Archive for May 2010

Plain Text Password Disclosure vulnerability in rediff mail

Dear all

is it a good mail?what do you feel guys?.It doesn't encrypting your
passwords


POST /cgi-bin/login.cgi HTTP/1.1

Host: mail.rediff.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3)
Gecko/20090824 Firefox/3.5.3

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-us,en;q=0.5

Accept-Encoding: gzip,deflate

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7

Keep-Alive: 300

Connection: keep-alive

Referer: http://www.rediff.com/

Cookie: RuW=1252586041360329; RsW=IND;
RLOC=%5F%5FeZMqPfDceMg%5F%5F4P6Xdf5DkD2%5F%5FtHonjGX8AnI%5F%5Find%5F%5F;
Rt=%3D%3DAMwAjN3czN; accounttype=77;
Rp=g%3D2%26a%3D24%26c%3D08%26s%3D29%26cn%3D099%26z%3D123456%26p%3D034%26e%3D05%26d%3D_04%26i%3D_35_%26dor%3D20060220%26mi%3D3;
RMID=7c7dc92f4aa8f200; RMFS=011MljEWU107fl; app_lang=; ckey=70795
Content-Type: application/x-www-form-urlencoded
Content-Length: 63
login=evil.devil&passwd=*devil.evil*&remember=1&FormName=existing


Regards
kalyan

Full disclosure:http://seclists.org/fulldisclosure/2009/Sep/85
Saturday, May 29, 2010
Posted by Blogger

Packet capture analysis

Packet capture is the act of capturing data packets crossing a network

Best Offline analyze tools

1.Wireshark formly ethreal

Best online packet capture analyze tools

1.Pcapr-www.pcapr.net

Best packet capture samples

1.Evilfingers security community-https://www.evilfingers.com/projects/pcaps.php
2.Wireshark-http://wiki.wireshark.org/SampleCaptures
3.Packet life-http://packetlife.net/captures/
Posted by Blogger

How to read windows memory dump?

Normaly microsoft based system will create dump file during BSOD(Blue screen of death)
It is will create with *.DMP

How to read the file?

Install the debugging tools
To download and install the Windows debugging tools, visit the following Microsoft Web site:
http://www.microsoft.com/whdc/devtools/debugging/default.mspx (http://www.microsoft.com/whdc/devtools/debugging/default.mspx)
Select the Typical installation. By default, the installer installs the debugging tools in the following folder:
C:\Program Files\Debugging Tools for Windows

Open the dump file

To open the dump file after the installation is complete, follow these steps:

1. Click Start, click Run, type cmd, and then click OK.
2. Change to the Debugging Tools for Windows folder. To do this, type the following at the command prompt, and then press ENTER:
cd c:\program files\debugging tools for windows
3. To load the dump file into a debugger, type one of the following commands, and then press ENTER:
windbg -y SymbolPath -i ImagePath -z DumpFilePath
kd -y SymbolPath -i ImagePath -z DumpFilePath

Check out
http://support.microsoft.com/kb/315263
Posted by Blogger

Checking Microsoft Fixit Center

Microsoft Fix it Center makes getting support easier than ever, with tools that help solve the issues you have now and prevent new ones.

* Easy to Install and Run: Easy-to-use wizards will guide you through the set-up process and help you anytime you need support.
* Automated: With automated troubleshooters, Fix it Center helps solve issues with your PC, even if you're not sure what the exact problem is. Fix It Center scans your device to diagnose and repair problems, then gives you the option to "Find and fix" or to "Find and report.
* Preventive Care: By helping you find and fix issues before they become real problems, Fix it Center helps keep your PC running smoothly and automatically downloading the latest solutions

You can use any computer with Internet connection to get started with Fix it Center. Simply download the Fix it Center client and follow the on-screen instructions to complete the setup. You can install Fix it Center client on as many PCs you like


I got error what to do?
Saturday, May 15, 2010
Posted by Blogger

Hello World!

Each & Every person who want knows about the Software programmer world,This word is very important.

It is the simplest program to

It is a first step to kick start your programming Life

A "hello world" program has become the traditional first program that many people learn
Posted by Blogger

Popular Post

- Copyright © 2013 கல்யாணகுமார் -Metrominimalist- Powered by Blogger - Designed by Johanes Djogan -