XSS Vulnerability Found On HP (Hewlett Packard ) By Mohit Pande

Non persistent XSS Vulnerability Found On HP (Hewlett Packard ) By Mohit Pande Aka Toshu

Vulnerable Website:-

http://www.hp.com/

Vulnerable Link:-

http://www8.hp.com/us/en/hp-search/search.html?nores=true&qt=%3CMarquee%3EMohit%20Pande%20Aka%20Toshu%20!%3C/marquee%3E%3Ciframe%20src=http://i52.tinypic.com/bgyz2q.jpg/%20height=800%20width=800

 

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">XSS Vulnerability Found On HP (Hewlett Packard ) By Mohit Pande"https://www.voiceofgreyhat.com/2011/08/xss-vulnerability-found-on-hp-hewlett.html</a>

G.NA’s Official Twitter Account Hacked

 

Fans were surprised to see that G.NA’s official Twitter account was hacked by a spam bot.
In the early morning, a spam tweet was posted on her Twitter with instructions on how to make $470 USD.  Since G.NA was preparing for her comeback in the practice room, she didn’t discover what happened until much later. 

She quickly tweeted, 

 

“I was hacked. No!”
 

Cube Entertainment said, “It seems her account was either hacked or her password was leaked. Twitter is a form of communication between singers and their fans, so this issue has taken us by surprise.”
 

Now that her Twitter seems more secure, G.NA can refocus on her comeback, scheduled for next mont

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">G.NA’s Official Twitter Account Hacked"https://www.voiceofgreyhat.com/2011/08/gnas-official-twitter-account-hacked.html</a>

PayPal Sent 1,000 IP Addresses List of Anonymous to FBI

In cooperation with the FBI, PayPal sent them a list of about 1,000 IP addresses that carried malicious code during Anonymous' attacks on it last year, which helped agents target specific people in recent raids that led to 16 arrests.

An affidavit filed by Special Agent Chris Thompson reveals that PayPal worked closely with the feds to nail down those responsible for the attacks on it, from the time the attacks started to about a week later, when PayPal found warnings about the FBI sweeps circulating amongst participants in the attacks.  

As early as December, FBI agents had been in contact with Dave Weisman, PayPal's senior manager of its Electronic Crimes and Threat Intelligence Unit. They shared a conference call two days after PayPal was hit with a distributed denial of service (DDos) attack in retaliation for suspending donations  to WikiLeaks through its PayPal account. PayPal reported several attacks to the FBI that occurred between Dec. 6 and 10.

On Dec.15, PayPal provided agents with a thumb drive that contained "logs and report detailing information regarding approximately 1,000 IP addresses that sent malicious network packets to PayPal during the DDoS attacks."

The 1,000 IP addresses were derived from logs created by a PayPal-owned Radware device that records the attackers' IP addresses and the malicious signature it's programmed to recognize. According to the affidavit, a senior security engineer at eBay identified the specific set of strings being used in the attacks, and found only half a dozen variations, leading investigators to be able to pinpoint the patterns of the infiltration.

The IP addresses captured by PayPal were able to be linked to specific premises through subpoenas served upon AT&T and other Internet Service Providers. One of the 1,000 IP addresses given to the FBI by PayPal sent more than 3,600 "malicious network packets" to PayPal between Dec. 8 and 9. A federal grand jury subpoena was served on AT&T on Jan. 6, which AT&T complied with a response on Jan. 18, which led to Valori S. Reid and Peter B. Reid, and their 19-year-old son Ethan, in Arlington, Texas. 

The Reids weren't arrested, but their home was the site of one of 35 search warrants executed by the FBI in relation to the Anonymous investigation. 

Here is a screen shots or warning for every suspects who might have been involved in that operation:-  

-News Source (NBC)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">PayPal Sent 1,000 IP Addresses List of Anonymous to FBI"https://www.voiceofgreyhat.com/2011/08/paypal-sent-1000-ip-addresses-list-of.html</a>

Gawker Media's Web-server, DB, Online Accounts Hacked By Gnosis (#operationpayback)

A hacker group (Gnosis) has claimed to have successfully carried out an attack on Gawker Media, the parent company of sites like Gizmodo, Lifehacker, Kotaku, and Gawker. The group has posted an extensive list of usernames and passwords of Gawker Media accounts, including the company's founder Nick Denton. According to the information on PasteBin, Denton uses the same password for many of his accounts across the Internet. In addition, FTP information was taken in the attack.

At this point in time, it's unclear which hacker group is responsible for the attack. The PasteBin was filed by someone going by the name "Gnosis," as seen in the ASCII art at the top of the document. In addition, the name carries the tagline "Where is your god now!?!?" With that being said, the person who filed the PasteBin document does make some references to renowned hacker group "Anonymous." However, it's unclear if he/she is associated with Anonymous or is just using that name. 

This is the second time Gawker Media has been hacked in the last year. The first time was in early December 2010, where thousands of accounts were compromised.  

