is a feature to attach a file. Using this feature normally, the site won’t allow a user to attach an executable file. A bug was discovered to subvert this security mechanisms. Note, you do NOT have to be friends with the user to send them a message with [...]
PwnPhone – Pentesting Suite for Nokia N900
Posted on 3, Dec | Posted by sahilkhan | 0 comments
The Pwnie Express’ PwnPhone is a full Pentesting suite for the Nokia N900. It Includes Aircrack, Metasploit, Kismet, GrimWEPa, SET, Fasttrack, Ettercap, Nmap, and more… Custom pentesting screen with shortcuts to macchanger, injection on/off, etc. Built-in wireless card supports packet injection, monitor mode, and promiscuous mode. source Download: – pwnphone_image-7.6.2011.tar.gz – pwnphonemanual.pdf
SpyEye Banking Trojan – Now with SMS Hijacking Capability
Posted on 2, Dec | Posted by sahilkhan | 0 comments
The Trusteer research team recently uncovered a stealth new attack carried out by the SpyEye Trojan that circumvents mobile SMS (short message service) security measures implemented by many banks. Using code captured while protecting a Rapport user, researchers discovered a two-step web-based attack that allows fraudsters to change the mobile phone number in a victim’s [...]
Groupon Leaks Entire Indian User Database
Posted on 2, Dec | Posted by sahilkhan | 0 comments
The entire user database of Groupon’s Indian subsidiary Sosasta.com was accidentally published to the Internet and indexed by Google. The database includes the e-mail addresses and clear-text passwords of the site’s 300,000 users. It was discovered by Australian security consultant Daniel Grzelak as he searched for publicly accessible databases containing e-mail address and password pairs. [...]
Detailed About Duqu Trojan / F.A.Qs – Duqu Trojan
Posted on 2, Dec | Posted by sahilkhan | 0 comments
An emerging malware threat identified as the Duqu trojan has received a great deal of attention because it is similar to the infamous Stuxnet worm of 2010. What is Duqu? The Duqu trojan is composed of several malicious files that work together for a malicious purpose. The first component is a Windows kernel driver that searches for [...]
