My Security Planet » BindShell.Net » March 2009

Feeds

13607 items (0 unread) in 75 feeds

• Jeremy Zawodny's blog
• Mozilla Webdev
• Transcendental Technical Travails
• Ian Bicking: a blog
• Hackosis

WebSecurity

• Watchfire Application Security Insider
• BlogSecurity
• sirdarckcat
• Google Online Security Blog
• CGISecurity.com: Your Web Site and Application Security Resource
• Switch/Twitch
• mybeNi websecurity
• cat slave diary
• SecuriTeam Blogs
• Curiouser and Curiouser
• Alex's Corner
• Billy (BK) Rios
• Chris Shiflett
• christian's weblog
• funkatron.com
• GNUCITIZEN
• The Spanner
• hackademix.net
• Ruby on Rails Security Project
• It's a shampoo world anyway
• Web Security Blog
• ha.ckers.org web application security lab
• Yet Another Infosec Blog
• PHP Security Blog
• Security Thoughts
• Sunnet Beskerming Security Advisories
• Disenchant's Blog
• Sylvan von Stuppe
• Larholm.com
• The Turkey Curse
• Jeremiah Grossman
• Anurag Agarwal - Application Security Evangelist
• Ivan Ristic
• deep inside | security & tools
• omg.wtf.bbq.
• BlueHat Security Briefings
• Tactical Web Application Security
• .:Computer Defense:.

Security

• tssci security
• Plynt Penetration Testing Blog
• Michael Howard's Web Log
• Security Retentive
• BindShell.Net
• Dominic White's .tHE pRODUCT
• SecurityFocus News
• Justice League
• Schneier on Security
• Rational Survivability
• terminal23
• 1 Raindrop
• hiredhacker.com
• Matasano Chargen
• Security Vulnerability Research & Defense
• Michael on Security - Musings on Information Security
• Fortify blog
• The Art of Software Security Assessment
• GDS Security Blog
• Vodun.org
• Robert Penz Blog
• Mark Curphey - SecurityBuddha.com
• Liminal states
• Security Ripcord
• ModSecurity Blog
• IBM Internet Security Systems Frequency X Blog
• Suspekt...
• extern blog SensePost;
• Zero in a bit

SEO

• SEO BlackHat: Black Hat SEO Blog
• busin3ss.name

Tools

• Opensourcetesting.org News

BindShell.Net

• 

  Module: Mozilla Firefox XSL Parsing Remote Memory Corruption PoC

  Posted: March 29th, 2009, 2:35pm CDT

  Tags:  Events   [edit]

  I have just created a BeEF module for the Mozilla Firefox XSL Parsing Remote Memory Corruption Proof of Concept. When executed it will crash the Firefox zombie. So don't expect to see the zombie in BeEF afterward.
• 

  InfoSec World 2009 - Browser Security

  Posted: March 24th, 2009, 3:07am CDT

  Tags:  Security   [edit]

  Interested in Browser Security? Josh Abraham has published his InfoSec World presentation - Total Browser Pwnag3. Update: The Demos are available here.
• 

  Module: Quicktime Detect

  Posted: March 17th, 2009, 3:35am CDT

  Tags:  Events   [edit]

  This module checks if QuickTime is available in the browser. Like the other modules, to update BeEF, just copy it to the modules/symmetric directory and match the permissions.
• 

  Module: Autorun JS Module

  Posted: March 6th, 2009, 8:44pm CST

  Tags:  Events   [edit]

  The autorun modules execute immediately upon a zombie connecting to the BeEF server. This JavaScript Autorun Module is a lot more flexible than the current ones included in the framework. It provides two configurable options. The first is a regexp that will be compared against the zombie's useragent and, if it evaluates to true, the second (standard JavaScript) is executed.