Chercher :
Newsletter :  

Revues :
- Presse
- Presse FR
- Vidéos
- Twitter
- Secuobs





Sponsors :

Sommaires :
- Tendances
- Failles
- Virus
- Concours
- Reportages
- Acteurs
- Outils
- Breves
- Infrastructures
- Livres
- Tutoriels
- Interviews
- Podcasts
- Communiques
- Commentaires


Revue Presse:
- Tous
- Francophone
- Par mot clé
- Par site
- Le tagwall


Top bi-hebdo:
- Ensemble
- Articles
- Revue
- Videos
- Twitter
- Auteurs


Articles :
- Par mot clé
- Par auteur
- Par organisme
- Le tagwall


Videos :
- Toutes
- Par mot clé
- Par site
- Le tagwall


Twitter :
- Tous
- Par mot clé
- Par compte
- Le tagwall


Commentaires :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


Secumail :
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis


RSS/XML :
- Articles
- Brèves
- Commentaires
- Revue
- Revue FR
- Videos
- Twitter
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis


RSS SecuObs :
- sécurité
- exploit
- windows
- microsoft
- réseau
- attaque


RSS Revue :
- security
- microsoft
- windows
- hacker
- attack
- network


RSS Videos :
- vmware
- security
- virus
- biometric
- windows
- lockpicking


RSS Twitter :
- security
- linux
- botnet
- attack
- metasploit
- cisco


RSS Comments :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS OPML :
- Français
- International











Revue de presse francophone :
- Gilles Polart-Donat, Alixen la valeur du libre n'est pas que dans sa gratuité
- Quand les étiquettes RFID s'impriment par rouleaux
- LANDesk enrichit son programme partenaire Expert Solution Providers'
- 14 avril Medef Ouest Parisien et Cercle d'Intelligence économique d'Entreprise, Protéger son patrimoine informationnel
- Documation 2010 150 exposants et plus de 6500 visiteurs
- 24 mars à Vancouver La TippingPoint Zero Day Initiative ZDI
- Jérôme Notin, EdenWall Technologies la version libre de NuFW à disposition de la communauté
- Le cours magistral est un module d'e-learning comme un autre
- La valorisation de l'innovation s'adapte aux particularités régionales
- 14 avril 19h30 Equinix inaugure son 3ème Datacentre au Musée Grévin
- The infected infector
- ClearView corrige en temps réel les dégradations causées par un virus
- Jeu numérique, Serious Game, Advert Game... 2010 l'année du jeu en entreprise
- 31 mars Les petits déjeuners de l'IE, Opportunités et dangers des réseaux sociaux pour les entreprises
- Windows exécution de code via Notepad

Dernier articles de SecuObs :
- VASTO une extension Metasploit dédiée à l'exploitation des infrastructures virtuelles
- Hogger automatise la création des tables d'attributs Snort à partir des scans Nmap
- Edenwall obtient une subvention de la DGA
- Imposter 0.9 une plateforme de phishing ciblant les navigateurs Web
- Une faille dans l’implémentation RSA de OpenSSL
- Flint un scanner pour simuler, vérifier et nettoyer les règles de filtrage
- SET 0.4.1 - Social Engineering Toolkit - une plateforme de Social Engineering
- 100 000 dollars pour le Pwn2own 2010
- Un botnet qui rapporte gros
- Webraider offre un reverse shell contre une simple injection SQL

Revue de presse internationale :
- GSC winner of 2009 - Kromek - raises 18.9 million in March
- Are Virtual Servers Less Secure Than Physical Servers
- PCI 2010 What You Need To Know Now
- Bonus Incite 3 19 2010 Don t be LHF
- Virgin Mobile fined for pushing mobile spam
- Malicious Code Evolution from IE Zero-Day Exploit Code
- Faster Rainbow Tables
- Webmatic 3.0.3 Multiple cross.site scripting
- Imaginary Sight - Changing
- Friday s Food for Thought What s Missing from the FCC Broadband Access Plan
- Reporter investigating Facebook has his account hacked.. by me
- PNC Former National City Bank Accounts Hacked
- WoW Gamers Attacked
- ClicksideSidebar, clsdsb.exe, clsdsb.dll, clsdsbr.dll
- xmloder.exe, xmlDown.dll

