http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com ESRT @dinodaizovi - New metasploit blog post - analyzes the first public Perm DEP bypass exploit using ROP Ruh-roh http://www.secuobs.com/twitter/news/74869.shtml http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5452 http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5452 ESRT @iagox86 @hdmoore - Using Metasploit to Locate and Exploit the Energizer DUO Trojan http://www.secuobs.com/twitter/news/74993.shtml http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5451 http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5451 ESRT @opexxx @synopsi - Remote stack overflows http://www.secuobs.com/twitter/news/74799.shtml http://www.secuobs.com/news/comments01092007-winvuln_lexfo.shtml#5446 http://www.secuobs.com/news/comments01092007-winvuln_lexfo.shtml#5446 The New Disclosure Debate and the Evil Mr. Moore http://www.secuobs.com/revue/news/202395.shtml http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5425 http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5425 OSSIM v2.2 Multiple Vulnerabilities http://www.secuobs.com/revue/news/202390.shtml http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5422 http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5422 Implement the SSH-2 protocol in pure Java http://www.secuobs.com/revue/news/202153.shtml http://www.secuobs.com/news/comments12012006-multiplexage-openssh.shtml#5419 http://www.secuobs.com/news/comments12012006-multiplexage-openssh.shtml#5419 Video : ESRT @securityshell - Nessus Scan through a Meterpreter Session http://www.secuobs.com/twitter/news/74049.shtml http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5418 http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5418 Metasploit Oracle Windows http://www.secuobs.com/revue/news/201791.shtml http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5412 http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5412 Detecting USB Storage Usage with OSSEC http://www.secuobs.com/revue/news/201868.shtml http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5411 http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5411 ESRT @devilok - Buck Security - Collection of security checks for Linux http://www.secuobs.com/twitter/news/73627.shtml http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5409 http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5409 ESRT @Opexxx - Add IPv6 DNS Brute Forcing - Metasploit DNS Enum module http://www.secuobs.com/twitter/news/73421.shtml http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5401 http://www.secuobs.com/news/comments2628122007-metasploit.shtml#5401 Video : ESRT @SecurityTube - Video Internet Explorer Iepeers Pointer Exploit Metasploit Demo http://www.secuobs.com/twitter/news/73458.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5399 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5399 ESRT @virturity - Virtualization security assessment modules for Metasploit VASTO http://www.secuobs.com/twitter/news/72918.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5390 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5390 ESRT @opexxx - Meterpreter script for extracting information from Windows lnk files http://www.secuobs.com/twitter/news/72917.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5389 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5389 phpMyAdmin version 3.3.0 suffers from a cross site scripting vulnerability http://www.secuobs.com/revue/news/201269.shtml http://www.secuobs.com/news/comments410052008-php_security.shtml#5386 http://www.secuobs.com/news/comments410052008-php_security.shtml#5386 libcap-ng 0.6.3 http://www.secuobs.com/revue/news/201160.shtml http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5385 http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5385 CHScanner is an ARP, IPv4 and IPv6 network scanner with 31 scan methods http://www.secuobs.com/revue/news/201240.shtml http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5382 http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5382 ESRT @MarioVilas @DidierStevens - Added shellcode to Tweet to my library http://www.secuobs.com/twitter/news/72795.