Contribuez à SecuObs en envoyant des bitcoins ou des dogecoins.
Nouveaux articles (fr): 1pwnthhW21zdnQ5WucjmnF3pk9puT5fDF
Amélioration du site: 1hckU85orcGCm8A9hk67391LCy4ECGJca

Contribute to SecuObs by sending bitcoins or dogecoins.

Chercher :
Newsletter :  


Revues :
- Presse
- Presse FR
- Vidéos
- Twitter
- Secuobs





Sommaires :
- Tendances
- Failles
- Virus
- Concours
- Reportages
- Acteurs
- Outils
- Breves
- Infrastructures
- Livres
- Tutoriels
- Interviews
- Podcasts
- Communiques
- USBsploit
- Commentaires


Revue Presse:
- Tous
- Francophone
- Par mot clé
- Par site
- Le tagwall


Top bi-hebdo:
- Ensemble
- Articles
- Revue
- Videos
- Twitter
- Auteurs


Articles :
- Par mot clé
- Par auteur
- Par organisme
- Le tagwall


Videos :
- Toutes
- Par mot clé
- Par site
- Le tagwall


Twitter :
- Tous
- Par mot clé
- Par compte
- Le tagwall


Commentaires :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS/XML :
- Articles
- Commentaires
- Revue
- Revue FR
- Videos
- Twitter


RSS SecuObs :
- sécurité
- exploit
- windows
- attaque
- outil
- microsoft


RSS Revue :
- security
- microsoft
- windows
- hacker
- attack
- network


RSS Videos :
- curit
- security
- biomet
- metasploit
- biometric
- cking


RSS Twitter :
- security
- linux
- botnet
- attack
- metasploit
- cisco


RSS Comments :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS OPML :
- Français
- International











Revue de presse francophone :
- Appaloosa AppDome nouent un partenariat pour accompagner les entreprises dans le déploiement et la protection des applications mobiles
- D-Link offre une avec un routeur VPN sans fil AC
- 19 mai Paris Petit-Déjeuner Coreye Développer son business à l'abri des cyberattaques
- POYNTING PRESENTE LA NOUVELLE ANTENNE OMNI-291, SPECIALE MILIEU MARITIME, CÔTIER ET MILIEU HUMIDE
- Flexera Software Les utilisateurs français de PC progressent dans l'application de correctifs logiciels, mais des défis de tailles subsistent
- Riverbed lance SD-WAN basé sur le cloud
- Fujitsu multi-récompensé VMware lui décerne plusieurs Partner Innovation Awards à l'occasion du Partner Leadership Summit
- Zscaler Private Access sécuriser l'accès à distance en supprimant les risques inhérents aux réseaux privés virtuels
- QNAP annonce la sortie de QTS 4.2.1
- Une enquête réalisée par la société de cyber sécurité F-Secure a décelé des milliers de vulnérabilités graves, potentiellement utilisables par des cyber criminels pour infiltrer l'infrastru
- Trouver le juste équilibre entre une infrastructure dédiée et cloud le dilemme de la distribution numérique
- 3 juin - Fleurance - Cybersécurité Territoires
- Cyber-assurances Seules 40 pourcents des entreprises françaises sont couvertes contre les violations de sécurité et les pertes de données
- Des étudiants de l'ESIEA inventent CheckMyHTTPS un logiciel qui vérifie que vos connexions WEB sécurisées ne sont pas interceptées
- Les produits OmniSwitch d'Alcatel-Lucent Enterprise ALE gagnent en sécurité pour lutter contre les cyber-attaques modernes

