Auditor's notes
Latest Activity
Pendulum — Blood Sugar
Infected Mushroom — Infected Mushroom Vs Skazi - I Wish (Brutal Rmx by Skazi)
Juno Reactor — juno_reactor_-_pistolero
Aprodite — aphrodite_-_ganja_man_featuring_deadly_hunta
Aprodite — aphrodite_-_stalker_dev0id's Groups
-
Life Hackers
(136 members)
-
Field Forensic
(37 members)
-
Security Education
(9 members)
-
Red Pill
(46 members)
-
Russian Hackers
(19 members)
-
--FullDisclosure
(22 members)
RSS
Profile
Security and everything related
penetration testing
programming
bugs hunting
Everything.
Do not leave unwanted comments
Dev0id's Blog
Substantive procedures (part I)
The purpose of this articel to describe substantive audit procedure related to IT audit. This article will cover the following areas:
* The objective of substantive procedures
* The risk factors
*…
Posted on July 4th, 2008 at 8:30pm —
2 Comments
(Add)
Online banking: Controls to be implemented
For those who read my article Cracking access to Bank this paper may be interesting from the securing transactions point of view.
As we identified that that the m…
Posted on June 9th, 2008 at 5:38pm —
No Comments (Add)
Script-Kiddies
Why hackers do not like script-kiddeis ? May be you think that hackers hate tham just because guys do not know how to intrude the system or do not know how to craft an exploit... may be... some of kiddies really annoying. However, nobody was born clever. And if we ju…
Posted on June 9th, 2008 at 11:00am —
4 Comments
(Add)
Cracking access to Bank
The purpose of this article is to show the real threat for banks' clients that use on-line banking services for processing bank documents and transactions in "real-time". On-line banking services are used in our days by 99% of legal entities. In my practice I have see…
Posted on June 7th, 2008 at 8:00pm —
4 Comments
(Add)
TrendMicro HOUSECALL_ACTIVEXLib Multiple vulnerabilities
Be careful! Once you scanned your workstation using TrendMicro HOUSECALL this ActiveX component will stay in your system. That means that anyone can exploit this vulnerability. The vulnerable methods are listed below:
showAlert()
setOption()
isOptionAvail…
Posted on June 6th, 2008 at 5:30am —
No Comments (Add)
Bank clients are under attack?
Do you know what is Client-Bank application ? That is electronic transaction system that allows to work with bank account through the Internet. The on of the types of Client-Bank applications is the web-based client bank, that check signatures and e-tokens data using the ActiveX control. I reviewed the one (http://bssys.com/eng). The result was (integer overflow):
Exception Code: ACCESS_VIOLATION Disasm: 1D0BB96 MOV EDI,[ESI+3C] (…
Continue
Posted on June 6th, 2008 at 5:00am —
No Comments (Add)
Operational vulnerability in Aeroflot tickets sales business process
Yesterday I was really surprised to know that Aeroflot has operational vulnerability in reservation of tickets process (the part of tickets sales). As it happens Aeroflot allows to perform tickets reservations via WEB and this reservations include desired s…
Posted on June 4th, 2008 at 5:00am —
2 Comments
(Add)
Controls VS Risks
What are the risks and why we always looking for controls? How can we pass controls over and what do we need it for? These questions are normal! I am going to describe simplified audit procedures related to Information Technologies and Information Security audits.…
Posted on June 2nd, 2008 at 9:30am —
No Comments (Add)
Vulnerability in RegWizCtrl
Posted on May 31st, 2008 at 3:00pm —
No Comments (Add)
Hacking Flash
Posted on May 31st, 2008 at 2:11pm —
No Comments (Add)
About House of Hackers
Petko D. (pdp) Petkov
created this social network on Ning.
© 2008 Created by Petko D. (pdp) Petkov on Ning. Create your own social network
Comment Wall (1 comment)
You need to be a member of House of Hackers to add comments!
Join this network