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5378 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5378 Samhain v2.6.3 Beltane v2.3.19 released http://www.secuobs.com/revue/news/200675.shtml http://www.secuobs.com/news/comments19042008-samhain_fids.shtml#5373 http://www.secuobs.com/news/comments19042008-samhain_fids.shtml#5373 What's New in Chanalyzer 34 http://www.secuobs.com/revue/news/200438.shtml http://www.secuobs.com/news/comments420032007-superrange_ubiquiti.shtml#5368 http://www.secuobs.com/news/comments420032007-superrange_ubiquiti.shtml#5368 gnupg 2.0.15 http://www.secuobs.com/revue/news/200306.shtml http://www.secuobs.com/news/comments105042008-winpt.shtml#5367 http://www.secuobs.com/news/comments105042008-winpt.shtml#5367 ESRT @MarioVilas - gnupgpy is a Python API which wraps the GNU Privacy Guard http://www.secuobs.com/twitter/news/72248.shtml http://www.secuobs.com/news/comments105042008-winpt.shtml#5364 http://www.secuobs.com/news/comments105042008-winpt.shtml#5364 ESRT @mosesrenegade @JoelEsler - How to make Snort Attribute tables using Nmap Results with Hogger tool http://www.secuobs.com/twitter/news/72253.shtml http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5363 http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5363 ESRT @Trancer00t - Metasploit exploit module for the new MSIE 0day vuln http://www.secuobs.com/twitter/news/72258.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5362 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5362 ESRT @opexxx @FrikiFeeds - The newbie's guide to hacking the Linux kernel http://www.secuobs.com/twitter/news/71910.shtml http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5355 http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5355 IM ME GoodFET Wiring Tutorial http://www.secuobs.com/revue/news/200102.shtml http://www.secuobs.com/news/comments723092006-hacking_hardware.shtml#5352 http://www.secuobs.com/news/comments723092006-hacking_hardware.shtml#5352 Airdrop-ng what I ve learned http://www.secuobs.com/revue/news/200104.shtml http://www.secuobs.com/news/comments420032007-superrange_ubiquiti.shtml#5351 http://www.secuobs.com/news/comments420032007-superrange_ubiquiti.shtml#5351 ESRT @securityshell @Jhaddix - Quickly gathering logins/emails with theHarvester and Metasploit http://www.secuobs.com/twitter/news/71188.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5342 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5342 ESRT @ioerror - OpenSSH 5.4 fixes a remote pre-auth information leak bug that I reported 52 days ago http://www.secuobs.com/twitter/news/71296.shtml http://www.secuobs.com/news/comments12012006-multiplexage-openssh.shtml#5341 http://www.secuobs.com/news/comments12012006-multiplexage-openssh.shtml#5341 ESRT @xanda - Exploit for Apache mod_isapi = 2.2.14 Dangling Pointer (CVE2010-0425) vulnerability ported to Metasploit http://www.secuobs.com/twitter/news/71632.shtml http://www.secuobs.com/news/comments603052004mod_security.html#5339 http://www.secuobs.com/news/comments603052004mod_security.html#5339 ESRT @xanda - Apache releases version 2.2.15 with 5 security fixes including OpenSSL issue http://www.secuobs.com/twitter/news/71317.shtml http://www.secuobs.com/news/comments603052004mod_security.html#5338 http://www.secuobs.com/news/comments603052004mod_security.html#5338 Exploit Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 http://www.secuobs.com/revue/news/199174.shtml http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5336 http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5336 JITed exec notepad shellcode http://www.secuobs.com/revue/news/199509.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5334 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5334 JITed Stage-0 Shellcode http://www.secuobs.com/revue/news/199510.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5333 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5333 Writing JIT-Spray Shellcode for fun and profit http://www.secuobs.com/revue/news/199471.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5331 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5331 Using Nmap to detect the Arucer ie, Energizer Trojan http://www.secuobs.com/revue/news/199432.shtml http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5329 http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5329 OpenSSH New Feature Netcat mode http://www.secuobs.com/revue/news/199443.shtml http://www.secuobs.com/news/comments12012006-multiplexage-openssh.shtml#5325 http://www.secuobs.com/news/comments12012006-multiplexage-openssh.shtml#5325 ESRT @_fishman_ @manicode - Apache Shiro open-source security framework http://www.secuobs.com/twitter/news/71164.shtml http://www.secuobs.com/news/comments110072003java-rmi1.html#5316 http://www.secuobs.com/news/comments110072003java-rmi1.html#5316 ESRT @komeilipour @securityshell - SpoofTooph automate spoofing or cloning Bluetooth device Name http://www.secuobs.com/twitter/news/71020.shtml http://www.secuobs.com/news/comments105022006-bluetooth1.shtml#5315 http://www.secuobs.com/news/comments105022006-bluetooth1.shtml#5315 ESRT @xanda - Writing JIT-Spray Shellcode for fun and profit http://www.secuobs.com/twitter/news/71130.