Dernier articles de SecuObs :
- DIP, solution de partage d'informations automatisée
- Sqreen, protection applicative intelligente de nouvelle génération
- Renaud Bidou (Deny All): "L'innovation dans le domaine des WAFs s'oriente vers plus de bon sens et d'intelligence, plus de flexibilité et plus d'ergonomie"
- Mises à jour en perspective pour le système Vigik
- Les russes ont-ils pwn le système AEGIS ?
- Le ministère de l'intérieur censure une conférence au Canada
- Saut d'air gap, audit de firmware et (in)sécurité mobile au programme de Cansecwest 2014
- GCHQ: Le JTRIG torpille Anonymous qui torpille le JTRIG (ou pas)
- #FIC2014: Entrée en territoire inconnu
- Le Sénat investit dans les monnaies virtuelles

Revue de presse internationale :
- VEHICLE CYBERSECURITY DOT and Industry Have Efforts Under Way, but DOT Needs to Define Its Role in Responding to a Real-world Attack
- Demand letter served on poll body over disastrous Comeleak breach
- The Minimin Aims To Be The Simplest Theremin
- Hacking group PLATINUM used Windows own patching system against it
- Hacker With Victims in 100 Nations Gets 7 Years in Prison
- HPR2018 How to make Komboucha Tea
- Circuit Bender Artist bends Fresnel Lens for Art
- FBI Director Suggests iPhone Hacking Method May Remain Secret
- 2016 Hack Miami Conference May 13-15, 2016
- 8-bit Video Wall Made From 160 Gaming Keyboards
- In An Era Of Decline, News Sites Can t Afford Poor Web Performance
- BeautifulPeople.com experiences data breach 1m affected
- Swedish Air Space Infringed, Aircraft Not Required
- Why cybercriminals attack healthcare more than any other industry
- Setting the Benchmark in the Network Security Forensics Industry

Annuaire des videos
- FUZZING ON LINE PART THREE
- Official Maltego tutorial 5 Writing your own transforms
- Official Maltego tutorial 6 Integrating with SQL DBs
- Official Maltego tutorial 3 Importing CSVs spreadsheets
- install zeus botnet
- Eloy Magalhaes
- Official Maltego tutorial 1 Google s websites
- Official Maltego tutorial 4 Social Networks
- Blind String SQL Injection
- backdoor linux root from r57 php shell VPS khg crew redc00de
- How To Attaque Pc With Back Track 5 In Arabique
- RSA Todd Schomburg talks about Roundup Ready lines available in 2013
- Nessus Diagnostics Troubleshooting
- Panda Security Vidcast Panda GateDefender Performa Parte 2 de 2
- MultiPyInjector Shellcode Injection

Revue Twitter
- RT @fpalumbo: Cisco consistently leading the way ? buys vCider to boost its distributed cloud vision #CiscoONE
- @mckeay Looks odd... not much to go on (prob some slideshow/vid app under Linux)
- [SuggestedReading] Using the HTML5 Fullscreen API for Phishing Attacks
- RT @BrianHonan: Our problems are not technical but cultural. OWASP top 10 has not changed over the years @joshcorman #RSAC
- RT @mikko: Wow. Apple kernels actually have a function called PE_i_can_has_debugger:
- [Blog Spam] Metasploit and PowerShell payloads
- PinkiePie Strikes Again, Compromises Google Chrome in Pwnium Contest at Hack in the Box: For the second time thi...
- @mikko @fslabs y'all wldn't happen to have lat/long data sets for other botnets, wld you? Doing some research (free/open info rls when done)
- RT @nickhacks: Want to crash a remote host running Snow Leopard? Just use: nmap -P0 -6 --script=targets-ipv6-multicast-mld #wishiwaskidding
- An inexpensive proxy service called is actually a front for #malware distribution -

Mini-Tagwall
Revue de presse : security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone

+ de mots clés pour la revue de presse

Annuaires des videos : curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit

