SEARCH RESULTS
 
Showing 1-10 of 29 records
 
Expand article

Your 3 Favorite Linux Commands?

2008-07-25 14:02:41 by JJ in Security Uncorked
 
...commands that we use daily and are part of our daily arsenal. Im working out mine but wanted to hear from you What are your 3 favorite Linux commands And is there 1 obscure one you really love (or hate
 
Tags: favorite linux commands, daily, linux platform, daily arsenal, platform, fun friday post, evil admin, mixed caps, sun network
 
 
 
 
Expand article

ShoutPro Vulnerability Currently Causing Issues For Websites

The Article has images
2008-06-26 10:22:27 by Christopher Boyd in SpywareGuide Greynets Blog
...commands on my server. I got lucky.. since he was running the script from a subdomain, he was only able to actually access files within [URL REMOVED], though he was able to view file lists of files from any directory on my site, and maybe view them using shell commands ouch. You can see an example of NSTView at work here , complete with...
 
Tags: shoutpro, shoutbox, shoutbox recently due, shoutbox attacks, access, access files, files, shoutpro code, version
 
 
 
 
Expand article

ICQ Messenger Controlled Malware

The Article has images
2008-04-14 07:28:05 by HASH0x8b20134 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...commands, thus becoming a universal tool for controlling the computer - it all depends on your imagination and skills. Through the program operations like the following can be run by default - viewing directories, displaying messages, lauching programs, killing processes, shutdown, view active windows, and much more Released primarily as a...
 
Tags: malware, malware authors, lone malware author, icq, malware purposes, control, control botnets, ordinary icq, permanent development phrase
 
 
 
 
Expand article

Giving SQL Injection the Respect it Deserves

2008-05-15 18:45:00 by sdl in The Security Development Lifecycle
 
...commands leading to the possible modification (or deletion) of Operating System or user data Combining the use of parameterized queries and stored procedures helps to mitigate the risk of successful exploitation of user input which is not correctly verified This defense has been known about forever; heck, David and I discussed this in detail...
 
Tags: sql, sql injection bug, sql injection requirements, sql injection attack, sql server, sql execute-only permission, malicious sql payload, sql injection, sql injection vulnerability
 
 
 
 
Expand article

Autorun: good for you?

2007-09-23 05:29:48 by Steve Riley in Steve Riley on Security
 
...commands Enable the "Turn off Autoplay" policy and set it to "All drives In Windows XP/Server 2003 , go here Computer Configuration | Administrative Templates | System Enable the "Turn off Autoplay" policy and set it to "All drives While this might be old news for many of my readers, disabling autorun still doesn't seem to be a common...
 
Tags: autorun, autorun raises, autorun commands, autorun settings, key, registry key, disable autorun, computer, computer configuration
 
 
 
 
Expand article

New Audio comment line number - +1-415-830-5439 (and ditching K7.net)

2007-12-19 11:03:29 by HASH0x89eb6f0 in Blue Box: The VoIP Security Podcast
 
...commands to do what I was trying to do. It basically says a piece of text and then records up to 3 minutes of audio and emails it to our standard comment line. Ta da... same thing as I was doing with K7.net, but without the annoying termination after 30 days of non-use Anyway, that's the new number and the story behind it. Hopefully I won't...
 
Tags: comment, standard comment line, comment line, wrong comment line, call, call control xml, net call-in, net, fax message
 
 
 
 
Expand article

STRIDE chart

2007-09-11 23:18:00 by sdl in The Security Development Lifecycle
 
...commands is the classic example, but going from a limited user to admin is also EoP Update: fixed the table so it displays all four columns
 
Tags: threat, stride, windows, windows source code, web site, stride mitigations, code, user, remote internet user
 
 
 
 
Expand article

Blue Box #74: 2008 Crystal Ball Edition, Asterisk and Trixbox vulnerabilities, top 10 lists, VoIP security trends for 2008 and more....

2008-01-08 16:42:40 by HASH0x8940138 in Blue Box: The VoIP Security Podcast
 
...commands to execute trixbox CE audit tool official statement and fixes Audit Tool Change Plan Audit tool fix being pushed out tonight ComputerWorld: VoIP vulnerabilities increasing, but not exploits CRN : Top 9 VoIP Threats and Vulnerabilities (Sipera PR strikes again) points to CRN article: VoIP Threats, Vulnerabilities Abound which is based...
 
Tags: trends, vulnerabilities, voip security trends, security, trixbox vulnerabilities, voip vulnerabilities, listener comment line, comment line, top
 
 
 
 
Expand article

Blue Box #74: 2008 Crystal Ball Edition, Asterisk and Trixbox vulnerabilities, top 10 lists, VoIP security trends for 2008 and more....

2008-01-08 17:42:39 by Dan York in Blue Box: The VoIP Security Podcast
 
...commands to execute trixbox CE audit tool official statement and fixes Audit Tool Change Plan Audit tool fix being pushed out tonight ComputerWorld: VoIP vulnerabilities increasing, but not exploits CRN : Top 9 VoIP Threats and Vulnerabilities (Sipera PR strikes again) points to CRN article: VoIP Threats, Vulnerabilities Abound which is based...
 
Tags: trends, vulnerabilities, voip security trends, security, trixbox vulnerabilities, voip vulnerabilities, listener comment line, comment line, top