sucuri2

11 ms·

61.
by sucuri2 15y ago
Never said that :) Just wanted to show some of the techniques that the other side are currently using.
62.
by sucuri2 15y ago
Nice hack in there. But the "bad guys" are already using the .htaccess for a while as well. Posted about it here: http://blog.sucuri.net/2011/05/understanding-htaccess-attack...
63.
by sucuri2 15y ago
Awesome way to get their attention. Hope you get hired :)
64.
VBulleting SQL injection vulnerability – Running vbulletin? Update it now(blog.sucuri.net)
1 points by sucuri2 15y ago|0 comments
65.
Understanding .htaccess attacks - hiding malware in there(blog.sucuri.net)
6 points by sucuri2 15y ago|0 comments
66.
Sucuri - Because a hacked site is bad for business (big appsumo deal)(appsumo.com)
1 points by sucuri2 15y ago|0 comments
67.
by sucuri2 15y ago
It has to be open source (at least the PHP code). Not that I agree with it, but they (WP guys) consider plugins and themes derivated from WordPress. As far as the market, it is hughe, but not very friendly to paid stuff...
68.
CBS Money Watch / ZDnet hacked and blacklisted by Google(blog.sucuri.net)
2 points by sucuri2 15y ago|1 comments
69.
by sucuri2 16y ago
Hey :) This is probably not related to the post, but yes, we clean up/monitor WP sites, just send us an email dd@sucuri.net (can certainly give discounts to HN'ers). thanks,
70.
by sucuri2 16y ago
They didn't post much details, but if you have accounts at wordpress.com/.org, you know what to do (change passwords, etc) :)
71.
Security Incident(en.blog.wordpress.com)
65 points by sucuri2 16y ago|12 comments
72.
Link injection on hacked WordPress sites – Blackhat SEO spam(blog.sucuri.net)
1 points by sucuri2 16y ago|0 comments
73.
LizaMoon Mass SQL injection - A lot bigger than what is being reported(blog.sucuri.net)
7 points by sucuri2 16y ago|0 comments
74.
by sucuri2 16y ago
Article from April 1st...
75.
by sucuri2 16y ago
Not lying, just a joke :) Specially when you blame their lead dev, ATT and the NSA... Hard to believe :)
76.
0-day vulnerability on WordPress 3.x (remote command execution)(blog.sucuri.net)
7 points by sucuri2 16y ago|8 comments
77.
by sucuri2 16y ago
Hungry people or an elefant? I am actually on godaddy side on this one..
78.
by sucuri2 16y ago
Too bad the +hn only works on Google hosted emails...
79.
by sucuri2 16y ago
You guys from NB?
80.
by sucuri2 16y ago
Good for them! What most people doesn't know is that Radian6 founder, C. Newton, also founded Q1 Labs ( a successful security company ) and was kicked out of it a few years ago by the "board"... Instead of giving up, he formed a new company
81.
MySQL.com compromised via (guess what?) SQL injection(blog.sucuri.net)
303 points by sucuri2 16y ago|110 comments
82.
by sucuri2 16y ago
It seems to be from one of your friends: phpfogsucks.com is hosted with tomato.compwhizii.net: http://sharingmyip.com/?site=phpfogsucks.com Which is owned by John Du Hart ( http://johnduhart.me/ ) . You guys could be in a lot of legal t
83.
by sucuri2 16y ago
Their phpfogsucks is hosted with tomato.compwhizii.net: http://sharingmyip.com/?site=phpfogsucks.com The guy ( http://johnduhart.me/ )could be in trouble if they decide to go with legal action.
84.
by sucuri2 16y ago
throwing errors: TemplateSyntaxError at /keyword_tool/ Caught OperationalError while rendering: (2002, "Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)") Request Method: GET Request URL: http://domaingr
85.
by sucuri2 16y ago
I don't get why people recommend chkrootkit + failban/denyhost. I would recommend OSSEC to anyone looking for a serious host-based IDS (it does all those tools do + a lot more and very light weight). *link: http://www.ossec.net
86.
by sucuri2 16y ago
Everyone says stupid things on emails. Specially on PRIVATE emails. It is funny, sounds stupid what he is saying, but how many stupid things we say on email, IM etc on a daily basis? Don't judge just because of it...
87.
by sucuri2 16y ago
OSSEC (open source) is very good at blocking those. It looks at all your logs and blocks brute forces via SSH, HTTP, etc... Link: http://ossec.net
88.
by sucuri2 16y ago
AV != IDS. Goal of the AV is to stop known malware from propagating. Goal of the IDS is to detect (or block) attacks (or your penetration tests).
89.
Chase phishing – case study(blog.sucuri.net)
2 points by sucuri2 16y ago|0 comments
90.
by sucuri2 16y ago
503 - Service unavailable? Copy anywhere?

More ›