+ de mots clés pour les videos

Revue Twitter : security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall

+ de mots clés pour la revue Twitter

Top bi-hebdo des articles de SecuObs
- [Ettercap – Partie 2] Ettercap par l'exemple - Man In the Middle et SSL sniffing
- [Infratech - release] version 0.6 de Bluetooth Stack Smasher
- [IDS Snort Windows – Partie 2] Installation et configuration
- [Infratech - vulnérabilité] Nouvelle version 0.8 de Bluetooth Stack Smasher
- Mises à jour en perspective pour le système Vigik
- USBDumper 2 nouvelle version nouvelles fonctions !
- EFIPW récupère automatiquement le mot de passe BIOS EFI des Macbook Pro avec processeurs Intel
- La sécurité des clés USB mise à mal par USBDUMPER
- Une faille critique de Firefox expose les utilisateurs de Tor Browser Bundle
- Installation sécurisée d'Apache Openssl, Php4, Mysql, Mod_ssl, Mod_rewrite, Mod_perl , Mod_security

Top bi-hebdo de la revue de presse
- StackScrambler and the Tale of a Packet Parsing Bug

Top bi-hebdo de l'annuaire des videos
- DC++ Botnet. How To DDos A Hub With Fake IPs.
- Comment creer un server botnet!!!!(Réseau de pc zombies)
- Defcon 14 Hard Drive Recovery Part 3

Top bi-hebdo de la revue Twitter
- RT @secureideas: I believe that all the XSS flaws announced are fixed in CVS. Will test again tomorrow if so, release 1.4.3. #BASESnort
- Currently, we do not support 100% of the advanced PDF features found in Adobe Reader... At least that's a good idea.
- VPN (google): German Foreign Office Selects Orange Business for Terrestrial Wide: Full
- @DisK0nn3cT Not really, mostly permission issues/info leak...they've had a couple of XSS vulns but nothing direct.
- Swatting phreaker swatted and heading to jail: A 19-year-old American has been sentenced to eleven years in pris..
- RT @fjserna You are not a true hacker if the calc.exe payload is not the scientific one... infosuck.org/0x0035.png

Top des articles les plus commentés
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Microsoft !Exploitable un nouvel outil gratuit pour aider les développeurs à évaluer automatiquement les risques
- Webshag, un outil d'audit de serveur web
- Les navigateurs internet, des mini-systèmes d’exploitation hors de contrôle ?
- Yellowsn0w un utilitaire de déblocage SIM pour le firmware 2.2 des Iphone 3G
- CAINE un Live[CD|USB] pour faciliter la recherche légale de preuves numériques de compromission
- Nessus 4.0 placé sous le signe de la performance, de l'unification et de la personnalisation
- [Renforcement des fonctions de sécurité du noyau Linux – Partie 1] Présentation
- [IDS Snort Windows – Partie 1] Introduction aux IDS et à SNORT
- Origami pour forger, analyser et manipuler des fichiers PDF malicieux

Les Tweets pour carne

Si vous voulez bloquer un compte Twitter ou nous en proposer un

Menu > Elements de la revue Twitter : - l'ensemble [tous] - par mots clé [tous] - par compte [tous] - le tagwall [voir]

S'abonner au fil RSS global de la revue Twitter


Suivants


Les Tweets filtrés pour "carne" (272 résultats)
S'abonner au fil RSS SecuObs pour le compte Twitter carne


[2012-10-10] - 00:51:47 - RT @Mylestro: Any Java house not looked at @aspectsecurity Contrast for security code scanning needs to get involved- instrumentation lo ...

[2012-07-14] - 23:37:39 - Apply for #Contrast Beta today! Java apps beware! http://t.co/iX2Y7cNU

[2012-04-23] - 10:01:14 - RT @javascriptalert: Prevent cross-site scripting when using JSON objects using ESAPI and Jackson framework 1.7.x « Stefan Hendriks' Blo ...

[2012-04-23] - 10:01:14 - @ikettu Agreed! I tried to install one but can't on the current hosting - shared SSL only #blech

[2012-04-21] - 18:23:01 - @ikettu SSL will be addressed as soon as we get our new hosting. :D

[2012-04-20] - 21:48:21 - RT @securityninja: ah @carne would be proud, our developers praising ESAPI again this morning!

