Archive for the ‘Security’ Category

Wordpress Plugin Scanner

Wednesday, September 26th, 2007

I've read some articles regarding how to make our Wordpress blog safer. It's said that by adding a blank index.html file in the plugin directory, we can avoid any bad guys from viewing what kind of plugins we are using. Well if you think from the script kiddies bad guys’ perspective, ...

Running Command Prompt in restricted PC

Sunday, September 23rd, 2007

Some Cyber Cafes or public computers restrict users from opening the command prompt. Here's how to bypass them. Using Web Browser Open your Firefox or Internet explorer and type C:\WINDOWS\system32\cmd.exe in the URL bar. Press enter and command prompt should pop out right away. Using mIRC In the status channel just type /run cmd Using ...

Rob Maybank2u with javascript

Wednesday, September 5th, 2007

I'm back. Now with another evil plan in mind.*grin* I found a XSS hole in maybank2u online right in the https secured section. It seems that Maybank2u use javascript to validate and filter user input in forgot password page, before echoing it back. This can be easily evaded by sending the ...