ESET Nod32 Antivirus | Antispyware | Console d administration
Chercher :
Newsletter :  

Revues :
- Presse
- Presse FR
- Vidéos
- Twitter
- Secuobs




Abonnez vous � Nessus Professional Feed !

Sponsors :

Sommaires :
- Tendances
- Failles
- Virus
- Concours
- Reportages
- Acteurs
- Outils
- Breves
- Infrastructures
- Livres
- Tutoriels
- Interviews
- Podcasts
- Communiques
- Commentaires


Revue Presse:
- Tous
- Francophone
- Par mot clé
- Par site
- Le tagwall


Top bi-hebdo:
- Ensemble
- Articles
- Revue
- Videos
- Twitter
- Auteurs


Articles :
- Par mot clé
- Par auteur
- Par organisme
- Le tagwall


Videos :
- Toutes
- Par mot clé
- Par site
- Le tagwall


Twitter :
- Tous
- Par mot clé
- Par compte
- Le tagwall


Commentaires :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


Secumail :
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis


RSS/XML :
- Articles
- Brèves
- Commentaires
- Revue
- Revue FR
- Videos
- Twitter
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis


RSS SecuObs :
- sécurité
- exploit
- windows
- microsoft
- réseau
- attaque


RSS Revue :
- security
- microsoft
- windows
- hacker
- attack
- network


RSS Videos :
- vmware
- security
- virus
- biometric
- windows
- lockpicking


RSS Twitter :
- security
- linux
- botnet
- attack
- metasploit
- cisco


RSS Comments :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS OPML :
- Français
- International









Abonnez vous � Nessus Professional Feed !


Revue de presse francophone :
- Websense, Triton la plateforme unifiée pour protéger contre les attaques du Web 2.0
- Everial dématérialise plus de 770 000 pages pour Merial en moins de 6 semaines
- McAfee Labs nouveau scam ciblant tous les utilisateurs de Facebook
- Florian Carrière, SoluCom Pour pérenniser votre PCA, développez sa valeur
- Equinix inaugure un second DataCentre à Genève
- Acronis lance un programme de formation et de certification
- Intego lance Washing Machine 2
- Enterasys améliore sa solution HiPath Wireless
- BitDefender met en garde contre un Trojan ciblant les utilisateurs de Facebook
- Orange Business Services classé dans le Leaders Quadrant par trois rapports Magic Quadrant
- Kroll Ontrack présente les dernières tendances en matière de récupération de données
- Sopra Group récompensé lors des E-DOC Awards 2010 pour sa Solution De Facto
- Trophées 2010 des Paiements Innovants Keynectis récompensée dans la catégorie Authentification forte pour sa solution K.Access
- L'infecteur infecté
- Le corps devient un réseau de communication

Dernier articles de SecuObs :
- VASTO une extension Metasploit dédiée à l'exploitation des infrastructures virtuelles
- Hogger automatise la création des tables d'attributs Snort à partir des scans Nmap
- Edenwall obtient une subvention de la DGA
- Imposter 0.9 une plateforme de phishing ciblant les navigateurs Web
- Une faille dans l’implémentation RSA de OpenSSL
- Flint un scanner pour simuler, vérifier et nettoyer les règles de filtrage
- SET 0.4.1 - Social Engineering Toolkit - une plateforme de Social Engineering
- 100 000 dollars pour le Pwn2own 2010
- Un botnet qui rapporte gros
- Webraider offre un reverse shell contre une simple injection SQL

Revue de presse internationale :
- New Google Chrome v4.1.249.1036 released, fixes multiple security vulnerabilities. More information at http googlechromereleases.blogspot.com 2010 03 stable-channel-update.html, Thu, Mar 18th
- Facebook password reset themed malware campaign in the wild
- DistribuTech Conference and Exhibition
- Commodore 64 awakes from slumber with makeover
- Fake MacBook Air, 'big iPhone' tablet on show in China
- Google, Viacom snarl at each other over YouTube case
- Total Network Monitor is now free Windows 7 and Server 2008 R2 SP1 XP Mode now without hardware virtualization No IE9 for Windows XP
- New victims sought in ID theft probe
- Navy Nuclear Weapons Responsibilities
- Accusations Fly in Viacom, YouTube Copyright Fight
- ISO issues new guidelines for safeguarding electronic medical data
- Public Hearing on California's 'Smart Grid' on Friday
- FTC to Internet Companies Start Using SSL
- DISCOUNTED HOTEL RATES ANNOUNCED FOR THE NEXT HOPE
- By Popular Demand Screen Injection Webinar Encore

