SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique

Les derniers commentaires publiés sur SecuObs (1-5):

- Oracle XDB FTP service UNLOCK buffer overflow exploit that spawns a reverse s - XSSploit XSS scanner multiplatfom v0.5 available - Network forensics in IRB xtractr Ruby gem - GreenPois0n Possible Jailbreak Software for iPad OS 32 - Blazing fast password recovery with new ATI cards Les derniers commentaires publiés sur SecuObs (6-25) Tous les commentaires publiés sur SecuObs avant les 5 derniers

Top des catégories les plus recensées :

Faille la plus recensée par catégorie :

Nombre	Nom du test	Categorie
3537	Nessus Scan Information	Settings
3389	Host Fully Qualified Domain Name FQDN Resolution	General
901	ICMP Timestamp Request Remote Date Disclosure	Firewalls
188	Open Port Re-check	Misc.
129	RPC Services Enumeration	Service detection
95	Default community names of the SNMP Agent	SNMP
75	SMB log in	Windows
63	Windows Terminal Services Enabled	Useless services
32	Anonymous FTP Enabled	FTP
20	Mailman private.py Directory Traversal Vulnerability	Remote file access
18	Obtains the password policy	Windows : User management
12	Horde Parent Frame Page Title XSS	CGI abuses : XSS
11	PHP Image File Format Denial Of Service Vulnerabilities	Denial of Service
9	Nmap NASL wrapper	Port scanners
7	Mail relaying thorough test	SMTP problems
6	mod_ssl hook functions format string vulnerability	Gain a shell remotely
4	ntpd overflow	Gain root remotely
2	Linksys Router Default Password admin	CISCO
2	Finger redirection check	Finger abuses
1	Web Server Hosting Copyrighted Material	Peer-To-Peer File Sharing
1	Linux FTP Server Backdoor	Backdoors

Protocoles faillibles les plus références :

Les derniers commentaires publiés sur SecuObs (6-25):

- ESRT @wireheadlance - How to secure a Cisco router - Device Fingerprinting to Fight Real-time Transaction Fraud - Penetrating Intranets through Adobe Flex Applications - Updated the OWASP Fuzzing Code Database - ESRT @jcran - how to convert a NASL check to a NeXpose check - The New Disclosure Debate and the Evil Mr. Moore - Charlie Miller Will Expose 20 Hackable Apple Security Flaws - Digital Forensics Framework v0.5 released - OSSIM v2.2 Multiple Vulnerabilities - Virtual PC Hypervisor Memory Protection Vulnerability - Virtual machines being used to obfuscate malware - Implement the SSH-2 protocol in pure Java - Video : ESRT @securityshell - Nessus Scan through a Meterpreter Session - ESRT @Jhaddix Man-Just-Left-of-Middle MJLM XSS Phishing Attack Tool - An Analysis of the Skype IMBot Logic and Functionality - sipwitch 0.7.3 - Saint Vulnerability Scanner v7.3 on the wild - JBroFuzz 2.0 Fuzzer Released - Metasploit Oracle Windows - Detecting USB Storage Usage with OSSEC Les cinq derniers commentaires publiés sur SecuObs Tous les commentaires publiés sur SecuObs avant les 25 derniers

SecuToolBox :

Bluetooth Stack Smasher v0.6 / Bluetooth Stack Smasher v0.8 / Slides Bluetooth Eurosec 2006 / Exposé vidéo Windows Shellcode - Kostya Kortchinsky / Exposé audio Reverse Engineering - Nicolas Brulez / Exposé vidéo Securitech - Pierre Betouin / WEP aircrack + Ubiquiti (MadWifi) 300 mW + Yagi / Secure WIFI WPA + EAP-TLS + Freeradius / Audit Windows / Captive Password Windows / USBDumper / USBDumper 2 / Hacking Hardware / WishMaster backdoor / DNS Auditing Tool / Ettercap SSL MITM / Exploit vulnérabilités Windows / Memory Dumper Kernel Hardening / Reverse Engineering / Scapy / SecUbuLIVE CD / Metasploit / eEye Blink Sec Center / eEye Retina Scanner + d'outils / + de tutoriels

Mini-Tagwall des articles publiés sur SecuObs :

sécurité, exploit, windows, microsoft, réseau, attaque, outil, vulnérabilité, audit, systčme, virus, internet, données, présentation, metasploit, linux, bluetooth, protocol, vista, scanner, réseaux, shell, engineering, rootkit, paquet, conférence, trames, wishmaster, téléphone, source, sysun, noyau, mobile, https, mémoire, rapport, botnet, téléphones, libre, reverse, navigateur, patch, snort, scapy, intel + de mots clés avec l'annuaire des articles publiés sur SecuObs

Archives Failles Secunia :

- SA38986 Red Hat update for cpio - SA38936 Red Hat update for cpio - SA39002 Fedora update for viewvc - SA38923 Red Hat update for cpio - SA38997 Web Wiz Forums Cross-Site Request Forgery + d'archives failles avec Secunia et SecuMail

Archives Mailing Full Disclosure :

- Full-disclosure Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e). - Re: Full-disclosure SecurityFocus to partially shut down - Full-disclosure Wordpad Command line argument vulnerability is it known ? - Full-disclosure Decrypting MPPE / PPTP network traffic - Full-disclosure USN-914-1 Linux kernel vulnerabilities + d'archives Full Disclosure avec SecuMail

Archives Mailing Bugtraq :

- Miranda IM silent TLS failure - Vulnerabilities in VXDate for Joomla - CORELAN-10-13 - Windisc Local Stack BOF - security bulletin HPSBGN02511 SSRT100022 rev.2 - HP Small Form Factor or Microtower PC with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code - CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability - CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability + d'archives Bugtraq avec SecuMail

Mini-Tagwall de l'annuaire video :

vmware, security, virus, biometric, windows, lockpicking, password, botnet, metasploit, tutorial, attack, crypt, linux, network, iphone, server, exploit, conficker, wimax, virtu, virtual, engineering, cisco, reverse, shmoocon, ettercap, wireshark, hacker, firewall, internet, knoppix, rootkit, arduino, wireless, source, conference, backtrack, openbsd, brucon, systm, overflow, openssh, buffer, access, remote + de mots clés avec l'annuaire des videos

Mini-Tagwall des articles de la revue de presse :

security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité + de mots clés avec l'annuaire de la revue de presse

Mini-Tagwall des Tweets de la revue Twitter :

security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack + de mots clés avec l'annuaire de la revue Twitter