Ophcrack LiveCD 3.4.0 Released (Free Windows Password Cracker)

Ophcrack LiveCD 3.4.0 Released (Free Windows Password Cracker)

After the release Ophcrack 3.4.0 both Windows & Linux installer now the developer at Ophcrack has released the new LiveCD includes the latest version of Ophcrack 3.4.0. This edition of Ophcrack is built on Slitaz 4.0, the latest version of this great LiveCD. Christophe Lincoln from Slitaz helped us to enhance the scripts for partitions and tables detection. A new ncurses interface is also available to help users look for tables on other drives or interact with ophcrack.

Finally a LiveCD without tables has been released as well for users that already downloaded or bought tables. The directory containing the table files must be placed inside another directory called tables in order for ophcrack to find them automatically. 

Features:-

• Runs on Windows, Linux/Unix, Mac OS X, ...

• Cracks LM and NTLM hashes.

• Free tables available for Windows XP and Vista/7.

• Brute-force module for simple passwords.

• Audit mode and CSV export.

• Real-time graphs to analyze the passwords.

• LiveCD available to simplify the cracking.

• Dumps and loads hashes from encrypted SAM recovered from a Windows partition.

• Free and open source software (GPL).

To Download Ophcrack 3.4.0 Live CD Click Here.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Ophcrack LiveCD 3.4.0 Released (Free Windows Password Cracker)"https://www.voiceofgreyhat.com/2012/05/ophcrack-livecd-340-released-free.html</a>

Ophcrack 3.4.0 Released (Windows Password Cracker Based on Rainbow Tables)

Ophcrack 3.4.0 Released (Windows Password Cracker Based on Rainbow Tables)

After almost three years without news, here comes the version 3.4.0 of ophcrack. This will probably be the final release in the 3.x branch. It adds the support of the soon to be released XP flash and Vista eight XL tables. On Windows it also adds the support of dumping the hashes through samdump2 live using NTFS low-level access to the locked files.

Brief About Ophcrack:-

Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms. 

Features :-

•  Runs on Windows, Linux/Unix, Mac OS X, ...
• Cracks LM and NTLM hashes.
• Free tables available for Windows XP and Vista/7.
• Brute-force module for simple passwords.
• Audit mode and CSV export.
• Real-time graphs to analyze the passwords.
• LiveCD available to simplify the cracking.
• Dumps and loads hashes from encrypted SAM recovered from a Windows partition.
• Free and open source software (GPL).

To Download Ophcrack 3.4.0 Installer for both Windows & Linux click Here. If you want to get the tables to crack LM Password hashes for (Windows XP, Vista & 7) click Here.  

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Ophcrack 3.4.0 Released (Windows Password Cracker Based on Rainbow Tables)"https://www.voiceofgreyhat.com/2012/04/ophcrack-340-released-windows-password.html</a>

Red Hat Announced Beta of Red Hat Enterprise Linux (RHEL) 6.3

Red Hat Announced Beta of Red Hat Enterprise Linux 6.3

Just over four months after the release of Red Hat Enterprise Linux (RHEL) 6.2, developer at RedHat has made a beta of version of RHEL 6.3 available. This beta includes a broad set of updates to the existing feature set and also provides rich new functionality particularly in the areas of virtualization, scalability, storage, file systems, and security. As always, the Red Hat Enterprise Linux 6.3 beta delivers new hardware enablement made possible by our strong relationships with our strategic hardware partners. This beta release has been designed for optimized performance, scalability, and reliability to cater to the diverse workloads running in physical, virtual and cloud environments.

Key Features in the Red Hat Enterprise Linux 6.3 Beta:-

Virtualization-

• A new tool called Virt-P2V that facilitates the conversion of physical Windows or Red Hat Enterprise Linux systems into virtual images to be deployed as KVM guests inside Red Hat Enterprise Linux or Red Hat Enterprise Virtualization.

• Stronger compliance with Payment Card Industry Data Security Standards (PCI-DSS), including the ability to perform secure wipes of virtual machine disks.

• The ability to perform live volume resizing, improving the overall availability of virtualized guests.

Scalability-

• The maximum number of virtual CPUs (vCPUs) has been increased from 64 to 160, which lets you run larger CPU-intensive workloads on the Red Hat Enterprise Linux platform. VMware ESX 5.0 currently support 32 vCPUs.

• The maximum supported memory configuration for KVM guests has been increased from 512GB to 2TB.

File Systems-

• GFS2 enhancements that create faster read-write capabilities for specific use cases.

• Support of O_Direct in FUSE (Filesystem in User Space), which can provide improved performance for certain workloads.

• Simplified configuration and administration for the file system. Integration of automount capability with System Security Services Daemon (SSSD) provides centralized management of configuration data and the ability to improve performance through caching and load balancing. (This feature is a Technology Preview.)

Storage-

• Red Hat Enterprise Linux 6.3 provides full support for Fibre Channel over Ethernet (FCoE) Target. This feature, which was previously provided as a Technology Preview, allows customers to present their Red Hat Enterprise Linux servers as FCoE storage devices. This feature complements the FCoE Initiator support that was delivered in Red Hat Enterprise Linux 6.0.

• The Logical Volume Manager (LVM) now provides support for RAID levels 4, 5, and 6. (Previously, support for these RAID levels was provided through the MD subsystem.) This expanded LVM RAID support simplifies overall storage administration by consolidating all management functions, such as creating volumes, resizing volumes, deploying RAID, taking snapshots, etc., into a single interface. (This feature is a Technology Preview.)

• The LVM now provides the ability to create thin provisioned logical volumes. Previously, storage was allocated when the volume was created, and needed to be monitored for space consumption and expanded manually. In Red Hat Enterprise Linux 6.3, storage is allocated as required, allowing volumes to expand up to the requested size on demand without intervention. (This feature is a Technology Preview.)

