OWASP ZAP Project - Zed Attack Proxy Team Releases Two Initiatives

Tuesday, May 30, 2023 1:12 PM Posted by Unknown

The Zed Attack Proxy team is pleased to announce two recently released initiatives:


ZAP In Ten

The team have just launched a new series of videos called 'ZAP in Ten' in conjunction with AllDayDevOps.

 ZAP in Ten is a series of short form videos featuring Simon Bennetts, project lead of the OWASP Zed Attack Proxy (ZAP)  project. Each video highlights a specific feature or resource for ZAP.

ZAP API Docs

As part of OWASP's participation in Google's Season of Docs, the ZAP project has had @sshniro working on API documentation. The first iteration of the documentation is now live.  It includes Java, Python, and shell example snippets all presented in a responsive and accessible design. Which we will continue to build on in the future.

Big thanks to Nirojan for his efforts on this wonderful initiative!  Congratulations and thanks to Google Open Source for helping to bring the open source and technical writer communities together!

More info


  1. Pentest Tools For Ubuntu
  2. Pentest Recon Tools
  3. Underground Hacker Sites
  4. Pentest Tools Android
  5. Tools For Hacker
  6. Hackers Toolbox
  7. Hacking Tools For Windows 7
  8. Hacking Tools For Beginners
  9. Hacker Tools Software
  10. Hack Tools For Pc
  11. Hack Tools For Games
  12. Hack Website Online Tool
  13. Hacking Tools For Mac
  14. Hacking Tools Software
  15. Hacker Tools List
  16. Best Pentesting Tools 2018
  17. Game Hacking
  18. Game Hacking
  19. Hack Tools For Ubuntu
  20. Pentest Tools Nmap
  21. Pentest Tools Android
  22. Hacker Tools Windows
  23. Hacker Tools Software
  24. How To Install Pentest Tools In Ubuntu
  25. Best Pentesting Tools 2018
  26. Pentest Tools Free
  27. Pentest Tools Free
  28. Hacker Tools For Windows
  29. Hacker Tools Mac
  30. Hacking Tools Kit
  31. Pentest Tools Alternative
  32. Hack Tools For Games
  33. How To Hack
  34. Kik Hack Tools
  35. Hacker Tools Linux
  36. Pentest Tools
  37. Pentest Tools Windows
  38. Hacking Tools And Software
  39. Hacking Tools Name
  40. Hack And Tools
  41. Hack And Tools
  42. Pentest Tools Website
  43. Beginner Hacker Tools
  44. World No 1 Hacker Software
  45. World No 1 Hacker Software
  46. Hacker Hardware Tools
  47. Pentest Tools Download
  48. Pentest Reporting Tools
  49. Hacking Tools Mac
  50. Pentest Box Tools Download
  51. Hacker Security Tools
  52. Pentest Tools Open Source
  53. Hacking Tools For Windows 7
  54. Hack Tools For Pc
  55. Bluetooth Hacking Tools Kali
  56. Easy Hack Tools
  57. Hack Tools Download
  58. Pentest Tools Download
  59. Hacker Tools Apk
  60. Hacker Techniques Tools And Incident Handling
  61. Hacking Tools Name
  62. Hacker Tools
  63. Hack Tools
  64. Hack Tool Apk
  65. Pentest Tools Review
  66. Hacking Tools For Mac
  67. Hack Tools Download
  68. Hack Tools For Ubuntu
  69. Hacker Tools For Windows
  70. Hack App
  71. Pentest Tools Online
  72. Hacking Tools For Windows
  73. Github Hacking Tools
  74. Hacker Tools Software
  75. Underground Hacker Sites
  76. Pentest Tools Review
  77. Pentest Tools Framework
  78. World No 1 Hacker Software
  79. Bluetooth Hacking Tools Kali
  80. Pentest Tools Tcp Port Scanner
  81. Pentest Tools Kali Linux
  82. Pentest Tools
  83. What Are Hacking Tools
  84. Hack Tools Pc
  85. Hacking Tools For Windows 7
  86. Pentest Tools Bluekeep
  87. Best Pentesting Tools 2018
  88. Hacker Tools Github
  89. Bluetooth Hacking Tools Kali
  90. Nsa Hack Tools
  91. Hacker Tools Free Download
  92. Hacker Techniques Tools And Incident Handling
  93. Pentest Reporting Tools
  94. Hacking Tools Name
  95. Hack Tools Online
  96. World No 1 Hacker Software
  97. Hacker Tools Hardware
  98. Hacker Tools Hardware
  99. Physical Pentest Tools
  100. Underground Hacker Sites
  101. Hacker Tools 2019
0 comments