To see the exposed credentials including FTP information, DB, user a/c and so on click here

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Gawker Media's Web-server, DB, Online Accounts Hacked By Gnosis (#operationpayback)"https://www.voiceofgreyhat.com/2011/08/gawker-medias-web-server-db-online.html</a>

30 Chinese Government Sites Hacked By Hitcher

 

30 Chinese Government Sites Hacked By Hitcher

Hacked Sites:-

 

http://www.zjkqx.gov.cn/hitcher.html

http://www.zzx.gov.cn/hitcher.html

http://xmxf.gov.cn/hitcher.html

http://xpfj.lygga.gov.cn/hitcher.html

http://xxb.leiyang.gov.cn/hitcher.html

http://xzspb.zhidan.gov.cn/hitcher.html

http://yc.gawater.gov.cn/hitcher.html

http://ylxwsj.gov.cn/hitcher.html

http://ymj.xxz.gov.cn/hitcher.html

http://www.zgshjs.gov.cn/hitcher.html

http://www.xzll.gov.cn/hitcher.html

http://www.xxdjw.gov.cn/hitcher.html

http://www.wxhb.gov.cn/hitcher.html

http://www.wlmqqx.gov.cn/hitcher.html

http://www.zgczsj.gov.cn/hitcher.html

http://www.yjghj.gov.cn/hitcher.html

http://www.ycqb.gov.cn/hitcher.html

http://www.ycthjc.gov.cn/hitcher.html

http://www.txdj.gov.cn/hitcher.html

http://www.tljj.gov.cn/hitcher.html

http://www.szxcdj.gov.cn/hitcher.html

http://www.szdj.gov.cn/hitcher.html

http://www.szdj.gov.cn/hitcher.html

http://www.sxsd.gov.cn/hitcher.html

http://www.shaanxigrain.gov.cn/hitcher.html

http://www.cznqdw.gov.cn/hitcher.html

http://www.sdai.gov.cn/hitcher.html

http://www.qhrf.gov.cn/hitcher.html

http://www.pds12345.gov.cn:8500/hitcher.html

http://www.niwosf.com/hitcher.html

 

Mirror Link:-

 

http://k0-ka.in/attack/?id=28212

http://k0-ka.in/attack/?id=28211

http://k0-ka.in/attack/?id=28210

http://k0-ka.in/attack/?id=28209

http://k0-ka.in/attack/?id=28211

http://k0-ka.in/attack/?id=28210

http://k0-ka.in/attack/?id=28209

http://k0-ka.in/attack/?id=28208

http://k0-ka.in/attack/?id=28207

http://k0-ka.in/attack/?id=28204

http://k0-ka.in/attack/?id=28203

http://k0-ka.in/attack/?id=28202

http://k0-ka.in/attack/?id=28201

http://k0-ka.in/attack/?id=28200

http://k0-ka.in/attack/?id=28199

http://k0-ka.in/attack/?id=28197

http://k0-ka.in/attack/?id=28196

http://k0-ka.in/attack/?id=28195

http://k0-ka.in/attack/?id=28194

http://k0-ka.in/attack/?id=28222

http://k0-ka.in/attack/?id=28221

http://k0-ka.in/attack/?id=28220

http://k0-ka.in/attack/?id=28219

http://k0-ka.in/attack/?id=28218

http://k0-ka.in/attack/?id=28217

http://k0-ka.in/attack/?id=28216

http://k0-ka.in/attack/?id=28215

http://k0-ka.in/attack/?id=28214

http://k0-ka.in/attack/?id=28213

 

To see the pastebin posted by the hacker click here 

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">30 Chinese Government Sites Hacked By Hitcher"https://www.voiceofgreyhat.com/2011/08/30-chinese-government-sites-hacked-by.html</a>

vfirstmarketing.in Hacked By Xahra (Female Hacker)

vfirstmarketing.in Hacked By Xahra (Female Hacker) 

Hacked Site:-
http://vfirstmarketing.in/

Mirror Link:-
http://zone-h.org/mirror/id/14536395

Message Spread by Xahra:-

"Free Kashmir & Palestine! - Palestine + Kashmir = One Struggle. // End the Occupation. . . .

Everyday 100s of innocent people are abused, raped and even killed in palestine & kashmir by the indian & israli army, a third of the deaths are children, who are the real soldiers? the child holding a stone or the stranger holding a gun? - we dont want war, take back ur men, ur tanks and ur guns and go back to were you came from, all we ask is for freedom, you can kill us but you cant kill us all, we shall not give up, giving up is not a option. Freedom is our goal..."

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">vfirstmarketing.in Hacked By Xahra (Female Hacker)"https://www.voiceofgreyhat.com/2011/08/vfirstmarketingin-hacked-by-xahra.html</a>

2 Websites Including Thier Subdomains hacked By ZHC UNKNOWN & ZHC defacer

astronumo & 123coimbatore.com and also their sub-domains Hakced By ZHC UNKNOWN & ZHC defacer Through the defacement  they Delivered their Message.

Hacked Sites:-

http://www.astronumo.com/

http://123coimbatore.com/ 

Mirror Links:-

http://www.zone-h.org/mirror/id/14523824

http://zone-h.org/mirror/id/14524409

Sub domains:-
dharshini.123coimbatore.com
webdesign.123coimbatore.com

Message OF ZHC:-

"Free Kashmir .. Freedom is our goal..// End the Occupation. . . .

This institutionalised impunity with which the killings of civilians by military and police forces in Jammu and Kashmir continues should be a source of shame for India which propagates to be a democracy!
Kashmir does not want militarized governance - STOP killing children, raping women and imprisoning the men! They just want freedom! Freedom from the evil of the Indian Military!
You will never kill the Kashmiri spirit and remember one thing India; Ghandi himself said - Freedom is never dear at any price. It is the breath of life. What would a man not pay for living?
Everyday 100s of innocent people are abused, raped and even killed in kashmir by the indian army, a third of the deaths are children, - we dont want war, take back your men, your tanks and your guns and go back to where you came from, all we ask is for freedom, you can kill us but you cant kill us all, we shall not give up, giving up is not an option.
who are the real soldiers? the childs holding stones or the Army men holding guns?..."

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">2 Websites Including Thier Subdomains hacked By ZHC UNKNOWN & ZHC defacer"https://www.voiceofgreyhat.com/2011/08/2-websites-including-thier-subdomains.html</a>