SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique

Les derniers commentaires publiés sur SecuObs (1-5):

- Video : Discovering CSRF with OWASP's CSRFTester Tool - How your email gets hacked - Sniff-n-Spit v1.0 - intercepting communications - RFID reader for iPhone - Fimap alpha v0.8 released Les derniers commentaires publiés sur SecuObs (6-25) Tous les commentaires publiés sur SecuObs avant les 5 derniers

Top des types de failles les plus recensées :

Nombre	Categorie	Place
18637	infos	1
429	attack	2
21	mixed	3
8	destructive_attack	4
6	denial	5

Faille la plus recensée par type :

Nombre	Nom du test	Type
3389	Host Fully Qualified Domain Name FQDN Resolution	infos
9	Horde Application Framework Help Window Multiple Parameter XSS	attack
6	Apache Chunked Encoding Remote Overflow	mixed
4	HMAP Web Server Fingerprinting	destructive_attack
4	Microsoft IIS FTP Status Request DoS	denial

Top failles de type attack les plus recensées :

Nombre	Nom du test	Type
9	Horde Application Framework Help Window Multiple Parameter XSS	attack
6	Apache mod_proxy_ftp Directory Component Wildcard Character Globbing XSS	attack
5	UDP packets with source port of 53 bypass firewall rules	attack
4	HP-UX FTPD REST Command Remote Arbitrary Memory Disclosure	attack
3	Horde test.php Direct Reqest Information Disclosure	attack
2	Web server traversal	attack
1	Anonymous FTP Writeable root Directory	attack

Top failles de type mixed les plus recensées :

Nombre	Nom du test	Type
6	Apache Chunked Encoding Remote Overflow	mixed
3	UoW imapd SIGABRT Signal Forced Crash Information Disclosure	mixed
2	Lotus Domino SMTP bounce DoS	mixed
1	Microsoft IIS ISM.DLL HTR Request Remote Overflow	mixed

Top failles de type infos les plus recensées :

Nombre	Nom du test	Type
3389	Host Fully Qualified Domain Name FQDN Resolution	infos
901	ICMP Timestamp Request Remote Date Disclosure	infos
324	Web Server Directory Enumeration	infos
306	HTTP TRACE / TRACK Methods	infos
227	Network Time Protocol NTP Server Information Disclosure	infos
179	Identd scan	infos
147	DNS Server Cache Snooping Information Disclosure	infos
143	DNS Server Recursive Query Enabled	infos
142	ISC BIND Remote Version Disclosure	infos
131	SSL Certificate	infos
129	RPC Services Enumeration	infos
117	DNS Server Fingerprinting	infos
95	Default community names of the SNMP Agent	infos
92	Obtain system info type via SNMP	infos
81	HyperText Transfer Protocol Information	infos
75	SMB log in	infos
68	Web Server robots.txt Information Disclosure	infos
65	IMAP Service Banner Retrieval	infos
63	Windows Terminal Services Enabled	infos
56	VNC security types	infos

Les derniers commentaires publiés sur SecuObs (6-25):

- ESRT @Opexxx - Add IPv6 DNS Brute Forcing - Metasploit DNS Enum module - ESRT @nevdull77 - XSS demo steals password from password manager - Video : ESRT @SecurityTube - Video Internet Explorer Iepeers Pointer Exploit - ESRT @0x58 @packet_storm - Adobe PDF LibTiff Integer Overflow - Video : ESRT @TimelessP - Aurora Exploit with alternate payload passing throu - ESRT @ITVulnerability - PeerSec MatrixSSL - Embedded SSL and TLS implementati - ESRT @packet_storm - Nux Keylogger 0.0.1 - ESRT @threatpost - New capabilities are strengthening the ZeuS botnet allowin - Wireshark Display Filters cheatsheet v2.0 - tcpdump cheatsheet v2.0 - ESRT @virturity - Virtualization security assessment modules for Metasploit V - ESRT @opexxx - Meterpreter script for extracting information from Windows lnk - Update on Microsoft Security Advisory 981374 - SSD Tools Crack Passwords 100 Times Faster - phpMyAdmin version 3.3.0 suffers from a cross site scripting vulnerability - libcap-ng 0.6.3 - iScanner v0.4 released - Malicious codes scanner - A vulnerability in Apple Safari, caused by an integer overflow error in Color - CHScanner is an ARP, IPv4 and IPv6 network scanner with 31 scan methods - Burp Suite Tutorial The Intruder Tool Les cinq derniers commentaires publiés sur SecuObs Tous les commentaires publiés sur SecuObs avant les 25 derniers

