Hashcat is an advanced GPU hash cracking utility that includes the World’s fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker. It also has the first and only GPGPU-based rule engine, focuses on highly iterated modern hashes, single dictionary-based attacks, and more. This is the binary release.
Monthly Archives: January 2017
FTC Sues D-Link Over Failure to Secure Its Routers and IP Cameras from Hackers
Image Source: Book – Protect Your Windows Network from Perimeter to Data
The United States’ trade watchdog has sued Taiwan-based D-link, alleging that the lax security left its products vulnerable to hackers.
The Federal Trade Commission (FTC) filed a lawsuit (pdf) against D-Link on Thursday, arguing that the company failed to implement necessary security protection in its routers and
CarolinaCon 2017 Call For Papers
CarolinaCon is now accepting speaker/paper/demo submissions for its 13th annual conference. This event will be held May 19th through the 21st, 2017 in Raleigh, NC, USA.
Proxmark Iceman Fork 1.6.7
This is a custom firmware written for the proxmark3. It extends the currently available firmware (revision 2.3.0) to support brute force attacks against proximity card access control systems.
Hackers Are Holding More Than 1,000 Databases For Ransom
FTC Files Lawsuit Against D-Link For Security Flaws
Top US Intelligence Official Calls Fake News A 'Grave Concern'
Netgear Unveils World's Easiest Bug Bounty
Local File Inclusion (LFI) Testing Techniques
The intent of this document is to help penetration testers and students identify and test LFI vulnerabilities on future penetration testing engagements by consolidating research for local file inclusion LFI penetration testing techniques. LFI vulnerabilities are typically discovered during web app penetration testing using the techniques contained within this document. Additionally, some of the techniques mentioned in this paper are also commonly used in CTF style competitions.
Intuit QuickBooks Desktop 2017 Credential Disclosure
Intuit QuickBooks Desktop 2017 suffers from an administrative credential disclosure vulnerability.