Maltego » Home:
"What Is Maltego?
Maltego is an open source intelligence and forensics application. It allows for the mining and gathering of information as well as the representation of this information in a meaningful way.
Coupled with its graphing libraries, Maltego, allows you to identify key relationships between information and identify previously unknown relationships between them. It is a must-have tool in the forensics.security and intelligence fields!
Maltego offers the user with unprecedented information. Information is leverage."
Welcome to the realm. This realm, is not your ordinary realm. Here you will find happenings in the network security world, as well as the underground and the ethical arena.
Tuesday, September 23, 2008
Thursday, September 18, 2008
More Known Unknowns in NSA Spy Controversy: Secret Appeals Courts, Tea Leaves and the Mineshaft Gap | Threat Level from Wired.com
Analysis: New Law Gives Government Six Months to Turn Internet and Phone Systems into Permanent Spying Architecture - UPDATED | Threat Level from Wired.com
Analysis: New Law Gives Government Six Months to Turn Internet and Phone Systems into Permanent Spying Architecture - UPDATED Threat Level from Wired.com:
"A new law expanding the government's spying powers gives the Bush Administration a six-month window to install possibly permanent back doors in the nation's communication networks. The legislation was passed hurriedly by Congress over the weekend and signed into law Sunday by President Bush."
"A new law expanding the government's spying powers gives the Bush Administration a six-month window to install possibly permanent back doors in the nation's communication networks. The legislation was passed hurriedly by Congress over the weekend and signed into law Sunday by President Bush."
NSA to Become America's Firewall | Threat Level from Wired.com
NSA to Become America's Firewall Threat Level from Wired.com:
"The National Security Agency is preparing to take over the job of monitoring the Internet and other domestic communication networks, a massive expansion of the agency's defense duties into networks used routinely by American citizens, according to a story by Siobhan Gorman of the Baltimore Sun."
"The National Security Agency is preparing to take over the job of monitoring the Internet and other domestic communication networks, a massive expansion of the agency's defense duties into networks used routinely by American citizens, according to a story by Siobhan Gorman of the Baltimore Sun."
NSA Must Examine All Internet Traffic to Prevent Cyber Nine-Eleven, Top Spy Says | Threat Level from Wired.com
NSA Must Examine All Internet Traffic to Prevent Cyber Nine-Eleven, Top Spy Says Threat Level from Wired.com:
"The nation's top spy, Michael McConnell, thinks the threat of cyberarmageddon! is so great that the U.S. government should have unfettered and warrantless access to U.S. citizens' Google search histories, private e-mails and file transfers, in order to spot the cyberterrorists in our midst."
"The nation's top spy, Michael McConnell, thinks the threat of cyberarmageddon! is so great that the U.S. government should have unfettered and warrantless access to U.S. citizens' Google search histories, private e-mails and file transfers, in order to spot the cyberterrorists in our midst."
Justice Department Moving to Immunize Snooping Telcos | Threat Level from Wired.com
Justice Department Moving to Immunize Snooping Telcos Threat Level from Wired.com:
"Two months ago, President Bush won congressional approval to immunize the nation's telecommunications companies from lawsuits accusing them of helping Bush funnel Americans' electronic communications to the National Security Agency without warrants -- all in the name of national security following the Sept. 11 terror attacks."
"Two months ago, President Bush won congressional approval to immunize the nation's telecommunications companies from lawsuits accusing them of helping Bush funnel Americans' electronic communications to the National Security Agency without warrants -- all in the name of national security following the Sept. 11 terror attacks."
California Backs Off Real ID - Update | Threat Level from Wired.com
California Backs Off Real ID - Update Threat Level from Wired.com:
"For a short moment Thursday, millions of Californians were in danger of facing pat-downs at the airport and being blocked from federal buildings come May 11."
"For a short moment Thursday, millions of Californians were in danger of facing pat-downs at the airport and being blocked from federal buildings come May 11."