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5312 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5312 ncpfs package tools contain race conditions, information disclosures, and denial of service vulnerabilities http://www.secuobs.com/revue/news/199003.shtml http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5308 http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5308 Apache version 2.2.14 mod_isapi remote SYSTEM exploit http://www.secuobs.com/revue/news/198995.shtml http://www.secuobs.com/news/comments603052004mod_security.html#5307 http://www.secuobs.com/news/comments603052004mod_security.html#5307 ESRT @Shpantzer @mikkohypponen - Trojan Found in USB Battery Charger Software http://www.secuobs.com/twitter/news/71005.shtml http://www.secuobs.com/news/comments111122006-usbdumper2.shtml#5304 http://www.secuobs.com/news/comments111122006-usbdumper2.shtml#5304 SamuraiWTF 0.8 Released http://www.secuobs.com/revue/news/198783.shtml http://www.secuobs.com/news/comments412062007-secubulive.shtml#5297 http://www.secuobs.com/news/comments412062007-secubulive.shtml#5297 ESRT @exploitdb - Linux x86 - disabled modsecurity - 64 bytes http://www.secuobs.com/twitter/news/70368.shtml http://www.secuobs.com/news/comments603052004mod_security.html#5296 http://www.secuobs.com/news/comments603052004mod_security.html#5296 ESRT @Mephux @ReeFlexx - Installing Snorby With Apache2 on Ubuntu 9.04 Server http://www.secuobs.com/twitter/news/70360.shtml http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5295 http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5295 Video : DNSMap vs Fierce2 vs Metasploit dns_enum http://www.secuobs.com/revue/news/198677.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5293 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5293 Suhosin-Patch 0.9.9.1 http://www.secuobs.com/revue/news/198635.shtml http://www.secuobs.com/news/comments19032007-suhosin.shtml#5292 http://www.secuobs.com/news/comments19032007-suhosin.shtml#5292 ESRT @follc - Test the robustness of the DNS servers with Scapy http://bit.ly/9izEI7 http://www.secuobs.com/news/comments301102007-scapy.shtml#5291 http://www.secuobs.com/news/comments301102007-scapy.shtml#5291 ESRT @sbrabez - metasploit 3.3.3 updated on FreeBSD http://www.secuobs.com/twitter/news/70056.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5290 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5290 ESRT @packet_storm - Metasploit module to exploit Microsoft OWC Spreadsheet HTMLURL Buffer Overflow http://www.secuobs.com/twitter/news/70030.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5288 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5288 Backtrack on Steroids http://www.secuobs.com/revue/news/198229.shtml http://www.secuobs.com/news/comments312062007-secubulive.shtml#5282 http://www.secuobs.com/news/comments312062007-secubulive.shtml#5282 Laverna's Brute 1.1 Released an open source cryptographic auditor, which supports brute forcing NTLM hashes. http://www.secuobs.com/revue/news/197825.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5271 http://www.secuobs.com/news/comments431122005-captive.shtml#5271 Video : Defending Web Applications from 0 Day Attacks with ModProfiler Using Traffic Profiling http://www.secuobs.com/revue/news/197593.shtml http://www.secuobs.com/news/comments603052004mod_security.html#5267 http://www.secuobs.com/news/comments603052004mod_security.html#5267 hping cheatsheet http://www.secuobs.com/revue/news/197569.shtml http://www.secuobs.com/news/comments301102007-scapy.shtml#5265 http://www.secuobs.com/news/comments301102007-scapy.shtml#5265 Nmap Open Relay Checking Script, Changes Accepted http://www.secuobs.com/revue/news/197335.shtml http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5261 http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5261 ESRT @jclausing @danielcid - New OSSEC feature: daily summaries/reports of your alerts http://www.secuobs.com/twitter/news/69726.shtml http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5249 http://www.secuobs.com/news/comments711052008-snort_ids.shtml#5249 ESRT @xanda - Increasing Payload Size with Return Address Overwrite http://www.secuobs.com/twitter/news/69617.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5247 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5247 Video : ESRT @masontech @mubix - Watching Metasploit Tricks 1 http://www.secuobs.com/twitter/news/69500.