Security-

• Availability of a two-factor authentication mechanism, enhancing the overall security available to lock down Red Hat Enterprise Linux environments and enabling compliance with industry standards such as PCI-DSS.

• Expansion of the Advanced Encryption Standard (AES) to provide particular benefits for system performance on multi-processor machines.

Identity Management-

• With native support for netgroups and the services map in System Security Services Daemon (SSSD), Red Hat Enterprise Linux servers can be integrated into centralized systems -- such as Active Directory -- to manage system users.

• The addition of an automembership plug-in streamlines the administration of new users and hosts when they are added into the Identity Management system by automatically placing them into a predefined set of groups, speeding user and host provisioning.

• Performance improvements through session data caching, which lowers the overall load on authentication servers.

Hardware Enablement-

• Software bandwidth management for USB 3.0 for select Intel platforms is now available.

• Compiler optimization for Intel Xeon E5 processor family, which improves the result of string operations, is now included.

• Improvements to memory and I/O breakpoint execution operations within compiler tools are now included.

Developer Tools-

• With the introduction of OpenJDK 7, customers can develop and test with the latest version of open source Java.

To Download Red Hat Enterprise Linux 6.3 Click Here

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Red Hat Announced Beta of Red Hat Enterprise Linux (RHEL) 6.3"https://www.voiceofgreyhat.com/2012/04/red-hat-announced-beta-of-red-hat.html</a>

Microsoft Announced Three Editions of Windows 8 Along With Key Features

Microsoft Announced Three Editions of Windows 8 Along With Key Features

Earlier we have discussed on Consumer Preview Windows 8 & Windows 8 Developer Preview. Now In the official blog post Microsoft Windows Communications Manager Brandon LeBlanc Microsoft announced three editions of its upcoming Windows 8 platform: Windows 8, Windows 8 Pro and Windows RT, which was previously known at Windows on ARM, or WOA. According to Brandon LeBlanc’s post, Windows 8 Pro will include everything in Windows 8 along with advanced features such as encryption, virtualization, PC management and domain connectivity. Windows 8 Pro users will also be able to purchase Windows Media Center as a cheaper add-on. Microsoft recommends Windows 8 (the entry-level, limited functionality edition) for home use. As usual, this edition does not include BitLocker hard drive encryption, EFS file encryption or the ability to boot from a VHD. It is also not possible to access it using Remote Desktop (host). Computers running this edition are also unable to join domains and can't be managed using group policies. All these functions are reserved for Windows 8 Pro, as is the Hyper-V client for desktop visualization. 

Key Features:- 

Feature name	Windows 8	Windows 8 Pro	Windows RT
Upgrades from Windows 7 Starter, Home Basic, Home Premium	x	x
Upgrades from Windows 7 Professional, Ultimate		x
Start screen, Semantic Zoom, Live Tiles	x	x	x
Windows Store	x	x	x
Apps (Mail, Calendar, People, Messaging, Photos, SkyDrive, Reader, Music, Video)	x	x	x
Microsoft Office (Word, Excel, PowerPoint, OneNote)			x
Internet Explorer 10	x	x	x
Device encryption			x
Connected standby	x	x	x
Microsoft account	x	x	x
Desktop	x	x	x
Installation of x86/64 and desktop software	x	x
Updated Windows Explorer	x	x	x
Windows Defender	x	x	x
SmartScreen	x	x	x
Windows Update	x	x	x
Enhanced Task Manager	x	x	x
Switch languages on the fly (Language Packs)	x	x	x
Better multiple monitor support	x	x	x
Storage Spaces	x	x
Windows Media Player	x	x
Exchange ActiveSync	x	x	x
File history	x	x	x
ISO / VHD mount	x	x	x
Mobile broadband features	x	x	x
Picture password	x	x	x
Play To	x	x	x
Remote Desktop (client)	x	x	x
Reset and refresh your PC	x	x	x
Snap	x	x	x
Touch and Thumb keyboard	x	x	x
Trusted boot	x	x	x
VPN client	x	x	x
BitLocker and BitLocker To Go		x
Boot from VHD		x
Client Hyper-V		x
Domain Join		x
Encrypting File System		x
Group Policy		x
Remote Desktop (host)		x

Announcing the Windows 8 Editions:-  

"First, Windows 8 is the official product name for the next x86/64 editions of Windows.

For PCs and tablets powered by x86 processors (both 32 and 64 bit), we will have two editions: Windows 8 and Windows 8 Pro. For many consumers, Windows 8 will be the right choice. It will include all the features above plus an updated Windows Explorer, Task Manager, better multi-monitor support and the ability to switch languages on the fly (more details on this feature can be found in this blog post),which was previously only available in Enterprise/Ultimate editions of Windows. For China and a small set of select emerging markets, we will offer a local language-only edition of Windows 8.

Windows 8 Pro is designed to help tech enthusiasts and business/technical professionals obtain a broader set of Windows 8 technologies. It includes all the features in Windows 8 plus features for encryption, virtualization, PC management and domain connectivity. Windows Media Center will be available as an economical “media pack” add-on to Windows 8 Pro. If you are an enthusiast or you want to use your PC in a business environment, you will want Windows 8 Pro.

Windows RT is the newest member of the Windows family – also known as Windows on ARM or WOA, as we’ve referred to it previously. This single edition will only be available pre-installed on PCs and tablets powered by ARM processors and will help enable new thin and lightweight form factors with impressive battery life. Windows RT will include touch-optimized desktop versions of the new Microsoft Word, Excel, PowerPoint, and OneNote. For new apps, the focus for Windows RT is development on the new Windows runtime, or WinRT, which we unveiled in September and forms the foundation of a new generation of cloud-enabled, touch-enabled, web-connected apps of all kinds.  For more details on WOA, we suggest reading this blog post which shares more detail on how we have been building Windows 8 to run on the ARM architecture..."

