exploit « secauditor speaks: hmmmm…Security

Now the Tools – Pt.1 Metasploit

Posted on October 21, 2008. Filed under: Auditing, General, Penetration Testing | Tags: exploit, hacking, Metasploit, Penetration Testing, pent testing |

Metasploit provides useful information to people who perform penetration testing, IDS signature development, and exploit research. This project was created to provide information on exploit techniques and to create a useful resource for exploit developers and security professionals. The tools and information on this site are provided for legal security research and testing purposes only. [...]

Read Full Post | Make a Comment ( None so far )

Thwart Windows Authentication through Firewire

Posted on March 9, 2008. Filed under: Auditing, General | Tags: exploit, Firwire, vulnerability, windows |

Adam Boileau (Metlstorm) has released a script (winlockpwn) written in Python, which allows a device running Linux to be connected to the FireWire port of a target workstation running Windows XP to get full read/write memory access and bypass Windows authentication. He demonstrated the tool in 2006, but didn’t release it until a few [...]

Read Full Post | Make a Comment ( None so far )

VMWare Security Crumbling: Not Really

Posted on February 26, 2008. Filed under: Auditing, General | Tags: exploit, VMWare, vulnerability, windows |

This week CoreLabs came out with notification of a vulnerability found with in VMWare’s software. This vulnerability allows an attacker to break out of the Guest Operating System. This vulnerability was found in VMware’s shared folders mechanism. It grants users of a Guest system read and write access to any portion of the [...]

Read Full Post | Make a Comment ( 2 so far )

Exploiting the Core

Posted on February 23, 2008. Filed under: Auditing | Tags: Cisco, exploit, HSRP, Man in the Middle, MiTM, Router, security, VRRP, Yersinia |

This is the first in a two part blog about utilizing Yersinia to check out the security of your routers and switches. While there are many different exploits and areas of concerns in the routing infrastructures and designs of today, I am going to focus on two areas. Today’s blog is focused on [...]

Read Full Post | Make a Comment ( None so far )