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5242 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5242 Virtual Patching http://www.secuobs.com/revue/news/196376.shtml http://www.secuobs.com/news/comments603052004mod_security.html#5236 http://www.secuobs.com/news/comments603052004mod_security.html#5236 Video : Using 2 exploits to gain SYSTEM level http://www.secuobs.com/revue/news/196272.shtml http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5233 http://www.secuobs.com/news/comments2528122007-metasploit.shtml#5233 Debian breaks Suhosin Security Feature http://www.secuobs.com/revue/news/196301.shtml http://www.secuobs.com/news/comments19032007-suhosin.shtml#5226 http://www.secuobs.com/news/comments19032007-suhosin.shtml#5226 Apache Tomcat versions 4.1.0 through 4.1.37 and 5.5.0 through 5.5.26 suffer from a directory traversal vulnerability http://www.secuobs.com/revue/news/196044.shtml http://www.secuobs.com/news/comments503052004mod_security.html#5222 http://www.secuobs.com/news/comments503052004mod_security.html#5222 syslog normalization http://www.secuobs.com/revue/news/196130.shtml http://www.secuobs.com/news/comments107042008-tenshi.shtml#5221 http://www.secuobs.com/news/comments107042008-tenshi.shtml#5221 UPDATE John the Ripper 1.7.5 http://www.secuobs.com/revue/news/195828.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5213 http://www.secuobs.com/news/comments431122005-captive.shtml#5213 PHP Update Fixes 40 Holes http://www.secuobs.com/revue/news/195943.shtml http://www.secuobs.com/news/comments410052008-php_security.shtml#5212 http://www.secuobs.com/news/comments410052008-php_security.shtml#5212 ESRT @ChrisJohnRiley @ivanristic - OpenSSL 0.9.8m released - first version to support for secure renegotiation http://www.secuobs.com/twitter/news/68552.shtml http://www.secuobs.com/news/comments503052004mod_security.html#5208 http://www.secuobs.com/news/comments503052004mod_security.html#5208 VMWare Directory Traversal Metasploit Module http://www.secuobs.com/revue/news/195595.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5206 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5206 discovering MS10-009 via diffing and triggering it with scapy http://www.secuobs.com/revue/news/195687.shtml http://www.secuobs.com/news/comments301102007-scapy.shtml#5203 http://www.secuobs.com/news/comments301102007-scapy.shtml#5203 OSSEC rules for handling Kismet alerts files http://www.secuobs.com/revue/news/195515.shtml http://www.secuobs.com/news/comments611052008-snort_ids.shtml#5200 http://www.secuobs.com/news/comments611052008-snort_ids.shtml#5200 Nmap5 cheatsheet http://www.secuobs.com/revue/news/194898.shtml http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5190 http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5190 Damn Vulnerable Web App Live CD v1.0.6 - released http://www.secuobs.com/revue/news/194900.shtml http://www.secuobs.com/news/comments312062007-secubulive.shtml#5189 http://www.secuobs.com/news/comments312062007-secubulive.shtml#5189 Metasploit VBA Fileformat Demo http://www.secuobs.com/videos/news/13125.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5184 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5184 New attempt to integrate AppArmor into Linux http://www.secuobs.com/revue/news/194326.shtml http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5169 http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5169 Video : PHP Secure Coding Guidelines http://www.secuobs.com/revue/news/194406.shtml http://www.secuobs.com/news/comments310052008-php_security.shtml#5168 http://www.secuobs.com/news/comments310052008-php_security.shtml#5168 Tin Hat High security Linux http://www.secuobs.com/revue/news/194466.shtml http://www.secuobs.com/news/comments312062007-secubulive.shtml#5166 http://www.secuobs.com/news/comments312062007-secubulive.shtml#5166 ESRT @xanda @InfoSec208 - The Virtual USB Analyzer http://www.secuobs.com/twitter/news/67406.shtml http://www.secuobs.com/news/comments111122006-usbdumper2.shtml#5163 http://www.secuobs.com/news/comments111122006-usbdumper2.shtml#5163 ESRT @DidierStevens - Ping shellcode published http://www.secuobs.com/twitter/news/67344.