[2012-04-20] - 21:48:21 - @securityninja Awesome! I always say learning ESAPI is one way to learn to write secure code. learning what libs you use #DevEd

[2012-04-17] - 01:19:20 - Wow - between RDP, VNC, SSH, VM, and physical I am concurrently on 15 machines at once..

[2012-04-17] - 01:19:20 - @patrickRm101 giggity RT @ Wow - between RDP, VNC, SSH, VM, and physical I am concurrently on 15 machines at once.. // Well Played

[2012-04-17] - 01:19:20 - How to use your offices bandwidth, lesson 1 - Download 3 versions of JBoss from 5 machines simultaneously over the VPN. #Winning

[2012-04-17] - 01:19:20 - Currently seeking hosting sponsorship for the ESAPI Project - contact me for details

[2012-04-17] - 01:19:20 - @indi303 @izar_t @iiamit I expect it is at least as awesome as the How to pick up girls talk at defcon

[2012-04-12] - 03:40:42 - Want to contribute a guest article to the ESAPI Blog with your story? Let me know! http://t.co/rIgBnoTP

[2012-04-10] - 05:56:52 - Check out the new ESAPI Portal at http://t.co/QOtsY5ze - Much more coming! Feedback? //cc @owasp

[2012-04-10] - 05:56:52 - @DinisCruz @cyberchimps You like my ESAPI site theme do ya? :D

[2012-04-08] - 20:16:20 - Brown sugar/root beer on top, peach/mango on bottom. Cherry smoke. Eostre dinner. #nomnomnom http://t.co/9iaW5zjK

[2012-04-05] - 15:01:23 - RT @jerryhoff: Using OSX? Update Java now... http://t.co/7zkZfR9X

[2012-03-29] - 05:42:08 - @blaufish_ @securityninja @dakami @manicode What was the entropy? If I remember right - BURP was reporting 0 bits of entropy UTF8 vs. UTF16?

[2012-03-29] - 05:42:08 - @marcwickenden @securityninja @_DickTurnip @PortSwigger Careful, Java is a gateway drug to Grails, JRuby and Scala

[2012-03-27] - 15:57:18 - @manicode And the community built AppSensor - which is light years beyond any other attempt at application layer IDS, and is an ESAPI comp.

[2012-03-27] - 01:35:07 - @securityninja @securityshell @IRISSCert I still maintain that SQLi and XSS are the entry points, not the direct cause; but still there.

[2012-03-27] - 01:35:07 - @securityninja @securityshell lol - Cisco writes SQL injection attacks are the highest root cause of data breaches http://t.co/2ayDZpBy

[2012-03-27] - 01:35:07 - @carne @securityninja @securityshell Whoops - wasn't Cisco, clicked on a Cisco link - that came from CIO Mag

[2012-03-27] - 01:35:07 - @irisscert @securityninja @securityshell how much spyware was installed by drive-by d/l's as a result of SQLi or XSS? #WhatWeWereGettingAt

[2012-03-27] - 01:35:07 - @manicode This conversation heads nowhere good - we'll just agree to disagree at this juncture. Just b/c it's Apache doesn't mean its great

[2012-03-27] - 01:35:07 - @manicode If I reviewed the reference AuthN/Z that ships with ESAPI I would call it Alpha too - that's not what ESAPI *is* tho

[2012-03-25] - 09:08:01 - @DinisCruz @m1splacedsoul @manicode There is an idea, one that I am working on - to ensure compliance of ESAPI controls during builds.(cont)

[2012-03-25] - 09:08:01 - @DinisCruz @m1splacedsoul @manicode But unless framework adopt the ESAPI interfaces there is no way to enforce across framework controls

[2012-03-25] - 09:08:01 - @DinisCruz @m1splacedsoul @manicode SAST functionality for ESAPI has already been built - as an Eclipse plugin no less, let me dig it up.

