There are literally hundreds of thousands of websites running old web applications that are running vulnerable code just waiting to be hacked. It might start with a quick forum install or content management system that will keep running for years. If there were any bugs in the code, and it is a common application they [...]
Archive by Author
Iran’s Cyber Army Hacks 1,000 US, British, French Gov’t Websites
While political hacking has been around for years, this is a good reminder that credit cards and identity theft are not the only targets when it comes to securing systems. Anyone is a potential target, and organisations who have parties that are opposed to their agenda will be targeted. Whether they are non-governmental entities or [...]
BackTrack used by the NSA
As highlighted over on the backtrack site. It appears the NSA are one of the users of the excellent security testing Linux Distribution that is Back Track. That is almost as cool as Nmap being used in the Matrix. The National Security Agency and the Central Security Service tested the five U.S. service academies during [...]
Hacked US Treasury websites serve visitors malware
Oops, lets hope the money is safe. You would think of all the US Government departments and targets this one would be well protected. [QUOTE]Websites operated by the US Treasury Department are redirecting visitors to websites that attempt to install malware on their PCs, a security researcher warned on Monday. The infection buries an invisible [...]
CMS Explorer
When it comes to security vulnerability assessments against content management systems, it becomes necessary to discover which plugins are being used within the system. For the most popular open source systems (wordpress, drupal, joomla) there are literally thousands of plugins available and many have lets admit it not the best record when it comes to [...]
New Web Application Security Tool from Google. Skipfish.
Having done some initial testing this new tool is powerful and comprehensive. It blends a number of other tool features into a neat little package. I did some testing on my local LAN and the web server was getting pounded with thousands of requests per second. Your access and error.log is really going to fill [...]