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5160 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5160 ESRT @spendergrsec - Uploaded a new paxtest, added 32/64bit target support, sparc/64 and ppc/64 support http://www.secuobs.com/twitter/news/67325.shtml http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5159 http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5159 Suricata 0.8.1 released with the experimental CUDA support http://www.secuobs.com/revue/news/193829.shtml http://www.secuobs.com/news/comments611052008-snort_ids.shtml#5157 http://www.secuobs.com/news/comments611052008-snort_ids.shtml#5157 OpenWall linux-2.4.37.9-ow1.tar.gz http://www.secuobs.com/revue/news/193869.shtml http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5156 http://www.secuobs.com/news/comments914112007-kernel_hardening.shtml#5156 Pkviz source code Xcode project now available free under GPL3 http://www.secuobs.com/revue/news/193880.shtml http://www.secuobs.com/news/comments301102007-scapy.shtml#5154 http://www.secuobs.com/news/comments301102007-scapy.shtml#5154 DNSmap v0.30 released http://www.secuobs.com/revue/news/193940.shtml http://www.secuobs.com/news/comments19122007-dnsa.shtml#5153 http://www.secuobs.com/news/comments19122007-dnsa.shtml#5153 Video : Nsploit Single and Multiple Host 0wnage http://www.secuobs.com/revue/news/193786.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5151 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5151 Video : ESRT @digininja - Metasploit combo attack http://www.secuobs.com/twitter/news/67111.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5150 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5150 ESRT @spendergrsec - Execution possible in non-executable mappings on sparc in Linux 2.6, Dave fixed it in 10 minutes http://www.secuobs.com/twitter/news/67191.shtml http://www.secuobs.com/news/comments814112007-kernel_hardening.shtml#5149 http://www.secuobs.com/news/comments814112007-kernel_hardening.shtml#5149 Month of PHP Security 2010 http://www.secuobs.com/revue/news/193642.shtml http://www.secuobs.com/news/comments310052008-php_security.shtml#5142 http://www.secuobs.com/news/comments310052008-php_security.shtml#5142 ESRT @tomaszmiklas @jaysonstreet - Nmap for Android Cross Compile ARM http://www.secuobs.com/twitter/news/66880.shtml http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5141 http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5141 ESRT @MarioVilas @carnal0wnage: Circumventing Antivirus Javascript Detection http://www.secuobs.com/twitter/news/66695.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5139 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5139 Video : ESRT @strandjs - Windows 7 AV bypass with -x in msfencode http://www.secuobs.com/twitter/news/66737.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5138 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5138 ESRT @exploitdb - PHPIDS 0.4 - Remote File Inclusion Vulnerability http://www.secuobs.com/twitter/news/66728.shtml http://www.secuobs.com/news/comments19032007-suhosin.shtml#5137 http://www.secuobs.com/news/comments19032007-suhosin.shtml#5137 Installing Kernel Security Updates Without Reboot With Ksplice Uptrack On Ubuntu http://www.secuobs.com/revue/news/193314.shtml http://www.secuobs.com/news/comments814112007-kernel_hardening.shtml#5130 http://www.secuobs.com/news/comments814112007-kernel_hardening.shtml#5130 Mini Metasploit http://www.secuobs.com/revue/news/193304.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5126 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5126 ESRT @jgarcia62 @jaysonstreet - Using Linux to back out a Windows XP patch http://www.secuobs.com/twitter/news/66469.shtml http://www.secuobs.com/news/comments24032008-patch_management.shtml#5125 http://www.secuobs.com/news/comments24032008-patch_management.shtml#5125 The Operation CloudBurst Attack http://www.secuobs.com/revue/news/193144.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5122 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5122 ESRT @johnhsawyer - Meterpreter script to unlock Windows screensaver like the firewire-based winlockpwn tool http://www.secuobs.com/twitter/news/66345.shtml http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5119 http://www.secuobs.com/news/comments2428122007-metasploit.shtml#5119 ESRT @danielcid - Combining Logwatch and OSSEC by Chris Brenton http://www.secuobs.com/twitter/news/66169.shtml http://www.secuobs.com/news/comments611052008-snort_ids.shtml#5115 http://www.secuobs.com/news/comments611052008-snort_ids.shtml#5115 ESRT @alexandrosilva @p0bailey - Snorby VmWare appliance, the new snort interface on VmWare http://www.secuobs.com/twitter/news/66221.shtml http://www.secuobs.com/news/comments611052008-snort_ids.shtml#5114 http://www.secuobs.com/news/comments611052008-snort_ids.shtml#5114 ESRT @rgerhards - syslog data modeling capabilities http://www.secuobs.com/twitter/news/66141.shtml http://www.secuobs.com/news/comments107042008-tenshi.shtml#5112 http://www.secuobs.com/news/comments107042008-tenshi.shtml#5112 5 new SNMP scripts in Nmap SVN http://www.secuobs.com/revue/news/192711.shtml http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5109 http://www.secuobs.com/news/comments214032006-fingerprinting.shtml#5109