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Microsoft Announced Three Editions of Windows 8 Along With Key Features"https://www.voiceofgreyhat.com/2012/04/microsoft-announced-three-editions-of.html</a>

Microsoft Closing Support for Windows XP & Office 2003 in 2 Years

Microsoft Closing Support for Windows XP & Office 2003 in 2 Years

Bad news for Windows XP lovers, Microsoft declared that they will officially end support for Windows XP and Office 2003 in two years--on April 8, 2014, to be exact. Additionally, mainstream support for Windows Vista ends Tuesday. That means the few Vista users that are out there will be charged on a per-incident basis for support going forward. 

"If you still have some PCs running Windows XP and Office 2003, now would be a good time to start migrating them to Windows 7 and Office 2010," said Stella Chernyak, a marketing director in Microsoft's Windows group. "Windows XP and Office 2003 were great software releases in their time, but the technology environment has shifted. Technology continues to evolve and so do people's needs and expectations. Modern users demand technologies that fit their personal workstyle and allow them to stay productive anywhere anytime, while businesses have an ever increasing need to protect data and ensure security, compliance and manageability" - she added. 

But there's a large amount of users still using XP up to SP3, and not everyone will be happy about having to upgrade. And enterprise deployment can take anywhere between 18 to 32 months from business case through full deployment, so those who want to stick with Windows and Office should begin planning, well, now. The company recommends switching to Windows 7 and Office 2010 rather than waiting for Windows 8. Microsoft wants to facilitate that migration and is thus offering a free download of the Microsoft Deployment Toolkit. It will assist with new deployments of Windows 7, Windows Server 2008 R2, Windows Vista, Windows XP, Windows Server 2008, and Microsoft Office products.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Microsoft Closing Support for Windows XP & Office 2003 in 2 Years"https://www.voiceofgreyhat.com/2012/04/microsoft-closing-support-for-windows.html</a>

Mozilla Put Older & Vulnerable Versions of Java Into Firefox Blocklist

Mozilla Put Older & Vulnerable Versions of Java Into Firefox Blocklist

In the official blog post Mozilla confirmed that they have blacklisted unpatched versions of the Java plug-in from Firefox on Windows in order to protect its users from attacks that exploit known vulnerabilities in those versions. "The February 2012 update to the Java Development Kit (JDK) and Java Runtime Environment (JRE) included a patch to correct a critical vulnerability that can permit the loading of arbitrary code on an end-user’s computer. This vulnerability—present in the older versions of the JDK and JRE—is actively being exploited, and is a potential risk to users. To mitigate this risk, we have added affected versions of the Java plugin for Windows (Version 6 Update 30 and below as well as Version 7 Update 2 and below) to Firefox’s blocklist. A blocklist entry for the Java plugin on OS X may be added at a future date. Mozilla strongly encourages anyone who requires the JDK and JRE to update to the current version as soon as possible on all platforms. Affected versions of the Java plugin will be disabled unless a user makes an explicit choice to keep it enabled at the time they are notified of the block being applied."- Said Mozilla
Unlike Google's Chrome browser, which has a feature specifically aimed at disabling outdated plug-ins, Firefox relies on Mozilla developers deciding which plug-ins pose a risk to users. However, users retain the choice of preventing those plug-ins from being disabled. The Firefox blocklist has rarely been used to disable plug-ins from big software vendors like Oracle, but precedents do exist. In October 2009, Mozilla decided to add Microsoft's Windows Presentation Foundation (WPF) plug-in to the Firefox blocklist after Microsoft revealed that it had a vulnerability.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Mozilla Put Older & Vulnerable Versions of Java Into Firefox Blocklist"https://www.voiceofgreyhat.com/2012/04/mozilla-put-older-vulnerable-versions.html</a>

Microsoft Security Bulletin (March 2012) Closed Critical RDP Security Hole

Microsoft Security Bulletin (March 2012) Closed Critical RDP Security Hole 

Microsoft released March 2012 Security bulletins to close a total of seven security holes in its products. Among them one Critical-class, four Important and one Moderate – addressing seven issues in Microsoft Windows, Visual Studio, and Expression Design. According to Microsoft (MS12-020) remote code execution vulnerability has been found in RDP (Remote Desktop Protocol).

The first of these is a "critical-class" issue in RDP that could be exploited by an attacker to remotely execute arbitrary code on a victim's system. Although RDP is disabled by default, many users enable it so they can administer their systems remotely within their organizations or over the Internet. All supported versions of Windows from Windows XP Service Pack 3 to Windows 7 Service Pack 1 and Windows Server 2008 R2 are affected. As the issue was reported to company by the Zero Day Initiative (ZDI), Microsoft says that it has yet to see any active attacks exploiting these in the wild, but warns that, "due to the attractiveness of this vulnerability to attackers", it anticipates "that an exploit for code execution will be developed in the next 30 days". Because of this it recommends that installing the updates should be made a priority. 

Microsoft has also provided a workaround and a no-reboot "Fix it" tool that enables Network-Level Authentication (NLA) to mitigate the problem. A second "moderate-class" denial-of-service (DoS) which can cripple an RDP server was also fixed.

