Cult of the Dead Cow

h4x0r w4rri0r.com
VulnerabilitiesSecurity Bug and Exposures
- Improper Input ValidationNever trust user input!
- Improper AuthenticationWho you are!
- Improper AuthorizationWhat you can access!
- Lack of EncryptionEncoding information!
- Security MisconfigurationIncorrect arrangement!
- Information ExposureError allows to break!
- Business Logic Errors and MisuseUnderstand the business!
- Insecure DeserializationThe reverse process!
- Insufficient Logging and MonitoringAnalyse specific incident!
- Memory Corruption and LeakIncorrectly manages allocation!
- Insecure Interfaces and ServicesThe exposure of data!
- Social Engineering and Human ErrorExploits human psychology!
Exploits Attacker Controller
- Win32 / Win64 Windows 32-bit and 64-bit Application
- Linux x64 / Linux x86 Linux 64-bit and 86-bit Extension
- OpenBSD / NetBSD BSD Operating Systems
- OS X - ppc / OS X - x86 PowerPC and Intel x86-based Macintosh
- AIX / UnixWare 32-bit/64-bit Multiplatform UNIX
- Solaris - SPARC / Solaris - x86 Solaris SPARC-based and x86-based
- Zero Day Exploits Unknown Vulnerability
- Remote Exploits Without Prior Access
- Local Exploits Requires Prior Access
- Web Application Exploits Compromised Web Applications
- Denial of Service (DoS) Resource Unavailable
- Privilege Escalation (EoP) Gain Elevated Access to Resources
Advisories Defense in Depth
- Microsoft Security Microsoft Products Security
- Red Hat Security Red Hat Products Security
- Cisco Security Cisco Products Security
- Oracle Security Oracle Products Security
- Apache Security Apache Products Security
- Adobe Security Adobe Products Security
- Apple Security Apple Products Security
- Check Point Security Check Point Products Security
- Google Chrome Security Google Products Security
- Debian Security Debian Products Security
- IBM Security IBM Products Security
- US-CERT Advisories Current Cyber Security
Training Educational Use
- Information Security Certifications That Will Get You A Raise
- Information Security Conferences Exchange of Information and Views
- Information Security Magazines Paper Painting of Modern Security
- Hackers Operating Systems Penetration Testing and Security Auditing
- Best Hackers Movies Forever Passionate Hackers and Crackers in Action
- Security Practical Challenges Testing Knowledge Without Going to Jail
ArsenalHacking Weapons
- Web Application Analysis Where Everybody Belongs
- Wire Network Analysis Information in Wire Transmission
- Wireless Network Analysis Information in Radio Waves
- Malicious Code Analysis Attackers to Disrupt Computer Operation
- Reverse Engineering Analysis Disassemble and Discovering Principles
- Digital Forensic Analysis Investigations of Digital Devices
- Information Gathering Act of Collecting Data
- Network Mapping Generate Network Maps
- Vulnerability Assessment Security Weakness and Threats
- Penetration Testing Exploitation of Security Flaws
- Privilege Escalation Gain Elevated Access to Resources
- Maintaining Access Reconnect Target System

Cult of the Dead Cow, also known as cDc or cDc Communications, is a computer hacker and DIY media organization founded in 1984 in Lubbock, Texas. The group maintains a weblog on its site, also titled "Cult of the Dead Cow". New media are released first through the blog, which also features thoughts and opinions of the group's members.

To further the Cult's stated goal of "Global Domination Through Media Saturation," over the years cDc members have granted interviews to major newspapers, print magazines, online news sites, and international television news programs.

The cDc has released several tools, for both hackers/system administrators and for the general public. Many of these are related to computer security and are sometimes dubbed "hacker tools".

The Automated Prayer Project
The Automated Prayer Project, written by Javaman, is "a VT420 connected to a Sun Ultra5 via a serial cable which displays the output of a continuously running program. The signaling rate is limited to 9600 baud. The program itself cycles through the Rosary, displaying a new individual prayer once every thirty seconds. Each individual prayer is then sent out via UDP to a random machine on the Internet on a random port."

Back Orifice
Back Orifice (often shortened to BO) is a computer program designed for remote system administration. It enables a user to control a computer running Microsoft Windows operating system from a remote location. The name is a pun on Microsoft BackOffice Server software. The program debuted at DEF CON 6 on August 1, 1998. It was the brainchild of Sir Dystic. According to the group, its purpose was to demonstrate the lack of security in Microsoft's operating system Windows 98.

