The hack was first demonstrated in Sydney in 2006 but the code was only made available lately.
The hack involves the following:
Python Exploit Code + Access to a Windows Machine via Firewire = Ownage of the Windows machine! See the video below for a demonstration:
Hi-Res video can be found on youtube:
http://www.youtube.com/watch?v=5N-C5s_07Ts&fmt=18
Still don't get it? Then visit:
http://storm.net.nz/projects/16
For an interview with the coder (Adam Boileau) please visit:
http://www.itradio.com.au/security/
Sunday, March 16, 2008
Subscribe to:
Post Comments (Atom)
NEWS FEEDS:
MySecured.com
- iPhone Activate, Jailbreak & 2.0 Software 2G Unlock, Activate, Jailbreak - Jul 20, 2008
- Wipe the iPhone - Methods Roundup! - Jun 16, 2008
- USB Based Portable Security Devices from MXI Security - Video - May 21, 2008
- Refurbished iPhone Reveals Previous Customer’s Data - May 19, 2008
- iPhone Application Source List - Apr 14, 2008
DAILY INFO SEC
- Blogs - The Dark Visitor: Podcast Number One - Jul 26, 2008
- Blogs - The Dark Visitor: Chinese hackers assist Trend Mirco with virus cleaning tool…forget to inform Trend Micro - Jul 26, 2008
- Blogs - Schneier On Security: Friday Squid Blogging: Burning Squid - Jul 26, 2008
- Blogs - Jeremiah Grossman: Results: Web Application Security Professionals Survey (July 2008) - Jul 25, 2008
- Blogs - Schneier On Security: Schneier Interviewed by RU Sirius - Jul 25, 2008
DARKNET
- Exploit for Kaminsky DNS Bug Goes Wild - Jul 25, 2008
- MoocherHunter - Detect & Track Rogue Wifi Users - Jul 24, 2008
- San Fransisco Mayor Regains Control of the Network - Jul 23, 2008
- TSGrinder - Brute Force Terminal Services Server - Jul 22, 2008
- San Fransisco Officials Locked Out of Their Own Network - Jul 21, 2008
CGISecurity
- DNS Vulnerability Leaked By Matasano Security After Being Asked Not To By Vulnerability Discoverer
- Spring Framework vulnerabilities
- GRSecurity Author Outlines Lack of Full Vulnerability Disclosure by Linux Kernel Developers
- Breaking the Bank (Vulnerabilities in Numeric Processing within Financial Applications)
- Fallout From the Fall of CAPTCHAs
WEB SEC
ArsTechnica:
- Journals week in review: Apple news from Infinite Loop - Jul 26, 2008
- New DNS exploit now in the wild and having a blast - Jul 26, 2008
- Report: size doesn't matter when it comes to cybercriminals - Jul 25, 2008
- PageRank-like algorithm creates predictive malware blacklist - Jul 25, 2008
- Researcher points out new iPhone URL spoofing flaw - Jul 24, 2008
Help Net Sec
- Security World: Malicious spam campaigns continues with Rustock botnet - Jul 26, 2008
- Security World: Security flaws in online banking sites - Jul 25, 2008
- Virus Center: Get rid of malware with F-Secure Rescue CD - Jul 25, 2008
- Security World: New book: "Google Apps: The Missing Manual" - Jul 25, 2008
- Security World: New high-end home chip and PIN security solution - Jul 25, 2008
The Spanner
- Hackvertor discussion - Jul 16, 2008
- Javascript protocol fuzz results - Jun 30, 2008
- Javascript protocol fuzzer - Jun 25, 2008
- XSS tag fuzzer - Jun 18, 2008
- Firefox applet fun - May 20, 2008
POLITECH
- Politicians push for mandatory data retention laws, bipartisanly - Apr 24, 2008
- Who'd make the most technology-friendly president? Discuss. - Jan 31, 2008
- Judge rules defendant can't be forced to divulge PGP passphrase - Dec 15, 2007
- ITU botnet paper published in draft form, comments requested - Nov 26, 2007
- David Burt and his Filtering Facts Web site are back - Nov 26, 2007
HACK A DAY
- RGB LED cylinder - Jul 27, 2008
- Boxee available for Ubuntu - Jul 27, 2008
- Adeona: An open source laptop tracking system - Jul 26, 2008
- Five plugins and tips to secure your Wordpress blog - Jul 26, 2008
- Honeybike: bicycle thief honeypot - Jul 26, 2008
UAE TECH NEWS
CRIME
HACKING IN THE NEWS
- Personal information accidentally publicly revealed on Facebook
- MicroWorld announces MailScan 5.6 for Mail Servers
- Banking Trojan distributed via fake Formula One star accident
- Finjan outlines the latest developments in the cybercrime commercialization economy
- AltioLive helps firms meet securities trading and anti-money laundering regulations
HACKING NEWS TICKER
Past Polls
How do you rate the UAE Hackers Website?
Do you think that website defacements are an issue for UAE websites?
2 comments:
Higher resolution version of this video: http://www.youtube.com/watch?v=5N-C5s_07Ts&fmt=18
Thanks for that Hubert :)
Post a Comment