After a long time, the NGMAP project has been remade, improved and also reached closed beta!


What's new?
The new version has improved root privilege control, implementation of all the most common flags /
switches that a user may want to use and even a fully customized scan which is disabled at the moment.

Some of the more uncommon switches that are hardly ever used, was not implemented and at the
current stage an exaggerated amount of variables...

[Cross Site Scripting, should always be taken seriously even though it is merely a client-side attack]


On todays Internet there are so many developers, administrators and even IT-security consultants that
doesn't consider Cross Site Scripting aka XSS as a serious threat. It is truly amazing that so many sites,
contains this class of security bug that has existed for years.

With XSS-attacks it's possible to use javascript to read the HTML-code, thereby...

The research I recently made about the Browser Exploitation Packs was fun.

After I had finished it I browsed around the Internet and wanted to upload an
image at imageshack.us but apparently some HTML code that shouldn't be
displayed as text was output on the site.

So I looked in the source where the referer would normally look like:
My spoofed referrer had broken...

It has been some months now but I never really disclosed what I did to get a free streaming account at mediatux in order to watch some of FRHACK01 via their streaming service provided by mediatux. At the time they announced that One could stream the conference for an exaggerated amount of money, I thought that I would give it a try with some very basic hacking skills.

A few days later the conference started and my login worked, I was truly astonished.

The only problem was...

In the months october and november, a part of InterN0T Security Team (non-profit subsidiary of InterN0T)
decided to research the danish website security and see if the anticipation was true, that the security was crawling.

After a lot of hard work and a translation the report is now available in both danish and english!

The original report in danish is available here:
http://intern0t.net/papers/Hacker%20...d%20eliten.pdf
http://intern0t.net/papers/Hacker_-_...med_eliten.zip...