A brief overview of all of these updates, including descriptions about each of the vulnerabilities, can be found in Microsoft's Security Bulletin Summary for March 2012.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Microsoft Security Bulletin (March 2012) Closed Critical RDP Security Hole"https://www.voiceofgreyhat.com/2012/03/microsoft-security-bulletin-march-2012.html</a>

Internet Explorer & Firefox Also Became Victim To Hackers At Pwn2Own

Internet Explorer (IE 9) & Firefox 10.0.2 Also Became Victim To Hackers At Pwn2Own

At Pwn2Own contest the web-browsers are getting hacked in a series. First it was the turn of Google Chrome where Sergey Glazunov, a Russian security researcher has earned $60,000 by demonstrating how he could waltz past the security sandbox in Google's Chrome browser to run unauthorized code on fully-patched Windows 7 computers. Then the time came for Microsoft's Internet Explorer. A team from a French security firm managed to hack IE 9 on a fully patched Windows 7 SP1 machine. The group from Paris-based Vupen Security brought down IE9 running on Windows 7 by exploiting a pair of previously-unknown "zero-day" bugs that bypassed the operating system's defensive technologies to execute attack code, allowing that code to escape from IE's "Protected Mode," the browser's limited-rights anti-exploit system. They managed to bypass the browser's DEP and ASLR protection with a 0-day heap overflow vulnerability, and then used a separate memory corruption bug to break out of its Protected Mode, which is effectively a sandbox. According to VUPEN founder Chaouki Bekrar, these particular flows have existed in previous incarnations of the browser - all the way back to IE 6 - and will very likely work on the upcoming IE 10.

Then the turn of Firefox came. Mozilla’s Firefox is the latest browser to fall victim to hackers at this year’s Pwn2Own hacker contest. Two researchers working together – Willem Pinckaers and Vincenzo Iozzo — exploited a single zero-day vulnerability in the latest Firefox 10.0.2 on a fully patched Windows 7 SP1 PC to cart off a $30,000 cash prize.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Internet Explorer & Firefox Also Became Victim To Hackers At Pwn2Own"https://www.voiceofgreyhat.com/2012/03/internet-explorer-firefox-also-became.html</a>

After Google Chrome Hack Sergey Glazunov Earnd $60,000 At Pwnium Contest

Sergey Glazunov, A Security Researcher Earn $60,000 At Pwnium After Google Chrome Hack

Sergey Glazunov, a Russian security researcher has earned $60,000 by demonstrating how he could waltz past the security sandbox in Google's Chrome browser to run unauthorized code on fully-patched Windows 7 computers. Glazunov discovered a remote code execution vulnerability in Chrome, that could be used by malicious hackers and cyber criminals to install and run code on innocent users' computers, just by them visiting a website. Glazunov, who is no stranger to reporting bugs in Chrome, won his substantial reward as part of the Pwnium competition run by Google at the CanSecWest conference in downtown Vancouver.
Senior Vice President of Google Chrome and Apps, Sundar Pichai, confirmed the successful hack on his Google+ page. Now that the hack is known throughout the developer world, Pichai understandably said, “Congrats to long-time Chromium contributor Sergey Glazunov who just submitted our first Pwnium entry. Looks like it qualifies as a “Full Chrome” exploit, qualifying for a $60k reward. We’re working fast on a fix that we’ll push via auto-update. This is exciting; we launched Pwnium this year to encourage the security community to submit exploits for us to help make the web safer. We look forward to any additional submissions to make Chrome even stronger for our users.”

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">After Google Chrome Hack Sergey Glazunov Earnd $60,000 At Pwnium Contest"https://www.voiceofgreyhat.com/2012/03/after-google-chrome-hack-sergey.html</a>

HTC Is Going To Release First Windows Phone 7 Handset (HTC Kaixuan) For China

HTC Is Going To Release  First Windows Phone 7 Handset (HTC Kaixuan) For China

Finally the Microsoft Mobile OS reached the key market of China. Taiwanese smart phone maker HTC has planed to release what could be the first Windows Phone 7 handset for mainland China. The HTC Kaixuan (triumphant return) will be launched later this month, the company said in a statement on Tuesday. HTC is already accepting pre-orders for the device on its online store in China for 4,399 yuan (US$698). Microsoft had said it expected its Windows Phone 7 mobile OS to launch in China during the first half of this year. Handset makers Nokia and ZTE also plan to release Windows Phone 7 smartphones in 2012.
HTC, however, said the Kaixuan is different in that its Windows Phone 7.5 OS has been localized for Chinese users. For instance, the Kaixuan comes installed with Sina Weibo, China's version of Twitter. Windows Phone 7 is however coming to China at a time when Google's Android OS is dominant, with a 56 percent share of the market in 2011, according to research firm Canalys. Android's open source nature has been the big reason behind the success of the OS, said Canalys research director Nicole Peng. This has allowed Chinese companies and developers to build a strong ecosystem around Android, resulting in localized versions of the OS and apps specially built for average Chinese consumers, she added. To compete with Android, Microsoft will need to develop the same kind of ecosystem for its Windows Phone 7 OS, which it so far lacks in China. "For Windows Phone 7, the biggest problem is the system is not localized enough," Peng said.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">HTC Is Going To Release First Windows Phone 7 Handset (HTC Kaixuan) For China"https://www.voiceofgreyhat.com/2012/03/htc-is-going-to-release-first-windows.html</a>

Windows 8 Consumer Preview & Windows Server 8 Beta By Microsoft (Freely Downloadable)

Microsoft Released Windows 8 Consumer Preview & Windows Server 8 Beta (Freely Downloadable)

A double boom for Windows lovers. Software giant Microsoft has officially released the Consumer Preview Windows 8 & Windows Server 8 Beta.

Windows 8 Consumer Preview :-

The Windows 8 Consumer Preview offers a more robust experience for testing the world's most popular operating system and is available to the widest range of people yet following the initial release of the Windows 8 Developer Preview late last year. The Developer Preview received more than 3 million downloads.

"With Windows 8, we reimagined the different ways people interact with their PC and how to make everything feel like a natural extension of the device, whether using a Windows 8 tablet, laptop or all-in-one," said Steven Sinofsky, president of the Windows and Windows Live Division at Microsoft. "The Windows 8 Consumer Preview brings a no-compromises approach to using your PC."

The test "beta" version of the revamped system was introduced at the Mobile World Congress in Barcelona, the planet's largest cell phone trade show, and borrows some of the look of Microsoft's Windows Phone 7 software for Windows 8. Windows 8 doesn't have the traditional "Start" menu, and applications are spread across a mosaic of tiles in a design Microsoft calls "Metro" -- seen as an attempt by the company as a scramble to preserve its market share. And executives said it powers up on PCs in eight seconds, much faster than the previous version.

