Week 48 in Review – 2009

• Metaspoit 3.3 Released! Exploitation Framework – darknet.org.uk
  A new version of Metaspoit brings more modules, fewer bugs and more.
• Nmap 5.10 beta 1 Released – security-database.com
  Nmap is a free open source utility for network exploration or security auditing.
• Why You Need Echo Mirage – pauldotcom.com
  A look at obfuscation and Echo Mirage
• Graudit v1.4 Released – security-database.com
  Graudit is a simple script and signature set that allows you to find potential security flaws in source code using the GNU utility grep.
• Websecurify v0.4 Released – security-database.com
  An update to this security testing framework includes a better UI, rewritten task engine, among others
• IGhashGPU – Cracking Oracle Passwords with 790 Million Passwords/second – red-database-security.com
  Ivan Golubev’s super fast password cracker gets an update, includes Oracle 11g hases.
• Racket 1.0.6 Released – spoofed.org
  Racket is a Ruby Gem used for reading, writing and handling raw packets in an intuitive manner.

• Man-in-the-Middle Attacks against the chipTAM comfort Online Banking System – blogs.23.nu/RedTeam
• English Paper about Man-in-the-Middle Attacks against chipTAN Online – blogs.23.nu/RedTeam
  Information about the attacks developed against chipTAN comfort.
• Analysis of 10k Hotmail Passwords Part 5: Markov Model Showdown – reusablesec.blogspot.com
  Incremental and markov modes applied on a password data set
• Attacking MSSQL with Metasploit – darkoperator.com
  Some analysis on how to extract info from a Microsoft SQL Server using the popular tool.
• Injection attacks, it’s not just SQL! – securityninja.co.uk
  A look into XPath injection and how it is used with XML files.
• RSS09:Web Application Firewall Bypasses and PHP Exploits – suspekt.org
• Shocking News in PHP Exploitation – suspekt.org
  A quick summary on unserializing Zend Framework input can lead to remote PHP code execution
• [V13P] Target analyser – portswigger.net
  A guide to using Burp’s web application analysis function.
• Creating Ghost Services with Single Packet Authorization – cipherdyne.org
  An illustration regarding using spaclient to access sshd.

Vulnerabilities:

• Climategate hack used open proxies – erratasec.blogspot.com
  The hacker used an open proxy to hide his origin but might give clue to his/her identity.
• IE vulnerability revealed
  A hacker posted an attack code to the Bugtraq mailing list last Friday that could break into a PC running older versions of Microsoft’s Internet Explorer browser.
  • Microsoft Security Advisory 977981 Released – technet.com
  • Attack Code Posted for Internet Explorer – absolute.com
• Sexy girl pics used in Facebook clickjacking scam
  Facebook worm uses a cross-site request forgery attack to spread via the victim’s wall posting.
  • New Facebook worm uses sexy model to get guys to click da’ button – techtarget.com
  • Facebookers hit with steamy clickjacking exploit. – theregister.co.uk
• Metasploit releases IE attack, but it’s unreliable – networkworld.com
  The code exploits an Internet Explorer bug that was disclosed last Friday as a proof-of-concept attack.