http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2012-10-09 13:59:37 - fmavituna : In security, history always repeats itself: chromeless windows attack from 2004 and now HTML 5 fullscreen API : http://tco/LC3ZOxxDhttp://www.secuobs.com/twitter/news/349257.shtmlhttp://www.secuobs.com/twitter/news/349257.shtml Secuobs.com : 2012-10-02 22:11:10 - fmavituna - RT @StartupSecure: How Web Browsers React to a Poor SSL Implementation: http://tco/ZwNtcKjChttp://www.secuobs.com/twitter/news/347720.shtmlhttp://www.secuobs.com/twitter/news/347720.shtml Secuobs.com : 2012-10-02 22:11:10 - fmavituna - RT @StartupSecure: Essential Uses of SSL That You Didn't Think You Need http://tco/DrSn9liKhttp://www.secuobs.com/twitter/news/347719.shtmlhttp://www.secuobs.com/twitter/news/347719.shtml Secuobs.com : 2012-10-02 22:11:10 - fmavituna - RT @netsparker: XSS Vulnerabilities in phpFreeChat - http://tco/wCb58Nnz Netsparker Advisories - http://tco/duq0ryEjhttp://www.secuobs.com/twitter/news/347718.shtmlhttp://www.secuobs.com/twitter/news/347718.shtml Secuobs.com : 2012-09-13 20:09:02 - fmavituna - RT @StartupSecure: How Web Browsers React to a Poor SSL Implementation: http://tco/ZwNtcKjChttp://www.secuobs.com/twitter/news/343588.shtmlhttp://www.secuobs.com/twitter/news/343588.shtml Secuobs.com : 2012-09-06 20:52:13 - fmavituna - We are in the process of pushing the new version of Netsparker Community Editionhttp://www.secuobs.com/twitter/news/341531.shtmlhttp://www.secuobs.com/twitter/news/341531.shtml Secuobs.com : 2012-09-06 20:52:13 - fmavituna - @digininja Please do so, you can try Netsparker CE now just by downloading and if you want to try PRO let me knowhttp://www.secuobs.com/twitter/news/341530.shtmlhttp://www.secuobs.com/twitter/news/341530.shtml Secuobs.com : 2012-08-11 11:40:43 - fmavituna - RT @StartupSecure: Everything You Always Wanted to Know About SSL But Were Afraid to Ask: http://tco/RMwPTLz8http://www.secuobs.com/twitter/news/339599.shtmlhttp://www.secuobs.com/twitter/news/339599.shtml Secuobs.com : 2012-08-07 13:20:49 - fmavituna - lol - http://tco/eufi8zQ6 Proves that so many people don't understand SSLhttp://www.secuobs.com/twitter/news/338678.shtmlhttp://www.secuobs.com/twitter/news/338678.shtml Secuobs.com : 2012-08-06 14:23:18 - fmavituna - RT @ethicalhack3r: They got in via Apple tech support and some clever social engineering that let them bypass security questions - h http://www.secuobs.com/twitter/news/338453.shtmlhttp://www.secuobs.com/twitter/news/338453.shtml Secuobs.com : 2012-08-02 10:53:53 - fmavituna - RT @onuryilmazinfo: LinkedIn diyor ki; Netsparker ekibindeki 3 senemi doldurmuşum Nice 3 senelere inşallah patron : @fmavituna http:/ http://www.secuobs.com/twitter/news/337618.shtmlhttp://www.secuobs.com/twitter/news/337618.shtml Secuobs.com : 2012-08-02 10:53:53 - fmavituna - Uncle Sam style recruitment post from NSA for DEFCON - http://tco/Q6VS3MUS - interestinghttp://www.secuobs.com/twitter/news/337617.shtmlhttp://www.secuobs.com/twitter/news/337617.shtml Secuobs.com : 2012-07-19 22:28:13 - fmavituna - RT @netsparker: Netsparker 22 is out, more details in the blog: http://tco/K9ysTffehttp://www.secuobs.com/twitter/news/334802.shtmlhttp://www.secuobs.com/twitter/news/334802.shtml Secuobs.com : 2012-07-19 22:28:13 - fmavituna - Yes, yes, yes New version of Netsparker is out - http://tco/LaStkCu4http://www.secuobs.com/twitter/news/334801.shtmlhttp://www.secuobs.com/twitter/news/334801.shtml Secuobs.com : 2012-06-20 03:38:56 - fmavituna - RT @greg_pendergast: @jasonmoliver Dumped WebInspect for @netsparker several years ago Think it’s fair to say HP = death of WebInspecthttp://www.secuobs.com/twitter/news/328766.shtmlhttp://www.secuobs.com/twitter/news/328766.shtml Secuobs.com : 2012-06-14 16:11:46 - fmavituna - RT @notsosecure: Want to learn how to execute OS code on Oracle by exploiting web SQLIala xp_cmdshell style#BlackHathttp://tco/q3M http://www.secuobs.com/twitter/news/327480.shtmlhttp://www.secuobs.com/twitter/news/327480.shtml Secuobs.com : 2012-05-09 14:35:30 - fmavituna - RT @csoghoian: Cloud backup service @SpiderOak publishes transparency report w/ stats on gov requests Wish @Dropbox followed suit http http://www.secuobs.com/twitter/news/319181.shtmlhttp://www.secuobs.com/twitter/news/319181.shtml Secuobs.com : 2012-05-04 22:21:15 - fmavituna - http://tco/N64Gd8Mq - http://tco/eN8EDOHX - http://tco/FOMagWSl etc #hacked - All seems like DNS hijackinghttp://www.secuobs.com/twitter/news/318113.shtmlhttp://www.secuobs.com/twitter/news/318113.shtml Secuobs.com : 2012-04-22 14:13:58 - fmavituna - RT @notsosecure: We are Hiring Pentesters all levels, apply now #7safe cc @7safe @PA_Consulting http://www.secuobs.com/twitter/news/314610.shtmlhttp://www.secuobs.com/twitter/news/314610.shtml Secuobs.com : 2012-04-20 05:09:30 - fmavituna - RT @notsosecure: Learn advanced topics in SQL Injection such as 2nd order injection, Code execution by UDF at #blackhat http://tco/q3MP http://www.secuobs.com/twitter/news/314042.shtmlhttp://www.secuobs.com/twitter/news/314042.shtml Secuobs.com : 2012-04-06 12:51:01 - fmavituna - RT @netsparker: Netsparker Community Edition doesn't require registration/activation any more Enjoy - http://tco/Nu8PPwTdhttp://www.secuobs.com/twitter/news/309924.shtmlhttp://www.secuobs.com/twitter/news/309924.shtml Secuobs.com : 2012-03-30 19:11:54 - fmavituna - Seriously Chrome, seriously Security dialog #FAIL - Need to visit details to see the whole list http://tco/IDJoCyWKhttp://www.secuobs.com/twitter/news/308109.shtmlhttp://www.secuobs.com/twitter/news/308109.shtml Secuobs.com : 2012-03-30 19:11:54 - fmavituna - RT @netsparker: Cross-site scripting vulnerability in Invision Power Board version 323 - http://tco/RFHDOL5u Netsparker Advisories - http://www.secuobs.com/twitter/news/308108.shtmlhttp://www.secuobs.com/twitter/news/308108.shtml Secuobs.com : 2012-03-30 19:11:54 - fmavituna - RT @netsparker: Local File Inclusion Vulnerability in TomatoCart - http://tco/b4Npcu5j Netsparker Advisories - http://tco/duq4Z8Nthttp://www.secuobs.com/twitter/news/308107.shtmlhttp://www.secuobs.com/twitter/news/308107.shtml Secuobs.com : 2012-03-24 19:00:30 - fmavituna - RT @GuvenlikTV: Güvenlik TV'nin bu haftaki konuğu Ferruh Mavituna