Contribuez à SecuObs en envoyant des bitcoins ou des dogecoins.
Nouveaux articles (fr): 1pwnthhW21zdnQ5WucjmnF3pk9puT5fDF
Amélioration du site: 1hckU85orcGCm8A9hk67391LCy4ECGJca

Contribute to SecuObs by sending bitcoins or dogecoins.

Chercher :
Newsletter :  


Revues :
- Presse
- Presse FR
- Vidéos
- Twitter
- Secuobs





Sommaires :
- Tendances
- Failles
- Virus
- Concours
- Reportages
- Acteurs
- Outils
- Breves
- Infrastructures
- Livres
- Tutoriels
- Interviews
- Podcasts
- Communiques
- USBsploit
- Commentaires


Revue Presse:
- Tous
- Francophone
- Par mot clé
- Par site
- Le tagwall


Top bi-hebdo:
- Ensemble
- Articles
- Revue
- Videos
- Twitter
- Auteurs


Articles :
- Par mot clé
- Par auteur
- Par organisme
- Le tagwall


Videos :
- Toutes
- Par mot clé
- Par site
- Le tagwall


Twitter :
- Tous
- Par mot clé
- Par compte
- Le tagwall


Commentaires :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS/XML :
- Articles
- Commentaires
- Revue
- Revue FR
- Videos
- Twitter


RSS SecuObs :
- sécurité
- exploit
- windows
- attaque
- outil
- microsoft


RSS Revue :
- security
- microsoft
- windows
- hacker
- attack
- network


RSS Videos :
- curit
- security
- biomet
- metasploit
- biometric
- cking


RSS Twitter :
- security
- linux
- botnet
- attack
- metasploit
- cisco


RSS Comments :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS OPML :
- Français
- International











Revue de presse francophone :
- Appaloosa AppDome nouent un partenariat pour accompagner les entreprises dans le déploiement et la protection des applications mobiles
- D-Link offre une avec un routeur VPN sans fil AC
- 19 mai Paris Petit-Déjeuner Coreye Développer son business à l'abri des cyberattaques
- POYNTING PRESENTE LA NOUVELLE ANTENNE OMNI-291, SPECIALE MILIEU MARITIME, CÔTIER ET MILIEU HUMIDE
- Flexera Software Les utilisateurs français de PC progressent dans l'application de correctifs logiciels, mais des défis de tailles subsistent
- Riverbed lance SD-WAN basé sur le cloud
- Fujitsu multi-récompensé VMware lui décerne plusieurs Partner Innovation Awards à l'occasion du Partner Leadership Summit
- Zscaler Private Access sécuriser l'accès à distance en supprimant les risques inhérents aux réseaux privés virtuels
- QNAP annonce la sortie de QTS 4.2.1
- Une enquête réalisée par la société de cyber sécurité F-Secure a décelé des milliers de vulnérabilités graves, potentiellement utilisables par des cyber criminels pour infiltrer l'infrastru
- Trouver le juste équilibre entre une infrastructure dédiée et cloud le dilemme de la distribution numérique
- 3 juin - Fleurance - Cybersécurité Territoires
- Cyber-assurances Seules 40 pourcents des entreprises françaises sont couvertes contre les violations de sécurité et les pertes de données
- Des étudiants de l'ESIEA inventent CheckMyHTTPS un logiciel qui vérifie que vos connexions WEB sécurisées ne sont pas interceptées
- Les produits OmniSwitch d'Alcatel-Lucent Enterprise ALE gagnent en sécurité pour lutter contre les cyber-attaques modernes

Dernier articles de SecuObs :
- DIP, solution de partage d'informations automatisée
- Sqreen, protection applicative intelligente de nouvelle génération
- Renaud Bidou (Deny All): "L'innovation dans le domaine des WAFs s'oriente vers plus de bon sens et d'intelligence, plus de flexibilité et plus d'ergonomie"
- Mises à jour en perspective pour le système Vigik
- Les russes ont-ils pwn le système AEGIS ?
- Le ministère de l'intérieur censure une conférence au Canada
- Saut d'air gap, audit de firmware et (in)sécurité mobile au programme de Cansecwest 2014
- GCHQ: Le JTRIG torpille Anonymous qui torpille le JTRIG (ou pas)
- #FIC2014: Entrée en territoire inconnu
- Le Sénat investit dans les monnaies virtuelles