Annuaire des videos
- Shmooncon 2010 Detection of rogue access points using clock skews does it really
- Shmoocon 2010 The Splendiferous Story of Archive Team and the Disappearing Digital Heritage 5
- Living Guru Poison part 8 of 9 wmv
- Shane Lawson The Kwikset Smart Key Decoder
- Shmoocon 2010 An Existential Threat To Security As We Know It 2
- Surviving the Zombie Apocalypse Notacon 7 Preview
- Vision x19 for Hak5
- Hak5 CES 2009 Day 1 Pow wow
- Catching up with Hak5 at CES 2010
- Homebrew Multitouch Hak5
- Free Application Sandbox Challenge and Top Ultra
- Airport WiFi Challenge and your Ultra Software Picks Hak5
- DHCP Exhaustion and DNS Man in the Middle Attacks Hak5
- Shmoocon 2010 Infrastructural Weaknesses in Distributed Wireless Communication Services 1 6
- Shmoocon 2010 Infrastructural Weaknesses in Distributed Wireless Communication Services 3 6

Revue Twitter
- @danielkennedy74 No, fortify is still private, IBM bought watchfire, not sure if they acquired a static code analysis tool yet
- @danielkennedy74 That's it IBM bought ounce labs
- @joshcorman Well, it's blurry - PCI + metrics + maturity = what? Risk Mgmt? Gov? Mgmt Science? And there are multiple perspectives, too.
- Drupal just released a heap of security advisories for Drupal's Email Input Filter, Keys Tag Order modules. http://bit.ly/c9KY17
- @Beaker are you coming to PHNeutral? Get an invite from him. Let's chat next week. ;-)
- OSSTMM 3 reviewers, supporters, and contributors need to check their name and details now for the Attribution page! Contact us!
- Excited for CanSecWest and the SANS Process Control and SCADA Security Summit! Who else is going?
- Should major ISPs join the fight against botnets? http://bit.ly/dusbpl #troyak
- Keynote bios/summaries are up on the web site for the @CltISSA 4/22 event: http://bit.ly/9GoAjp
- Full Disclosure AboCMS SQL injection (abocms.ru): Posted by ???????? ???????? on Mar 18[ONSEC-10-003] AboCMS SQL i... http://bit.ly/97KRV6

Mini-Tagwall
Revue de presse : security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone

+ de mots clés pour la revue de presse

Annuaires des videos : vmware, security, virus, biometric, windows, lockpicking, password, botnet, metasploit, tutorial, attack, crypt, linux

+ de mots clés pour les videos

Revue Twitter : security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall

+ de mots clés pour la revue Twitter



Top bi-hebdo des articles de SecuObs
- Apprendre à parler Skype pour mieux le faire taire !
- Une faille dans l’implémentation RSA de OpenSSL
- Imposter 0.9 une plateforme de phishing ciblant les navigateurs Web
- Flint un scanner pour simuler, vérifier et nettoyer les règles de filtrage
- VASTO une extension Metasploit dédiée à l'exploitation des infrastructures virtuelles
- Keimpx un outil d'audit pour les réseaux Microsoft Windows
- SET 0.4.1 - Social Engineering Toolkit - une plateforme de Social Engineering
- Des nouvelles du traité secret ACTA
- Webraider offre un reverse shell contre une simple injection SQL
- [Metasploit 2.x – Partie 1] Introduction et présentation

Top bi-hebdo de la revue de presse
- Sun Ray interception de données des DTU
- How to Jailbreak iPhone 3.1.3 IPSW with PwnageTool 3.1.5
- Dev Team Confirms iPhone 3.1.3 IPSW Jailbreak
- Rozlyn Papa sex tape rumours lead to malware
- FREE Kaspersky Internet Security 2010 Activation Code Valid for 6 Months
- installer backtrack 4 [tuto]
- Nouveau dictionnaire WPA Livebox
- La Face cachée de Facebook
- IIS 6 may stop responding after you install Microsoft update KB 973917
- Téléchargements Ados de mal en pis

Top bi-hebdo de l'annuaire des videos
- Comment creer un server botnet!!!!(Réseau de pc zombies)
- install MacOSX Snow Leopard in Windows PC using Vmware Workstation as virtual machine
- Ettercap Tutorial Man In The Middle Arp Attack
- vSphere 4 0 update 1 VMware Update Manager and EMC PowerPath VE
- Blaze botnet in action www opensc ws
- Windows XP Pro SP3 in VMWare off iSCSI Target using gPXE over 802.11n
- Running Wireshark on Mac OS X 10 6 Snow Leopard
- Avast Internet Security 5 0 396 Final Free Full Download Licensed with Serial Key
- Shmoocon 2010 Firetalks SHODAN for Penetration Testers 1 2
- BackTrack 4 on Windows XP with VMware Workstation Tutorial by Puridee HD