Ferruh ile Netsparker'ı, web uygulama güvenliğini, otomatize araç kul http://www.secuobs.com/twitter/news/306340.shtmlhttp://www.secuobs.com/twitter/news/306340.shtml Secuobs.com : 2012-02-16 21:16:48 - fmavituna - RT @GuvenlikTV: Güvenlik TV'nin bu haftaki konuğu Ferruh Mavituna Ferruh ile Netsparker'ı, web uygulama güvenliğini, otomatize araç kul http://www.secuobs.com/twitter/news/294795.shtmlhttp://www.secuobs.com/twitter/news/294795.shtml Secuobs.com : 2012-02-15 19:08:20 - fmavituna - RT @netsparker: Netsparker Community Edition reached 100K downloads We are going to release a big update soonhttp://www.secuobs.com/twitter/news/294250.shtmlhttp://www.secuobs.com/twitter/news/294250.shtml Secuobs.com : 2012-02-13 22:19:24 - fmavituna - RT @notsosecure: 'The Art of Exploiting SQL Injection': a full day hands-on training at Black Hat Vegas is now live: http://tco/SfQAPc2 http://www.secuobs.com/twitter/news/293573.shtmlhttp://www.secuobs.com/twitter/news/293573.shtml Secuobs.com : 2012-02-09 08:20:58 - fmavituna - Chrome 17's preemptive rendering is yet another reason to not use GET for modifying stuff :http://www.secuobs.com/twitter/news/292335.shtmlhttp://www.secuobs.com/twitter/news/292335.shtml Secuobs.com : 2012-02-09 08:20:58 - fmavituna - Web browser devs doing same mistakes over and over and over again RT @johnwilander: Six Android 0days released - http://tco/2qw82nJ0http://www.secuobs.com/twitter/news/292334.shtmlhttp://www.secuobs.com/twitter/news/292334.shtml Secuobs.com : 2012-02-07 20:08:10 - fmavituna - RT @netsparker: SQL Injection Vulnerability in Batavi E-Commerce - http://tco/mu39bAbe Netsparker Advisories - http://tco/5MJZ2Aj6http://www.secuobs.com/twitter/news/291628.shtmlhttp://www.secuobs.com/twitter/news/291628.shtml Secuobs.com : 2012-02-02 16:04:31 - fmavituna - RT @netsparker: Netsparker v21 is out SSO, multiple-step auth, extensibility support, new dashboard, comparison reports and more - ht http://www.secuobs.com/twitter/news/290142.shtmlhttp://www.secuobs.com/twitter/news/290142.shtml Secuobs.com : 2012-02-02 08:04:05 - fmavituna - RT @mickeyc: http://tco/Xo30nNml - Abusing Apache to read httpOnly flagged cookies from JavaScript I likehttp://www.secuobs.com/twitter/news/290082.shtmlhttp://www.secuobs.com/twitter/news/290082.shtml Secuobs.com : 2012-01-25 11:54:01 - fmavituna - RT @jeremiahg: Barclays: 97 pourcents of data breaches still due to SQL injection http://tco/okDo0b2L main problem is the # of vulns # http://www.secuobs.com/twitter/news/287424.shtmlhttp://www.secuobs.com/twitter/news/287424.shtml Secuobs.com : 2012-01-25 11:54:01 - fmavituna - @antisnatchor Seems like other operators mostly fine, although I know that many of them inject javascript to all HTTP traffichttp://www.secuobs.com/twitter/news/287423.shtmlhttp://www.secuobs.com/twitter/news/287423.shtml Secuobs.com : 2012-01-19 21:03:53 - fmavituna - Every Linux screen locker broken by a keypress - http://tco/L98yFc4a - interestinghttp://www.secuobs.com/twitter/news/285524.shtmlhttp://www.secuobs.com/twitter/news/285524.shtml Secuobs.com : 2012-01-04 21:13:15 - fmavituna - RT @netsparker: SQL Injection Vulnerability in OpenEMR - http://tco/280rJxwwhttp://www.secuobs.com/twitter/news/280559.shtmlhttp://www.secuobs.com/twitter/news/280559.shtml Secuobs.com : 2012-01-04 21:13:15 - fmavituna - RT @jeremiahg: CAPTCHA Hax w/ TesserCap http://tco/xJfTDkje gui based tool for security testing captchas neat ideahttp://www.secuobs.com/twitter/news/280558.shtmlhttp://www.secuobs.com/twitter/news/280558.shtml Secuobs.com : 2011-12-15 13:20:03 - fmavituna - RT @jeremiahg: Performing CSRF Need to purge users Referer to bypass protection The tricks: http://tco/G4hglfOyhttp://www.secuobs.com/twitter/news/275396.shtmlhttp://www.secuobs.com/twitter/news/275396.shtml Secuobs.com : 2011-12-08 03:15:05 - fmavituna - RT @ciscojedi: Best quote in any Pentest report I have read to date; Sadly, you are one pissed off fifteen year old away from being com http://www.secuobs.com/twitter/news/273091.shtmlhttp://www.secuobs.com/twitter/news/273091.shtml Secuobs.com : 2011-12-07 18:40:04 - fmavituna - RT @warex: http://tco/ELrMqBnx Caught Adding Malware to Nmap Other Software http://tco/dwajkiplhttp://www.secuobs.com/twitter/news/272792.shtmlhttp://www.secuobs.com/twitter/news/272792.shtml Secuobs.com : 2011-11-30 02:01:07 - fmavituna - @flexxpoint lol yeah, ironically their reports got XSS on them : I suppose it's rather hard to exploit :Dhttp://www.secuobs.com/twitter/news/270181.shtmlhttp://www.secuobs.com/twitter/news/270181.shtml Secuobs.com : 2011-11-29 01:12:23 - fmavituna - Cool RT @websecuritymon: WebSecurityMonitor is up and running Register freely from http://tco/ITEgekTohttp://www.secuobs.com/twitter/news/269792.shtmlhttp://www.secuobs.com/twitter/news/269792.shtml Secuobs.com : 2011-11-27 15:48:18 - fmavituna - RT @SowingSadness: IE9 XSS filter http://tco/o5OZHyqthttp://www.secuobs.com/twitter/news/269441.shtmlhttp://www.secuobs.com/twitter/news/269441.shtml Secuobs.com : 2011-11-25 05:57:50 - fmavituna - Reflector Pro worth every penny, you can't price the ability to debug naughty 3rd party DLLs just by pressing F2http://www.secuobs.com/twitter/news/269025.shtmlhttp://www.secuobs.com/twitter/news/269025.shtml Secuobs.com : 2011-11-21 06:14:30 - fmavituna - RT @halilozturkci: @redtigersec: CERN conducted simple Nessus and Nmap scans on their control systems components and 1/3 of the systems http://www.secuobs.com/twitter/news/267730.shtmlhttp://www.secuobs.com/twitter/news/267730.shtml Secuobs.com : 2011-11-19 18:46:21 - fmavituna - Nice : RT @flexxpoint: @fmavituna Thanks for the tip Ferruh,btw this one was catched with NetsparkerCE :Dhttp://www.secuobs.com/twitter/news/267449.shtmlhttp://www.secuobs.com/twitter/news/267449.shtml Secuobs.com : 2011-10-06 17:08:54 - fmavituna - RT @bemre: Reverse Proxy Bypass - http://tco/oLplddNWhttp://www.secuobs.com/twitter/news/254998.shtmlhttp://www.secuobs.com/twitter/news/254998.shtml Secuobs.com : 2011-10-01 22:19:35 - fmavituna - @huseyint Now I'm glad that we didn't decide to use webcams :http://www.secuobs.com/twitter/news/253561.shtmlhttp://www.secuobs.com/twitter/news/253561.shtml Secuobs.com : 2011-09-16 22:34:43 - fmavituna - @ethicalhack3r