Revue de presse internationale :
- VEHICLE CYBERSECURITY DOT and Industry Have Efforts Under Way, but DOT Needs to Define Its Role in Responding to a Real-world Attack
- Demand letter served on poll body over disastrous Comeleak breach
- The Minimin Aims To Be The Simplest Theremin
- Hacking group PLATINUM used Windows own patching system against it
- Hacker With Victims in 100 Nations Gets 7 Years in Prison
- HPR2018 How to make Komboucha Tea
- Circuit Bender Artist bends Fresnel Lens for Art
- FBI Director Suggests iPhone Hacking Method May Remain Secret
- 2016 Hack Miami Conference May 13-15, 2016
- 8-bit Video Wall Made From 160 Gaming Keyboards
- In An Era Of Decline, News Sites Can t Afford Poor Web Performance
- BeautifulPeople.com experiences data breach 1m affected
- Swedish Air Space Infringed, Aircraft Not Required
- Why cybercriminals attack healthcare more than any other industry
- Setting the Benchmark in the Network Security Forensics Industry

Annuaire des videos
- FUZZING ON LINE PART THREE
- Official Maltego tutorial 5 Writing your own transforms
- Official Maltego tutorial 6 Integrating with SQL DBs
- Official Maltego tutorial 3 Importing CSVs spreadsheets
- install zeus botnet
- Eloy Magalhaes
- Official Maltego tutorial 1 Google s websites
- Official Maltego tutorial 4 Social Networks
- Blind String SQL Injection
- backdoor linux root from r57 php shell VPS khg crew redc00de
- How To Attaque Pc With Back Track 5 In Arabique
- RSA Todd Schomburg talks about Roundup Ready lines available in 2013
- Nessus Diagnostics Troubleshooting
- Panda Security Vidcast Panda GateDefender Performa Parte 2 de 2
- MultiPyInjector Shellcode Injection

Revue Twitter
- RT @fpalumbo: Cisco consistently leading the way ? buys vCider to boost its distributed cloud vision #CiscoONE
- @mckeay Looks odd... not much to go on (prob some slideshow/vid app under Linux)
- [SuggestedReading] Using the HTML5 Fullscreen API for Phishing Attacks
- RT @BrianHonan: Our problems are not technical but cultural. OWASP top 10 has not changed over the years @joshcorman #RSAC
- RT @mikko: Wow. Apple kernels actually have a function called PE_i_can_has_debugger:
- [Blog Spam] Metasploit and PowerShell payloads
- PinkiePie Strikes Again, Compromises Google Chrome in Pwnium Contest at Hack in the Box: For the second time thi...
- @mikko @fslabs y'all wldn't happen to have lat/long data sets for other botnets, wld you? Doing some research (free/open info rls when done)
- RT @nickhacks: Want to crash a remote host running Snow Leopard? Just use: nmap -P0 -6 --script=targets-ipv6-multicast-mld #wishiwaskidding
- An inexpensive proxy service called is actually a front for #malware distribution -

Mini-Tagwall
Revue de presse : security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone

+ de mots clés pour la revue de presse

Annuaires des videos : curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit

+ de mots clés pour les videos

Revue Twitter : security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall

+ de mots clés pour la revue Twitter

Top bi-hebdo des articles de SecuObs
- [Ettercap – Partie 2] Ettercap par l'exemple - Man In the Middle et SSL sniffing
- [Infratech - release] version 0.6 de Bluetooth Stack Smasher
- [IDS Snort Windows – Partie 2] Installation et configuration
- [Infratech - vulnérabilité] Nouvelle version 0.8 de Bluetooth Stack Smasher
- Mises à jour en perspective pour le système Vigik
- USBDumper 2 nouvelle version nouvelles fonctions !
- EFIPW récupère automatiquement le mot de passe BIOS EFI des Macbook Pro avec processeurs Intel
- La sécurité des clés USB mise à mal par USBDUMPER
- Une faille critique de Firefox expose les utilisateurs de Tor Browser Bundle
- Installation sécurisée d'Apache Openssl, Php4, Mysql, Mod_ssl, Mod_rewrite, Mod_perl , Mod_security

