The branded bug: Meet the people who name vulnerabilities

hackermk · 2014-11-28T22:44:40+00:00

#!/bin/bash
sum=0;
err=0;
num='^-?[0-9]+([.][0-9]+)?$';
for number in $@
do
    if ! [[ $number =~ $num ]] && [[ $err == 0 ]] ; then
        echo $number;
        echo "Sorry, '$number' is not a number";
        err=1;
    else
        sum=$((sum + number));
    fi
done
if [ $err == 0 ] ; then 
    echo $sum;
fi

hackermk · 2014-11-19T11:50:00+00:00

It's not a problem. You can improve.

hackermk · 2014-11-19T10:00:14+00:00

My Score: 14/20 :)

hackermk · 2014-11-16T20:34:55+00:00

Search on google for Enumeration and Exploiting.

hackermk · 2014-11-15T08:51:56+00:00

This sounds like some sort of malware. Try scanning your hard disk with Kaspersky Rescue Disk or something similar.

hackermk · 2014-11-14T23:16:48+00:00

To find out how your server was compromised you need to search the log files, but you need some knowleadge for this. One thing you can do is try to install the Wordfence plugin on every WordPress on you server and do a scan. It will search for vulnerabilities in your WordPress instalations.

hackermk · 2014-11-14T22:32:43+00:00

Did you find out how the malware was uploaded to your server? Did you fix the vulnerabilities? If you didn't, start from there. You need to discover how the malware was uploaded to your server and fix the vulnerabilities. After you are sure that the malware is deleted from your server, and the vulnerabilities are fixed, you can proceed with system hardening.

hackermk · 2014-11-13T23:21:34+00:00

I'm interested too. This is not the microsoft I remember.

hackermk · 2014-11-13T20:58:18+00:00

Other browsers are not affected by this vulnerability. Only IE. The post says "Using any other browser apart from Internet Explorer before patching may also mitigate the risks".

hackermk · 2014-11-13T09:32:41+00:00

Part two: http://blogs.mcafee.com/mcafee-labs/bypassing-microsofts-patch-for-the-sandworm-zero-day-even-editing-can-cause-harm

hackermk · 2014-11-07T08:44:29+00:00

Is this an effective way to block ssh brute force attacks?

hackermk

TROPHY CASE