Back Orifice 2000
Back Orifice 2000 (often shortened to BO2k) is a computer program that is similar in function to Back Orifice. Back Orifice 2000 debuted on July 10, 1999 at DEF CON 7. The original code was written by Dildog. Whereas the original Back Orifice was limited to the Windows 95 and Windows 98 operating systems, BO2k also supports Windows NT, Windows XP and Windows 2000. Some BO2k client functionality has also been implemented for *nix-systems. In addition, BO2k was released under the GPL.As of 2012, BO2k is being actively developed.

Camera/Shy
Camera/Shy was the first Hacktivismo project released. It debuted in 2002 at the H.O.P.E. 2k2 convention in New York City. It is a steganographic tool that scans for and delivers decrypted content directly from the world wide web.

NBName
NBName is a computer program that can be used to carry out denial-of-service attacks that can disable NetBIOS services on Windows machines. It was written by Sir Dystic and released July 29, 2000 at the DEF CON 8 convention in Las Vegas.

ScatterChat
ScatterChat is an encrypted instant messaging client based on Gaim. It was written by J. Salvatore Testa II and released at the H.O.P.E. Number Six conference in New York City on July 22, 2006. It provides encryption as well as integrated onion routing with Tor, and secure file transfers Various flaws in the software have been elaborated by researchers.

The Six/Four System
The Six/Four System, a censorship resistant network proxy written by Mixter, a member of both cDc and Hacktivismo. It works by using "trusted peers" to relay network connections over SSL encrypted links Hacktivismo and the cDc further gained notoriety in 2003 when the Six/Four System became the first product of a hacker group to receive approval from the United States Department of Commerce for export of strong encryption.

SMBRelay and SMBRelay2
SMBRelay and SMBRelay2 are computer programs that can be used to carry out SMB man-in-the-middle attacks on Windows machines. They were written by Sir Dystic and released March 21, 2001 at the @lantacon convention in Atlanta, Georgia.

Torpark
XeroBank Browser (formerly known as Torpark) is a variant of the Portable Firefox web browser with Tor built into it. Torpark is intended for use on portable media such as a USB flash drive but it can also be used on any hard disk drive. cDc/Hacktivismo co-released v.1.5.0.7 along with Steve Topletz on September 19, 2006.

Whisker
Whisker is project authored by Rain Forest Puppy that is no longer in development. It checked for thousands of known security vulnerabilities in web servers. Whisker Version 1.4 was co-released by the cDc at DEF CON 8 in 2000.

CORE Impact Professional

CORE Impact Professional is the most comprehensive software solution for assessing and testing security vulnerabilities throughout your organization.

IBM Security AppScan

IBM Rational AppScan Enterprise is a scalable solution to help resolve application security vulnerabilities, offering recommendations to simplify remediation.

HP WebInspect

HP WebInspect gives security professionals and security novices alike the power and knowledge to quickly identify and validate critical, high-risk security vulnerabilities.

Acunetix WVS

Acunetix Web Vulnerability Scanner (WVS) is an automated web application security testing tool that audits web applications by checking for hacking vulnerabilities.

w4rri0r - Hacking Is Not A Crime - It's an art of Awareness

\/ w4rri0r - Hacking Is Not A Crime - It's an art of Awareness \/ - w4rri0r work in the dark, w4rri0r do what w4rri0r can, w4rri0r give what w4rri0r have, w4rri0r doubt is w4rri0r passion and w4rri0r passion is w4rri0r task. The rest is the madness of art \/ w4rri0r \/

\/ w4rri0r.com \/ are the great resource for information security professionals and researcher. \/ w4rri0r \/ offers a extensive variation of information security services that include SECURITY EXPLOITS (Bug or Vulnerability), SECURITY ADVISORIES (Security Alerts), SECURITY RESEARCHER TOOLBOX (Freeware, Shareware & Open-Source), SHELLCODE (Attacker Controller - Chunk of Data), SECURITY TRAINING (Educational Purpose), SECURITY NEWS (Security Recent or Important Events) and with this group you can be assured that you’re in the right hands. \/ w4rri0r gr0up \/ efforts being endorsed and appreciated by administrators, security researchers and members of various underground hacking groups and communities worldwide.

\/ w4rri0r mission \/ are to make the information systems more secure, more aware, more reliable and protect against possible security breaches.