The tag has no wiki summary.

learn more… | top users | synonyms

-2
votes
1answer
102 views

“Web Attack: Exploit Toolkit Website 32”? [closed]

What is "Web Attack: Exploit Toolkit Website 32"? How do I remove it? Where is it coming from? My Norton keeps blocking it. help me fix my problem Please
0
votes
0answers
31 views

What are spiders trying to achieve on my site? [migrated]

I've recently set up a build server that compiles Java source on Github webhooks. I created a public page for downloading latest .jars with a top level domain and I'm logging requests to it. What are ...
1
vote
1answer
341 views

Does the shellshock vulnerability leave any traces in log files?

I've patched my servers, but I'd also like to review my logs to see if there have been any compromises on them. Are there any consistent traces of exploits using this bug?
0
votes
1answer
121 views

Metasploitable_2 (Cannot issue apt-get to update or install any packages)?

I just setup Metasploitable 2 on VMware Fusion. I downloaded the image from here. I've booted it up and everything and can navigate around but would like to run a apt-get install update and possible ...
0
votes
1answer
104 views

Kali Linux java

I have a Kali linux sandbox set up with a direct connection to a windows VM. I have JAR files / java exploits I want to serve using the Kali box. After I get the jar file into the Kali Box, I know I ...
1
vote
1answer
37 views

Is it an actual threat to system if “desktop” is added to path

What kind of threat does adding the desktop path to system path variable present? Is there some well known exploit that really opens my system up if I do this? The thing is that Desktop is my ...
0
votes
1answer
308 views

Exploit.Win32.CVE-2010-2568.gen malware detected

I am not very good with computers. Actually, I am very bad :( so if you are willing to answer my question, could you please explain your answer in very simple terms, like to a complete dummy? Thanks ...
-1
votes
2answers
539 views

simple setuid binary exploitation

I have a setuid program which is listing a file this way: #include <stdlib.h> #include <stdio.h> int main(void) { system("ls /challenge/binary/binary1/.passwd"); return ...
0
votes
0answers
37 views

How do I run a VM within a VM with separate IPs accessible on a local network?

First off, I know my question sounds confusing. Brief background information: I am an instructor for a network security penetration test course. I help create scenarios with complex networks via ...
0
votes
0answers
362 views

How can I use this to test/bypass/exploit Local File Inclusion on my Website?

I have tried to run a vulnerability scanning suite named VEGAS on my website. I found that it was possible to be attacked using LFI. Page Fingerprint Differential Detected - Possible Local File ...
0
votes
1answer
72 views

How many bits of memory address will be randomized by ASLR in 32 and 64 bit linux and windows

How many bits of memory address will be randomized by ASLR in 32 and 64 bit linux and windows? Please give some examples.
1
vote
2answers
441 views

Need to figure out a way for RDP to call back to a local listener on a specified Ephemeral port though a Reverse SSH Tunnel

This relates to a previous question that was getting entirely too long and confusing due to my constant updates and edits and I was told to re ask it. So I am cleaning it up and asking a more direct ...
1
vote
0answers
46 views

Can a mounted encfs provide information enabling future access?

If someone has access to a system with an encfs mounted, can he extract information that enables him to decrypt the encfs content some time later?
0
votes
1answer
144 views

PHP Zend Hash Vulnerability Exploitation Vector [duplicate]

Possible Duplicate: CVE-2007-5416 PHP Zend Hash Vulnerability Exploitation Vector (Drupal) According to exploit-db, http://www.exploit-db.com/exploits/4510/, it says the following: ...
1
vote
1answer
89 views

Can a java exploit circumvent browser plug in permission?

Since Java 7 is vulnerable i am asking myself if the vulnerability is circumventing the plug in permission of any given browser. For example: http://www.youtube.com/watch?v=pn1Rbnidhl8 here you see ...
1
vote
4answers
187 views

if an outdated, vulnerable but clean Windows machine is connected to network behind router, can it be detected and attacked?

suppose the machine is clean of all malware but not in any sense updated, patched, secured etc. Suppose I connect it to the internet from behind wireless router with the intent of using it only on a ...
2
votes
2answers
1k views

How can I automatically pass the password to 'su'?

I am working on an exploit for a security course. The object is to obtain a root shell in a linux virtual machine. So far, I can write to /etc/passwd and change root's password to an arbitrary string. ...
0
votes
0answers
2k views

Metasploit cannot detect language pack on Windows 7

I use Metasploit (I have Backtrack 5 installed on VirtualBox) to attack my Windows 7 64-bit laptop. Every time I use exploit ms08-067-netapi I get this message: [*] Started bind handler [*] ...
1
vote
0answers
260 views

Is it possible to by pass auto run restrictions on windows 7?

I'm trying to create a startup on a windows 7 for the machine and current user (its a workstation meaning all user data is saved on a server). What i mean whit a startup is to have a program run at ...
2
votes
1answer
102 views

Is an unpatched Adobe Flash player still a security threat if I don't use a browser?

The Windows XP PC in question has the usual anti-virus and firewall precautions. It has the most recent Windows Updates and anti-virus updates installed. Flash is used only to play videos (located on ...
1
vote
2answers
493 views

Is Firefox less vulnerable to exploit when running NoScript?

The article titled "iPhone, IE, Firefox, Safari get stomped at hacker contest" at The Register website discusses that Firefox can be exploited. I wonder if NoScript protects against the kind of ...
4
votes
3answers
608 views

Where can I learn various hacking techniques on the web? [closed]

I would like to try my hand at hacking -- that is, exploiting various website vulnerabilities. Not for any illegal purpose mind you, but so I can have a better understanding and appreciation of these ...
2
votes
4answers
223 views

What browser feature is this exploiting and how to stop it?

http://raffa991[dot]ra[dot]funpic[dot]de/lol/ Warning: It is some kind of an annoying "you are an idiot" sign combined with a lot of popup message boxes. Open with care! In any case, it crashed my ...
7
votes
8answers
281 views

Why do browsers have so many possible exploits?

When browsing I am ocassionally given warnings about pages that host malware "that could damage my computer". I am seriously perplexed as to why, in 2010, browsers still have possible exploits and can ...
-1
votes
2answers
244 views

Virus on site but can't find where

There appears to be a virus on my site. It's been there for some time and I've had no problems as yet. AVG picks it up, but McAfee does not. I run a website (sortitoutsi.net) Ages ago I got a virus ...
4
votes
1answer
407 views

Is vimperator safe?

I recently discovered Vimperator, which is just awesome. However, it concerns me that I can execute shell commands from the browser.. is this exploitable? I'd really hate to get "sudo rm -r /*"'d. I ...