What is New In Windows 8 Consumer Preview :-

• Broad range of product changes and improvements. Since the Developer Preview in September, designed to preview the programming platform, Windows 8 has progressed across every dimension. From completing the user experience for touch, keyboard and mouse to refining the development platform, the Consumer Preview improves performance, quality and reliability across all subsystems.

• With the added features, it represents a more complete view of the capabilities of Windows 8. Windows Store with new apps. The Windows 8 Consumer Preview marks the beta opening of the Windows Store, which is filled with a variety of new Metro style apps from both third-party developers and Microsoft. During the Consumer Preview, these apps are available to try and experience at no cost to users. The Windows Store will offer personalised recommendations, and Windows 8 gives users the ability to take their apps and settings with them across multiple PCs, making it easy to discover and try new apps while offering developers the greatest opportunity of any platform.

• Connecting to the cloud across Windows-based PCs and Windows Phone 7. The Windows 8 Consumer Preview offers seamless integration with the content people care about across their Web services. An optional additional sign-on with a Microsoft account provides access to a host of features, including the ability to roam all settings, use cloud storage, communicate with email, calendar and contacts, and connect to a broad range of services. Your connection to the cloud works across your Windows-based PCs and your Windows 7 phones.

• Internet Explorer 10 Platform Preview 5. The best way to experience the Web on Windows is with Internet Explorer 10. The browser has been re-imagined to create a new experience designed specifically for Windows 8 devices. It provides an edge-to-edge user interface that is all about less browser and more Web. Fast and fluid, Internet Explorer is hardware-accelerated to enable Web performance.

• Preview of new hardware capabilities. At the event, Microsoft also showcased Windows 8 running on a wide range of new x86- and ARM-based reference hardware. This hardware will be available to select developers for trial and testing as previously announced.

Additional details can be found on the official website of Microsoft Windows. Also Microsoft makes Windows 8 Consumer Preview is made available for free Download

Windows Server 8 Beta :- 

The beta of Windows Server 8 is now available for IT professionals and software developers around the world to download. In the Windows Server official Blog Bill Laing, Corporate Vice President of Microsoft Corporation Said - In September we introduced Windows Server “8” with a preview to help developers and hardware partners prepare new and existing applications, systems and devices. The response from that community, along with hundreds of customers in our early adopters program, has been incredibly positive. A common theme of feedback has been how broad and deep the new capabilities are. Now is the time for you, IT professionals in organizations of all sizes, to get your hands on this new release, discover the new capabilities and contribute to the development of what we call the cloud-optimized OS.
I’ll highlight in this post just a few examples of new capabilities that you’ll want to explore. With the new Hyper-V we are taking virtualization above and beyond to provide a multi-tenant platform for cloud computing. For example, with Hyper-V Network Virtualization you can create virtual networks so different business units, or even multiple customers, can seamlessly share network infrastructure.  You will be able to move virtual machines and servers around without losing their network assignments. In Windows Server “8” we are delivering high availability and disaster recovery through software technology on much more cost effective hardware. For example, with File Server Transparent Failover you can now more easily perform hardware or software maintenance of nodes in a File Server cluster by moving file shares between nodes with little interruption to server applications that are storing data on those file shares. We’re also delivering a tremendous amount of new capabilities for multi-machine management and automation. You will want to explore the dramatic new improvements to Server Manager, as well as the new Windows PowerShell. With 2,300 commandlets provided out of the box, Windows PowerShell allows you to automate everything you can do manually with the user interface. And, with technologies like Intellisense, we’ve made it very easy for you to master all of that power. Additionally, Windows Server “8” provides a powerful server application platform that enables you to develop and host the most demanding of application workloads. For example, with .NET Framework 4.5 you can take advantage of new asynch language and library support to build server and web applications that scale far beyond what other platforms provide. Our new IIS 8 web server provides better security isolation and resource sand-boxing between applications, native support for web sockets, and the ability to host significantly more sites on a server.

For Additional Information & To Download Windows Server 8 Beta Click Here

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Windows 8 Consumer Preview & Windows Server 8 Beta By Microsoft (Freely Downloadable)"https://www.voiceofgreyhat.com/2012/03/windows-8-consumer-preview-windows.html</a>

MadSpot Shell Ver 1.0 By MadSpot Security Team

MadSpot Shell Ver 1.0 By MadSpot Security Team

MadSpot Security Team officially released their MadSpot Shell Ver 1.0. In press release Ikram Ali the author & team leader said that this shell will be very useful option for penetration testers to penetrate there servers for finding of vulnerabilities in multiple way. The shell can be used in both Windows & Linux server. 

Features:- 

1.Process Details

Show all most all possible details of process Running on server like Process status

• Syslog

• Resolv

• Hosts

• Passwd

• Cpuinfo

• Version

• Sbin

• Interrupts

• lsattr

• Uptime

• Fstab 

• HDD Space

2. EVAL
Having-

• NI_INFO

• phpinfo

• extensions

3.SQL
4.Hash

• Base64 encode

• Base64 decode

• md5 hash

• Sha1 hash

• crypt

• CRC32

• Url encode

• Url decode

• Full urencode

• Htmlpecialchars

5.PERL AND PHP(threads) BACK CONNECT
6.ZONE-H MASS DEFACER
7.UDP DOSSIER (DDOS)
8.SAFE MODE AND MOD SECURITY DISABLED AND PERL 500 INTERNAL ERROR BYPASS
9.Symlink
10.Killcode

To Download MadSpot Shell Ver 1.0 Click Here

(Password:- http://madspot.net)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">MadSpot Shell Ver 1.0 By MadSpot Security Team"https://www.voiceofgreyhat.com/2012/03/madspot-shell-ver-10-by-madspot.html</a>

Google Offers $1 Million For Hackers To Exploit Chrome (Pwnium: Rewards For Exploits)

Google Offers $1 Million For Hackers To Exploit Chrome (Pwnium: Rewards For Exploits)

The search giant Google is offering a huge amount (total $1 million) of reward for those who will successfully hack the Google Chrome browser at the Pwn2Own Hacker Contest taking place next week (7 March, 2012). Google will reward those successful contestants at Pwn2Own with prices of $60,000, $40,000 and $20,000 – depending on the severity of the exploits that are demonstrated on a Windows 7 machine running the browser. The Prizes will be awarded on a first-come-first-serve basis, until the entire $1 million has been claimed.