Annuaire des videos
- Hacking Websites You think you are secure
- Security12 Introduction Ep 01
- CAPeD Calm Audio controlled Personalized Display
- Business Logic Automatons Friend or Foe Amichai Shulman
- Shmoocon 2010 Cyborg Information Security Defense Against the Dark Arts 2 5
- Shmooncon 2010 Detection of rogue access points using clock skews does it really
- RSA Conference USA 2010 Defeating the Enemy The Road to Confidence 2
- Shmoocon 2010 Infrastructural Weaknesses in Distributed Wireless Communication Services 2 6
- Iron Geek Challenge at South by Southwest
- Shmooncon 2010 Detection of rogue access points using clock skews does it really
- Shmoocon 2010 The Splendiferous Story of Archive Team and the Disappearing Digital Heritage 5
- Living Guru Poison part 8 of 9 wmv
- Shane Lawson The Kwikset Smart Key Decoder
- Shmoocon 2010 An Existential Threat To Security As We Know It 2
- Surviving the Zombie Apocalypse Notacon 7 Preview

Revue Twitter
- Still on the lookout for an affordable openWRT capable router (don't need wireless). Any suggestions (need VPN, FW, DMZ, etc...) pls RT
- @tmacuk If it's boring, try sniffinfg an SSL session and decrypting it with the cert (in Wireshark). If you can find the menu option ;)
- @tmacuk As I said... if you can find the menu entry. It's like a test. Each Wireshark version moves the option to a new place ;)
- RT @securityninja: New Security Ninja Blog Post: Burp Suite Tutorial - Repeater and Comparer Tools http://tinyurl.com/yc2fkdc
- Anyone doing SSL Decryption on the enterprise at their company?
- Minor Bit of Promotion: PCI Book Rocks!: The PCI book site has been updated with recent PCI DSS related videos and... http://bit.ly/cyiTV9
- @sogrady my Time Warner DVR box runs Java. It needs rebooted 2-3 times a week.Always has funky UI issues. Can't belive they charge for this
- Looking an affordable openWRT capable router (don't need wireless). Any suggestions (need VPN, FW, DMZ, etc...) pls RT (via @ChrisJohnRiley)
- RT @ChrisJohnRiley Still on the lookout for an affordable openWRT capable router (don't need wireless). need VPN, FW, DMZ, etc... pls RT
- Finally someone did it RT @DinisCruz: Stackoverflow for security - RT @SecurityTube: SecurityTube Questions Launched! http://bit.ly/at1Hpi

Mini-Tagwall
Revue de presse : security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone

+ de mots clés pour la revue de presse

Annuaires des videos : vmware, security, virus, biometric, windows, lockpicking, password, botnet, metasploit, tutorial, attack, crypt, linux

+ de mots clés pour les videos

Revue Twitter : security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall

+ de mots clés pour la revue Twitter



Top bi-hebdo des articles de SecuObs
- Apprendre à parler Skype pour mieux le faire taire !
- Une faille dans l’implémentation RSA de OpenSSL
- Imposter 0.9 une plateforme de phishing ciblant les navigateurs Web
- VASTO une extension Metasploit dédiée à l'exploitation des infrastructures virtuelles
- Flint un scanner pour simuler, vérifier et nettoyer les règles de filtrage
- Keimpx un outil d'audit pour les réseaux Microsoft Windows
- SET 0.4.1 - Social Engineering Toolkit - une plateforme de Social Engineering
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Webraider offre un reverse shell contre une simple injection SQL
- Edenwall obtient une subvention de la DGA

Top bi-hebdo de la revue de presse
- Sun Ray interception de données des DTU
- How to Jailbreak iPhone 3.1.3 IPSW with PwnageTool 3.1.5
- Dev Team Confirms iPhone 3.1.3 IPSW Jailbreak
- Rozlyn Papa sex tape rumours lead to malware
- FREE Kaspersky Internet Security 2010 Activation Code Valid for 6 Months
- installer backtrack 4 [tuto]
- Nouveau dictionnaire WPA Livebox
- IIS 6 may stop responding after you install Microsoft update KB 973917
- La Face cachée de Facebook
- Téléchargements Ados de mal en pis

Top bi-hebdo de l'annuaire des videos
- Comment creer un server botnet!!!!(Réseau de pc zombies)
- vSphere 4 0 update 1 VMware Update Manager and EMC PowerPath VE
- Ettercap Tutorial Man In The Middle Arp Attack
- install MacOSX Snow Leopard in Windows PC using Vmware Workstation as virtual machine
- Blaze botnet in action www opensc ws
- Windows XP Pro SP3 in VMWare off iSCSI Target using gPXE over 802.11n
- Shmoocon 2010 Firetalks SHODAN for Penetration Testers 1 2
- Running Wireshark on Mac OS X 10 6 Snow Leopard
- Avast Internet Security 5 0 396 Final Free Full Download Licensed with Serial Key
- BackTrack 4 on Windows XP with VMware Workstation Tutorial by Puridee HD

