Lir3nt.net News

.:Lir3nt.net:.

Showing posts with label vulnerabilities. Show all posts
Showing posts with label vulnerabilities. Show all posts

12/11/07

Download ProcessScanner now

processscanner

Have you seen your PC's performance decline in the days since you bought it? Does your system take a long time to boot up and to load simple programs? Maybe it crashes more frequently, or stalls when loading Web pages? The problem could be that your PC is running unnecessary or even overtly malicious code, compromising all areas of your computer's performance, from speed and stability, through to security. But where do you find a list of all the processes that your PC is running? And even assuming that you find them, what programs are these processes associated with and are they harmful?

The Solution

processscan-screenshots

With ProcessScanner Uniblue takes the perspiration and guesswork out of researching the processes running on your PC. ProcessScanner not only generates a detailed list of the items already running on your PC, it then goes on to give you valuable information as to the programs these are associated with. Furthermore ProcessScanner will then supply you with valuable information about what each does and the level of risk, or threat, to your computer associated with that process. ProcessScanner is an invaluable tool to help remove the fog that obscures the inner workings of your computer and, what's more, it's free!

Web Site | Processscan

11/23/07

Reveal your saved Passwords in Firefox

firefox

Many users save their passwords in Firefox so that they do not have to enter it again when visiting the website it was saved for again. Firefox remembers the password and enters it automatically if the user selected this option on his first visit. This is great for us lazy users but poses the problem that we sometimes can’t remember the password when we need it again.

A classic example would be a Gmail user who has been using the Gmail website so far now trying to get the POP3 access running. So, what is this user going to do ? He actually has several options to reveal the password in Firefox. The first that comes to my mind is the ability to go into the security tab of the options. You do find a show passwords button there that displays all passwords, usernames and site urls.

I have written about this before and want to concentrate on other possibilities. Please note that a master password has to be entered for all the following methods if one has been set.

1. Greasemonkey Scripts:

If you are using the excellent Greasemonkey extension you can choose from a wide variety of scripts that reveal the passwords:

Show Password on Click - displays the password if you click the password form.

Show Password onMouseOver - reveals the password if you hover the mouse over the password field.

Unpassword - changes the type of the password form to text which always displays the passwords as text.

2. Javascript Code

Paste the following line of code into the address bar and hit enter to reveal the password on this website.

javascript:(function(){var s,F,j,f,i; s = ""; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") s += f[i].value + "\n"; } } if (s) alert("Passwords in forms on this page:\n\n" + s); else alert("There are no passwords in forms on this page.");})();

3. Firefox extension

Unhide Passwords - this extension does basically the same as the Unpassword Greasemonkey script.

[via gHacks]

3/21/07

IE7 phishing bug nets concern

Security researchers have discovered a vulnerability in Internet Explorer 7.0 that might lend itself towards the creation of more convincing phishing attacks.

The cross-site scripting (XSS) bug creates a means to replace local page displaying a "Navigation to the webpage was canceled" message with a "Refresh the page" link. "This might be useful in a phishing attack, but it does sound rather complex and requires the user to jump through the hoops," the SANS Institute's Internet Storm Centre notes

The flaw is perhaps more noteworthy for been among the first to affect IE 7 rather than the immediate threat it poses. Microsoft is investigating reports of the bug.

Meanwhile SANS has added the flaw to its list of unpatched Microsoft security vulnerabilities, as a secondary concern. The most pressing flaw remains a Word vulnerability that permits remote code execution, discovered in February.