Author Archives: AnarchyAngel

Format string $20 challenge

At the last meeting I showed everyone how to use a format string vulnerability in a password storage app to bypass the master password and pull data out of memory. That is just one way to exploit this type of … Continue reading

Posted in contest, DIY, exploit, group news, hacking, meetings, security, software | Leave a comment

Info for next meeting.

Because we are still looking for a new home our next meeting will be at The Meetupery: N69W25055 Indiangrass Lane Suite G Sussex, WI 53089 Consider this a little test drive of a new space just opening up. Donations are … Continue reading

Posted in Firsties | 2 Comments

Telmanik CMS Press 1.01 SQLi 0day

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [x] Type: SQL Injection [x] Vendor: www.telmanik.com [x] Script Name: Telmanik CMS Press [x] Script Version: 1.01b [x] Script DL: http://www.telmanik.com/download/Telmanik_CMS_Press/1.01_beta/telmanik_cms_press_v1.01_beta.zip [x] Author: Anarchy Angel [x] Mail : anarchy[at]dc414[dot]org ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Exploit: http://site.org/themes/pages.php?page_name=[SQLi] you have to formate you injection like … Continue reading

Posted in CONS, exploit, hacking, release, security | Leave a comment

Tips for dc414 members (and everyone else) at DEFCON21

Here are a few tips and guidelines to follow while in Vegas: Keep an eye on dc414’s twitter, Facebook, and G+ feeds to keep up to date on what we are doing so you can join in on the fun. … Continue reading

Posted in CONS, group news, meetings, party, privacy, security | Leave a comment

July meeting recap

Let me start by saying many thanks to Milwaukee Makerspace for hosting our meeting and to Klaiviel for hooking us up. Ulic got us rolling and gave a awesome presentation on PRISM and other government spying programs. dw5304 was up … Continue reading

Posted in group news, hacking, meetings, security | Leave a comment

Happy independence day!

Have a awesome 4th Merica and thanks to our service men and women for their sacrifice.

Posted in freedom, holiday | Leave a comment

Temporary location for next meeting.

It looks like we’re meeting at the Makerspace since Klaiviel has the secured a slot already. So just meet at 2555 S. Lenox St. Milwaukee, WI, 53207 on Friday at 7PM.

Posted in group news, meetings | Leave a comment

Upload your own XSS

A few meetings ago i gave a demo on uploading a flash file to file hosting sites that contains a evil XSS payload. Here is my write up on it. A while back I was doing a penetration test on … Continue reading

Posted in exploit, hacking, javascript, misc, security, software | Leave a comment

June Meeting Recap

Thanks to all that attended the June meeting. ┬áLot’s of interesting discussion and demos as usual. Some highlights were Klaiviel giving an in-depth look at the state of 3D printing with a focus on weapons and some of the issues … Continue reading

Posted in freedom, hacking, hardware, meetings, misc, privacy, projects, security, software | Leave a comment

Getting IP addresses from contacts on Skype as told by Noize.

Skype is an extremely popular, proprietary, cross-platform, peer-to-peer Voice-over-IP software client written by Skype Communications SARL, which is now owned by Microsoft Corporation. Due to its peer-to-peer always-on nature it is possible for a researcher to determine characteristics about a … Continue reading

Posted in hacking, misc, privacy, security | 3 Comments