Group Posts E-Mail Hacked From Palin Account -- Update | Threat Level from Wired.com
Group Posts E-Mail Hacked From Palin Account -- Update Threat Level from Wired.com:
"Vice-presidential candidate Sarah Palin's private Yahoo e-mail account was hacked, and some of its contents posted on the internet Wednesday."
"Vice-presidential candidate Sarah Palin's private Yahoo e-mail account was hacked, and some of its contents posted on the internet Wednesday."
Kevin Mitnick Tells All in Upcoming Book -- Promises No Whining | Threat Level from Wired.com
Kevin Mitnick Tells All in Upcoming Book -- Promises No Whining Threat Level from Wired.com:
"Now that the statute of limitations has lifted on many of his crimes -- as well as a seven-year court ban prohibiting him from writing about them (the ban ended midnight on January 28, 2007) -- former hacker Kevin Mitnick is telling his story in a book to be published next year."
"Now that the statute of limitations has lifted on many of his crimes -- as well as a seven-year court ban prohibiting him from writing about them (the ban ended midnight on January 28, 2007) -- former hacker Kevin Mitnick is telling his story in a book to be published next year."
Computer security problems found at IRS - Security- msnbc.com
Computer security problems found at IRS - Security- msnbc.com:
"WASHINGTON - IRS employees ignored security rules and turned over sensitive computer information to a caller posing as a technical support person, according to a government study."
"WASHINGTON - IRS employees ignored security rules and turned over sensitive computer information to a caller posing as a technical support person, according to a government study."
Tuesday, September 16, 2008
Revealed: The Internet's Biggest Security Hole | Threat Level from Wired.com
Revealed: The Internet's Biggest Security Hole | Threat Level from Wired.com:
"Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency.
The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination"
"Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency.
The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination"
Thursday, September 11, 2008
I-Hacked.com Taking Advantage Of Technology - Installing Backtrack3 on an Eee PC
I-Hacked.com Taking Advantage Of Technology - Installing Backtrack3 on an Eee PC:
"**UPDATE**
This tutorial will walk you though the installation of BackTrack 3.0 (FINAL) onto the Eee PC. This is the first of many tutorials using this great platform!"
"**UPDATE**
This tutorial will walk you though the installation of BackTrack 3.0 (FINAL) onto the Eee PC. This is the first of many tutorials using this great platform!"
Secure Computing snaps up user control firm Securify | The Register
Secure Computing snaps up user control firm Securify | The Register:
"Security appliance firm Secure Computing has bought user access monitoring and control firm Securify, in a deal valued at up to $20m ($15m guaranteed in cash and stock, plus an earn-out of up to $5m).
Securify's appliance-based technology allows organisations to control and keep tabs on user access to applications. The technology integrates with Microsoft's Active Directory and features automatic discovery. Once plugged in, it provides alerts of unsanctioned application use and, dependent on policy, automatic blocking of applications or traffic through integration with either networking kit or firewalls."
"Security appliance firm Secure Computing has bought user access monitoring and control firm Securify, in a deal valued at up to $20m ($15m guaranteed in cash and stock, plus an earn-out of up to $5m).
Securify's appliance-based technology allows organisations to control and keep tabs on user access to applications. The technology integrates with Microsoft's Active Directory and features automatic discovery. Once plugged in, it provides alerts of unsanctioned application use and, dependent on policy, automatic blocking of applications or traffic through integration with either networking kit or firewalls."
Mythbusters busted over RFID gagging | The Register
Mythbusters busted over RFID gagging | The Register:
"The co-host of popular science television show Mythbusters has backtracked on claims that the Discovery Channel spiked a planned exploration of RFID security after coming under commercial pressure from credit card companies.
Previously, Mythbusters co-host Adam Savage told delegates at the Hackers on Planet Earth conference in no uncertain terms that a planned segment of the reliability, security and trackability of RFID had been pulled by Discovery. According to this version of events, lawyers for credit card firms jumped on board a conference call to discuss the technology between the Mythbusters team and made it 'clear to Discovery that they were not going to air this episode talking about how hackable this [RFID card] stuff was'."
