SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique

Les derniers commentaires publiés sur SecuObs (1-5):

- Paterva - Info porn video on latest v3 update - Using Maltego 3 and NER Enjoy - ESRT @mikkohypponen @carnal0wnage - Spoofing your Foursquare location with Me - ESRT @mikkohypponen - Yes, that just might work, license plate SQL injection - ESRT @mikkohypponen The Android phone with a Win32 USB worm on it's memory ca - opennhrp 0.11.5 Les derniers commentaires publiés sur SecuObs (6-25) Tous les commentaires publiés sur SecuObs avant les 5 derniers

Top des 100 failles les plus recensées :

Nombre	Nom du test	Place
3537	Nessus Scan Information	1
3389	Host Fully Qualified Domain Name FQDN Resolution	2
901	ICMP Timestamp Request Remote Date Disclosure	3
324	Web Server Directory Enumeration	4
306	HTTP TRACE / TRACK Methods	5
227	Network Time Protocol NTP Server Information Disclosure	6
188	Open Port Re-check	7
179	Identd scan	8
147	DNS Server Cache Snooping Information Disclosure	9
143	DNS Server Recursive Query Enabled	10
142	ISC BIND Remote Version Disclosure	11
131	SSL Certificate	12
129	RPC Services Enumeration	13
117	DNS Server Fingerprinting	14
95	Default community names of the SNMP Agent	15
92	Obtain system info type via SNMP	16
81	HyperText Transfer Protocol Information	17
75	Service Identification 2nd pass	18
75	Apache UserDir Directive Username Enumeration	19
75	SMB log in	20
68	Web Server robots.txt Information Disclosure	21
65	IMAP Service Banner Retrieval	22
63	Windows Terminal Services Enabled	23
58	Authentication Failure - Local Checks Not Run	24
56	VNC security types	25
49	scan for UPnP/Tcp hosts	26
43	Microsoft Windows Remote Desktop Protocol Server Private Key Disclosure Vulnerability	27
35	Identd Service Enabled	28
32	Anonymous FTP Enabled	29
29	SSH protocol version 1 enabled	30
28	Identifies services like FTP, SMTP, NNTP...	31
27	TCP timestamps	32
25	Microsoft Windows SMB Shares Access	33
24	DNS Server on UDP and TCP	34
24	SSL Certificate Expiry	35
23	Apache Banner Linux Distribution Disclosure	36
23	ISC BIND 9 AUTHORS Map Remote Version Disclosure	37
22	HTTP TRACE	38
20	Mailman private.py Directory Traversal Vulnerability	39
19	Microsoft IIS Authentication Method Enumeration	40
19	Web Server HTTP Header Internal IP Disclosure	41
18	Obtains the password policy	42
17	Mailman Password Retrieval	43
17	Chargen UDP Service DoS	44
16	SSL Cipher Suites Supported	45
15	Apache < 1.3.31 / 2.0.49 Socket Connection Blocking Race Condition DoS	46
15	Apache < 1.3.29 Multiple Modules Local Overflow	47
13	Squid < 2.5.STABLE8 Multiple Vulnerabilities	48
13	MS Task Scheduler vulnerability	49
13	Private IP address Leaked using the PROPFIND method	50
12	ProFTPD < 1.3.0rc2 Multiple Remote Format Strings	51
12	Horde Parent Frame Page Title XSS	52
12	ProFTPD Login Timing Account Name Enumeration	53
11	PHP Image File Format Denial Of Service Vulnerabilities	54
11	PHP < 4.3.10 / 5.0.3 Multiple Vulnerabilities	55
11	PHP php_variables.c Multiple Variable Open Bracket Memory Disclosure	56
11	Installed Windows Hotfixes	57
11	Web Server Unconfigured - Default Install Page Present	58
11	Web Server Generic Cross-Site Scripting Vulnerability	59
10	Horde Turba Contact Manager common-footer.inc Parent Frame Page Title XSS	60
10	Identify unknown services with GET	61
10	Apache mod_proxy Content-Length Overflow	62
10	Qpopper Username Information Disclosure	63
10	/doc Directory Browsable??	64
9	Apache < 2.2.8 Multiple Vulnerabilities XSS, DoS	65
9	SMB NULL session	66
9	Obtain installed software via SNMP	67
9	IMP common-footer.inc Parent Frame Page Title XSS	68
9	Horde Application Framework Help Window Multiple Parameter XSS	69
9	Horde IMP HTML MIME Viewer Multiple XSS	70
9	Nmap NASL wrapper	71
9	OpenSSL denial of service	72
9	Apache < 1.3.28 Multiple Vulnerabilities DoS, ID	73
9	PHP Mail Function Header Spoofing	74
8	PHP < 5.2.5 Multiple Vulnerabilities	75
8	SSL Weak Cipher Suites Supported	76
8	Web Server Uses Plain Text Authentication Forms	77
8	phpSysInfo < 2.4.1 Multiple Vulnerabilities	78
8	Authenticated Check: OS Name and Installed Package Enumeration	79
8	Apache < 1.3.27 Multiple Vulnerabilities DoS, XSS	80
7	PHP 5 < 5.2.7 Multiple Vulnerabilities	81
7	FTP Supports Clear Text Authentication	82
7	Apache < 2.2.9 Multiple Vulnerabilities DoS, XSS	83
7	Mail relaying thorough test	84
7	Hidden WWW Server Name	85
7	ICMP Netmask Request Information Disclosure	86
6	Apache mod_proxy_ftp Directory Component Wildcard Character Globbing XSS	87
6	PHP < 5.2.4 Multiple Vulnerabilities	88
6	PHP < 5.2.3 Multiple Vulnerabilities	89
6	Vulnerability in SMB Could Allow Remote Code Execution 896422 - Network Check	90
6	Detect Apache HTTPS	91
6	Horde IMP with MSIE MIME Viewer E-mail Message XSS	92
6	mod_ssl hook functions format string vulnerability	93
6	IMP Content-Type Header XSS	94
6	mod_ssl SSL_Util_UUEncode_Binary Overflow	95
6	TCP sequence number approximation	96
6	Apache2 double slash dir index	97
6	Microsoft IIS 404 Response Service Pack Signature	98
6	Horde IMP IMP_MIME_Viewer_html Class XSS	99
6	Portable OpenSSH PAM timing attack	100

