본문 바로가기

password20

Password Patterns In December 2009, a critical data breach in the Internet has been experienced. Around 32 million user passwords of rockyou.com web portal was stolen by a hacker which had used SQL injection for his attack. He got all passwords and made them anonymously (i.e. without usernames) available in the Internet to download. Security experts started analyzing the passwords and Imperva released a study reg.. 2010. 9. 16.
SQL Injection Vulnerability SQL Injection Vulnerabilities Green Shop [x] Tybe: SQL Injection Vulnerabilities [x] Vendor: egreen.ir [x] Script Name: Green Shop [x] author: Ashiyane Digital Security Team [x] Thanks To N4H [?] Submit By PrinceofHacking ^_^ [x] Mail : Prince[dot]H4ck@gmail[dot]com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ D0rk: "egreen.ir" Exploit: http://site.org/index.php?pid=[SQLi] Ex: http://site.org/index.ph.. 2010. 7. 8.
OTP and OPIE by Hye Jin Youn & Security KAIST Sponsored by Initech. Copyright (C) Jan 2000, Hye Jin Youn and Security KAIST You may freely redistribute or republish this article, provided the following conditions are met as long as it is for non-commercial purposes. Otherwise permissions should be granted: 1. This article is left intact. 2. Proper credit is given to its authors; Hye Jin Youn and the Security.. 2010. 1. 8.
OpenSSH, OTP and gnome-terminal Posted by Michele Baldessari Last year I reimplemented the S/Key support in gnome-terminal (#305126), and since I couldn’t find the notes I took last time, I decided to setup a quick S/KEY Environment. I do recall the documentation in order to set it up was extremely scarce, so I’ll try to fill in the void. Note: I tried going down the “recompile openssh with openbsd’s skey libs”, but it’s too m.. 2010. 1. 8.
Black Day to Kaspersky, vulnerable again, again exposes users and serial data It is known by many as February 7, 2009 I found a SQL Injection vulnerability in Kaspersky USA . When security sites and databases Kaspersky has been audited by an uber specialist, David Litchfield . But it seems that the story of vulnerabilities continue … This time parameter is vulnerable on a page in Malaysia and in Singapore . The vulnerability affects all databases in Southeast Asia. “ Kasp.. 2009. 12. 15.