Category Archives: exploit

Format string $20 challenge

Posted on October 8, 2013 by AnarchyAngel

At the last meeting I showed everyone how to use a format string vulnerability in a password storage app to bypass the master password and pull data out of memory. That is just one way to exploit this type of … Continue reading →

Posted in contest, DIY, exploit, group news, hacking, meetings, security, software | Leave a comment

Telmanik CMS Press 1.01 SQLi 0day

Posted on August 1, 2013 by AnarchyAngel

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [x] Type: SQL Injection [x] Vendor: www.telmanik.com [x] Script Name: Telmanik CMS Press [x] Script Version: 1.01b [x] Script DL: http://www.telmanik.com/download/Telmanik_CMS_Press/1.01_beta/telmanik_cms_press_v1.01_beta.zip [x] Author: Anarchy Angel [x] Mail : anarchy[at]dc414[dot]org ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Exploit: http://site.org/themes/pages.php?page_name=[SQLi] you have to formate you injection like … Continue reading →

Posted in CONS, exploit, hacking, release, security | Leave a comment

Upload your own XSS

Posted on June 21, 2013 by AnarchyAngel

A few meetings ago i gave a demo on uploading a flash file to file hosting sites that contains a evil XSS payload. Here is my write up on it. A while back I was doing a penetration test on … Continue reading →

Posted in exploit, hacking, javascript, misc, security, software | Leave a comment

May meeting recap

Posted on May 7, 2013 by AnarchyAngel

The May meeting was another great one. Both Ngharo and my self were late because of traffic and junk so darkwind got things started with his popular demo of sniffing pager messages from the air. I Showed up at the … Continue reading →

Posted in exploit, hacking, hardware, javascript, meetings, projects, security, XSS | Leave a comment

Cisco DDR2200 ADSL2 Residential Gateway Router Vulnerabilities

Posted on April 22, 2013 by AnarchyAngel

I have discovered two Vulnerabilities in the Cisco DDR2200 ADSL2 Residential Gateway Router. The first vulnerability is that this device responds to UPNP multicast packets and UPNP SOAP requests out side of its local area network. Allowing attackers to forward … Continue reading →

Posted in exploit, hacking, hardware, security | Leave a comment

Upnp Exploiter

Posted on April 10, 2013 by AnarchyAngel

dc414 and I are proud to introduce Upnp Exploiter! A Upnp scanner and exploit tool. This tool comes with two main scanning functions and exploit functions. The first scanning functions is the target scan. Here you can pick a single … Continue reading →

Posted in exploit, hacking, hardware, python, release, security, software | 14 Comments

April meeting recap

Posted on April 8, 2013 by AnarchyAngel

Aprils meeting was awesome! Ngharo started us off with room introductions, which was helpful considering all the new faces at this meeting. Next I gave a quick demo of my new tool Upnp Exploiter. Which lead to me disclosing two … Continue reading →

Posted in exploit, hacking, hardware, meetings, projects, python, security, software | Leave a comment

March meeting madness!

Posted on March 9, 2013 by AnarchyAngel

The March meeting was no let down, we had lots of people and as always great demos. Ngharo got it started with a make your own pringles can cantenna. 9 luck attendees got to make and take home their own cantenna!  Then he kept it going … Continue reading →

Posted in exploit, freedom, group news, hacking, hardware, meetings, picking, privacy, projects, security | Leave a comment

December meeting recap

Posted on December 10, 2012 by AnarchyAngel

Ngharo got this started with going around the room and asking everyone what they have been hacking and what they plan on hacking on next, then talking about some improvements to the dc414 server, such as how it is now … Continue reading →

Posted in exploit, freedom, group news, hacking, meetings, privacy, security, site news | Leave a comment

September meeting recap

Posted on September 12, 2012 by AnarchyAngel

Last meeting was awesome as always, we had some good demos and new faces which is always great. Ngharo started it off going around the room and asking ppl what they hacked last month and what they plan to hack … Continue reading →

Posted in exploit, freedom, group news, hacking, hardware, meetings, privacy, release, software | 1 Comment