Interesting videos explaining how hacker commerce works.
Watch videos...
Sunday, May 31, 2009
Stop Hacker Commerce (H*Commerce)
Bryce Galbraith, CISSP, GCIH, GSEC, CEH, CHFI, Security+, CCNA
Chief Hacking Officer
Layered Security
bryce{at}layeredsec.com
SANS Institute BIO
LinkedIn Profile
Chief Hacking Officer
Layered Security
bryce{at}
SANS Institute BIO
LinkedIn Profile
Contributing Author
Author of SANS SEC550
My Next 5 Public Courses
National Debt Clock
Toolz
- Aircrack-ng
- AlternateStreamView
- Anonymizer
- BackTrack
- BCWipe
- BeEF - Browser Explotation Framework
- BinText
- BotHunter
- Browser Rider
- BrowserSpy
- Burp Suite
- Cain & Abel
- Cheat Sheets
- Command-line Kung Fu
- DansGuardian
- DBAN - Darik's Boot and Nuke
- Deep Freeze
- DEFCON Toolz
- DNS Advisor Pro
- DomainTools
- DumpSec
- Edge Security Tools
- ElcomSoft
- Emerging Threats (Snort Sigs)
- Ettercap
- Exploit-Me
- Ferret and Hamster
- FireBug
- Firewall Builder
- FOCA Online (search metadata in files)
- Forensic Acquisition Utilities
- Free Rainbow Tables
- GFI LANGuard
- Google Sets
- Hacme Web Apps
- IP Blocks by Country
- IPv6 Tunnelbroker
- IronKey
- IRS
- Karmasploit
- Kon-Boot (password reset tool)
- L0phtCrack
- Layer Four Traceroute
- Live Sysinternals
- Macshift
- Maltego
- memoryze
- MetaSploit
- Metasploit Decloaking Engine
- MMC
- Nemesis
- Netdude
- Netifera
- NetMon
- netsh
- NetWitness Investigator
- Nikto
- NirSoft - freeware utils
- NMap
- Notepad++
- Offensive Security Exploit Archive
- Open Source Security Information Management
- OpenDNS
- OSSEC
- PacketLife.net Armory of Toolz
- Pass-the-Hash Toolkit
- pathping
- Pentest Labs: Web Application Edition
- Pipl
- PortableApps
- Proxy Strike
- PWDumpX
- py2exe
- Radmin
- RainbowCrack
- raWPacket
- Recuva - File Recovery
- RedCurtain
- reDuh
- Robotex
- RootKits (Unix)
- RootKits (Windows)
- saminside
- Samurai Web Testing Framework
- Scapy
- Screen command (Unix)
- Search Engine List
- Secunia PSI
- ServerSniff
- Sigcheck
- SiteDigger
- SNScan
- Sociel-Engineer's Toolkit (SET)
- Splunk
- SQL Cheat Sheets
- sqlmap
- SQLScan v1.0
- sslstrip
- STerm
- Sulley
- SuperScan v4.0
- SysInternals Tools
- System Explorer
- tcpreplay
- tcpxtract
- TextPad
- The Cassandra Tool
- ThrashLM
- Top 100 Network Security Tools
- TrapCall
- TrueCrypt
- Ubuntu Man Pages
- UNetbootin
- Universal Command Guide
- Unix Utils for Windows
- VMMap
- VMWare ThinApp
- VoIP Hopper
- Volatility Framework
- WarVOX
- Web Application Attack Framework (W3AF)
- Web Application Testing
- Web Historian
- Webtunnel
- WEPBuster
- WhoIsHostingThis.com
- Windows Power Shell
- Windows XP Commands
- winexe
- WirelessKeyView
- wlan2eth
- WMAP
- WMIC
- Wordlist Generator
- Wordlists (1)
- Wordlists (2)
- Wordlists (3)
- Wordlists (49 million words)
- Wordlists (US Citites)
- Yersinia
OSF Data Loss - Latest Incidents
Links
- A "Grey Hat" Guide
- Anti-Rookit
- Bitpipe.com
- Black Hat
- Browser Security Handbook
- Center for Internet Security
- Cybercrime.gov (US DoJ)
- Data Loss Database
- DEFCON
- DISA
- DoD Cyber Crime Center
- Hakin9 Magazine
- Integrity Global Security
- Market Share
- Milw0rm
- NewsNow (31000+ news sources)
- NIST Computer Security Division
- OSF Data Loss Database
- Packet Storm
- Process Library
- RFID (1)
- RFID (2)
- SANS - Consensus Audit Guidelines (CAG)
- SANS Computer Forensics
- SANS Institute
- SANS Internet Storm Center
- SANS Top 20
- SANS Top 25 Programming Errors
- Secunia
- Security Laboratory: Thought Leaders
- TaoSecurity
- User Account Control Explained
- VirusTotal
- VulnerabilityAssessment.co.uk
- White Wolf Security
- Wikileaks
Articles & How To's
- Backtrack 4 Tutorials
