Below is a list of US governmental websites which were defaced by crackers - or elite hackers as the media would say - since 26th of June 07 until late February 2008. It is quite interesting to know that most of the security vulnerabilities affecting the following *.gov websites are known for some years now.

Read More » » »

I know I haven’t posted on this blog for a long time, you can tell that! Other important projects in digital and real life kept me really busy. Soon enough will join the navy for a 9 months period, though will keep on blogging whenever I have free time. If you would like to contribute or suggest improvements for this blog, then please do not hesitate to e-mail me with the following details:

Full name:
Handle:
Nationality:
Security projects participated/currently participating:
Programming knowledge:
Certifications if any:

Thank you,
d1m

Arley Silveira has released the 1 year anniversary version of TXDNS. Very soon he will release the version 2.2 of TXDNS.

This release implements DNS queries against multiple DNS servers, a more efficient threading algorithm and some minor bug fixes.

Read More » » »

Tim Brown from Nth Dimension has coded a cool password brute forcer for SSH called SSHatter.

It is multi threaded and can audit more than one system and account in a given session.

Download SSHatter-0.2

Through the following post I am not purposing to influence you to start defacing, but to briefly give you a better understanding of how and why it is done.

Almost everyday I visit Zone-H’s archive of special digital attacks, I find that at least 1 or 2 attacks were done against US governmental web servers. The domain suffix of the defaced websites was *.gov. Does this fact means that they are totally secure? I don’t think so… Obviously the web servers may host very confidential data. In this case the web server administrators seemed to have allowed threats against governmental assets. Any unwanted consequences that a breach of security can lead to, are mainly caused by the irresponsibility and lazyness of system administrators and web developers.

Read More » » »