Exploit-DB updates

Wednesday, January 5, 2011

Toxic Animal Feed Contaminates Food


Chromium-6 Toxin Polluting U.S. Tap Water

According to a recent study, the cancer-causing chromium-6 compound has been found polluting tap water in 31 U.S. cities. Approximately 74 million Americans in 42 states consume water that is polluted with the chromium-6 chemical.

Chromium-6, aka hexavalent chromium, came to be well known to the public from the 2000 biographical film Erin Brockovitch. Chromium-6 comes from industrial processes and facilities used to manufacture pigments, dyes, and chrome plating. It is also frequently discharged from steel and pulp mills.

The EPA does not currently regulate chromium-6 specifically, but total chromium threshold is set at 100 ppb to protect against skin irritation. The EPA is expected to determine if a new level will set sometime this year.

Sunday, January 2, 2011

ArpON - Protect yourself from MITM attacks.

ArpON (Arp handler inspectiON) is a portable handler daemon that make ARP secure in order to avoid the Man In The Middle through ARP Spoofing/Poisoning. It detects and blocks also Man In The Middle through ARP Spoofing/Poisoning for DHCP Spoofing, DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.

This is possible using two kinds of anti ARP Poisoning tecniques: the first is based on SARPI or "Static Arp Inspection" the second on DARPI or "Dynamic Arp Inspection" approach. SARPI and DARPI protects both unidirectional, bidirectional and distributed attacks.

Here's a very quick example of it's usage, we will use SARPI.

arpon -n 10 -g -u 1 -s -i eth0
 
  ArpON "Arp handler inspection" version 1.90 (http://arpon.sourceforge.net)

  [00/02/2011 - 08:32:04 PST] Device: (eth0) MAC: 0:24:21:66:9:5a Inet4: 192.168.1.101 Netmask: 255.255.255.0


  [00/02/2011 - 08:32:04 PST] Device: (eth0) MAC: 0:24:21:66:9:5a Inet4: 192.168.1.101 Netmask: 255.255.255.0
  [00/02/2011 - 08:32:04 PST] SARPI Start...
  [00/02/2011 - 08:32:04 PST] SARPI protects these Arp Cache's entries:
  [00/02/2011 - 08:32:04 PST] 1)     192.168.1.1 ->  0:66:78:d6:92:c8
  [00/02/2011 - 08:32:04 PST] SARPI Arp Cache refresh timeout: 1 minute.
  [00/02/2011 - 08:32:04 PST] SARPI Realtime Protect actived!


-n 10 ~ Sets priority   

-g ~ Works in logging mode
-u 1 ~ Sets sarpi timeout to 1 minute 
-s ~ Manage arp cache statically

You can get ArpON with the apt-get command or visit here

Saturday, January 1, 2011

Dictionary pack for bruteforcing

Here's a pack of dictionaries I've accumulated, covers a good amount of words.

You can download them here - http://www.mediafire.com/?sdfubfwmd7qw4ui