Top bi-hebdo de la revue Twitter
- How to secure a Cisco router http://ping.fm/FkG7O
- RT @manicode: Very interesting Java ESAPI-like library coming out of Apache : http://bit.ly/9poefg
- Wirshark + SSH = Wireshark Remote Capturing - http://www.howtoforge.com/wireshark-remote-capturing (via @welias)
- Nux Keylogger 0.0.1 http://packetstormsecurity.org/filedesc/nuxkeylogger0.0.1.c.html
- Nessus Scan through a Meterpreter Session (demo) http://vimeo.com/10203481 #PaulDotCom #nessus #meterpreter
- Collection of security checks for Linux http://bit.ly/a7IH7m
- RT @FrikiFeeds: The newbie's guide to hacking the Linux kernel | TuxRadar Linux http://dlvr.it/6sQp
- Exploit for Apache mod_isapi = 2.2.14 Dangling Pointer (CVE2010-0425) vulnerability ported to Metasploit http://bit.ly/ctDQjk
- Discoverer: Automatic Protocol Reverse Engineering from Network Traces #pdf http://ow.ly/1gHd1
- RT @DidierStevens: cmd.dll reverse shell in memory payload used with PDF exploit: http://bit.ly/96thpF

Top des articles les plus commentés
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Microsoft !Exploitable un nouvel outil gratuit pour aider les développeurs à évaluer automatiquement les risques
- Webshag, un outil d'audit de serveur web
- Les navigateurs internet, des mini-systèmes d’exploitation hors de contrôle ?
- CAINE un Live[CD|USB] pour faciliter la recherche légale de preuves numériques de compromission
- [Renforcement des fonctions de sécurité du noyau Linux – Partie 1] Présentation
- Yellowsn0w un utilitaire de déblocage SIM pour le firmware 2.2 des Iphone 3G
- Microsoft Gazelle, mini-OS virtuel basé sur MashupOS pour une navigation Web sécurisée par isolation
- Nessus 4.0 placé sous le signe de la performance, de l'unification et de la personnalisation
- GreenSQL un proxy MySQL pour filtrer les requêtes SQL et contrer les injections

Les derniers commentaires publiés sur SecuObs (1-5):
- Sniffing with Wireshark as a Non-Root User
- Focus on MacNikto v1.1.1
- New Google Chrome v4.1.249.1036 released, fixes multiple security vulnerabili
- ESRT @opexxx @synopsi - Remote stack overflows
- ESRT @postmodern_mod3 @tmm1 - memprof now displays stack frames and threads


[Message Precedent sur la mailing][Message Suivant sur la mailing][Precedent dans le fil][Prochain dans le fil][Index par Date][Index par fil] Re: [Full-disclosure] Internet attacks against Georgian web sites

On Wed, Aug 13, 2008 at 6:43 AM, Viktor Larionov <viktor.larionov@xxxxxxxx> wrote: > Hi all, > > As a comment to Gadi's story: it's not nice to accuse anyone if it's still > not clear who's behind all this and what is really happening.

> It would be great for the U.S to take down the .ge sites while Russia is attacking Georgia in a ground conflict, as it ramps up U.S's ambitions for an offensive cyber command.

They already cyber false flagged Estonia to get money support politically and public acceptance for the big U.S cyber command to get built in the first place.

Now that the big U.S cyber command has been given the go ahead because of the Estonia cyber false flag, they've got to keep reasons in the media that the U.S cyber command is still a good idea.

Russia gets all the blame for the .ge cyber attacks and U.S get to keep the politicians and the public sweet about the ongoing need for the big U.S cyber command and "legitimate" reasons for its existence.

I couldn't think of a better time for U.S to do a bit of cyber false flagging, than is when another country invading another, while keeping U.S cyber ambitions afloat politically and publically.

Remember, U.S need to keep the idea of ground conflict and cyber attacks as the same thing in the eyes of the public and the politicians or the idea of the U.S cyber command doesn't float.

In reality, proper government-led cyber attacks wouldn't target web sites, this is purely an attention seeking exercise to highlight the ongoing need for the U.S cyber command.

In reality, proper government-led cyber attacks are invisible to the public, as they are targeting specific government and military stuff that the public and politicians don't get a chance to know about. Its a classic media whoring exercise to take out web sites, as taking out websites has no real cyber operational value apart from a bit of media whoring.

I don't think it was Russia, but Russia have been framed by the U.S.

who need to keep the ideology of a U.S offensive cyber command afloat and OK'd as the next president and its administration take over, so that "cyber" gets full funding and the attention of Obama or McCain.

