3 - AppSec Ezine
█████╗ ██████╗ ██████╗ ███████╗███████╗ ██████╗
███████╗███████╗██╗███╗ ██╗███████╗
██╔══██╗██╔══██╗██╔══██╗██╔════╝██╔════╝██╔════╝
██╔════╝╚══███╔╝██║████╗ ██║██╔════╝
███████║██████╔╝██████╔╝███████╗█████╗ ██║ █████╗
███╔╝ ██║██╔██╗ ██║█████╗
██╔══██║██╔═══╝ ██╔═══╝ ╚════██║██╔══╝ ██║ ██╔══╝
███╔╝ ██║██║╚██╗██║██╔══╝
██║ ██║██║ ██║ ███████║███████╗╚██████╗
███████╗███████╗██║██║ ╚████║███████╗
╚═╝ ╚═╝╚═╝ ╚═╝ ╚══════╝╚══════╝ ╚═════╝
╚══════╝╚══════╝╚═╝╚═╝ ╚═══╝╚══════╝
Week: 7 | Month: February | Year: 2014 | Release Date:
14/02/2014 | Edition: 3º
' ╔╦╗┬ ┬┌─┐┌┬┐ ╔═╗┌─┐┌─┐
' ║║║│ │└─┐ │ ╚═╗├┤ ├┤
' ╩ ╩└─┘└─┘ ┴ ╚═╝└─┘└─┘
' Something that really worth your time!
URL: [Link]
[Link]
Description: How I hacked Github again. (Github lover!)
URL: [Link]
Description: How I hacked Instagram to see your private photos.
URL: [Link]
[Link]
Exploit: [Link]
492c38abb3eeba91#lq9B8AcoODREYhc8FExMI0ZaTHLl7DEsrIEqVdCfHjY
=
Description: CVE-2014-0050 - Exploit with Boundaries, Loops without
Boundaries. (Nice Writeup!)
' ╦ ╦┌─┐┌─┐┬┌─
' ╠═╣├─┤│ ├┴┐
' ╩ ╩┴ ┴└─┘┴ ┴
' Some Kung Fu Techniques/Tools.
URL: [Link]
[Link]
Description: The Recycle Bin in Windows Vista/7. Old but handy...
URL: [Link]
Description: Application Server Attack Toolkit (Automation: fingerprinting,
reconnaissance, and exploitation phases).
URL: [Link]
Description: A very simple browser fuzzer based on tornado.
URL: [Link]
Description: [Link] is a webkit web client written in python.
URL: [Link]
Description: Control Google Chrome from the command line on OS X.
(This can be handy :))
URL: [Link]
Description: OpenSSH Patch to Log Passwords.
' ╔═╗┌─┐┌─┐┬ ┬┬─┐┬┌┬┐┬ ┬
' ╚═╗├┤ │ │ │├┬┘│ │ └┬┘
' ╚═╝└─┘└─┘└─┘┴└─┴ ┴ ┴
' All about security issues/problems.
URL: [Link]
Description: UDP-based Amplification Attacks.
URL: [Link]
exploit
Description: When Random Isn't Random Enough: Lessons from an Online
Poker Exploit.
URL: [Link]
[Link]
Description: Hacking the ZTE router ZXV10 W300 v2.1 (SNMP Still Alive
and Valid!)
URL: [Link]
Description: Shmoocon (January 17-19, 2014) @Washington Hilton. This
collection contains all recorded main area talks at the event.
URL: [Link]
Description: Cracking Linksys "Encryption". (No comments...)
' ╔═╗┬ ┬┌┐┌
' ╠╣ │ ││││
' ╚ └─┘┘└┘
' Spare time?
URL: [Link]
Description: NBC - All Visitors to Sochi Olympics Immediately Hacked!
(rofl)
This is not a Movie: [Link]
[Link]
URL: [Link]
brother-and-refuses-to-be-fingerprinted/article/370009
Description: 13-year-old defies ‘big brother’ and refuses to be
fingerprinted. (🐵 Monkey see monkey do! or not)
' ╔═╗┬─┐┌─┐┌┬┐┬┌┬┐┌─┐
' ║ ├┬┘├┤ │││ │ └─┐
' ╚═╝┴└─└─┘─┴┘┴ ┴ └─┘
' Content Helpers (0x)
52656e61746f20526f64726967756573202d204073696d7073306e202d
20687474703a2f2f706174686f6e70726f6a6563742e636f6d