"The co-host of popular science television show Mythbusters has backtracked on claims that the Discovery Channel spiked a planned exploration of RFID security after coming under commercial pressure from credit card companies.
Previously, Mythbusters co-host Adam Savage told delegates at the Hackers on Planet Earth conference in no uncertain terms that a planned segment of the reliability, security and trackability of RFID had been pulled by Discovery. According to this version of events, lawyers for credit card firms jumped on board a conference call to discuss the technology between the Mythbusters team and made it 'clear to Discovery that they were not going to air this episode talking about how hackable this [RFID card] stuff was'."
Report: IRS networks riddled with vulns, rogue servers | The Register
Report: IRS networks riddled with vulns, rogue servers | The Register:
"The US Internal Revenue Service is putting tax payers at risk by operating thousands of web servers that contain security vulnerabilities or have not received proper authorization, a new report has concluded."
"The US Internal Revenue Service is putting tax payers at risk by operating thousands of web servers that contain security vulnerabilities or have not received proper authorization, a new report has concluded."
CookieMonster nabs user creds from secure sites | The Register
CookieMonster nabs user creds from secure sites | The Register:
"Websites used for email, banking, e-commerce and other sensitive applications just got even less secure with the release of a new tool that siphons users' authentication credentials - even when they're sent through supposedly secure channels."
"Websites used for email, banking, e-commerce and other sensitive applications just got even less secure with the release of a new tool that siphons users' authentication credentials - even when they're sent through supposedly secure channels."
Aanval Intrusion Detection and Correlation Console. - Home
Aanval Intrusion Detection and Correlation Console. - Home
Aanval is the leading web-based snort and syslog interface for correlation, management and reporting. Capable of handling more than 1+ Billion events, Aanval has been protecting Domestic and Foreign Governments, Fortune 50 Enterprises, Global Financial Institutions and local Small Businesses since 2003.
Aanval is the leading web-based snort and syslog interface for correlation, management and reporting. Capable of handling more than 1+ Billion events, Aanval has been protecting Domestic and Foreign Governments, Fortune 50 Enterprises, Global Financial Institutions and local Small Businesses since 2003.
Saturday, September 6, 2008
Most organizations fail to stop interior network threats
Most organizations fail to stop interior network threats:
"A survey by Opine Consulting revealed nearly half of the IT professionals who responded had endpoints connecting to their corporate networks without their knowledge. Yet compared to other security issues, 86 percent of respondents said controlling network access ranked as a high priority. The survey, commissioned by Mirage Networks, reported that network access control solutions are gaining traction vs. more perimeter security technologies to address the problem."
"A survey by Opine Consulting revealed nearly half of the IT professionals who responded had endpoints connecting to their corporate networks without their knowledge. Yet compared to other security issues, 86 percent of respondents said controlling network access ranked as a high priority. The survey, commissioned by Mirage Networks, reported that network access control solutions are gaining traction vs. more perimeter security technologies to address the problem."
Wednesday, September 3, 2008
Configuring IPSec Policies through GPO
Configuring IPSec Policies through GPO:
"As written in previous articles (see related articles at bottom of page), Windows 2000/XP/2003 machines have a built-in IP security mechanism called IPSec (IP Security). IPSec is a protocol that’s designed to protect individual TCP/IP packets traveling across your network by using public key encryption. Besides encryption, IPSec will also let you protect and configure your server/workstation with a firewall-like mechanism."
"As written in previous articles (see related articles at bottom of page), Windows 2000/XP/2003 machines have a built-in IP security mechanism called IPSec (IP Security). IPSec is a protocol that’s designed to protect individual TCP/IP packets traveling across your network by using public key encryption. Besides encryption, IPSec will also let you protect and configure your server/workstation with a firewall-like mechanism."
Subscribe to:
Posts (Atom)
About Me
Blog Archive
-
►
2009
(47)
-
►
June
(11)
- One Hacker's Audacious Plan to Rule the Black Mark...