Watch this video by Marcus Sachs at Black Hat 2008 link://[click], he talks about, how are we going to get the next president's attention in the transition period in the first 100 days of Obama or McCain getting into the White House and to take "cyber" seriously? Now by this video it seems that Marcus Sachs link://[click] is trying to say we need a cyber false flag attack in the first 100 days that Obama or McCain get into the White House to make sure "cyber" is fully funded and that cyber offensive operations are fully OK'd for the next four to eight years.

"We want to get the attention of the next administration as they are coming in" --Marcus Sachs.

He talks about the first two months or 100 days of the next presidency is crucial in getting the attention of the president and its administration.

Is this a hidden message here by Marcus Sachs about a Die Hard 4.0 scenario false flag attack being planned? He said also in the video, when Bush was coming in, the powers that be got their attention with 9/11 and that "cyber" got distracted, and now he is basically saying when Obama or McCain come in that the U.S government under world are planning a cyber 9/11.

It seems that Marcus Sachs is frustrated that 9/11 got all the attention last time, and now the powers of be are going to make sure "cyber" takes up the main agenda this time around.

How are they going to get the attention of the next presidency to get "cyber" fully funded and taken seriously is anyones guess, but I fear the worst and that we must keep our eyes and ears open for any false flagging and other suspicious looking cyber security incidents, so we are better prepared to call out "false flag" at the earliest opportunity.

All the best, n3td3v Full-Disclosure - We believe in it.

Charter: link://[click] Hosted and sponsored by Secunia - link://[click]


Archives de la liste de diffusion Secunia
Archives de la liste de diffusion BugTraq
Archives de la liste de diffusion DailyDave
Archives de la liste de diffusion FunSec
Archives de la liste de diffusion Full Disclosure
Archives de la liste de diffusion Focus-IDS (FD)
Archives de la liste de diffusion Webappsec (FD)
Archives de la liste de diffusion Security-basics (FD)
Archives de la liste de diffusion Vulndiscuss
Archives de la liste de diffusion Vulnwatch






Les derniers commentaires publiés sur SecuObs (6-25):
- ESRT @_MDL_ @gollmann - Locking botnet agents to specific victim systems in o
- CsFire 0.4.1 autonomously protects against dangerous or malicious cross-domai
- Seccubus v1.4.1 - Nessus 4.2 compatibility release
- ESRT @JGamblin @threatpost - Hackers say they will definitely break into an A
- ESRT @hdmoore @iagox86 - Weaponizing dnscat - first version of dnscat shellco
- iWep PRO 1.1.3 Released
- FireCAT v1.6.2 updated with Framework Detector
- ESRT @opexxx - FireCAT v1.6.2 updated with BackendInfo
- sipwitch 0.7.4
- Oracle XDB FTP service UNLOCK buffer overflow exploit that spawns a reverse s
- XSSploit XSS scanner multiplatfom v0.5 available
- Network forensics in IRB xtractr Ruby gem
- GreenPois0n Possible Jailbreak Software for iPad OS 32
- Blazing fast password recovery with new ATI cards
- ESRT @wireheadlance - How to secure a Cisco router
- Device Fingerprinting to Fight Real-time Transaction Fraud
- Penetrating Intranets through Adobe Flex Applications
- Updated the OWASP Fuzzing Code Database
- ESRT @jcran - how to convert a NASL check to a NeXpose check
- The New Disclosure Debate and the Evil Mr. Moore


SecuToolBox :

Mini-Tagwall des articles publiés sur SecuObs :

Archives Failles Secunia :
- SA38969 OSSIM Multiple Vulnerabilities
- SA38861 TR-069 Remote Management SQL Injection Vulnerability
- SA38955 MaxDB Handshake Packet Buffer Overflow Vulnerability
- SA38922 Ubuntu update for linux and linux-source-2.6.15
- SA38967 PhpKobo Real Estate Contact Form LANG_CODE Local File Inclusion

Archives Mailing Full Disclosure :
- Full-disclosure Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e).
- Re: Full-disclosure Fingerprinting Paper with Laser
- Re: Full-disclosure Fingerprinting Paper with Laser
- Full-disclosure AboCMS SQL injection (abocms.ru)
- Full-disclosure SECURITY DSA-2018-1 New php5 packages fix null pointer dereference

Archives Mailing Bugtraq :
- Sahana 0.6.2.2 Authentication Bypass
- Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability
- Secunia Research: Quicksilver Forums Backup Information Disclosure
- Secunia Research: Quicksilver Forums mysqldump Password Disclosure
- Miranda IM silent TLS failure
- Vulnerabilities in VXDate for Joomla

Mini-Tagwall de l'annuaire video :

Mini-Tagwall des articles de la revue de presse :

Mini-Tagwall des Tweets de la revue Twitter :