SpiderFoot is an open source intelligence automation tool. Its goal is to automate the process of gathering intelligence about a given target, which may be an IP address, domain name, hostname or network subnet. SpiderFoot can be used offensively, i.e. as part of a black-box penetration test to gather information […]
The FBI has managed to unlock the iPhone of the San Bernardino gunman without Apple’s help, ending a court case, the US justice department says. Apple had been resisting a court order issued last month requiring the firm to write new software to allow officials to access Syed Rizwan Farook’s […]
A large Los Angeles hospital chose to pay hackers who were holding its computer network hostage, a move its CEO said was in its best interest and the most efficient way to end the problem. Hollywood Presbyterian Medical Center showed uncommon transparency in saying Wednesday that it paid the 40 bitcoins […]
I have recently found a vulnerability on my Netgear Managed Switch I use at home. Its an information disclosure vulnerability. Basically the web management application fails to restrict URL access to different application areas. Remote, unauthenticated attackers could exploit this issue to download the device’s startup-config, which contains administrator credentials in encrypted form. […]
LastPass and ProtonMail how to guide If your like me, you have many many many password to keep track of. Impossible! This needs a password manager. Step in to the light LastPass! I’m not going to explain that LastPass is as I will assume you will know already or will […]
Attackers can bypass controls to distribute malware. eBay has refused to fix a major flaw in its online sales platform that is being used to target Android, iOS and Windows users with malware, according to security firm Check Point. The company today published details of a “severe vulnerability” it said […]
GOOGLE’S SECURITY street gang Project Zero has been kicking sand in the face of Malwarebytes and picking the firm’s protection precautions apart. Malwarebytes usually wears the boot in this kind of thing, but Project Zero has taken a punt in the security firm’s direction and accused it of all sorts […]
Asda, the second largest supermarket in the UK by market share, reportedly failed to patch a vulnerability in its online grocery store that exposed customers’ personal information and payment details for nearly two years. Information security consultant Paul Moore estimates that over 19 million transactions were potentially at risk in […]
I wanted to make a point to someone and show how easy it is to get hacked… This is how it started, so let me give you a brief understanding on it. So in general when you’re on Facebook, you see an article about something, you click on the link […]
Oracle on Wednesday announced specific plans to kill the Java browser plugin and has advised users to start migrating to other technologies. In the old days, advanced Web features were only available in browsers via plugins leveraging the Netscape Plugin Application Programming Interface (NPAPI), the most popular applications being Java, […]
LG today released a security update for some of its latest smartphones to resolve a severe vulnerability found in the Smart Notice application. Introduced by LG in 2014, along with the flagship LG G3, the Smart Notice application comes pre-loaded on all new LG smartphones, and was designed to display notifications […]
Welcome back to the RedPacket Security website. An important milestone for Offensive Security has come with the first public release of Kali Linux rolling distribution. Kali switched to a rolling release model back when they hit version 2.0 (codename “sana”), however the rolling release was only available via an upgrade from 2.0 […]
So I have fired up a VM of Ubuntu and typed the following I soon found out that on a vanilla install GO want installed. So to fix this I did ant apt-get install to get GO installed. Type y and wait for it to download and install. Once that has […]
A security researcher has claimed that Mikey-Sakke, the security protocol behind the GCHQ-developed Secure Voice encryption standard, has a built-in backdoor that allows the UK spy agency to intercept and snoop on phone calls. The findings come from Dr Steven Murdoch of University College London, who published a […]
So I have had my kippo honeypot running for a while and got some pretty good statistics from it. But after a while I got bored and turned it all off. I decided to fire it back up again and got some interesting hits from 125.88.177.248. It seems to be trying […]