Top bi-hebdo de la revue Twitter
- How to secure a Cisco router http://ping.fm/FkG7O
- RT @manicode: Very interesting Java ESAPI-like library coming out of Apache : http://bit.ly/9poefg
- Wirshark + SSH = Wireshark Remote Capturing - http://www.howtoforge.com/wireshark-remote-capturing (via @welias)
- Nux Keylogger 0.0.1 http://packetstormsecurity.org/filedesc/nuxkeylogger0.0.1.c.html
- Nessus Scan through a Meterpreter Session (demo) http://vimeo.com/10203481 #PaulDotCom #nessus #meterpreter
- Exploit for Apache mod_isapi = 2.2.14 Dangling Pointer (CVE2010-0425) vulnerability ported to Metasploit http://bit.ly/ctDQjk
- Collection of security checks for Linux http://bit.ly/a7IH7m
- RT @FrikiFeeds: The newbie's guide to hacking the Linux kernel | TuxRadar Linux http://dlvr.it/6sQp
- Discoverer: Automatic Protocol Reverse Engineering from Network Traces #pdf http://ow.ly/1gHd1
- RT @DidierStevens: cmd.dll reverse shell in memory payload used with PDF exploit: http://bit.ly/96thpF

Top des articles les plus commentés
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Microsoft !Exploitable un nouvel outil gratuit pour aider les développeurs à évaluer automatiquement les risques
- Webshag, un outil d'audit de serveur web
- Les navigateurs internet, des mini-systèmes d’exploitation hors de contrôle ?
- CAINE un Live[CD|USB] pour faciliter la recherche légale de preuves numériques de compromission
- [Renforcement des fonctions de sécurité du noyau Linux – Partie 1] Présentation
- Yellowsn0w un utilitaire de déblocage SIM pour le firmware 2.2 des Iphone 3G
- Microsoft Gazelle, mini-OS virtuel basé sur MashupOS pour une navigation Web sécurisée par isolation
- Nessus 4.0 placé sous le signe de la performance, de l'unification et de la personnalisation
- GreenSQL un proxy MySQL pour filtrer les requêtes SQL et contrer les injections

BSOFH Catering to a niche market.
Les derniers commentaires publiés sur SecuObs (1-5):
- ESRT @opexxx @synopsi - Remote stack overflows
- ESRT @postmodern_mod3 @tmm1 - memprof now displays stack frames and threads
- ESRT @_MDL_ @gollmann - Locking botnet agents to specific victim systems in o
- CsFire 0.4.1 autonomously protects against dangerous or malicious cross-domai
- Seccubus v1.4.1 - Nessus 4.2 compatibility release

Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]

S'abonner au fil RSS global de la revue de presse



BSOFH Catering to a niche market.

Par Layer 8
Le [2009-11-22] à 16:45:57



Présentation : Oh, there you are, Terry, I said to the Intern as he peered cautiously around the doorjamb. Come on in. You re finally going to learn the secrets of my operation. What IS all this And why is it even darker than in the sysadmins cubes he wanted to know. This, my boy, is my money-making operation. You don t really think I can afford all my toys on an ISO salary alone, do you Not to mention the ongoing bribes. He gazed at all the women sitting around with headsets, staring at flatscreens. You re running a HELP DESK Not quite. Meet the one, the ONLY, security phone chat line. And by chat I mean a very special kind of chat. We give the security geeks the one thing they can t get anywhere else. He shivered. You mean ... Yes. We talk SECURITY to them. Raw, unadulterated, uninhibited security. We use the words they want to hear. And believe me, they pay a LOT for it. I took him by the first pod, where a comely young thing was saying, Oh yeah, I m compliant, baby. Want to see my controls Auditors, I said, shaking my head and moving him along to the next pod down. They re the kinkiest of the lot. Here, this girl is popular these days. She had a cloud taxonomy diagram on her screen. No, no, the cloud can be anything you want it to be. What do you WANT it to be ... oh yes, we can be private ... very ... private ... What s that asked the Intern, pointing to a symbol pinned up on her cubicle wall. It had a silhoutette of a squirrel with a circle and line over it. Never mind. We used to have this one really insistent caller. He was free with the bucks, but the girls were getting a little creeped out. From the other end of the room, a voice moaned loudly, YES YES The saturation of vulnerable technology measures the aggregate attack surface available to the exploit code The Intern blanched and covered his ears. Boss said one worker, tugging on my sleeve. We got a Code Twenex. Okay, don t panic. Where s Mike He s on break. Tell Pete to stop tweeting and take the call. He ll do well enough. I turned back to the puzzled Intern. We got a woman on the line. It s rare, but it happens. I charge em double, though. Our boys tend to be exhausted after just one 15-minute session. I just can t believe you re making money with this, the Intern said. Isn t this ... well ... illicit I mean, it s got to be wrong somehow. Why I replied. It isn t cheating unless you actually USE the exploit. No, I mean, don t they have families Look, we provide a valuable service here. Not everyone can go to a conference as often as they need to. This way they can let off steam, get it out of their system, and go home and pay real attention to their loved ones. Our clients report that they re much less likely to sneak a look at their BlackBerry, read Liquidmatrix, or talk about responsible disclosure in their sleep. Their home life is BETTER, not worse. One woman even called to thank us, to say she finally could stop role-playing DNS zone transfers. Okay, THAT was TMI. The Intern looked faintly disgusted. Can I go back to GRC console hacking now This is all making me feel a bit dirty. Yeah, go ahead, kid, I laughed. You re not old enough to appreciate the hard-core stuff yet. Just keep this on the down-low, okay Sure, he said hurriedly as he fumbled for the door. I popped another diet Mountain Dew and relaxed on the velvet-covered couch. The NIST folks would be getting out of session soon and then we were going to be REALLY busy. Thanks to Simon Travaglia, as always.