[2012-03-25] - 09:08:01 - Holy LOL! I just ran across a group of links to d/l ESAPI with a KeyGen! #FailPirates

[2012-03-23] - 10:32:22 - @securityninja @WilRockall @0wasp I still think this is worthy of a blog post, I would still bet majority of malware comes from xss

[2012-03-22] - 19:24:16 - @securityninja It is a matter of volume I think - XSS doesn't come close to the other described methods for acquiring large amounts of data

[2012-03-22] - 19:24:16 - @securityninja However, it would be interesting to see how much Malware was installed as a result of an XSS bug - my bet is a majority

[2012-03-22] - 19:24:16 - @securityninja By definition, XSS doesn't really directly give you access to data like a remote shell or SQLi does - it gets neglected here

[2012-03-22] - 19:24:16 - @mikko haha I think your tweet DoS'd Kippo - whooopsies...

[2012-03-21] - 09:30:21 - @G13net @psiinon ZAP is awesome - that's why it was selected to be an OWASP Flagship project!

[2012-03-21] - 09:30:21 - @securityninja You should sign up - I am planning on hosting an ESAPI code-a-thon at the OWASP Summit - and I have a Jolly Roger

[2012-03-21] - 09:30:21 - @securityninja if we come out of it with an ESAPI 3.0 beta it will have been well worth it in my mind!

[2012-03-21] - 09:30:21 - @securityninja Thing is tho you get a lot of people outside of the ESAPI team involved and you get the ESAPI team involved in other projs

[2012-03-19] - 05:14:39 - Interesting talk from Cloudflare on being the network in front of @LulzSec website at @sxsw - http://t.co/9NgjBbup

[2012-03-19] - 05:14:39 - @adamshostack @jness You mean I shouldn't blindly execute other peoples exploits without looking at payloads first? crap...

[2012-03-15] - 00:55:50 - @Netw0rkSecurity What does that have to do with #OWASP? TeamHavok != OWASP

[2012-03-14] - 08:39:16 - @curphey understood - he definately had no commit access to ESAPI - no projects at all that I am aware of.

[2012-03-14] - 08:39:16 - @curphey fair enough - I can speak for ESAPI, official statement: No write access to ESAPI source code was granted to the accused party

[2012-03-14] - 00:08:40 - RT @hdmoore: Need some new threads? Get your geek on at the new Metasploit Store: http://t.co/TrcvLUxq #metasploitswag (RT to win a free ...

[2012-03-14] - 00:08:40 - Defense Against the Dark Arts: ESAPI http://t.co/2MxR5jMI via @sxsw

[2012-03-11] - 05:32:00 - @tothehilt I am submitting my app to perform at DefCon this week sometime - I will make sure to mention you :D

[2012-03-09] - 02:40:38 - Unfortunately both of my upcoming ESAPI classes are being cancelled. Hopefully I can do them later this year. :(

[2012-03-02] - 21:36:31 - I'll be working on the next version of ESAPI4JS over the weekend incorporating some of the changes I made in jq-encoder.

[2012-02-18] - 02:39:26 - @mubix @Hak5Darren Nice! We are taking over! Hak5 at SXSW makes me a happy.Bring me a pineapple? :D

[2012-02-17] - 04:23:10 - Grand prize goes to OpenDS - Painless configuration, SSL part of setup process, and a nice GUI for management. WTG!

[2012-02-15] - 19:07:54 - RT @AppSecDC: Have you registered for @carne's class on ESAPI at http://t.co/IBq7Vw87? Sign up now! http://t.co/qe5jY8F7


Suivants


S'abonner au fil RSS global de la revue Twitter

Menu > Elements de la revue Twitter : - l'ensemble [tous] - par mots clé [tous] - par compte [tous] - le tagwall [voir]




SecuToolBox :

Mini-Tagwall des articles publiés sur SecuObs :

Mini-Tagwall de l'annuaire video :

Mini-Tagwall des articles de la revue de presse :

Mini-Tagwall des Tweets de la revue Twitter :