Chrome is currently the only web browser eligible for entry into Pwn2Own that has never been successfully hacked. Contestants often note the difficulty of bypassing Google’s security sandbox as a reason for this. “While we’re proud of Chrome’s leading track record in past competitions, the fact is that not receiving exploits means that it’s harder to learn and improve,” said Chris Evans and Justin Schuh, members of the Google Chrome security team. “To maximize our chances of receiving exploits this year, we’ve upped the ante. We will directly sponsor up to $1 million worth of rewards.”

Additional information can be found on the Chromium official blog.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Google Offers $1 Million For Hackers To Exploit Chrome (Pwnium: Rewards For Exploits)"https://www.voiceofgreyhat.com/2012/02/google-offers-1-million-for-hackers-to.html</a>

Metasploit 4.2.0 Released With IPv6 Support & Virtualization Target Coverage

Metasploit 4.2.0 Released With IPv6 Support & Virtualization Target Coverage

Earlier we haev discussed many times about one of the most famous and widely used exploitation framework named Metasploit. Yet again the Rapid 7 released another updated version of Metasploit. This update brings Metasploit to version 4.2.0, adding IPv6 support and virtualization target coverage. You'll also notice a new Product News section and update notification for our weekly updates. Since the last major release (4.1.0), added 54 new exploits, 66 new auxiliary modules, 43 new post-exploitation modules, and 18 new payloads. 

Brief About Metasploit:- 

The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits for a variety of platforms. Payloads, encoders, and nop slide generators can be mixed and matched with exploit modules to solve almost any exploit-related task.

Module Changes:-

•     Novell eDirectory eMBox Unauthenticated File Access

•     JBoss Seam 2 Remote Command Execution

•     NAT-PMP Port Mapper

•     TFTP File Transfer Utility

•     VMWare Power Off Virtual Machine

•     VMWare Power On Virtual Machine

•     VMWare Tag Virtual Machine

•     VMWare Terminate ESX Login Sessions

•     John the Ripper AIX Password Cracker

•     7-Technologies IGSS 9 IGSSdataServer.exe DoS

•     Microsoft IIS FTP Server <= 7.0 LIST Stack Exhaustion

•     DNS and DNSSEC fuzzer

•     CheckPoint Firewall-1 SecuRemote Topology Service Hostname Disclosure

•     CorpWatch Company ID Information Search

•     CorpWatch Company Name Information Search

•     General Electric D20 Password Recovery

•     NAT-PMP External Address Scanner

•     Shodan Search

•     H.323 Version Scanner

•     Drupal Views Module Users Enumeration

•     Ektron CMS400.NET Default Password Scanner

•     Generic HTTP Directory Traversal Utility

•     Microsoft IIS HTTP Internal IP Disclosure

•     Outlook Web App (OWA) Brute Force Utility

•     Squiz Matrix User Enumeration Scanner

•     Sybase Easerver 6.3 Directory Traversal

•     Yaws Web Server Directory Traversal

•     OKI Printer Default Login Credential Scanner

•     MSSQL Schema Dump

•     MYSQL Schema Dump

•     NAT-PMP External Port Scanner

•     pcAnywhere TCP Service Discovery

•     pcAnywhere UDP Service Discovery

•     Postgres Schema Dump

•     SSH Public Key Acceptance Scanner

•     Telnet Service Encyption Key ID Overflow Detection

•     IpSwitch WhatsUp Gold TFTP Directory Traversal

•     VMWare ESX/ESXi Fingerprint Scanner

•     VMWare Authentication Daemon Login Scanner

•     VMWare Authentication Daemon Version Scanner

•     VMWare Enumerate Permissions

•     VMWare Enumerate Active Sessions

•     VMWare Enumerate User Accounts

•     VMWare Enumerate Virtual Machines

•     VMWare Enumerate Host Details

•     VMWare Web Login Scanner

•     VMWare Screenshot Stealer

•     Capture: HTTP JavaScript Keylogger

•     Oracle DB SQL Injection via SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION

