What are the security holes in the Basic Authentication scheme?
22.09.08  |  SecurityTeam

The Basic Authentication scheme uses the username and password and encrypts the password using base64 encoding. In spite of this, there are still many security holes in the Basic Authentication scheme. Although the password is stored on the server in encrypted format, it is passed from the client to the server in plain text format [...]

What are the phases of malicious hacking?
20.09.08  |  SecurityTeam

The following are the phases of malicious hacking: 1. Reconnaissance: In this phase, the attacker gathers information about the victim. 2. Scanning: In this phase, the attacker begins to probe the target for vulnerabilities that can be exploited. 3. Gaining Access: In this phase, the attacker exploits a vulnerability to gain access into the system. [...]

What are the general classes of hackers?
19.09.08  |  SecurityTeam

Hackers are categorized into the following classes: * Black Hat Hackers (Crackers): These are persons who are computer specialists and use their hacking skills to carry out malicious attacks on information systems. * Gray Hat Hackers: These are persons who sometimes do not break laws and help to defend a network, but sometimes act as [...]

What are snort rules?
18.09.08  |  SecurityTeam

Snort rules are the conditions specified by a Network Administrator that differentiate between normal Internet activities and malicious activities. Snort rules are made up of two basic parts: * Rule header: This is the part of any rule where the rule’s actions are identified. Alert, Log, Pass, Activate, Dynamic, etc. are some important actions used [...]

Shell via LFI
18.09.08  |  Hacking, SecurityTeam

>>>>>>>>>>>>>>> Shell via LFI – proc/self/environ method <<<<<<<<<<<<<<< >>>>>>>>>>>>>>> Author : SirGod <<<<<<<<<<<<<<< >>>>>>>>>>>>>>> www.insecurity-ro.org <<<<<<<<<<<<<<< >>>>>>>>>>>>>>> www.h4cky0u.org <<<<<<<<<<<<<<< >>>>>>>>>>>>>>> sirgod08@gmail.com <<<<<<<<<<<<<<< 1 – Introduction 2 – Finding LFI 3 – Checking if proc/self/environ is accessible 4 – Injecting malicious code 5 – Access our shell 6 – Shoutz >> 1 – Introduction In this [...]