Capturing Keystrokes With Metasploit

Monday, June 22nd, 2009

I was contacted privately about this, so I thought I would post a step-by-step guide on how to capture keystrokes from a target machine using Metasploit. Instead of posting a ton of screenshots, I will provide the commands in text below, step-by-step: msf > use exploit/windows/smb/ms08_067_netapi (only an example - use whatever ...

‘Ardilla’ Automatically Roots Out SQL Injection And XSS, Generates Attacks

Thursday, June 18th, 2009

Researchers have built a tool that automatically finds and exploits SQL injection and cross-site scripting vulnerabilities in Web applications. The so-called Ardilla tool uses a technique developed by the researchers -- MIT's Adam Kiezun, the University of Washington's Michael Ernst, Stanford's Philip Guo, and Syracuse University's Karthick Jayaraman -- that creates ...

Phrack Issue #66 – What You Were Waiting For

Thursday, June 11th, 2009

We have the great pleasure to release today another excellent selection of the best Hacking articles this year. An issue full of new exploitation techniques and ground work on writing attack software. This issue has some evil number.. with a lot of evil content. Phrack proves once more how we can, ...

Cain & Abel v4.9.31 Released

Sunday, June 7th, 2009

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords ...

Hacking Tool Lets A VM Break Out And Attack Its Host

Thursday, June 4th, 2009

Researchers for some time have demonstrated the possibility of one of virtualization's worst nightmares -- a guest virtual machine (VM) infiltrating and hacking its host system. Now another commercial tool is offering an exploit that does exactly that. The newest version of Immunity's Canvas commercial penetration testing tool, v6.47, includes the ...