- Superhacker Max Butler Pleads Guilty | Threat Leve...
- Pentagon signs off on Cyber Command
- Lifehacker - Geek to Live: Encrypt your data - Dow...
- L0phtCrack - Windows & Unix Password Auditing & Re...
- L3DGEWorld 2.3
- IT Security - The Industry's Web Resource
- Home | Learn Security Online
- Top Five (5) Best Criminal Computer Hackers of All...
- 5 Best Pen-Test Linux Distributions | LinuxHaxor.n...
- Hacker penetrates T-Mobile systems
-
►
April
(15)
- Swedish courts find The Pirate Bay guilty
- Electricity Grid in U.S. Penetrated By Spies - WSJ...
- Behind GhostNet - F-Secure Weblog : News from the ...
- I-Hacked.com Taking Advantage Of Technology - Insi...
- I-Hacked.com Taking Advantage Of Technology - Twit...
- FOXNews.com - Cyberspies Penetrate U.S. Electrical...
- Tenable Network Security
- Using NMAP to detect Conficker infected hosts | Th...
- PaulDotCom
- ha.ckers.org web application security lab
- Conficker - Wikipedia, the free encyclopedia
- An Analysis of Conficker C
- Passwords used by the Conficker worm | Graham Clul...
- Open Source Honeypots: Learning with Honeyd
- IDS Logbook [OS3 Website]
-
►
March
(12)
- Main Page - Business Continuity Management (BCM) a...
- The 20 Best Job Search Web Sites - Features by PC ...
- California Virtual Campus » Students » CVC Course ...
- PayPal Security Key - PayPal
- The Ethical Hacker Network - EC-Council validity
- Run Away From The CEH Certification
- InformIT: On the EC-Council's Certified Ethical Ha...
- GIAC Certifications
- Top 5 open source security tools in the enterprise...
- Hack-off contestant dubs Apple Safari 'easy pickin...
- The Register: Sci/Tech News for the World
- Been away!
-
►
June
(11)
-
▼
2008
(119)
-
▼
September
(23)
- Maltego » Home
- More Known Unknowns in NSA Spy Controversy: Secret...
- Analysis: New Law Gives Government Six Months to T...
- NSA to Become America's Firewall | Threat Level fr...
- NSA Must Examine All Internet Traffic to Prevent C...
- Justice Department Moving to Immunize Snooping Tel...
- California Backs Off Real ID - Update | Threat Lev...
- Group Posts E-Mail Hacked From Palin Account -- Up...
- Kevin Mitnick Tells All in Upcoming Book -- Promis...
- Mitnick Security Consulting, LLC
- Computer security problems found at IRS - Security...
- Revealed: The Internet's Biggest Security Hole | T...
- I-Hacked.com Taking Advantage Of Technology - Inst...
- IPhone Takes Screenshots of Everything You Do | Ga...
- Secure Computing snaps up user control firm Securi...
- Mythbusters busted over RFID gagging | The Registe...
- Report: IRS networks riddled with vulns, rogue ser...
- CookieMonster nabs user creds from secure sites | ...
- Aanval Intrusion Detection and Correlation Console...
- Most organizations fail to stop interior network t...
- Create a certificate rule: Security Policy; Securi...
- Configuring IPSec Policies through GPO
- Google Chrome Remote Denial of Service Vulnerabili...
-
▼
September
(23)
Tags
- Backtrack (3)
- Cain Abel (1)
- Eee PC (1)
- fgdump (2)
- finger printing (1)
- fingerprinting (1)
- Hping2 (1)
- Linux (2)
- metasploit (6)
- netcat (2)
- news (16)
- nmap (5)
- Ophcrack (1)
- password cracking (5)
- RainbowCrack (3)
- rdp (1)
- Snort (2)
- tcpdump (1)
- training (25)
- vulnerabilities (12)
- WiFi (1)
- xprobe2 (1)