SecuToolBox :

Bluetooth Stack Smasher v0.6 / Bluetooth Stack Smasher v0.8 / Slides Bluetooth Eurosec 2006 / Exposé vidéo Windows Shellcode - Kostya Kortchinsky / Exposé audio Reverse Engineering - Nicolas Brulez / Exposé vidéo Securitech - Pierre Betouin / WEP aircrack + Ubiquiti (MadWifi) 300 mW + Yagi / Secure WIFI WPA + EAP-TLS + Freeradius / Audit Windows / Captive Password Windows / USBDumper / USBDumper 2 / Hacking Hardware / WishMaster backdoor / DNS Auditing Tool / Ettercap SSL MITM / Exploit vulnérabilités Windows / Memory Dumper Kernel Hardening / Reverse Engineering / Scapy / SecUbuLIVE CD / Metasploit / eEye Blink Sec Center / eEye Retina Scanner + d'outils / + de tutoriels

Mini-Tagwall des articles publiés sur SecuObs :

sécurité, exploit, windows, microsoft, réseau, attaque, outil, vulnérabilité, audit, systčme, virus, internet, données, présentation, linux, metasploit, bluetooth, protocol, vista, réseaux, shell, scanner, engineering, rootkit, wishmaster, trames, conférence, source, paquet, téléphone, mobile, sysun, noyau, rapport, botnet, téléphones, mémoire, https, navigateur, intel, patch, reverse, libre, scapy, securitech + de mots clés avec l'annuaire des articles publiés sur SecuObs

Archives Failles Secunia :

- SA38905 Debian update for linux-2.6 - SA38927 Fedora update for cups - SA38932 Apple Safari Multiple Vulnerabilities - SA38900 Eros Webkatalog id SQL Injection Vulnerability - SA38888 Unbound Memory Alignment Denial of Service + d'archives failles avec Secunia et SecuMail

Archives Mailing Full Disclosure :

- Full-disclosure Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e). - Re: Full-disclosure HITB-Announce HITBSecConf2010 - Dubai Agenda Released - Full-disclosure HITB-Announce HITBSecConf2010 - Dubai Agenda Released - Re: Full-disclosure SecurityFocus to partially shut down - Re: Full-disclosure SecurityFocus to partially shut down + d'archives Full Disclosure avec SecuMail

Archives Mailing Bugtraq :

- VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability - XSS I found a xss in phpmyadmin 3.3.0 when we create new database in interface! - SECURITY DSA 2014-1 New moin packages fix several vulnerabilities - USN-911-1 MoinMoin vulnerabilities - iDefense Security Advisory 03.11.10: Multiple Vendor WebKit HTML Element Use After Free Vulnerability - SECURITY DSA 2013-1 New egroupware packages fix several vulnerabilities + d'archives Bugtraq avec SecuMail

Mini-Tagwall de l'annuaire video :

vmware, security, virus, biometric, windows, lockpicking, password, botnet, metasploit, tutorial, attack, crypt, linux, network, iphone, server, exploit, wimax, conficker, virtu, virtual, engineering, cisco, reverse, ettercap, wireshark, shmoocon, hacker, firewall, internet, knoppix, rootkit, arduino, conference, source, wireless, backtrack, openbsd, brucon, systm, overflow, openssh, buffer, access, remote + de mots clés avec l'annuaire des videos

Mini-Tagwall des articles de la revue de presse :

security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité + de mots clés avec l'annuaire de la revue de presse

Mini-Tagwall des Tweets de la revue Twitter :

security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack + de mots clés avec l'annuaire de la revue Twitter