•     Asterisk Manager Login Utility

•     FreeBSD Telnet Service Encryption Key ID Buffer Overflow

•     Linux BSD-derived Telnet Service Encryption Key ID Buffer Overflow

•     Java Applet Rhino Script Engine Remote Code Execution

•     Family Connections less.php Remote Command Execution

•     Gitorious Arbitrary Command Execution

•     Horde 3.3.12 Backdoor Arbitrary PHP Code Execution

•     OP5 license.php Remote Command Execution

•     OP5 welcome Remote Command Execution

•     Plone and Zope XMLTools Remote Command Execution

•     PmWiki <= 2.2.34 pagelist.php Remote PHP Code Injection Exploit

•     Support Incident Tracker <= 3.65 Remote Command Execution

•     Splunk Search Remote Code Execution

•     Traq admincp/common.php Remote Code Execution

•     vBSEO <= 3.6.0 proc_deutf() Remote PHP Code Injection

•     Mozilla Firefox 3.6.16 mChannel Use-After-Free

•     CTEK SkyRouter 4200 and 4300 Command Execution

•     Adobe Flash Player MP4 SequenceParameterSetNALUnit Buffer Overflow

•     Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute

•     HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution

•     Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Control

•     Java MixerSequencer Object GM_Song Structure Handling Vulnerability

•     MS05-054 Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution

•     MS12-004 midiOutPlayNextPolyEvent Heap Overflow

•     Viscom Software Movie Player Pro SDK ActiveX 6.8

•     Adobe Reader U3D Memory Corruption Vulnerability

•     Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow

•     BS.Player 2.57 Buffer Overflow

•     CCMPlayer 1.5 m3u Playlist Stack Based Buffer Overflow

•     Free MP3 CD Ripper 1.1 WAV File Stack Buffer Overflow

•     McAfee SaaS MyCioScan ShowReport Remote Command Execution

•     Mini-Stream RM-MP3 Converter v3.1.2.1 PLS File Stack Buffer Overflow

•     MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

•     Ability Server 2.34 STOR Command Stack Buffer Overflow

•     AbsoluteFTP 1.9.6 - 2.2.10 LIST Command Remote Buffer Overflow

•     Serv-U FTP Server < 4.2 Buffer Overflow

•     HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflow

•     XAMPP WebDAV PHP Upload

•     Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow

•     Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow

•     HP Diagnostics Server magentservice.exe Overflow

•     StreamDown 6.8.0 Buffer Overflow

•     Wireshark console.lua Pre-Loading Script Execution

•     Oracle Job Scheduler Named Pipe Command Execution

•     SCADA 3S CoDeSys CmpWebServer <= v3.4 SP4 Patch 2 Stack Buffer Overflow

•     Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

•     OpenTFTP SP 1.4 Error Packet Overflow

•     AIX Gather Dump Password Hashes

•     Linux Gather Saved mount.cifs/mount.smbfs Credentials

•     Multi Gather VirtualBox VM Enumeration

•     UNIX Gather .fetchmailrc Credentials

•     Multi Gather VMWare VM Identification

•     UNIX Gather .netrc Credentials

•     Multi Gather Mozilla Thunderbird Signon Credential Collection

•     Multiple Linux / Unix Post Sudo Upgrade Shell

•     Windows Escalate SMB Icon LNK dropper

•     Windows Escalate Get System via Administrator

•     Windows Gather RazorSQL Credentials

•     Windows Gather File and Registry Artifacts Enumeration

•     Windows Gather Enumerate Computers

•     Post Windows Gather Forensics Duqu Registry Check

•     Windows Gather Privileges Enumeration

•     Windows Manage Download and/or Execute

•     Windows Manage Create Shadow Copy

•     Windows Manage List Shadow Copies

•     Windows Manage Mount Shadow Copy

•     Windows Manage Set Shadow Copy Storage Space

•     Windows Manage Get Shadow Copy Storage Info

•     Windows Recon Computer Browser Discovery

•     Windows Recon Resolve Hostname

•     Windows Gather Wireless BSS Info

•     Windows Gather Wireless Current Connection Info

•     Windows Disconnect Wireless Connection

•     Windows Gather Wireless Profile

For additional information click Here. To Download Metasploit version 4.2.0 for windows & Linux click Here.

 -Source (rapid7)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Metasploit 4.2.0 Released With IPv6 Support & Virtualization Target Coverage"https://www.voiceofgreyhat.com/2012/02/metasploit-420-released-with-ipv6.html</a>

Social-Engineer Toolkit (SET) 3.0 Codenamed #WeThrowBaseballs Released

Social-Engineer Toolkit (SET) 3.0 Codenamed #WeThrowBaseballs Released

Earlier we have discussed many times about Social Engineer Toolkit also known as SET. Yet again the developer officially released the updated version of Social Engineer Toolkit Version 3 codename “#WeThrowBaseballs”. According to the developer- This release has been one of the most challenging ones thus far with the largest changelog, code rehaul, and features. Earlier all the version ware made for Unix & Linux platform in this release they have also made SET available for Windows Platform. 

Features:- 
1. Support for Windows – Tested on XP, Windows 7, and Windows Vista. Note that the Metasploit-based payloads to not work yet – when SET detects Windows they will not be shown only RATTE and SET Shell
2. New attack vector added – QRCode Attack – Generates QRCodes that you can direct to SET and perform attacks like the credential harvester and Java Applet attacks
3. Improved A/V avoidance on the SETShell and better performance. I’ve also fixed the non-encrypted communications when AES was not installed
4. Added a number of improvements and enhancements to all aspects of SET including major rehauls of the coding population and moved from things like subprocess.Popen(“mv etc.”) to shutil.copyfile(“etc”)
5. Rehauled SET Interactive Shell and RATTE to support Windows
6. New Metasploit exploits added to SET

Official change log and rest of other details can be found on the blog post of the developer. To Download Social Engineer Toolkit 3.0 Click Here

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Social-Engineer Toolkit (SET) 3.0 Codenamed #WeThrowBaseballs Released"https://www.voiceofgreyhat.com/2012/02/social-engineer-toolkit-set-30.html</a>

Metro Version Of Firefox Will Available on Windows 8

Metro Version Of Firefox Will Available on Windows 8

There are lots of addition and subtraction is going with the upcoming Microsoft Windows 8 & Windows on ARM.Microsoft's browser rivals to publicly commit to a Metro edition. Microsoft has said it will ship both Metro and traditional desktop versions of Internet Explorer 10. Metro is Microsoft's label for the touch-enabled interface at the center of both Windows 8 and WOA. Windows 8 will run Metro and traditional 32- and 64-bit Windows applications, but WOA will run only those third-party apps designed for Metro. Not only IE but also Firefox will follow the same trend. Mozilla confirms that it will build a "proof-of-concept" version of Firefox for Windows 8's Metro touch-first interface next quarter, then follow that with more functional editions later in the year. Mozilla Said:- "This proposal depends on Microsoft providing the same capabilities for Firefox as it does for IE -- running at the Medium level integrity process that allows us the full use of the Win32 API and what we need from Metro, or a set of APIs that allow Mozilla to port Gecko to the WinRT. For the purposes of this feature proposal, I'm assuming we'll get the first and we won't have to port the bulk of Gecko and instead will use the win32 dlls from within Metro."

