Archive for April, 2012

WebSploit Is An Open Source Project For Scan And Analysis Remote System From Vulnerability

Description :
[+]Autopwn – Used From Metasploit For Scan and Exploit Target Service
[+]wmap – Scan,Crawler Target Used From Metasploit wmap plugin
[+]format infector – inject reverse & bind payload into file format
[+]phpmyadmin – Search Target phpmyadmin login page
[+]lfi – Scan,Bypass local file inclusion Vulnerability & can be bypass some WAF
[+]apache users – search server username directory (if use from apache webserver)
[+]Dir Bruter – brute target directory with wordlist
[+]admin finder – search admin & login page of target
[+]MLITM Attack – Man Left In The Middle, XSS Phishing Attacks
[+]MITM – Man In The Middle Attack
[+]Java Applet Attack – Java Signed Applet Attack
[+]MFOD Attack Vector – Middle Finger Of Doom Attack Vector
[+]USB Infection Attack – Create Executable Backdoor For Infect USB For Windows

About Author :

Founder : Bl4ck.Viper (Fardin Allahverdinajhand)
Location : Iran – Azarbaycan

VMware on Tuesday announced that a single file from its ESX server hypervisor source code has been posted online, and it held out the possibility that more proprietary files could be leaked in the future. ”The fact that the source code may have been publicly shared does not necessarily mean that there is any increased risk to VMware customers,” VMware said in a statement.

Hardcore Charlie” – who claims to have downloaded some 300 Megabytes of VMWare source code.

Anonymous tweeted:

@AnonymousIRC: Oops, VMWare source leaked? Not good http://pastebin.com/JGxdK6vw to Anonymous contributors. May the Pirate Bay always sail strong!The leaked documents include what appear to be internal VMWare communications, pasted onto CEIEC letterhead and with official looking stamps. One email exchange, dated June 5, 2003 is from Jeffrey Sheldon to an internal VMWare listserv and has the subject “code review:untruncating segments.

Given the large number of service providers that run vSphere, security issues in ESX could potentially have a broad and widespread impact, according to security researchers. VMware says it is looking into the matter and will be canvassing its industry partners and developers in order to determine the source of the breach.

A dispute over whether a Swedish ISP can be forced to hand over the details of one its subscribers to an anti-piracy group has just received its long-awaited ruling from the Europe’s highest court. A few moments ago the ECJ announced that there are no EU barriers which prevent the ISP handing over its customers’ private details to copyright holders.

Not long after Sweden’s controversial IPRED legislation became law in 2009, five book publishers handed a request for information to a local court.

The rightsholders, represented by anti-piracy group Antipiratbyrån, wanted to force local ISP ePhone to hand over the personal details of a subscriber who allegedly stored more than 2000 audio books on his server, 27 of which breached the publishers’ copyrights.

In June that year the court ordered ePhone to provide the information but the ISP felt it would be wrong to comply, and instead took their case to the Court of Appeal. The ruling of the lower court was overturned on appeal and the case was sent to the Sweden’s highest court.

In the event even the Supreme Court couldn’t decide and it in turn forwarded the case to the European Court of Justice. A few moments ago the ECJ released its decision, one that is sure to please rightsholders.

The ECJ decided that there are no EU barriers which stop ePhone being ordered to provide the information as requested by Antipiratbyrån and the book publishers. The Court said that Swedish law strikes an appropriate balance between the rights of copyright holders and citizens’ rights to privacy.

Having obtained the decision from the ECJ, the case will now head back to Sweden’s Supreme Court.

“We feel very satisfied with this judgment. It is extremely important that we have received this message,” said Kristina Ahlinder, president of the Publishers’ Association.

“The important next step is that the Supreme Court gives us the authority, that the evidence is sufficient and that we have the right to share this information. The illegal publication that has occurred from this IP address is comprehensive,” Ahlinder added

If Sweden’s Supreme Court indeed decides that ePhone must hand over the information, it is not clear if the publishers are even ready to continue with a civil case against the alleged infringer. But of course, other entities such as the music and movie industries have been watching closely too, since it clarifies their position going forward. IFPI, among others, are welcoming the ruling.

Security firm Sophos has discovered more malware for the Mac OS X platform called Sabpab. It uses the same Java vulnerability as Flashback to install itself as a “drive-by download.” Users of older versions of Java now have still more malware to worry about.