AddThis Social Bookmark Widget



Les derniers articles du site "Layer 8" :

- The uses of law.
- A meme is born.
- Managing to the biggest risk.
- Biscuits and gravy
- Shopping for security.
- EOY roundup.
- Don t ask me, ask that guy over there.
- BSOFH the roar of the packets, the smell of the cloud.
- BSOFH Catering to a niche market.
- The meaning of metrics.




S'abonner au fil RSS global de la revue de presse

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]



Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail





Les derniers commentaires publiés sur SecuObs (6-25):
- ESRT @JGamblin @threatpost - Hackers say they will definitely break into an A
- ESRT @hdmoore @iagox86 - Weaponizing dnscat - first version of dnscat shellco
- iWep PRO 1.1.3 Released
- FireCAT v1.6.2 updated with Framework Detector
- ESRT @opexxx - FireCAT v1.6.2 updated with BackendInfo
- sipwitch 0.7.4
- Oracle XDB FTP service UNLOCK buffer overflow exploit that spawns a reverse s
- XSSploit XSS scanner multiplatfom v0.5 available
- Network forensics in IRB xtractr Ruby gem
- GreenPois0n Possible Jailbreak Software for iPad OS 32
- Blazing fast password recovery with new ATI cards
- ESRT @wireheadlance - How to secure a Cisco router
- Device Fingerprinting to Fight Real-time Transaction Fraud
- Penetrating Intranets through Adobe Flex Applications
- Updated the OWASP Fuzzing Code Database
- ESRT @jcran - how to convert a NASL check to a NeXpose check
- The New Disclosure Debate and the Evil Mr. Moore
- Charlie Miller Will Expose 20 Hackable Apple Security Flaws
- Digital Forensics Framework v0.5 released
- OSSIM v2.2 Multiple Vulnerabilities


SecuToolBox :

Mini-Tagwall des articles publiés sur SecuObs :

Archives Failles Secunia :
- SA38969 OSSIM Multiple Vulnerabilities
- SA38861 TR-069 Remote Management SQL Injection Vulnerability
- SA38955 MaxDB Handshake Packet Buffer Overflow Vulnerability
- SA38922 Ubuntu update for linux and linux-source-2.6.15
- SA38967 PhpKobo Real Estate Contact Form LANG_CODE Local File Inclusion

Archives Mailing Full Disclosure :
- Full-disclosure Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e).
- Re: Full-disclosure Fingerprinting Paper with Laser
- Re: Full-disclosure Fingerprinting Paper with Laser
- Full-disclosure AboCMS SQL injection (abocms.ru)
- Full-disclosure SECURITY DSA-2018-1 New php5 packages fix null pointer dereference

Archives Mailing Bugtraq :
- Sahana 0.6.2.2 Authentication Bypass
- Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability
- Secunia Research: Quicksilver Forums Backup Information Disclosure
- Secunia Research: Quicksilver Forums mysqldump Password Disclosure
- Miranda IM silent TLS failure
- Vulnerabilities in VXDate for Joomla

Mini-Tagwall de l'annuaire video :

Mini-Tagwall des articles de la revue de presse :

Mini-Tagwall des Tweets de la revue Twitter :