TOP 10 HACKING MOVIES YOU SHOULD WATCH

4:21 AM Posted by Unknown
Technology and hacking gave a new horizon to the science fiction movies. As hacking is getting common and every online thing is at risk whether it's 10% or 90%, not a system is 100% secure over the internet. Every day new security holes are getting discovered. So, now most of the sci-fi movies have the tech and hack stuff to grow awareness in everybody's mind about the online privacy and risk to their information. Here I am sharing top 10 hacking movies that worth a watch.

TOP 10 HACKING MOVIES

Here I have listed top 10 hacking movies that you should watch.

1. HACKERS (1995)

In Hackers, Angelina Jolie and Jonny Lee Miller portray two youthful and hip hackers. Miller portrays a hacker who got caught as a very young child at an age of 11 years after crashing thousands of computers and has been sentenced to zero computer access until his 18th birthday.

2. LIVE FREE OR DIE HARD (2007)

Live Free or Die Hard (also known as Die Hard 4 and released as Die Hard 4.0 outside North America) is a 2007 American action film, and the fourth in the Die Hard film series depicts a scenario where a hacker played by Timothy Olyphant (of Justified fame) takes down nearly the entire U.S. infrastructure in an attempt to transfer trillions of dollars from the Federal Reserve to his account. This movie gives a complete idea of how actually these blackhat hackers operate.

3. EAGLE EYE (2008)

In this movie, two people get a call from an unknown number by a woman. They get a task on the phone that if they don't follow the phone call they would die. This movie displays supercomputer hack on all networks and military networks. This is just an amazing movie on how artificial intelligence computer hacks our real life for bad motives.

4. ALGORITHM (2014)

The film 'Algorithm' tracks the travails of Will, who is the freelance computer hacker who hacks into a top-secret government contractor agency and downloads all their recently developed programs." You can see the full movie below

5. WARGAMES (1983)

The film features David Lightman (Broderick), a young high school student hacker who accidentally hacks into a military supercomputer and starts the countdown to World War III.

6. THE MATRIX (1999)

This is one of the greatest science fiction movies. In this movie, reality, as perceived by most humans, is actually a simulated reality called "the Matrix", created by machines to subdue the human population, while their bodies' heat and electrical activity are used as an energy source.
A character named "Neo", who is a computer Hacker, learns this truth and is drawn into a rebellion against the machines, which involves other people who have been freed from the "dream world". The Matrix franchise is a trilogy movie series.

7. TAKEDOWN (2000)

This movie is based on famous computer U.S. hacker Kevin David Mitnick. Based upon the book and written by his nemesis, Tsutomu Shimomura, the story tends to glorify Shimomura. Mitnick operated in the 1980s and '90s and eventually went to prison for a couple of years. Now, he is a highly paid IT security consultant, speaker, and writer.

8. BLACKHAT (2015)

Blackhat is newly released movie by Chris Hemsworth. In this movie, hackers hack the Chinese nuclear power plant to start a nuclear reaction. Simultaneously, they also hack the stock exchange and steal millions of dollars from the bank. This movie shows how a black hat hackers threaten governments.

9. THE ITALIAN JOB (2003)

Although the MINI Coopers are really the stars of The Italian Job (a remake of the 1969 film of the same name), Seth Green plays Lyle, a hacker among a group of elite thieves, who is able to manipulate traffic signals, among other devices, that make this grand theft possible.

10. UNTRACEABLE (2008)

This film involves a serial killer who rigs contraptions that kill his victims based on the number of hits received by a website KillWithMe.com that features a live streaming video of the victim. Millions of people log on, hastening the victims' deaths.

