SIPcrack is a SIP login sniffer/cracker that contains 2 programs: sipdump to capture the digest authentication and sipcrack to bruteforce the hash using a wordlist or standard input.

Day 3 of the Month of PHP Bugs project brings one more PHP vulnerability raising the bug count to 9

Anurag Agarwal released the third article from the series of mini biographies called Reflection which so far presented Amit Klein and RSnake ;

Well, having the SQL server call home to your machine is cool enough (bye bye firewall) , but the paper’s author, Cesar Cerrudo went a step forward . These are the main topics covered by his paper :

There have been rumors about YouTube and MySpace hosting videos of wanted criminals but I didn’t believe them. So I did some searching on my own and I found this video which basically is a classic “Wanted” police video.

Stefan Esser Month of PHP Bugs project is going strong and here are five more vulnerabilities exposed on March 2nd 2007

If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include a security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately.

As promised, I will keep a close eye on Stefan Esser Month of PHP Bugs project during march 2007. Here are the vulnerabilities exposed on March 1st 2007

. A smart traversal-state-machine inside the AnyFirewall engine handles the complexities of STUN (simple traversal of UDP through network address translators) and TURN protocols, NAT or firewall types, transport methods, ICE candidates, and delivery checks, the company explains.