Feature Overview:- 

• Windows 8 contains two application environments, "Classic" and "Metro". Classic is very similar to the Windows 7 environment at this time, it requires a simple evolution of the current Firefox Windows product. Metro is an entirely new environment and requires a new Firefox front end and system integration points.

• The feature goal here is a new Gecko based browser built for and integrated with the Metro environment.

• Firefox on Metro, like all other Metro apps will be full screen, focused on touch interactions, and connected to the rest of the Metro environment through Windows 8 contracts.

• Firefox on Metro will bring all of the Gecko capabilities to this new environment and the assumption is that we'll be able to run as a Medium integrity app so we can access all of the win32 Firefox Gecko libraries avoiding a port to the new WinRT API for the bulk of our code. (Though we will need to have a pan and zoom capability for content.)

• We will need to determine if the Firefox front end on Metro will be built in XUL, C/C++, or HTML/CSS/JS (I'm assuming for now that .Net and XAML are off the table.)

• Firefox on Metro is a full-screen App with an Appbar that contains common navigation controls (back, reload, etc.,) the Awesomebar, and some form of tabs.

• Firefox will have to support three "snap" states -- full screen, ~1/6th screen and ~5/6th screen depending on how the user "docks" two full screen apps. Our UI will need to adjust to show the most relevant content for each size.

• In order to provide users with access to other content, other apps, and to Firefox from other content and apps, we'll need integration with the share contract, the search contract, the settings contract, the app to app picking contract, the print contract, the play to contract, and possibly a couple more. We'll be a source for some, a target for some, and both for some.

• We'll need to handle being suspended by the OS when out of view.

• We may want to offer a live tile with user-centric data like friends presence or other Firefox Home information updates

• Ideally we'd be able to create secondary tiles for Web-based apps hosted in Firefox's runtime.

For More Information Click Here

-Source (Mozilla & Computer World)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Metro Version Of Firefox Will Available on Windows 8"https://www.voiceofgreyhat.com/2012/02/metro-version-of-firefox-will-available.html</a>

Hcon Security Testing Framework (HconSTF) v0.4 [Fire Base]

Hcon Security Testing Framework (HconSTF) v0.4 [Fire Base] - codename 'Freedom'

Earlier we have discussed about Hcon, a security testing framework developed by Ashish Mistry, an Information Security Researcher. Now the author has officially declared the availability HconSTF v0.4 on the 26th of January (Republic Day) and through this release Hcon respects & salutes to all of the freedom fighters of India, without whom we can never be able get our freedom. A tribute to all of the freedom fighters of all the countries we present HconSTF version 0.4 codename ‘Freedom’. For this purpose HconSTF 0.4 has integrated many functions for anonymity and OSINT. 

Key Features:- 

• Categorized and comprehensive toolset

• Contains hundreds of  tools and features and script for different tasks like SQLi,XSS,Dorks,OSINT to name a few

• HconSTF webUI with online tools (same as the Aqua base version of HconSTF)

• Each and every option is configured for penetration testing and Vulnerability assessments

• Specially configured and enhanced for gaining easy & solid anonymity

• Works for web app testing assessments specially for owasp top 10

• Easy to use & collaborative Operating System like interface

• Light on Hardware Resources

• Portable - no need to install, can work from any USB storage device

• Multi-Language support (feature in heavy development translators needed)

• Works side-by-side with your normal web browser without any conflict issues

• Works on both architectures x86 & x64 on windows XP, Vista, 7 (works with ubuntu linux using wine)

• Netbook compatible - User interface is designed for using framework on small screen sizes

• Free & Open source and always will be

Categories of Tools Included :-

1. Information gathering / Analysis 
2. Editors / Debuggers
3. Exploitation / Auditing
4. Anonymity
5. Passwords
6. Cryptography
7. Database
8. Scripting / Automation
9. Network Utilities
10. Reporting

License :- MPL,GPL,LGPL. in simple words its free as speech , no license fees.

To Download HconSTF 0.4 (Freedom) Click Here

-Source (Hcon)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Hcon Security Testing Framework (HconSTF) v0.4 [Fire Base]"https://www.voiceofgreyhat.com/2012/01/hconstf-v04-fire-base-security-testing.html</a>

Windows Phone App Analyser By David Rook aka SecurityNinja

 Windows Phone App Analyser By David Rook aka SecurityNinja

David Rook, (aka SecurityNinja) has officially released Windows Phone App Analyser. Version 1.0 of the application allows for the evaluation of Windows Phone 7 .xap files and supports the automatic decompilation of the .dll files within them. The tool is inspired by static security analysis tool Agnitio, also from Security Ninja, and presents a tree view of the contents of the .xap file allowing manual review of the files; clicking on .dll files decompiles them to .cs files for viewing or passing to an automated review using CAT.NET or FxCop. 

The Windows Phone App Analyser also allows researchers to run Microsoft's own Capabilities Detection tool which works out what capabilities the app uses and allows comparison with the app's manifest declarations. 

Key Features Of Windows Phone App Analyser :- 

• Analyse Windows Phone application source code from a security point of view.

• Automatically decompile Windows Phone .xap application to easily analyse the original source code

• Launch and review results from third party scanning tools (CAT.NET, FxCop and the capabilities detection tool).

Features such as keyword editor, store paths to scanning tools so you don’t have to browse to them, option to automatically execute automated scans etc., will be included in the next couple of releases. 

For detailed information & to download Windows Phone App Analyser Click Here

 

 

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Windows Phone App Analyser By David Rook aka SecurityNinja"https://www.voiceofgreyhat.com/2012/01/windows-phone-app-analyser-by-david.html</a>