There may be more exciting hacking movies but I found these top 10 hacking movies that you should watch for once.
You can also find out the top 5 most dangerous hackers in the real world living.
Related posts

0 comments

DNSSEC, From An End-User Perspective, Part 3

Monday, May 29, 2023 7:33 PM Posted by Unknown
In the first post of this DNSSEC series, I have shown the problem (DNS vulnerabilities), and in the second post, the "solution." In this third post, I am going to analyze DNSSEC. Can DNSSEC protect the users against all of the attacks? Or just part of them? What about corner cases?

The following list are the attack types from the first post, where DNSSEC can protect the users:

  • DNS cache poisoning the DNS server, "Da Old way"
  • DNS cache poisoning, "Da Kaminsky way"
  • ISP hijack, for advertisement or spying purposes
  • Captive portals
  • Pentester hijacks DNS to test application via active man-in-the-middle
  • Malicious attacker hijacks DNS via active MITM

The following list are the attack types from the first post, where DNSSEC cannot protect the users:

  • Rogue DNS server set via malware
  • Having access to the DNS admin panel and rewriting the IP
  • ISP hijack, for advertisement or spying purposes
  • Captive portals
  • Pentester hijacks DNS to test application via active man-in-the-middle
  • Malicious attacker hijacks DNS via active MITM

If you are a reader who thinks while reading, you might say "What the hell? Am I protected or not???". The problem is that it depends… In the case where the attacker is between you and your DNS server, the attacker can impersonate the DNS server, downgrade it to a non DNSSEC aware one, and send responses without DNSSEC information.

Now, how can I protect against all of these attacks? Answer is "simple":
  1. Configure your own DNSSEC aware server on your localhost, and use that as a resolver. This is pretty easy, even I was able to do it using tutorials.
  2. Don't let malware run on your system! ;-)
  3. Use at least two-factor authentication for admin access of your DNS admin panel.
  4. Use a registry lock (details in part 1).
  5. Use a DNSSEC aware OS.
  6. Use DNSSEC protected websites.
  7. There is a need for an API or something, where the client can enforce DNSSEC protected answers. In case the answer is not protected with DNSSEC, the connection can not be established.

Now some random facts, thoughts, solutions around DNSSEC:

That's all folks, happy DNSSEC configuring ;-)

Note from David:
Huh, I have just accidentally deleted this whole post from Z, but then I got it back from my browsing cache. Big up to Nir Sofer for his ChromeCacheView tool! Saved my ass from kickin'! :D
Related word

0 comments

OnionDuke Samples

10:43 AM Posted by Unknown









File attributes

Size: 219136
MD5:  28F96A57FA5FF663926E9BAD51A1D0CB

Size: 126464
MD5:  C8EB6040FD02D77660D19057A38FF769


Size: 316928
MD5:  D1CE79089578DA2D41F1AD901F7B1014


Virustotal info

https://www.virustotal.com/en/file/366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b/analysis/
SHA256: 366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b
File name: 366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b
Detection ratio: 8 / 52
Analysis date: 2014-11-15 18:37:30 UTC ( 8 hours, 44 minutes ago ) 
Antivirus Result Update
Baidu-International Trojan.Win32.Agent.adYf 20141107
F-Secure Backdoor:W32/OnionDuke.B 20141115
Ikarus Trojan.Win32.Agent 20141115
Kaspersky Backdoor.Win32.MiniDuke.x 20141115
Norman OnionDuke.A 20141115
Sophos Troj/Ransom-ALA 20141115
Symantec Backdoor.Miniduke!gen4 20141115
Tencent Win32.Trojan.Agent.Tbsl 20141115

https://www.virustotal.com/en/file/366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b/analysis/


