<![CDATA[[SecurityRatty] tag: cult]]> http://securityratty.com/tag/cult Thu, 21 Feb 2008 21:00:00 +0000 iRatty Engine http://blogs.law.harvard.edu/tech/rss <![CDATA[Microsoft Fixes 8-year Old Design Flaw in SMB]]> http://securityratty.com/article/a9e76f6b098eb908aafae4695f6fe6e9 http://securityratty.com/article/a9e76f6b098eb908aafae4695f6fe6e9 With regard to the recent Patch Tuesday fix, there has been an issue fixed regarding NTLM Relaying, that has been around for more than eight years.

In 2000, I wrote an advisory about NTLM relaying (CVE-2000-0834). The problem turned out to be significantly larger than I originally suggested in the advisory. The attack extended to other NTLM-based authentications on other protocols and allowed general-purpose credential theft via a man-in-the-middle attack.

The SMBRelay tool was published in 2001 by Sir Dystic of Cult Of The Dead Cow, and that really took it to the next level. The protocol completely fell apart. It kicked off a number of other analyses of the NTLM protocol that finally resulted in this patch. Eight years after it’s discovery.

At least they got around to it. Thanks!

]]> Wed, 12 Nov 2008 18:11:12 +0000 ntlm protocol ntlm general-purpose credential theft issue fixed significantly larger attack dead cow sir dystic smbrelay tool Microsoft Fixes 8-year Old Design Flaw in SMB <![CDATA[Opera Browser Integrates Malware Protection]]> http://securityratty.com/article/ee1c35e6ac591be9f90a77c56f737b50 http://securityratty.com/article/ee1c35e6ac591be9f90a77c56f737b50 Opera, arguably one of the fastest rendering browsers available, is stepping up on security. With their version 9.5 release they are adding in malware protection courtesy of a deal that was struck with Haute Secure.

From Tech Crunch:

Haute Secure makes software that aggressively monitors and alerts users to malware sites. Besides the version that is being integrated into Opera, Haute is also available as a free plugin for Internet Explorer and Firefox. It differentiates itself from other blocking software by analyzing sites on the link level instead of at the domain level. This means that on very large sites like MySpace that contain a combination of legitimate material along with more sinister profiles, pages will be blocked on a case by case basis instead of simply banning the entire MySpace site.

Opera, while not nearly as popular as Internet Explorer or Firefox, has managed to gain something of a cult following since its original launch in 1996.

Nice upgrade for the little browser that could can. If you haven’t tried it give Opera a test drive. I use it as one of my 3 regular browsers.

Article Link

]]> Sun, 08 Jun 2008 10:27:05 +0000 opera haute secure haute malware sites internet explorer sites myspace entire myspace site malware protection courtesy Opera Browser Integrates Malware Protection <![CDATA[Google Vulnerability Scanner]]> http://securityratty.com/article/a29e047c915f86ee6280138ac6e6f29a http://securityratty.com/article/a29e047c915f86ee6280138ac6e6f29a We've all known for years that you can use Google to scan for vulnerabilities. Well, now the process has been automated.

Presenting: Goolag Scanner from the Cult of the Dead Cow.

I've seen a lot of pre-release scanning results from these guys, and it's pretty amazing what they've found.

]]> Tue, 04 Mar 2008 09:12:22 +0000 google dead cow goolag scanner lot process cult pretty scan vulnerabilities Google Vulnerability Scanner <![CDATA[Hacker group releases automated 'Google hacking' tool]]> http://securityratty.com/article/d0d2d9149f756b459909b38e5d3a740b http://securityratty.com/article/d0d2d9149f756b459909b38e5d3a740b

]]> Fri, 22 Feb 2008 11:00:00 +0000 dead cow hacker scan web sites google security vulnerabilities open-source tool terms collection cult Hacker group releases automated 'Google hacking' tool <![CDATA[Hackers turn Google into vulnerability scanner]]> http://securityratty.com/article/c18d060922af58603d0538b0d437195f http://securityratty.com/article/c18d060922af58603d0538b0d437195f

Hear the latest on WAN application performance

Advertisement

Give us 5 minutes to show how we can address your toughest challenges & Get $25 Coffee Gift Card!

]]> Thu, 21 Feb 2008 21:00:00 +0000 vulnerability scanner wan application performance coffee gift card google web sites dead cow sensitive information server vulnerabilities advertisement Hackers turn Google into vulnerability scanner <![CDATA[Goolag makes Google Hacking a snap]]> http://securityratty.com/article/95ea8f1ad81ca35293b784867fc5689c http://securityratty.com/article/95ea8f1ad81ca35293b784867fc5689c Thu, 21 Feb 2008 21:00:00 +0000 google dead cow novices cult easier tool Goolag makes Google Hacking a snap