Les derniers commentaires publiés sur SecuObs (6-25):

- Mozilla confirmed a critical vulnerability in the newest version of Firefox - libnids 1.24 - XSSer Automate your XSS Injections - Cross Application Scripting All you KDE are belong to US - ESRT @ChrisJohnRiley @carnal0wnage - Exploiting hard filtered SQL Injections - Malicious Code Evolution from IE Zero-Day Exploit Code - Google Releases Skipfish Application Security Scanner - ESRT @securityninja - Burp Suite Tutorial - Repeater and Comparer Tool - ESRT @dinodaizovi - New metasploit blog post - analyzes the first public Perm - ESRT @iagox86 @hdmoore - Using Metasploit to Locate and Exploit the Energizer - ESRT @innismir - New Weblog Post -- Finding Malware on your network via cache - Sniffing with Wireshark as a Non-Root User - Focus on MacNikto v1.1.1 - New Google Chrome v4.1.249.1036 released, fixes multiple security vulnerabili - ESRT @opexxx @synopsi - Remote stack overflows - ESRT @postmodern_mod3 @tmm1 - memprof now displays stack frames and threads - ESRT @_MDL_ @gollmann - Locking botnet agents to specific victim systems in o - CsFire 0.4.1 autonomously protects against dangerous or malicious cross-domai - Seccubus v1.4.1 - Nessus 4.2 compatibility release - ESRT @JGamblin @threatpost - Hackers say they will definitely break into an A Les cinq derniers commentaires publiés sur SecuObs Tous les commentaires publiés sur SecuObs avant les 25 derniers

SecuToolBox :

Bluetooth Stack Smasher v0.6 / Bluetooth Stack Smasher v0.8 / Slides Bluetooth Eurosec 2006 / Exposé vidéo Windows Shellcode - Kostya Kortchinsky / Exposé audio Reverse Engineering - Nicolas Brulez / Exposé vidéo Securitech - Pierre Betouin / WEP aircrack + Ubiquiti (MadWifi) 300 mW + Yagi / Secure WIFI WPA + EAP-TLS + Freeradius / Audit Windows / Captive Password Windows / USBDumper / USBDumper 2 / Hacking Hardware / WishMaster backdoor / DNS Auditing Tool / Ettercap SSL MITM / Exploit vulnérabilités Windows / Memory Dumper Kernel Hardening / Reverse Engineering / Scapy / SecUbuLIVE CD / Metasploit / eEye Blink Sec Center / eEye Retina Scanner + d'outils / + de tutoriels

Mini-Tagwall des articles publiés sur SecuObs :

sécurité, exploit, windows, microsoft, réseau, attaque, outil, vulnérabilité, audit, systčme, virus, internet, données, présentation, metasploit, linux, bluetooth, protocol, vista, scanner, réseaux, shell, engineering, rootkit, paquet, conférence, trames, wishmaster, téléphone, source, sysun, noyau, mobile, https, mémoire, rapport, botnet, téléphones, libre, reverse, navigateur, patch, snort, scapy, intel + de mots clés avec l'annuaire des articles publiés sur SecuObs

Archives Failles Secunia :

- SA39038 SiteDone Custom Edition articleId SQL Injection Vulnerability - SA38977 Ubuntu update for thunderbird - SA38930 Debian update for php5 - SA39044 IBM HTTP Server Multiple Vulnerabilities - SA38929 CA ARCserve Backup JRE Multiple Vulnerabilities + d'archives failles avec Secunia et SecuMail

Archives Mailing Full Disclosure :

- Full-disclosure Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e). - Full-disclosure Setting the record straight on The Return of Koobface - Full-disclosure Malware 2010 Call for Papers - Re: Full-disclosure Fingerprinting Paper with Laser - Re: Full-disclosure Fingerprinting Paper with Laser + d'archives Full Disclosure avec SecuMail

Archives Mailing Bugtraq :

- announcing skipfish, an automated web app security scanner - Vulnerability Httpdx v1.5.3b - IBM Lotus 6.x HTTP Response Splitting Vulnerability - There are lost of xss vul in PHPWind v6.0 ! - CA20100318-01: Security Notice for CA ARCserve Backup - SECURITY DSA-2018-1 New php5 packages fix null pointer dereference + d'archives Bugtraq avec SecuMail

Mini-Tagwall de l'annuaire video :

vmware, security, virus, biometric, windows, lockpicking, password, botnet, metasploit, tutorial, attack, crypt, linux, network, iphone, server, exploit, wimax, conficker, virtu, virtual, engineering, shmoocon, cisco, reverse, wireshark, ettercap, hacker, firewall, internet, knoppix, rootkit, arduino, wireless, conference, source, backtrack, openbsd, brucon, systm, overflow, openssh, access, buffer, remote + de mots clés avec l'annuaire des videos

Mini-Tagwall des articles de la revue de presse :

security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité + de mots clés avec l'annuaire de la revue de presse

Mini-Tagwall des Tweets de la revue Twitter :

security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack + de mots clés avec l'annuaire de la revue Twitter