SHA256: 366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b
File name: 366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b
Detection ratio: 8 / 52
Antivirus Result Update
Baidu-International Trojan.Win32.Agent.adYf 20141107
F-Secure Backdoor:W32/OnionDuke.B 20141115
Ikarus Trojan.Win32.Agent 20141115
Kaspersky Backdoor.Win32.MiniDuke.x 20141115
Norman OnionDuke.A 20141115
Sophos Troj/Ransom-ALA 20141115
Symantec Backdoor.Miniduke!gen4 20141115
Tencent Win32.Trojan.Agent.Tbsl 20141115

https://www.virustotal.com/en/file/0102777ec0357655c4313419be3a15c4ca17c4f9cb4a440bfb16195239905ade/analysis/
SHA256: 0102777ec0357655c4313419be3a15c4ca17c4f9cb4a440bfb16195239905ade
File name: 0102777ec0357655c4313419be3a15c4ca17c4f9cb4a440bfb16195239905ade
Detection ratio: 19 / 55
Analysis date: 2014-11-15 18:37:25 UTC ( 8 hours, 47 minutes ago ) 
Antivirus Result Update
AVware Trojan.Win32.Generic!BT 20141115
Ad-Aware Backdoor.Generic.933739 20141115
Baidu-International Trojan.Win32.OnionDuke.BA 20141107
BitDefender Backdoor.Generic.933739 20141115
ESET-NOD32 a variant of Win32/OnionDuke.A 20141115
Emsisoft Backdoor.Generic.933739 (B) 20141115
F-Secure Backdoor:W32/OnionDuke.A 20141115
GData Backdoor.Generic.933739 20141115
Ikarus Trojan.Win32.Onionduke 20141115
Kaspersky Backdoor.Win32.MiniDuke.x 20141115
McAfee RDN/Generic BackDoor!zw 20141115
McAfee-GW-Edition BehavesLike.Win32.Trojan.fh 20141114
MicroWorld-eScan Backdoor.Generic.933739 20141115
Norman OnionDuke.B 20141115
Sophos Troj/Ransom-ANU 20141115
Symantec Backdoor.Miniduke!gen4 20141115
TrendMicro BKDR_ONIONDUKE.AD 20141115
TrendMicro-HouseCall BKDR_ONIONDUKE.AD 20141115
VIPRE Trojan.Win32.Generic!BT 20141115


Read more

  1. Best Hacking Tools 2020
  2. What Are Hacking Tools
  3. Usb Pentest Tools
  4. Hack Tools Github
  5. Pentest Tools Apk
  6. Pentest Tools Apk
  7. Hacking Tools Github
  8. Hacker Security Tools
  9. Hack Rom Tools
  10. Hacker Tools Hardware
  11. Pentest Tools Nmap
  12. Beginner Hacker Tools
  13. Hacker Techniques Tools And Incident Handling
  14. Hacker Search Tools
  15. Best Pentesting Tools 2018
  16. Black Hat Hacker Tools
  17. Pentest Tools Website Vulnerability
  18. Github Hacking Tools
  19. Ethical Hacker Tools
  20. Hacker Tools Hardware
  21. Pentest Tools For Android
  22. Pentest Tools Download
  23. Hacking Tools Github
  24. Hacker Techniques Tools And Incident Handling
  25. Hacker Tools
  26. Pentest Reporting Tools
  27. How To Install Pentest Tools In Ubuntu
  28. Pentest Tools
  29. Pentest Box Tools Download
  30. Hacker
  31. Growth Hacker Tools
  32. Hacking Tools Download
  33. Hack Tools Pc
  34. Hack Tool Apk No Root
  35. Hack Tools Download
  36. Hack And Tools
  37. Pentest Tools Tcp Port Scanner
  38. Hacker Hardware Tools
  39. Pentest Tools Nmap
  40. Pentest Tools For Mac
  41. Hack Tools Pc
  42. Pentest Tools Subdomain
  43. New Hack Tools
  44. Kik Hack Tools
  45. Pentest Tools Framework
  46. Hacker Tools Apk Download
  47. Hacking Tools Hardware
  48. Hacks And Tools
  49. Hacking Tools Pc
  50. Hacking Tools And Software
  51. Wifi Hacker Tools For Windows
  52. Pentest Tools Windows
  53. Tools For Hacker
  54. Pentest Tools Website
  55. Usb Pentest Tools
  56. Hacking Tools Free Download
0 comments
Subscribe to: Posts (Atom)
abcs