which browsers Doesn't work for IE / Chromehttp://www.secuobs.com/twitter/news/248744.shtmlhttp://www.secuobs.com/twitter/news/248744.shtml Secuobs.com : 2011-09-15 19:05:35 - fmavituna - RT @achillean: Created a video section on Shodan to aggregate videos from conferences etc some DC19 stuff already up: http://tco/lrO http://www.secuobs.com/twitter/news/248252.shtmlhttp://www.secuobs.com/twitter/news/248252.shtml Secuobs.com : 2011-09-14 02:27:33 - fmavituna - RT @jeremiahg: BitCoin forum bitcointalkorg hacked by donor http://tco/Zitjj2E SQL Injection Bill Cosby imageshttp://www.secuobs.com/twitter/news/247668.shtmlhttp://www.secuobs.com/twitter/news/247668.shtml Secuobs.com : 2011-09-12 22:41:04 - fmavituna - @ethicalhack3r lol Blind SQLI with UNION PoC, WTFhttp://www.secuobs.com/twitter/news/247255.shtmlhttp://www.secuobs.com/twitter/news/247255.shtml Secuobs.com : 2011-09-10 05:30:18 - fmavituna - @antisnatchor it's great to see that XSS Tunneling concept finally made itself into a popular framework like BeeFhttp://www.secuobs.com/twitter/news/246650.shtmlhttp://www.secuobs.com/twitter/news/246650.shtml Secuobs.com : 2011-09-10 05:30:18 - fmavituna - @antisnatchor Sounds great, being ruby+crossplatform+BeeF based should help a lot, ASP + NET didn't help much when I released XSS Tunnel:http://www.secuobs.com/twitter/news/246649.shtmlhttp://www.secuobs.com/twitter/news/246649.shtml Secuobs.com : 2011-09-05 01:12:02 - fmavituna - RT @security4all: Here is a list of all the rogue certificates taken from DigiNotar http://tco/4A7TgeK Torprojecthttp://www.secuobs.com/twitter/news/245019.shtmlhttp://www.secuobs.com/twitter/news/245019.shtml Secuobs.com : 2011-09-04 20:17:27 - fmavituna - RT @slashdot: Kernelorg Attackers Didn't Know What They Had http://tco/qqFIvv1 So this wasn't even targeted that's even worsehttp://www.secuobs.com/twitter/news/244959.shtmlhttp://www.secuobs.com/twitter/news/244959.shtml Secuobs.com : 2011-09-02 06:17:51 - fmavituna - :D RT @snipeyhead: Oh for the love of fuck The tool is Netsparker by Mavituna, and if you haven't heard of it, you can't afford it… lolhttp://www.secuobs.com/twitter/news/244334.shtmlhttp://www.secuobs.com/twitter/news/244334.shtml Secuobs.com : 2011-09-02 06:17:51 - fmavituna - RT @paradoxengine: Nibblesec's take on the Apache DOS and why it was a huge FAIL: http://tco/Nv26HtEhttp://www.secuobs.com/twitter/news/244333.shtmlhttp://www.secuobs.com/twitter/news/244333.shtml Secuobs.com : 2011-09-01 03:56:00 - fmavituna - Kernelorg has been hacked - http://tco/q3Nlnzphttp://www.secuobs.com/twitter/news/243873.shtmlhttp://www.secuobs.com/twitter/news/243873.shtml Secuobs.com : 2011-08-30 09:13:10 - fmavituna - Public key pinning in Chrome - http://tco/Y0NeN9s cool featurehttp://www.secuobs.com/twitter/news/242926.shtmlhttp://www.secuobs.com/twitter/news/242926.shtml Secuobs.com : 2011-08-30 09:13:10 - fmavituna - Nokia Developer community section hacked - SQL Injection - http://tco/t5tU4FQhttp://www.secuobs.com/twitter/news/242925.shtmlhttp://www.secuobs.com/twitter/news/242925.shtml Secuobs.com : 2011-08-30 02:26:27 - fmavituna - Nasty - Gmailcom being MITM'd by Iran using this certificate - http://tco/GktFMC5 via hacker newshttp://www.secuobs.com/twitter/news/242762.shtmlhttp://www.secuobs.com/twitter/news/242762.shtml Secuobs.com : 2011-08-30 02:26:27 - fmavituna - Should browsers start giving an alert when SSL certs changed even if the new one legit maybe something like a moderate reminderhttp://www.secuobs.com/twitter/news/242761.shtmlhttp://www.secuobs.com/twitter/news/242761.shtml Secuobs.com : 2011-08-29 00:56:38 - fmavituna - RT @halukakin: @netsparker Just used netsparker community edition to check our server Great security scanner overallhttp://www.secuobs.com/twitter/news/242326.shtmlhttp://www.secuobs.com/twitter/news/242326.shtml Secuobs.com : 2011-08-24 18:24:26 - fmavituna - RT @wascupdates: wascwhid: WHID 2011-210: Zimbabwe Stock Exchange website hacked - http://tco/AmeDV64 http://tco/ljGWTgq @wascwhidhttp://www.secuobs.com/twitter/news/240897.shtmlhttp://www.secuobs.com/twitter/news/240897.shtml Secuobs.com : 2011-08-24 04:40:57 - fmavituna - RT @secfence: Netsparker: A kick start web application penetration testing tool http://tco/qmKaaqOhttp://www.secuobs.com/twitter/news/240800.shtmlhttp://www.secuobs.com/twitter/news/240800.shtml Secuobs.com : 2011-08-24 04:40:57 - fmavituna - RT @ToolsWatch: @netsparker @fmavituna ToolsTube with Ferruh Mavituna on Netsparker during the Black Hat USA 2011 http://tco/DxvuxyJhttp://www.secuobs.com/twitter/news/240799.shtmlhttp://www.secuobs.com/twitter/news/240799.shtml Secuobs.com : 2011-08-13 09:07:24 - fmavituna - Cloud pwnz again - http://tco/XyyM9GShttp://www.secuobs.com/twitter/news/238079.shtmlhttp://www.secuobs.com/twitter/news/238079.shtml Secuobs.com : 2011-08-13 09:07:24 - fmavituna - My blog is down due to a hardware fault, I'll try to sort it out soon Use your offline SQLI cheat sheets :http://www.secuobs.com/twitter/news/238078.shtmlhttp://www.secuobs.com/twitter/news/238078.shtml Secuobs.com : 2011-08-03 00:47:26 - fmavituna - RT @netsparker: Web App Scanner Benchmark results: Netsparker is the 1st in SQLI 985 pourcents, 4th in XSS 959 pourcents 60 tools benchmarked - http: http://www.secuobs.com/twitter/news/234191.shtmlhttp://www.secuobs.com/twitter/news/234191.shtml Secuobs.com : 2011-08-02 14:45:38 - fmavituna - RT @mtimur: Netsparker is the best commercial SQL Injection scanner, according to the http://bitly/qhXSyuhttp://www.secuobs.com/twitter/news/233990.shtmlhttp://www.secuobs.com/twitter/news/233990.shtml Secuobs.com : 2011-08-02 14:45:38 - fmavituna - RT @mtimur: SQL Injection detection rates are:Netsparker pourcents9853 , Appscan pourcents9338 , Paros Pro pourcents9338 , Acunetix pourcents8971 , NTO pourcents8529 , We http://www.secuobs.com/twitter/news/233989.shtmlhttp://www.secuobs.com/twitter/news/233989.shtml Secuobs.com : 2011-08-01 11:54:53 - fmavituna - lol RT @frbbs: http://bitly/oH597N - I paid 50k USD for a penetration test and all I got was a Nessus scan by a CISSPhttp://www.secuobs.com/twitter/news/233615.shtmlhttp://www.secuobs.com/twitter/news/233615.shtml Secuobs.com : 2011-07-28 15:58:09 - fmavituna - RT @netsparker: Netsparker 20 has arrived - http://wwwmavitunasecuritycom/blog/netsparker-2-0-has-arrived/http://www.secuobs.com/twitter/news/232375.shtmlhttp://www.secuobs.com/twitter/news/232375.shtml Secuobs.com : 2011-07-10 18:34:12 - fmavituna - 15 minutes of Bioshock Infinite - Just wow, that's sickhttp://www.secuobs.com/twitter/news/226200.shtmlhttp://www.secuobs.com/twitter/news/226200.shtml Secuobs.com : 2011-07-09 22:01:15 - fmavituna - RT @nopslider: @hackersorg @fmavituna @securityshell http://tco/kHutxZg A new tool to harvest XSS victimsyour thoughts would be appr http://www.secuobs.com/twitter/news/225943.shtmlhttp://www.secuobs.com/twitter/news/225943.shtml Secuobs.com : 2011-07-09 22:01:15 - fmavituna - @nopslider Looking nice, I assume it doesn't support XSS Tunnel that would be cool as wellhttp://www.secuobs.com/twitter/news/225942.shtmlhttp://www.secuobs.com/twitter/news/225942.shtml Secuobs.com : 2011-07-02 02:13:56 - fmavituna - Mt Gox hacked because of SQL Injection http://ffim/-H0HNkhttp://www.secuobs.com/twitter/news/223593.shtmlhttp://www.secuobs.com/twitter/news/223593.shtml Secuobs.com : 2011-07-02 02:13:56 - fmavituna - @securityshell to me that looks like FP due to word list usage of table guessing and bad boolean SQLI analysis enginehttp://www.secuobs.com/twitter/news/223592.shtmlhttp://www.secuobs.com/twitter/news/223592.shtml Secuobs.com : 2011-06-22 15:37:00 - fmavituna - Who's going to exploit the microphone access in Chrome first - http://bitly/mzUcD0http://www.secuobs.com/twitter/news/220143.shtmlhttp://www.secuobs.com/twitter/news/220143.shtml Secuobs.com : 2011-06-22 05:16:15 - fmavituna - RT @paradoxengine: What about an awesome Chrome extension to do real time DOM analysis Introducing DOM snitch Go @radi_v http://tco/ http://www.secuobs.com/twitter/news/220005.shtmlhttp://www.secuobs.com/twitter/news/220005.shtml Secuobs.com : 2011-06-21 02:59:53 - fmavituna - RT @notsosecure: A new version of bsqlbf is now available: http://tco/wAxKN8Dhttp://www.secuobs.com/twitter/news/219412.shtmlhttp://www.secuobs.com/twitter/news/219412.shtml Secuobs.com : 2011-06-17 20:34:31 - fmavituna - RT @Bluegrassgroup: Netsparker a great way to test your web apps and websites for security flaws http://tco/Zrzer2whttp://www.secuobs.com/twitter/news/218596.shtmlhttp://www.secuobs.com/twitter/news/218596.shtml Secuobs.com : 2011-06-17 01:32:50 - fmavituna - I hope Google Checkout and Amazon kill Paypal for good, Paypal is one of the worst companies that I ever seenhttp://www.secuobs.com/twitter/news/218347.shtmlhttp://www.secuobs.com/twitter/news/218347.shtml Secuobs.com : 2011-06-16 05:28:46 - fmavituna - RT @kevinmitnick: It appears to be ddos Ugh Flashbacks of Mafia boyhttp://www.secuobs.com/twitter/news/217996.shtmlhttp://www.secuobs.com/twitter/news/217996.shtml Secuobs.com : 2011-06-14 08:56:09 - fmavituna - RT @packet_storm: Blind SQL Injection With Regular Expressions Attack http://packetstormsecurityorg/files/102201 #whitepaperhttp://www.secuobs.com/twitter/news/217162.shtmlhttp://www.secuobs.com/twitter/news/217162.shtml Secuobs.com : 2011-06-09 21:27:23 - fmavituna - #anon DDoSing several e-government websites in Turkey, seems like most of them are down at the momenthttp://www.secuobs.com/twitter/news/215941.shtmlhttp://www.secuobs.com/twitter/news/215941.shtml Secuobs.com : 2011-05-29 00:04:55 - fmavituna - @jeremiahg I'm pretty sure it's an ActiveX-ish thing act as a proxy in the browser which requires permissions to installhttp://www.secuobs.com/twitter/news/211690.shtmlhttp://www.secuobs.com/twitter/news/211690.shtml Secuobs.com : 2011-05-26 22:34:14 - fmavituna - RT @WisecWisec: nice chrome xss filter bypass: http://bitly/lxOfU8http://www.secuobs.com/twitter/news/210991.shtmlhttp://www.secuobs.com/twitter/news/210991.shtml Secuobs.com : 2011-05-24 10:20:44 - fmavituna - Who do I need to kill to buy Symantec PGP software in UK Couldn't find one reseller and they don't sell it online Welcome to 2011http://www.secuobs.com/twitter/news/209724.shtmlhttp://www.secuobs.com/twitter/news/209724.shtml Secuobs.com : 2011-05-23 02:43:34 - fmavituna - RT @notsosecure: Are you a student who wants to take up pentesting Can you code We are looking for summer interns please RThttp://www.secuobs.com/twitter/news/209311.shtmlhttp://www.secuobs.com/twitter/news/209311.shtml Secuobs.com : 2011-05-23 02:43:34 - fmavituna - @InterN0T Was it reported as Confirmed XSS or SQLIhttp://www.secuobs.com/twitter/news/209310.shtmlhttp://www.secuobs.com/twitter/news/209310.shtml Secuobs.com : 2011-05-22 12:55:10 - fmavituna - RT @csima: Exploit all browsers with a simple net exploit using silverlight Does not use heapspraying http://tco/uzvg6NHhttp://www.secuobs.com/twitter/news/209233.shtmlhttp://www.secuobs.com/twitter/news/209233.shtml Secuobs.com : 2011-05-19 20:33:54 - fmavituna - RT @fe_aragon: RT @ivanristic RT @souders: Google Chrome cuts handshake overhead by 30 pourcents via SSL False Start - via @mikebelshe - ht http://www.secuobs.com/twitter/news/208292.shtmlhttp://www.secuobs.com/twitter/news/208292.shtml Secuobs.com : 2011-05-19 01:22:40 - fmavituna - RT @_ikki: Go and grab your copy of the DOMinator http://blogmindedsecuritycom/2011/05/dominator-projecthtml DOM-based XSS detection http://www.secuobs.com/twitter/news/208010.shtmlhttp://www.secuobs.com/twitter/news/208010.shtml Secuobs.com : 2011-05-14 08:43:38 - fmavituna - SQLI RT @wascupdates: wascwhid: WHID 2011-106: Final Fantasy maker Square Enix hacked - http://bitly/lhCd2khttp://www.secuobs.com/twitter/news/206431.shtmlhttp://www.secuobs.com/twitter/news/206431.shtml Secuobs.com : 2011-05-12 15:09:05 - fmavituna - Skype 0day explained, It was our old friend XSS - http://bitly/lCi8SQhttp://www.secuobs.com/twitter/news/205621.shtmlhttp://www.secuobs.com/twitter/news/205621.shtml Secuobs.com : 2011-05-10 03:43:06 - fmavituna - VUPEN Vulnerability Research Demo / VUPEN 0-Day Exploit for Google Chrome Sandbox/ASLR/DEP Bypass http://ffim/-D0Dv9http://www.secuobs.com/twitter/news/203979.shtmlhttp://www.secuobs.com/twitter/news/203979.shtml Secuobs.com : 2011-05-08 12:53:48 - fmavituna - ops : RT @ethicalhack3r: WebLabyrinth is vulnerable to SQL Injection - http://bitly/jP4tKrhttp://www.secuobs.com/twitter/news/203487.shtmlhttp://www.secuobs.com/twitter/news/203487.shtml Secuobs.com : 2011-05-06 20:17:29 - fmavituna - RT @bunyamindemir: Bilgi ve Bilişim Günü - CTF Etkinligi, Web Güvenliğinde Otomasyon ve Netsparker, 9 Mayıs Pazartesi, Ankara-ODTÜ htt http://www.secuobs.com/twitter/news/203077.shtmlhttp://www.secuobs.com/twitter/news/203077.shtml Secuobs.com : 2011-05-01 00:41:39 - fmavituna - RT @0x6D6172696F: How many seconds did it take to find an XSS on Greplin - that search engine for your Twitter, Gmail, Linkedin, 32http://www.secuobs.com/twitter/news/201180.shtmlhttp://www.secuobs.com/twitter/news/201180.shtml Secuobs.com : 2011-04-27 06:03:42 - fmavituna - I bet PSN hacked because of a stupid SQL Injection : 60 million registered users, wow that's a lot private datahttp://www.secuobs.com/twitter/news/199666.shtmlhttp://www.secuobs.com/twitter/news/199666.shtml Secuobs.com : 2011-04-26 19:52:36 - fmavituna - RT @netsparker: JavaScript Scope and IntenseDebate's Privacy Problems - http://bitly/hUKLk8 - Demo - http://bitly/e6bfh4http://www.secuobs.com/twitter/news/199464.shtmlhttp://www.secuobs.com/twitter/news/199464.shtml Secuobs.com : 2011-04-24 21:02:57 - fmavituna - Wow, it's simply unacceptable for Dropbox to serve Login form over HTTP,they need to read SSL Implementation FAQ: http://bitly/9bmuIWhttp://www.secuobs.com/twitter/news/198892.shtmlhttp://www.secuobs.com/twitter/news/198892.shtml Secuobs.com : 2011-04-20 01:39:10 - fmavituna - RT @netsparker: Netsparker 1905 is out, more details in the blog : http://wwwmavitunasecuritycom/blog/netsparker-1905-is-out/http://www.secuobs.com/twitter/news/197260.shtmlhttp://www.secuobs.com/twitter/news/197260.shtml Secuobs.com : 2011-04-18 04:48:19 - fmavituna - In the UK Being told you’re already downloading or have failed the CAPTCHA too many times by file hosting sites http://ffim/-BlwaOhttp://www.secuobs.com/twitter/news/196725.shtmlhttp://www.secuobs.com/twitter/news/196725.shtml Secuobs.com : 2011-04-11 21:45:37 - fmavituna - Finally a cloud backup thingy with client-side encryption - https://spideroakcom/http://www.secuobs.com/twitter/news/194257.shtmlhttp://www.secuobs.com/twitter/news/194257.shtml Secuobs.com : 2011-04-11 21:45:37 - fmavituna - Google Chrome Gets SPDY - And An Onscreen Keyboard | ConceivablyTech http://ffim/-AQOxhhttp://www.secuobs.com/twitter/news/194256.shtmlhttp://www.secuobs.com/twitter/news/194256.shtml Secuobs.com : 2011-04-06 02:24:45 - fmavituna - RT @abhaybhargav: found a bunch of government sites with massive piles of SQLi on them Does this count as APT or piss-poor security #A http://www.secuobs.com/twitter/news/192704.shtmlhttp://www.secuobs.com/twitter/news/192704.shtml Secuobs.com : 2011-04-06 02:24:45 - fmavituna - How do you guys do web scraping, using something like FSF http://bitly/7yJfq9 or custom perl scriptshttp://www.secuobs.com/twitter/news/192703.shtmlhttp://www.secuobs.com/twitter/news/192703.shtml Secuobs.com : 2011-04-03 14:33:16 - fmavituna - RT @mattharrigan: http://lnkdin/7WWhvb Netsparker smokes them both in terms of accuracy, speed, and array of vulnerabilities that are t http://www.secuobs.com/twitter/news/191981.shtmlhttp://www.secuobs.com/twitter/news/191981.shtml Secuobs.com : 2011-04-01 21:56:32 - fmavituna - RT @r00tbsd: Metasploit April Fools : - http://bitly/dWq2Q9 #AprilFools #msf #rapid7http://www.secuobs.com/twitter/news/191472.shtmlhttp://www.secuobs.com/twitter/news/191472.shtml Secuobs.com : 2011-03-31 22:25:40 - fmavituna - @anteksiler sqlmap ten pek anlamiyorum ama herhalde viewstate'den dolayi calismiyor,eminim degilim anti-csrf token destegi olup olmadigindanhttp://www.secuobs.com/twitter/news/191017.shtmlhttp://www.secuobs.com/twitter/news/191017.shtml Secuobs.com : 2011-03-29 05:49:06 - fmavituna - @manicode I lost you, what's relationship of CSRF with Parameterized SQL Statementshttp://www.secuobs.com/twitter/news/189784.shtmlhttp://www.secuobs.com/twitter/news/189784.shtml Secuobs.com : 2011-03-29 05:49:06 - fmavituna - RT @WisecWisec: Abusing Referrer on Explorer for Referrer based DOM Xss http://bitly/grrajT // New Blog Post #DOMXss #DOMInatorhttp://www.secuobs.com/twitter/news/189783.shtmlhttp://www.secuobs.com/twitter/news/189783.shtml Secuobs.com : 2011-03-28 18:29:40 - fmavituna - @atdre yeah, awkward BTW isn't best SQLI defense is parameterized queries You don't need anything else just slap your devshttp://www.secuobs.com/twitter/news/189544.shtmlhttp://www.secuobs.com/twitter/news/189544.shtml Secuobs.com : 2011-03-28 05:17:53 - fmavituna - Someone was busy Mysql and Sun - RT @securityshell: Suncom Oracle Sun Microsystems vulnerable to SQL Injection http://bitly/dTVGdvhttp://www.secuobs.com/twitter/news/189423.shtmlhttp://www.secuobs.com/twitter/news/189423.shtml Secuobs.com : 2011-03-27 18:41:13 - fmavituna - MySqlCom Vulnerable to Blind SQL Injection - That hurts http://ffim/-zQ6Kohttp://www.secuobs.com/twitter/news/189302.shtmlhttp://www.secuobs.com/twitter/news/189302.shtml Secuobs.com : 2011-03-12 19:32:04 - fmavituna - Nmap Development: HBGary planned to BLOW THE BALLS OFF OF NMAP http://ffim/-zpU95http://www.secuobs.com/twitter/news/184026.shtmlhttp://www.secuobs.com/twitter/news/184026.shtml Secuobs.com : 2011-03-10 20:06:18 - fmavituna - RT @timb_machine: RT @Treesiepops Just got an email titled UK 'too slow' on cloud adoption - if only it were about actual cloudshttp://www.secuobs.com/twitter/news/183136.shtmlhttp://www.secuobs.com/twitter/news/183136.shtml Secuobs.com : 2011-03-09 15:08:54 - fmavituna - RT @opt9: Microsoft want to hack my PC Microsoft official phishing attempt http://swbaeeglooscom/3595961http://www.secuobs.com/twitter/news/182482.shtmlhttp://www.secuobs.com/twitter/news/182482.shtml Secuobs.com : 2011-03-08 01:17:11 - fmavituna - RT @ChrisJohnRiley: SharedReader How I Almost Won Pwn2Own via XSS http://bitly/fWKr0phttp://www.secuobs.com/twitter/news/181734.shtmlhttp://www.secuobs.com/twitter/news/181734.shtml Secuobs.com : 2011-03-02 01:25:18 - fmavituna - RT @jeremiahg: Let the Feb 2011 record state, one reverse engineering company acquired by Google Another hacked by Anonymous CEO resi http://www.secuobs.com/twitter/news/179613.shtmlhttp://www.secuobs.com/twitter/news/179613.shtml Secuobs.com : 