It also doesn’t require any user interaction to infect a system either just like Flashback all that needs to happen is for you to visit an infected webpage. Sabpab, according to Sophos, installs a backdoor that allows the hackers to capture screen snapshots, upload or download files and execute commands on infected Macs remotely.

The Trojan creates the files

Encrypted logs are sent back to the control server, so the hackers can monitor activity. Although one variant of Flashback installed a file in the LaunchAgents folder, not all tools for detecting Flashback do anything with that folder.

Symantec identifies the trojan as OSX.Sabpab which exploits the Oracle Java SE Remote Java Runtime Environment Denial Of Service Vulnerability (BID 52161) in order to install itself on to the compromised computer.

Sophos products, including free Mac anti-virus for home users, detect the Trojan horse as OSX/Sabpab-A.

In December of 2010, former Goldman Sachs programmer Sergey Aleynikov was convicted of theft of trade secrets when he took some exclusive code out the door with him. This past February however, Aleynikov’s conviction was overturned due to a ruling in 2nd Circuit Court of Appeals. Now, the court’s opinion has finally been published and it’s been made clear exactly why this conviction was overturned; code is not a physical object and cannot be stolen. The code was not stolen from Goldman Sachs, only copied. Since Goldman Sachs was not deprived of its use, it wasn’t theft.

For all of us who have been banging the “piracy is not theft” drum for years, this is a significant victory in redefining the terms of theft to more accurately reflect the digital world. There is, however, a little more to unpack in this particular case, which makes things as complicated as it makes them interesting. Let’s get some of the details straight here first. The code that was stolen was had to do with the firm’s high-speed trading system, which they alone possessed until Aleynikov walked away with. He was then charged and convicted under something called the Economic Espionage Act of 1996 (EEA), which pertains to the theft of trade secrets and such as well as the National Stolen Property Act (NSPA) which relates quite literally to stolen goods.

There are really two main things at play here. First and foremost, there’s the whole piracy versus theft thing, and the fact that — as far as the court is concerned — code is not a physical object. The NSPA makes it illegal to “transport, transmit, or transfer in interstate or foreign commerce any goods, wares, merchandise, securities or money, of the value of $5,000 or more, knowing the same to have been stolen, converted or taken by fraud.” Since the code isn’t a physical good and was not literally stolen, the court ruled, the NSPA doesn’t apply.

Here it’s worth noting that while Aleyniko didn’t literally steal the code or deprive Goldman Sachs of its use, he did deprive them of something: its exclusive use. The real kicker though, is that he didn’t deprive them of it by taking it for his exclusive use; he deprived them of its exclusive use by effectively destroying its exclusive use. Just think about that for a minute. It’s a lot more complex than words like “theft” or “copying” or “piracy” can really sum up. That said, it’s still soundly in the realm of trade secrets. If you were to take a picture of the fabled Coca Cola recipe, that’s pretty much the same thing. Or is it?

That’s where the second part comes in, the classification of this code as a trade secret. For those of you who don’t know the skinny on this, a trade secret is essentially the best alternative to a patent. Patents secure exclusive use, but they expire. Trade secrets, on the other hand, do not secure exclusive use in any legal sense — you can’t sue to prevent the use of a stolen trade secret — but they also don’t expire. A trade secret is exclusive to you as long as you keep it under wraps, ideally forever. Trade secrets are legally protected from theft however, in that you can charge the thief, but once they’re out, they’re up for grabs.

The EEA illegalizes the theft of trade secrets insofar as “they are related to or included in a product that is produced for or placed in interstate or foreign commerce,” or in other words, trade secrets that you use to make a thing that you sell to people, like the Coca Cola recipe, for instance, or that famous blend of seven mysterious herbs and spices. The code at hand here just helped Goldman Sachs make stock and commodities trades in high volume and do it fast. They weren’t selling anything the code was used in or used to produce and they weren’t going to license the code. Therefore, the court ruled, the EEA doesn’t apply and considering that piracy isn’t literal theft, Aleyniko walks on a pair of interesting technicalities.

It’s fascinating really, and speaks to the legal complexities of an increasingly digital world, one where words like “theft” need to stop being thrown around so carelessly. Now that’s not to say Aleyniko didn’t do something to harm Goldman Sachs, or even whether or not he did something that he deserves to be punished for. That is a different question entirely. It does deepen the rabbit hole of what code is in the eyes of law. If your ostensibly trade secret code can be copied and the guy who took it can walk, maybe trade secret isn’t the way to go. A ruling like this is going to make patenting code look a lot more appealing all of a sudden, and patented code is a whole other huge mess. And while this ruling may encourage code patenting, it’s hardly a cut and dried precedent considering that Goldman Sach’s particular trade secret code was of a weird, non-commercial variety. Then again, social networking code doesn’t have any direct commercial applications either, so what if Aleyniko had stolen some code Facebook is hiding somewhere off in a secluded cyber-closet?