Top bi-hebdo de la revue de presse
- StackScrambler and the Tale of a Packet Parsing Bug

Top bi-hebdo de l'annuaire des videos
- DC++ Botnet. How To DDos A Hub With Fake IPs.
- Comment creer un server botnet!!!!(Réseau de pc zombies)
- Defcon 14 Hard Drive Recovery Part 3

Top bi-hebdo de la revue Twitter
- RT @secureideas: I believe that all the XSS flaws announced are fixed in CVS. Will test again tomorrow if so, release 1.4.3. #BASESnort
- Currently, we do not support 100% of the advanced PDF features found in Adobe Reader... At least that's a good idea.
- VPN (google): German Foreign Office Selects Orange Business for Terrestrial Wide: Full
- @DisK0nn3cT Not really, mostly permission issues/info leak...they've had a couple of XSS vulns but nothing direct.
- Swatting phreaker swatted and heading to jail: A 19-year-old American has been sentenced to eleven years in pris..
- RT @fjserna You are not a true hacker if the calc.exe payload is not the scientific one... infosuck.org/0x0035.png

Top des articles les plus commentés
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Microsoft !Exploitable un nouvel outil gratuit pour aider les développeurs à évaluer automatiquement les risques
- Webshag, un outil d'audit de serveur web
- Les navigateurs internet, des mini-systèmes d’exploitation hors de contrôle ?
- Yellowsn0w un utilitaire de déblocage SIM pour le firmware 2.2 des Iphone 3G
- CAINE un Live[CD|USB] pour faciliter la recherche légale de preuves numériques de compromission
- Nessus 4.0 placé sous le signe de la performance, de l'unification et de la personnalisation
- [Renforcement des fonctions de sécurité du noyau Linux – Partie 1] Présentation
- [IDS Snort Windows – Partie 1] Introduction aux IDS et à SNORT
- Origami pour forger, analyser et manipuler des fichiers PDF malicieux

Les Tweets pour singe

Si vous voulez bloquer un compte Twitter ou nous en proposer un

Menu > Elements de la revue Twitter : - l'ensemble [tous] - par mots clé [tous] - par compte [tous] - le tagwall [voir]

S'abonner au fil RSS global de la revue Twitter


Suivants


Les Tweets filtrés pour "singe" (818 résultats)
S'abonner au fil RSS SecuObs pour le compte Twitter singe


[2012-10-09] - 02:14:44 - @mhackling I also see it as the big difference between a pentest and VA. Pentest: compromise and pivot, VA enumerate all possible vulns on 1

[2012-10-07] - 13:04:56 - RT @wimremes: if you want to know why PCI does not mention IPv6, ask your ASV for a quote on a PCI scan against a /88 ;-)

[2012-10-07] - 13:04:56 - RT @AndrewMohawk: Magstripe spoofer + bruteforce working! http://t.co/6CSp9RPE #zacon :D

[2012-10-06] - 16:20:59 - RT @mubix: Ported @dave_rel1k @kevinmitnick 's BypassUAC to a local so you can use custom payloads EXE::Custom: http://t.co/ ...

[2012-10-06] - 16:20:59 - RT @darb https://t.co/7JygcPe0? PHP is easy, Python isn't as. If you want sec, make it easy.

[2012-10-04] - 15:54:19 - RT @attritionorg: Hakin9 sends lawyer and takedown request after Fyodor/nmap for hosting 'The Internet Considered Harmful - DICKS' spoof ...