- Black Hat Archives
- Covert Channels
- DEFCON Archives
- Google Guide Quick Reference
- Hacking demo videos (John Strand)
- Injecting Meterpreter into Excel files
- Lock picking issues
- Metasploit Unleashed (free training)
- NTLMv2 - Demystified
- Pass-the-hash with Meterpreter
- Port-redirection how-to
- SecurityTube - security videos
- Simultaneous Sniffing of Multiple 802.11b Channels with Kismet
- Social-Engineer.org
- Wirelessdefence.org
Conferences
Useful Stuff
- 1-800-GOOG 411
- 10 add-ons for Firefox: Privacy and security
- Acronym Finder
- AV Test
- BetterPrivacy (deletes "super cookies")
- Bluecoat's K9 Web Protection (free)
- Browser Security Test
- Cellphone radiation info
- Data Execution Prevention
- Evernote
- FreeMind
- FreeNAS
- Gethuman Database
- Google Blog Search
- Google Book Search
- Google Reader
- How to save your keyboard after a spill
- IIS 7.0 Config Ref
- Inbox Zero Presentation
- KeePass Password Safe
- Kindle
- LIFE photo archive by Google
- Lifehacker
- Linux Directory Structure
- MindMapper
- National Do Not Call Registry
- No more lower back pain!
- OptOutPrescreen
- P90X Workout
- Packetlife.net packet captures
- Power plugs around the world
- Quotations Page
- SANS Buyers Guide
- SpaceMonger
- Stay Safe Online
- US Constitution
- US Debt Clock
- US Public Debt
- Use Bluetooth headsets to make VoIP calls on your computer
- Username Check
- Virus Bulletin
- Wireless Spectrum (PDF)
- Wireless Spectrum (PNG)
- Zimbra
- ZoomIt
Just for Fun
- "Series of Tubes"
- Bill Gates' mug shot
- Brian Regan (comedian)
- Bubble Wrap
- Certified Application Security Specialists
- Despair, Inc.
- DIY Demotivator
- Larry David - How to Handle Annoying Bluetooth Guys
- Let Me Google That For You (lmgtfy)
- Pandora
- PicLens
- R2D2 Projector
- Tech Supoort Cheat Sheet
- ThinkGeek
- White Hat Hacker Man
- Will it blend?
- ¡ʇı dılɟ
Blog Archive
-
►
2010
(39)
-
►
February
(20)
- “Anonymizer Universal” product suite launched
- Comcast launches first public U.S. trial of advanc...
- The Spy at Harriton High
- New Obama Executive Order allows INTERPOL to opera...
- School district accused of issuing webcam laptops ...
- Windows 7 AV bypass with -x in msfencode
- Broad New Hacking Attack Detected - 2,500 companie...
- The Great Australian Internet Blackout
- Core Integrates Its Penetration Testing Product Wi...
- 802.11n card that works with BackTrack 4 - woohoo!...
- Pentest Labs: Web Application Edition
- Great write up on the Social-Engineering Toolkit (...
- How To Use BitLocker With Attached VHD Drive Image...
- Government requires all devices to support IPv6
- CookieMonster nabs user creds from secure sites
- Google Taps NSA to Safeguard its Data
- Shmoocon Videos!
- Great job opening!
- Verizon MiFi Device Hacked
- FOSE Expo - March 23-25th in Washington, D.C.
-
►
January
(19)
- StaySafeOnline.org - great resource for family and...
- Nmap 5.20 Released
- Operation Aurora Overview
- IronKey responds to recent hack of numerous verndo...
- The Most Misunderstood Windows Security Setting of...
- Google Attack Part of Widespread Spying Effort
- Wonderful...
- My first blog post from 30,000 feet! Sweet.
- Hack of Google, Adobe Conducted Through Zero-Day I...
- Movement on the US Cyber Command
- BackTrack 4 Final Release
- One console to rule them all - Using Windows' "God...
- Crimeware-as-a-Service and antivirus evasion schem...
- Can you hear me now!?
- Top 10 Security Nightmares of the Decade
- SiteDigger v3.0 Released 12/01/2009
- Advanced application-level OS fingerprinting
- Hackers Brew Self-Destruct Code to Counter Police ...
- LOL - my business card is on CNN :)
-
►
February
(20)