The issue of theft and misappropriation of code and other digital information is definitely a very complex one, and this ruling — if nothing else — calls attention to and respects that fact by refusing to simply fall back on the inappropriately simple conclusion “oh, it’s theft.” The Internet blew up in popularity a while ago, but the legal system clearly still has a lot of catching up to do. Hopefully we’re watching the construction of a new, unique lexicon and logic surrounding the realities of a digital world, and I don’t know about you, but I’ll be watching with rapt attention and bated breath.

 

(BEIJING) — China was struggling Thursday to restore several government websites that international hacking group Anonymous says it attacked in an apparent protest against Chinese Internet restrictions.

On a Twitter account established in late March, Anonymous China listed the websites it says it hacked over the last several days. They include government bureaus in several Chinese cities, including in Chengdu, a provincial capital in southwest China. (MORE: Worst Cyber-Criminals in the World: China and Russia, Claims U.S. Report)

Some of the sites were still blocked Thursday, with error messages shown.

Anonymous activists have defaced websites around the world. They are engaged in political causes, including opposition to the global clampdown on file-sharing sites and defense of the secret-spilling site WikiLeaks. Some websites that Anonymous said it attacked were working Thursday, and government officials denied the sites were ever hacked. China’s National Computer Network Emergency Response Technical Team was not available for immediate comment.

In a message left on one of the hacked Chinese sites — cdcbd.gov.cn, a home page for Chengdu’s business district — the hackers expressed anger with the Chinese government for restrictions placed on the Internet.

“Dear Chinese government, you are not infallible, today websites are hacked, tomorrow it will be your vile regime that will fall,” the English-language message read. “What you are doing today to your Great People, tomorrow will be inflicted to you. With no mercy.”

The message also offered instructions on how to circumvent China’s restrictions on its Internet. The government tries to block Internet users in China from seeing social media sites such as Facebook and Twitter. Information on politically sensitive topics is often blocked.”

School authorities insisted that Kimberly Hester open up her Facebook account following complaints over a picture she posted. Now she’s fighting for her job and her rights.

Teacher’s aide Kimberly Hester has found herself on suspension and in the middle of a legal battle with her school after reportedly refusing to show a superintendent her Facebook account.

Working as an aide at the Frank Squires Elementary School in Cassopolis, Mich., Hester was employed by the Lewis Cass Intermediate School District, according to news site WSBT.

The issue arose in April 2011 when Hester posted a picture on her own time of a co-worker’s pants around her ankles and a pair of shoes. Hester thought the picture harmless enough. But one of her Facebook friends, also the parent of a student, apparently did not.

After the parent complained to the school, Hester found herself summoned to the office of Lewis-Cass Intermediate superintendent Robert Colby, who wanted to see her Facebook account.

“He asked me three times if he could view my Facebook and I repeatedly said I was not OK with that,” Hester told WSBT.

In return, Hester received a letter from the Special Education Director at Lewis Cass informing her that “…in the absence of you voluntarily granting Lewis Cass ISD administration access to you[r] Facebook page, we will assume the worst and act accordingly.”

The incident led to paid administrative leave and a suspension for the aide, eventually prompting her to file a lawsuit against the school district. Currently collecting workman’s compensation, Hester is preparing to fight her side of the case, which is slated for arbitration this May.

“I stand by it,” Hester told WSBT. “I did nothing wrong. And I would not, still to this day, let them in my Facebook. And I don’t think it’s OK for an employer to ask you.”

The right of employers to ask workers to open up their Facebook accounts has been a lively subject recently. Just over a week ago, Facebook advised its users not to share their Facebook accounts with their bosses, warning both employees and employers that doing so violates the social network’s own guidelines.

But Facebook’s guidelines aren’t legally binding, so employers are under no obligation to follow them. Naturally, Washington lawmakers have gotten into the act, but with little progress so far.

An amendment that would make it illegal for employers to request an employee’s Facebook account was rejected last week after Democrats tried to use it to shoot down an unrelated Republican bill.