2011-03-01 03:54:47 - fmavituna - RT @jeremiahg: Google offers $20K for escaping the Chrome browser sandbox during Pwn2Own Nice and all, but why All the value is within http://www.secuobs.com/twitter/news/179212.shtmlhttp://www.secuobs.com/twitter/news/179212.shtml Secuobs.com : 2011-02-28 16:11:01 - fmavituna - @ethicalhack3r definitely if the cloud company doesn't take backups or provide recovery then yes Gmail is fre… cont http://deckly/~r3Bhzhttp://www.secuobs.com/twitter/news/178999.shtmlhttp://www.secuobs.com/twitter/news/178999.shtml Secuobs.com : 2011-02-26 07:03:10 - fmavituna - @threatintel They should just hack some sites with SSL, that would be much easier : #phishinghttp://www.secuobs.com/twitter/news/178488.shtmlhttp://www.secuobs.com/twitter/news/178488.shtml Secuobs.com : 2011-02-12 23:54:37 - fmavituna - RT @Rogunix: Android Gmail App XSS: Stealing Emails http://bitly/gIyHA6http://www.secuobs.com/twitter/news/173286.shtmlhttp://www.secuobs.com/twitter/news/173286.shtml Secuobs.com : 2011-02-11 15:49:08 - fmavituna - RT @jeremiahg: eHarmony Hacked, SQL Injection strike again http://bitly/ikzgNU @wascwhidhttp://www.secuobs.com/twitter/news/172929.shtmlhttp://www.secuobs.com/twitter/news/172929.shtml Secuobs.com : 2011-02-10 22:24:01 - fmavituna - RT @netsparker: New Netsparker is out 1833 - with Anti-CSRF Token support It's so cool or what - http://bitly/iiuUWXhttp://www.secuobs.com/twitter/news/172688.shtmlhttp://www.secuobs.com/twitter/news/172688.shtml Secuobs.com : 2011-02-10 22:24:01 - fmavituna - RT @superevr: Here’s a break down on that Ruby on Rails CSRF issue hint: its bigger than just RORhttp://bitly/fclK5Ihttp://www.secuobs.com/twitter/news/172687.shtmlhttp://www.secuobs.com/twitter/news/172687.shtml Secuobs.com : 2011-02-09 02:07:47 - fmavituna - #Netsparker identified a SQL Injection in Joomla 16 Stable, turned out it's in their issue tracker for a month now without a patchhttp://www.secuobs.com/twitter/news/171740.shtmlhttp://www.secuobs.com/twitter/news/171740.shtml Secuobs.com : 2011-02-08 17:57:37 - fmavituna - RT @spinkham: Surprise #OWASPSummit was not able to solve XSS in an hour, so they're moving the discussion into lunch alsohttp://www.secuobs.com/twitter/news/171547.shtmlhttp://www.secuobs.com/twitter/news/171547.shtml Secuobs.com : 2011-02-07 14:50:45 - fmavituna - http://bitly/dOVJbG - XSS vulns in Google, src= http://bitly/igQyxEhttp://www.secuobs.com/twitter/news/171052.shtmlhttp://www.secuobs.com/twitter/news/171052.shtml Secuobs.com : 2011-02-04 18:36:59 - fmavituna - RT @0x6D6172696F: Stacktrace of GTFO - awesome http://assetsoupio/asset/1528/2346_93ef_500jpeghttp://www.secuobs.com/twitter/news/170391.shtmlhttp://www.secuobs.com/twitter/news/170391.shtml Secuobs.com : 2011-02-01 04:36:29 - fmavituna - Dating website + SQL injection + Cleat Text passwords and plenty of drama http://ffim/-x8eJ5http://www.secuobs.com/twitter/news/168837.shtmlhttp://www.secuobs.com/twitter/news/168837.shtml Secuobs.com : 2011-02-01 04:36:29 - fmavituna - RT @securityninja: LOIC Low Orbit Ion Cannon DDoS/DoS Analysis http://blogspiderlabscom/2011/01/loic-ddos-analysis-and-detectionhtmlhttp://www.secuobs.com/twitter/news/168836.shtmlhttp://www.secuobs.com/twitter/news/168836.shtml Secuobs.com : 2011-01-28 17:53:32 - fmavituna - RT @m1splacedsoul: #Facebook adds connect with SSL setting but still redirects you to http:// for login even when you bookmark https:/ http://www.secuobs.com/twitter/news/167635.shtmlhttp://www.secuobs.com/twitter/news/167635.shtml Secuobs.com : 2011-01-20 21:32:49 - fmavituna - Amazon Acquires LoveFilm, The Netflix Of Europe http://ffim/-wE3tIhttp://www.secuobs.com/twitter/news/164573.shtmlhttp://www.secuobs.com/twitter/news/164573.shtml Secuobs.com : 2011-01-15 08:30:30 - fmavituna - @aparsons BTW I assume you already noticed but as a workaround you can restart Netsparker to remove cookies in Form Authhttp://www.secuobs.com/twitter/news/162810.shtmlhttp://www.secuobs.com/twitter/news/162810.shtml Secuobs.com : 2011-01-13 14:19:33 - fmavituna - @troyhunt skipfish is quite good in that department, not as configurable as stress testing tools but it'll hammer the application :http://www.secuobs.com/twitter/news/162181.shtmlhttp://www.secuobs.com/twitter/news/162181.shtml Secuobs.com : 2011-01-13 14:19:33 - fmavituna - RT @janinda: A bug in Chrome's speech handling I didn't even know browsers could/would/should do that #Welcometo2011http://www.secuobs.com/twitter/news/162180.shtmlhttp://www.secuobs.com/twitter/news/162180.shtml Secuobs.com : 2011-01-13 14:19:33 - fmavituna - RT @stalkr_: In-memory extraction of SSL private keys http://tinyurlcom/5rrnygthttp://www.secuobs.com/twitter/news/162179.shtmlhttp://www.secuobs.com/twitter/news/162179.shtml Secuobs.com : 2011-01-12 16:35:07 - fmavituna - RT @troyhunt: Just blogged: Continuous web application security scanning with Netsparker and TeamCity http://troyhn/fXyVvWhttp://www.secuobs.com/twitter/news/161832.shtmlhttp://www.secuobs.com/twitter/news/161832.shtml Secuobs.com : 2011-01-12 16:35:07 - fmavituna - @troyhunt Great article Troy, also I loved the ability to see Netsparker reports in TeamCity interface, automation and CI done right :http://www.secuobs.com/twitter/news/161831.shtmlhttp://www.secuobs.com/twitter/news/161831.shtml Secuobs.com : 2011-01-12 16:35:07 - fmavituna - New version of Netsparker Community Edition v17213 is out - http://wwwmavitunasecuritycom/communityedition/http://www.secuobs.com/twitter/news/161830.shtmlhttp://www.secuobs.com/twitter/news/161830.shtml Secuobs.com : 2010-12-25 00:22:13 - fmavituna - RT @mubix: free maltego to all, and to all a good night: http://bitly/hshfMyhttp://www.secuobs.com/twitter/news/157164.shtmlhttp://www.secuobs.com/twitter/news/157164.shtml Secuobs.com : 2010-12-23 17:33:31 - fmavituna - RT @1nf0s3cp1mp: Anyone have any proscons for Netsparker Looking at purchasinghttp://www.secuobs.com/twitter/news/156856.shtmlhttp://www.secuobs.com/twitter/news/156856.shtml Secuobs.com : 2010-12-20 02:14:51 - fmavituna - @troyhunt You should have your Netsparker evaluation license now, let me know if you run into any problemshttp://www.secuobs.com/twitter/news/155372.shtmlhttp://www.secuobs.com/twitter/news/155372.shtml