base under attack
ethical hacking, penetration testing, IT security and other news

Archive for the 'News' Category

Yahoo! Captcha Broken.

Saturday, February 2nd, 2008

A group of Russian hackers has broken Yahoo’s Captcha (a computer program can read it). It has about 35% accuracy, which is somewhat low, but enough when considering that the program could be run hundreds of thousands of times per day.
Although many Captchas have been broken before using computer vision techniques, this is, to my [...]

Nmap 4.50 Released

Tuesday, December 18th, 2007

Insecure.org has announced the release of Nmap 4.50. There have been a significant amount of changes since 4.00 (and even 4.20). Among these include a new scripting engine, 2nd generation OS detection (and tons of new signatures for OS’s and service versions), and a new GUI. NmapFE has been dumped and replaced with a [...]

Backtrack 3 Beta Released!

Tuesday, December 18th, 2007

Remote-exploit.org stuck to their word and released the Backtrack 3 Beta on schedule. There are a ton of new features and improvements in this version.
I will be posting a review of some of the new features once I finish testing it out. I will most likely not be covering any more automated wireless cracking tools [...]

Tor used to steal embassy passwords

Wednesday, September 12th, 2007

Tor is a anonymity system based on so-called “onion routing”. It is supposed to allow for anonymous web-browsing, instant messaging, file transfer, and more. It does this by creating virtual tunnels between you and your destination, over the Tor network. The information sent over the Tor network is encrypted and its origin is very difficult [...]

100 Foreign Embassy Email Passwords Published

Friday, August 31st, 2007

Dan Egerstad, a Swedish security consultant, has discovered a vulnerability that has given him access to passwords for thousands of email accounts belonging to foreign embassies around the world. After attempting to contact some of the victims and receiving no response, he made the decision to publish 100 of these passwords on a blog.
Egerstad claims [...]

Security tools now illegal in Germany

Tuesday, August 14th, 2007

New German anti-hacking laws, in effect as of Sunday, have made it illegal to possess, create, or distribute hacking tools (aka security tools) that could be used to commit crimes. Vague wording makes this potentially include things like nmap and Nessus, which can just as well be used for ethical hacking purposes. And I’m sure [...]