[2012-10-03] - 15:36:58 - Hash length extension attacks are breaking my brain. Does MD5 have an 8byte length field for every 56bytes of input data? #hashext

[2012-10-03] - 15:36:58 - How does the output of MD5's calculation of the first 56bytes get used in the calc of the second block? #hashext

[2012-10-03] - 15:36:58 - Because it would seem that MD5(foo||bar) == MD5(foo||padding||length-bytes||foo||padding||length-bytes) which doesn't make sense.

[2012-10-03] - 15:36:58 - @mgorven Won't the server turn that into MD5(foo||bar||pad||length||baz||pad||length)?

[2012-10-03] - 15:36:58 - @mgorven Sure, but this implies that md5(foo||bar||pad||length||baz||pad||length) == md5(foo||bar||baz||pad||length). Is it?

[2012-10-03] - 15:36:58 - @mgorven Ok, cool that makes sense. Any idea how the result of MD5(block1) is used in the calculation of block2?

[2012-10-02] - 20:41:21 - RT @msfdev: MS11_080 AFD JoinLeaf local privilege escalation hits #metasploit thanks to @_sinn3r and zeroSteiner - http://t.co/quEvdG7b

[2012-10-01] - 22:29:12 - My thoughts on why pushing for legislation around 0day sales can bad, how the debate isn?t happening http://t.co/mou9bsKm

[2012-10-01] - 22:29:12 - Ooh, look who joined twitter; @roeloftemmingh Original founder of @sensepost, went on to create @Paterva and Maltego. Follow him now :)

[2012-10-01] - 22:29:12 - RT @nmap: Hakin9 Magazine's Nmap issue successfully trolled by security researchers! http://t.co/WHhYVfk6

[2012-09-27] - 16:21:05 - Man writing kernel modules is easier than building gnuradio and rtl-sdr it seems.

[2012-09-27] - 16:21:05 - Having lots of fun with SDR. @matthewneely's 2009 ShmooCon talk All your RF are belong to us is a great primer once you get it working.

[2012-09-27] - 16:21:05 - RT @sensepost: Looks like RT from @Paterva took @glennzw?s hacking to a nice level of viz. Maltego Radium machines are fun http://t.co/q ...

[2012-09-21] - 15:48:52 - Man, I never grok how the BackTrack team do stuff. dist-upgrade is doing nothing. Anyone know what r3's codename is for manual upgrade?

[2012-09-19] - 15:20:09 - If your advice to people about the IE 0day is use Chrome then you're doing it wrong. Build internal defenses against client-side 1st.

[2012-09-19] - 15:20:09 - @simondingle If we assume no other client-side 0day exists, yes. But we know that not to be true.

[2012-09-19] - 15:20:09 - @simondingle If you switch to Chrome, you'll just get taken by a Java/Flash/Reader/Office/Chrome 0day instead (assuming you've even patched)

[2012-09-19] - 15:20:09 - @simondingle Hell, asking people to download a codec to watch the video of puppies on FB would probably work sans 0day.

[2012-09-19] - 15:20:09 - RT @gattaca Reliable Penetration Testing Payloads using a Teensy http://t.co/RtaUCfSy? some cool feedback tricks using NumLock triggers.

[2012-09-18] - 15:56:26 - IE 0day metasploit module works like a charm http://t.co/kco6QKF7 Between the Java stuff and this ?

[2012-09-18] - 15:56:26 - RT @WTFuzz: Couldnt resist, wrote a poc for the 0day found by @eromang for IE9 that works on clean W7 systems, no java ROP required.

[2012-09-18] - 15:56:26 - RT @threatpost: Ahead of an out-of-band #security update, @Microsoft is recommending workarounds to mitigate the latest IE zero-day: htt ...

[2012-09-15] - 01:19:25 - RT @moxie re CRIME If I hosted SSL with no HSTS or pinned certs, I probably wouldn't *begin* by disabling TLS compression.?

[2012-09-14] - 03:05:47 - RT ?@ChrisJohnRiley: Is Your SMB Bruteforcer Lying To You? http://t.co/ulortR8K? Yet another reason to use Medusa.

