.:[ packet storm ]:.
                           
trust nothing
trust nothing

 ///  Recent News Headlines
May 21, 2009  - Security Focus
Adobe Moves To Quarterly Patch Schedule
May 21, 2009  - The Register
DDoS Attack Chokes Chinese Net Surfing
May 21, 2009  - NewsMax
Palin E-Mail Hacker Trying New Defense
May 21, 2009  - Lexington Herald-Leader
Virginia Hacker Might Affect Florida Bill For Prescription Monitoring
May 21, 2009  - Vnunet
Twitter Users Warned Of New Phishing Scam

 ///  Consistently Random
May 21, 2009
 Suggested Listening
 Artist: Yahel
 Track: Devotion
May 21, 2009
 Random Quote
Those who survived the San Francisco earthquake said, "Thank God, I'm still alive." But, of course, those who died, their lives will never be the same again. - Sen. Barbara Boxer, (D, Calif.)
May 21, 2009
 Know The Law
It is illegal for a mother to give her daughter a perm without a state license in Nebraska. In Waterloo, Nebraska, barbers are forbidden from eating onions between 7am and 7pm. In Omaha, Nebraska, barbers are forbidden form shaving their customers chests.

 ///  Quick Links
This Month's Advisories This Month's Exploits Last Month's Advisories Last Month's Exploits

 ///  Voting Topic
August 16, 2007
What is the most fun to exploit?
Buffer Overflows
SQL Injection Flaws
Remote/Local File Inclusion Flaws
Cross Site Scripting Flaws
Format String Attacks
Human Stupidity

 ///  Featured Files
May 21, 2009
 javax.tgz   (4 KB) Mac OS X Java applet deserialization proof of concept exploit. Related advisory here. Authored By str0ke...
[ More Info ]
May 13, 2009
 fwknop-1.9.11.tar.gz   (608 KB) fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific...
[ More Info ]
May 07, 2009
 cryptmount-4.0.tar.gz   (382 KB) cryptmount is a utility for creating and managing secure filing systems on GNU/Linux systems. After initial setup, it allows any user to mount or unmount filesystems on demand, solely by providing the...
[ More Info ]
May 05, 2009
 mobiusft-0.4.5.tar.gz   (574 KB) Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are define...
[ More Info ]

 ///  Site Updates
May 02, 2009
 Exploits for April, 2009 Posted

All 300 exploits for April, 2009 have been posted in one compressed archive.
 
http://packetstormsecurity.org/0904-exploits/0904-exploits.tgz
 
Ongoing
 Support Your Region
To further ensure global accessibility of full disclosure security information, we are looking for mirror offers in the following regions:
 
  • Middle East
  • Asia
  • Australia
  • Africa


    • Please check out the qualifications listed here if you want to help out:
     http://packetstormsecurity.org/about/#mir.
     

     ///  Help Support Full Disclosure
    Ongoing
     Send A Donation Packet Storm is dedicated to supporting the computer security community without bias. In doing so, we are completely non-profit and could always use some help. If you feel like making a donation, please do.



    		Ongoing
     Packet Storm T-Shirts J!NX has shirts available here. Please pick one up today to support the full disclosure movement! They can now be shipped overseas if they are purchased via paypal.



     ///  Last 10 Files
    1. :· flashquiz-sql.txt
    2. :· groupwise-xss.txt
    3. :· zaocms-disclose.txt
    4. :· zaocms-insecure.txt
    5. :· articledir-blindsql.txt
    6. :· MDVSA-2009-121.txt
    7. :· MDVSA-2009-120.txt
    8. :· articledirectory-sql.txt
    9. :· jobscript-upload.txt
    10. :· Reverse_Engineering.pdf
    [ Last 20 | Last 50 | Last 100 ]

     ///  Last 10 Advisories
    1. :· MDVSA-2009-121.txt
    2. :· MDVSA-2009-120.txt
    3. :· DDIVRT-2009-25.txt
    4. :· 05.19.09-1.txt
    5. :· cisco-sa-20090520-cw.txt
    6. :· dsa-1804-1.txt
    7. :· dsa-1803-1.txt
    8. :· macosxjava-poc.txt
    9. :· USN-777-1.txt
    10. :· ZDI-09-023.txt
    [ Last 20 | Last 50 | Last 100 ]

     ///  Last 10 Exploits
    1. :· flashquiz-sql.txt
    2. :· groupwise-xss.txt
    3. :· zaocms-disclose.txt
    4. :· zaocms-insecure.txt
    5. :· articledir-blindsql.txt
    6. :· articledirectory-sql.txt
    7. :· jobscript-upload.txt
    8. :· aspinlinecc-sqlxss.txt
    9. :· vicidial-sql.txt
    10. :· chinagames-exec.txt
    [ Last 20 | Last 50 | Last 100 ]

     ///  Last 10 Tools
    1. :· pdfresurrect-v0_5.tar.gz
    2. :· ProxyHarvest.txt
    3. :· mandos_1.0.10.orig.tar.gz
    4. :· darkTouch.txt
    5. :· rsbac-common-2.6-1.4.2.tar.bz2
    6. :· draugr.tar.gz
    7. :· httpsScanner-1.1.tgz
    8. :· ratproxy-1.58.tar.gz
    9. :· truecrypt-6.2-source.tar.gz
    10. :· fwknop-1.9.11.tar.gz
    [ Last 20 | Last 50 | Last 100 ]

     ///  Last 10 Misc
    1. :· Reverse_Engineering.pdf
    2. :· AppsecEU09_CarettoniDiPaola_v0.8.pdf
    3. :· pbania-spiderpig2008.pdf
    4. :· md5db11.txt
    5. :· linuxbind-shellcode.txt
    6. :· freebsdx86-shellcode.txt
    7. :· xcon2009-cfp.txt
    8. :· ie8-utf7.txt
    9. :· native_thread_injection.pdf
    10. :· libntlm-1.1.tar.gz
    [ Last 20 | Last 50 | Last 100 ]


     .:. TopPrivacy Statement | Copyright Notice