Skip to content

Category Archives: hacking

MBR rootkit found in wild

09-Jan-08

This isn’t just any rootkit, but rather one that lives in the master boot record of your PC. That means it runs before Windows even fully boots up. It’s also at a lower level in the system than anti-virus software, which makes it quite difficult to remove. Security Fix has a good summary of what [...]

MSF eXploit Builder

13-Dec-07

I recently came across a nifty set of tools called MSF eXploit Builder. This was developed to speed up the process of creating Metasploit Framework (MSF) exploit modules, as well as editing existing ones. Granted, this is very new and not yet mature software, but it looks like the developers will be porting it over [...]

Wireless keyboard hacked

04-Dec-07

This is some cool research done by Dreamlab to “hack” the latest Microsoft 27 MHz wireless keyboards. It looks like the hardest part was reverse engineering the proprietary protocol. After that, the encryption was trivial, and the key was even passed in the clear.
There are more technical details in the PDF paper, such as this [...]

Using Firefox for web security audits

19-Oct-07

This is a great little article on the various tools/add-ons you can get for Firefox to do web security assessments. In the past I’ve had to hunt for stuff like this myself, so having it all in one list is handy. Here are the tools mentioned in the article:
Tamper Data
Web Developer
User Agent Switcher
Firebug
SwitchProxy
And the two [...]

Investigating a Linux zombie

17-Sep-07

This blog post details a guy’s ad hoc investigation of a Linux server that was compromised and turned into a zombie. Basically, the “hacker” came in, installed a root kit, an SSH back door, and an IRC bot for command and control. The post gives all the steps that the “investigator” goes through, and provides [...]