Secuobs.com : 2010-12-18 17:53:04 - fmavituna - @TroyHunt Sure, all you need to do is: netsparkerexe /auto /url http://examplecom /report examplehtm see more: http://bitly/gzas6Uhttp://www.secuobs.com/twitter/news/155112.shtmlhttp://www.secuobs.com/twitter/news/155112.shtml Secuobs.com : 2010-12-18 17:53:04 - fmavituna - @singe You should've fired skipfish on them, they can't miss that :http://www.secuobs.com/twitter/news/155111.shtmlhttp://www.secuobs.com/twitter/news/155111.shtml Secuobs.com : 2010-12-17 02:35:26 - fmavituna - Chrome for a Cause - http://bitly/eEtRpl - Your terrible browsing habits can provide clean water to poorhttp://www.secuobs.com/twitter/news/154286.shtmlhttp://www.secuobs.com/twitter/news/154286.shtml Secuobs.com : 2010-12-17 02:35:26 - fmavituna - @etamotweet Maybe we should poison people's viewed pages via CSRF in Amazon for fun, that would be irritating :http://www.secuobs.com/twitter/news/154285.shtmlhttp://www.secuobs.com/twitter/news/154285.shtml Secuobs.com : 2010-12-15 14:26:39 - fmavituna - OpenBSD IPSEC backdoored by FBI http://ffim/-vgzL9http://www.secuobs.com/twitter/news/153507.shtmlhttp://www.secuobs.com/twitter/news/153507.shtml Secuobs.com : 2010-12-12 12:21:48 - fmavituna - @troyhunt crash might reveal better stack trace custom errors on, conditional compiling issues as in the answer of SOhttp://www.secuobs.com/twitter/news/152334.shtmlhttp://www.secuobs.com/twitter/news/152334.shtml Secuobs.com : 2010-12-05 16:51:11 - fmavituna - RT @securityshell: SQLi filter evasion cheat sheet MySQL https://websecwordpresscom/2010/12/04/sqli-filter-evasion-cheat-sheet-mysql/http://www.secuobs.com/twitter/news/149373.shtmlhttp://www.secuobs.com/twitter/news/149373.shtml Secuobs.com : 2010-12-03 00:29:10 - fmavituna - RT @netsparker: Netsparker 1700 is out- http://wwwmavitunasecuritycom/blog/netsparker-1-7-0-0-released/ Got some cool features lik http://www.secuobs.com/twitter/news/148460.shtmlhttp://www.secuobs.com/twitter/news/148460.shtml Secuobs.com : 2010-11-29 19:29:37 - fmavituna - Metasploit Hollywood Edition : - http://wwwfastandeasyhackingcom/http://www.secuobs.com/twitter/news/146993.shtmlhttp://www.secuobs.com/twitter/news/146993.shtml Secuobs.com : 2010-11-29 19:29:37 - fmavituna - Very smart PHP - MySQL Raw MD5 SQL Injection attack - http://blognibblesfr/2039http://www.secuobs.com/twitter/news/146992.shtmlhttp://www.secuobs.com/twitter/news/146992.shtml Secuobs.com : 2010-11-25 08:26:43 - fmavituna - RT @chrissullo: To OSS authors: GoDaddy gives free 1yr SSL certs if reg'd on freshmeat or sourceforge -- http://tinyurlcom/2rqah5http://www.secuobs.com/twitter/news/146075.shtmlhttp://www.secuobs.com/twitter/news/146075.shtml Secuobs.com : 2010-11-20 17:07:51 - fmavituna - @TheSuggmeister ESAPI-PHP can handle that - http://bitly/czSeTRhttp://www.secuobs.com/twitter/news/144572.shtmlhttp://www.secuobs.com/twitter/news/144572.shtml Secuobs.com : 2010-11-18 20:39:31 - fmavituna - Full disclosure XSS overload : - http://bitly/8Z603jhttp://www.secuobs.com/twitter/news/143865.shtmlhttp://www.secuobs.com/twitter/news/143865.shtml Secuobs.com : 2010-11-18 20:39:31 - fmavituna - Pentester XMAS List : - http://bitly/awDc2Xhttp://www.secuobs.com/twitter/news/143864.shtmlhttp://www.secuobs.com/twitter/news/143864.shtml Secuobs.com : 2010-11-17 21:42:35 - fmavituna - Since FireSheep is quite popular nowadays, an old article of mine : http://bitly/9bmuIW - SSL Implementation Security FAQhttp://www.secuobs.com/twitter/news/143396.shtmlhttp://www.secuobs.com/twitter/news/143396.shtml Secuobs.com : 2010-11-15 20:49:09 - fmavituna - Amazon announced their Cluster GPU Instances for EC2, cloud password cracking http://bitly/bcN1vchttp://www.secuobs.com/twitter/news/142502.shtmlhttp://www.secuobs.com/twitter/news/142502.shtml Secuobs.com : 2010-11-15 20:49:09 - fmavituna - RT @NeilDavidson: The smart folks at @tidepowerd have released the GPUNET beta - first product to let you compile NET code for your GPUhttp://www.secuobs.com/twitter/news/142501.shtmlhttp://www.secuobs.com/twitter/news/142501.shtml Secuobs.com : 2010-11-11 20:58:27 - fmavituna - WTF SalesForce doesn't support Chrome Browser, what is this 90shttp://www.secuobs.com/twitter/news/141368.shtmlhttp://www.secuobs.com/twitter/news/141368.shtml Secuobs.com : 2010-11-11 05:56:01 - fmavituna - Interesting experiment: http://bitly/9l13fE - Solving text CAPTCHA with WolframAlphahttp://www.secuobs.com/twitter/news/141071.shtmlhttp://www.secuobs.com/twitter/news/141071.shtml Secuobs.com : 2010-11-10 03:14:58 - fmavituna - Amazon Prime #SUCKShttp://www.secuobs.com/twitter/news/140615.shtmlhttp://www.secuobs.com/twitter/news/140615.shtml Secuobs.com : 2010-11-10 03:14:58 - fmavituna - OK Amazon Prime #SUCKS but Amazon customer support #ROCKS :http://www.secuobs.com/twitter/news/140614.shtmlhttp://www.secuobs.com/twitter/news/140614.shtml Secuobs.com : 2010-11-09 13:45:10 - fmavituna - RT @netsparker: Win an iPad from Netsparker - http://bitly/dmepdP - Just follow @netsparker and retweet this #netsparker #twtawayhttp://www.secuobs.com/twitter/news/140412.shtmlhttp://www.secuobs.com/twitter/news/140412.shtml Secuobs.com : 2010-11-06 12:42:55 - fmavituna - @ethicalhacker XSS Shell is using that iframe method and it's pretty easy to implement URL is not a big deal as thx AJAX users used to ithttp://www.secuobs.com/twitter/news/139715.shtmlhttp://www.secuobs.com/twitter/news/139715.shtml Secuobs.com : 2010-10-31 13:25:11 - fmavituna - Stack Overflow just became a top-500 site via HN - I told u when they first launched http://ffim/-sVW4Chttp://www.secuobs.com/twitter/news/137276.shtmlhttp://www.secuobs.com/twitter/news/137276.shtml Secuobs.com : 2010-10-29 13:22:59 - fmavituna - Amazon AWS is insane, you can have 2 accounts with the same usernamehttp://www.secuobs.com/twitter/news/136586.shtmlhttp://www.secuobs.com/twitter/news/136586.shtml Secuobs.com : 2010-10-07 19:13:04 - fmavituna - RT @netsparker: Yeah Netsparker 1600 Released - http://wwwmavitunasecuritycom/blog/netsparker-1-6-0-0-released/http://www.secuobs.com/twitter/news/129268.shtmlhttp://www.secuobs.com/twitter/news/129268.shtml Secuobs.com : 2010-09-26 15:05:45 - fmavituna - Should revoke their PCI : - @brennantom Pssst Hey Visa you have