[2012-09-14] - 03:05:47 - RT @MuscleNerd: redsn0w dev4 tethered JB updated for yesterday's 6.0 GM (developer openssh style). See update #3 at http://t.co/TeEvDCar

[2012-09-14] - 03:05:47 - Scapy protip: rather than managing TCP state yourself, use a python socket convert it for scapy using StreamSocket() http://t.co/qEDU2Yvj

[2012-09-14] - 03:05:47 - @williestrydom Absolutely, but there are prerequisites namely MITM ideally JS injection. It won't defeat 2nd factor auth either.

[2012-09-14] - 03:05:47 - @williestrydom So I could be talking rubbish, but there are enough indicators for that not to be true. The mitm req may not be a req for eg.

[2012-09-13] - 02:17:59 - RT @alexlevinson Undressing Mitt Romney's Super Friends with Ruby http://t.co/95ylsgu7? when hackers investigate politics. Fascinating

[2012-09-13] - 02:17:59 - RT @daanraman: New blog post on open sourcing DNS tunneling code for #metasploit at http://t.co/Z7lk0b0n.

[2012-09-13] - 02:17:59 - Why is the Chrome team hitting iTunes so hard? http://t.co/tQ0HhHf4 Also, congrats @miaubiz for a record number of vulns.

[2012-09-11] - 19:39:53 - RT @iamnion: nice presentation on backdooring openssh at runtime by @bl4sty http://t.co/ElqIXTsE https://t.co/0aBZvz1P #randomdata #binary

[2012-09-10] - 23:15:59 - @it4sec apt-get install on backtrack, otherwise http://t.co/om24D2CC

[2012-09-09] - 07:23:35 - RT @spacerog: If you had 3 people working full time on fuzzing Adobe and MS how many 0-days would you have after 3 months?

[2012-09-07] - 15:02:17 - RT @TheSuggmeister: awesome talk from @dcuthbert @glennzw from @sensepost #44Con Mind blowing use of @paterva Maltego Radium too.

[2012-09-07] - 15:02:17 - So Microsoft *only* supports reverse proxying an internal CAS server to your DMZ http://t.co/4if1jojN Thus any vuln in OWA could bypass DMZ.

[2012-09-07] - 15:02:17 - Full stream of Bob Dylan?s new album, Tempest, courtesy of the Mail Guardian http://t.co/0J53UJvd

[2012-09-06] - 15:32:36 - RT @VUPEN: If you run a Cloud infrastructure based on Xen you didnt read our blog, don't forget to upgrade to v4.1.3 asap as the f ...

[2012-08-14] - 10:51:08 - Does anyone know what type of magic beans you need to feed SET to make it do proper SSL and not just HTTP on port 443?

[2012-08-14] - 10:51:08 - @highsage Gen'ed self-signed cert, WEBATTACK_SSL=ON, SELF_SIGNED_CERT=ON, PEM_SERVER has right path. Still no SSL. Am I missing something?

[2012-08-13] - 09:21:05 - @JohanAldor Aah, thanks. No, in Illinois. @sensepost is an info security consultancy, primarily pentests, I like building sec though.

[2012-08-13] - 09:21:05 - RT @nickromyn: @singe flip your u and g. rouge is makeup. Rogue is a badass.

[2012-08-13] - 09:21:05 - So @dugsong's libs were messed up on ubuntu. dnet was renamed dumbnet so any python scripts importing dnet are now broken? *sigh*

[2012-08-13] - 09:21:05 - @nickromyn I feel like rouge is makeup. Rogue is a badass could be a byline for hackers in drag :)

[2012-08-13] - 09:21:05 - @nickromyn My iPhone is called rogue just checked the spelling, *phew*

[2012-08-12] - 07:51:33 - @markwuergler scapy I meant scapy not scary Sorry


Suivants


S'abonner au fil RSS global de la revue Twitter

Menu > Elements de la revue Twitter : - l'ensemble [tous] - par mots clé [tous] - par compte [tous] - le tagwall [voir]




SecuToolBox :

Mini-Tagwall des articles publiés sur SecuObs :

Mini-Tagwall de l'annuaire video :

Mini-Tagwall des articles de la revue de presse :

Mini-Tagwall des Tweets de la revue Twitter :