XSS http://xssedcom/archive/special=1http://www.secuobs.com/twitter/news/125856.shtmlhttp://www.secuobs.com/twitter/news/125856.shtml Secuobs.com : 2010-09-25 02:09:53 - fmavituna - AWESOME RT @brucon: Blogpost: Follow BruCON LIVE : we are streaming http://bitly/9cv1WChttp://www.secuobs.com/twitter/news/125520.shtmlhttp://www.secuobs.com/twitter/news/125520.shtml Secuobs.com : 2010-09-23 15:34:46 - fmavituna - Havij – Advanced Automated SQL Injection Tool - http://bitly/ckoIXK Even supports update, cool Rise of the commercial SQLI toolshttp://www.secuobs.com/twitter/news/124910.shtmlhttp://www.secuobs.com/twitter/news/124910.shtml Secuobs.com : 2010-09-22 08:14:50 - fmavituna - It's amazing to see same vulns coming back again and again, don't vendors check each other vulns Chrome ASPNET - http://bitly/bKqSsqhttp://www.secuobs.com/twitter/news/124333.shtmlhttp://www.secuobs.com/twitter/news/124333.shtml Secuobs.com : 2010-09-22 08:14:50 - fmavituna - I haven't tried but I bet expression / -moz-binding etc would have trigger Twitter XSS automatically, so no need to mouseoverhttp://www.secuobs.com/twitter/news/124332.shtmlhttp://www.secuobs.com/twitter/news/124332.shtml Secuobs.com : 2010-09-18 08:01:43 - fmavituna - RT @proactiverisk: Cyberverse - its bigger than the cloud rthttp://www.secuobs.com/twitter/news/122179.shtmlhttp://www.secuobs.com/twitter/news/122179.shtml Secuobs.com : 2010-09-18 08:01:43 - fmavituna - Is there any Chrome extension out there to block HTTP content in mixed SSL http://www.secuobs.com/twitter/news/122178.shtmlhttp://www.secuobs.com/twitter/news/122178.shtml Secuobs.com : 2010-09-18 08:01:43 - fmavituna - RT @netsparker: Did you know that Metasploit is starting to support Netsparker imports for further exploitationhttp://www.secuobs.com/twitter/news/122177.shtmlhttp://www.secuobs.com/twitter/news/122177.shtml Secuobs.com : 2010-09-18 08:01:43 - fmavituna - RT @OWASP_podcast: OWASP Podcast 75, an interview with Brandon Sterne the Mozilla programmer who implemented Content Security Policy in http://www.secuobs.com/twitter/news/122176.shtmlhttp://www.secuobs.com/twitter/news/122176.shtml Secuobs.com : 2010-09-18 08:01:43 - fmavituna - @etamotweet You already got it but as PoC, my old PoC for Twitter CSRF linked in the comments : http://bitly/9QPa4Rhttp://www.secuobs.com/twitter/news/122175.shtmlhttp://www.secuobs.com/twitter/news/122175.shtml Secuobs.com : 2010-09-18 08:01:43 - fmavituna - RT @mubix: Socks4a Proxy for Meterpreter sessions using route by the awesome @StephenFewer : http://bitly/aAqyPqhttp://www.secuobs.com/twitter/news/122174.shtmlhttp://www.secuobs.com/twitter/news/122174.shtml Secuobs.com : 2010-07-27 23:16:52 - fmavituna - RT @iagox86: I downloaded every name on Facebook Awesome bruteforce info, big privacy issue: http://wwwskullsecurityorg/blog/p=887http://www.secuobs.com/twitter/news/118771.shtmlhttp://www.secuobs.com/twitter/news/118771.shtml Secuobs.com : 2010-07-22 03:18:08 - fmavituna - RT @DinisCruz: Help with the creation of the #OWASP based StackOverflow site called 'Application Security' and FOLLOW it now http://bi http://www.secuobs.com/twitter/news/116907.shtmlhttp://www.secuobs.com/twitter/news/116907.shtml Secuobs.com : 2010-07-22 03:18:08 - fmavituna - Finally this kind of SSL cert getting more popular and cheaper , Comodo PositiveSSL http://bitly/cUnWrA via http://bitly/cW3K5bhttp://www.secuobs.com/twitter/news/116906.shtmlhttp://www.secuobs.com/twitter/news/116906.shtml Secuobs.com : 2010-07-21 11:15:15 - fmavituna - RT @peterkruse: fyodor has released Nmap version 535DC1, http://bitly/cWMnNhttp://www.secuobs.com/twitter/news/116665.shtmlhttp://www.secuobs.com/twitter/news/116665.shtml Secuobs.com : 2010-07-20 12:29:44 - fmavituna - RT @securityshell: RT @lavakumark 'Shell of the Future' released - http://bitly/9hygqi Now turn all XSS and JS Injection vulns in to http://www.secuobs.com/twitter/news/116188.shtmlhttp://www.secuobs.com/twitter/news/116188.shtml Secuobs.com : 2010-07-03 12:04:22 - fmavituna - RT @bunyamindemir: A new blind sql injection tool: ColdEffect http://coldeffectadeocomtr/http://www.secuobs.com/twitter/news/110755.shtmlhttp://www.secuobs.com/twitter/news/110755.shtml Secuobs.com : 2010-07-02 00:45:21 - fmavituna - RT @notsosecure: Bsqlbf v 26 Metasploit Payload Execution Release is now available for download: http://codegooglecom/p/bsqlbf-v2/ http://www.secuobs.com/twitter/news/110029.shtmlhttp://www.secuobs.com/twitter/news/110029.shtml Secuobs.com : 2010-07-01 09:04:18 - fmavituna - RT @fpmulder: That's what I need RT @Eth_x: If you haven't tried it http://bitly/cuU5tL Netsparker 1500 http://www.secuobs.com/twitter/news/109735.shtmlhttp://www.secuobs.com/twitter/news/109735.shtml Secuobs.com : 2010-06-30 20:09:51 - fmavituna - RT @thealuc: One of the best XSS/SQLInjection Scanners:Netsparker Community Edition is updated to the Version 1500 Get it here: htt http://www.secuobs.com/twitter/news/109399.shtmlhttp://www.secuobs.com/twitter/news/109399.shtml Secuobs.com : 2010-06-29 02:50:00 - fmavituna - RT @netsparker: Netsparker Community Edition - Free Web Application Security Scanner 1500 Released - http://bitly/dzv2IYhttp://www.secuobs.com/twitter/news/108633.shtmlhttp://www.secuobs.com/twitter/news/108633.shtml Secuobs.com : 2010-06-16 12:54:25 - fmavituna - RT @netsparker: Dradis Upload Plugin for Netsparker is out - http://bitly/ahdUp6 Thanks to @mtimur from Netsparker Teamhttp://www.secuobs.com/twitter/news/104405.shtmlhttp://www.secuobs.com/twitter/news/104405.shtml Secuobs.com : 2010-06-16 03:08:21 - fmavituna - RT @netsparker: Netsparker v1500 Released - http://bitly/b4cvT1http://www.secuobs.com/twitter/news/104172.shtmlhttp://www.secuobs.com/twitter/news/104172.shtml Secuobs.com : 2010-06-16 03:08:21 - fmavituna - RT @honeyapps: @jeremiahg @cktricky NetSparker integration with @honeyapps Conduit coming soon toohttp://www.secuobs.com/twitter/news/104171.shtmlhttp://www.secuobs.com/twitter/news/104171.shtml Secuobs.com : 2010-06-12 18:44:48 - fmavituna - @ethicalhack3r They should try BSQL Hacker It's the most buggy app in the world but it can virtually handle all SQLIs as wellhttp://www.secuobs.com/twitter/news/103030.shtmlhttp://www.secuobs.com/twitter/news/103030.shtml