Latest Security News

转专讙讬诇 驻讬砖讬谞讙 讞讚砖 讘 MSN!

诇讗讞专讜谞讛 讗谞讬 诪拽讘诇 诪讬讚讬讚讬诐 讘专砖转 MSN 诇讬谞拽讬诐 诪讜讝专讬诐 讻讚讜讙诪转: http://savycooper.catchedyou.com
诪讬转专 诇爪讬讬谉 砖讬讚讬讚讬 诪转讻讞砖讬诐 诇砖诇讬讞转 讛诇讬谞拽 .

讛讚祝 砖谞驻转讞 讻转讜爪讗讛 诪讙诇讬砖讛 诇诇讬谞拽 谞专讗讛 讻讻讛:讛讻谞住 EMAIL 讜住讬住诪讛!
讘讘讚讬拽转 讛 IP 诪转讘专专 砖讛讗转专 诪诪讜拽诐 讘住讬谉 讗讜 诇讬转专 讚讬讜拽 讘讛讜谞讙 拽讜谞讙 诪讛 砖诪注诇讛 讗转 讛讞砖讚 诪讬讚 诇讻讜谞谞讜转 讗讚讜诪讛:)
讘转讞转讬转 讛讚祝 诪爪讜讬讬谉 讘诪驻讜专砖 砖讛讗转专 讗讬谞讜 讗转专 驻讬砖讬谞讙 讗诇讗 讗转专 讛诪讘拽砖 诇注砖讜转 砖讬诪讜砖 讘讗诪讬讬诇 砖诇讱 诇爪讜专讱 拽讬讚讜诐 爪专讻讬诐 讗讞专讬诐! 拽爪转 诪讝讻讬专 讗转 讛讘讚讬讞讛 注诇 讛讛讜讗 砖注讜砖讛 讗转 爪专讻讬讜 诇讬讚 讛诇讚转 砖诇 讛砖讻谉 讜讗讞专 讻讱 讚讜驻拽 讘讚诇转 讜诪讘拽砖 谞讬专 讟讜讗诇讟 .
专讗讜 讛讜讝讛专转诐!!!




backdoor - 讬爪讬专转 诪砖转诪砖 讗讚诪讬谉 讗砖专 讗讬谞讜 诪讜驻讬注 讘拽讘讜爪转 administrators

谞谞讬讞 砖讛砖讙转讬 讙讬砖讛 诇砖专转 讜讗谞讬 诪注讜谞讬谉 诇讛砖讗讬专 诇讬 backdoor 诇驻注诪讬诐 讛讘讗讜转...
讛讚专讱 讛驻砖讜讟讛 讘讬讜转专 讛讬讗 讬爪讬专转 讬讜讝专 讗讚诪讬谞讬住讟专讟讬讘讬
讗讘诇 诪讛? 讘诪拽专讛 砖诇 forensics 讗驻砖专 诇注诇讜转 注诇 讝讛 砖讛转讜讜住祝 讬讜讝专 诇拽讘讜爪转 讛讗讚诪讬谞讬住讟专讟讜专讬诐.
讗讝 诪讛 注讜砖讬诐 讘诪爪讘 讻讝讛?
诪住转讘专 砖专诪转 讛讛专砖讗讜转 砖讗转讛 诪拽讘诇 谞拽讘注转 讘专讙'讬讟专讬. 讗讝 诪讛 砖讗谞讬 讛讜诇讱 诇转讗专 驻讛 讝讛 讗讬讱 讗谞讬 讬讜爪专 讬讜讝专 讗讚诪讬谞讬住讟专讟讬讘讬 讘诇讬 砖讛讜讗 讬诪爪讗 讘拽讘讜爪转 讛讗讚诪讬谞讬住讟专讟讜专讬诐.
砖诇讘 专讗砖讜谉: 爪专讬讱 诇讛驻注讬诇 讗转 讛regedit 讘讛专砖讗转 system
诪讻讬讜讜谉 砖专拽 诇诪砖转诪砖 system 讬砖 讛专砖讗讜转 诇KEY 讛住驻爪讬驻讬.
讗讬讱 诪专讬爪讬诐 regedit 转讞转 system ?
讛爪注讛 讗讞转 讛讬讗 诇讛驻注讬诇 CMD 讚专讱 讛 tesk scheduler 转讞转 讛专砖讗讜转 system.





讛注专讱 F 砖讗转讛 专讜讗讛 诪拽谞讛 诇讞砖讘讜谉 administrator 讛诪拽讜专讬 讗转 讛讛专砖讗讜转 砖诇讜.
讗诐 转讬爪讜专 讬讜讝专 讞讚砖. 转转讜讜住祝 诇讱 住驻专讬讛 转讞转 users.








讜注讻砖讬讜 讬砖 诇讘爪注 讛注转拽讛 砖诇 讛注专讱 F 诇F 砖诇 讛讞砖讘讜谉 讛讞讚砖.讗讞专讬 砖转转讞讘专 注诐 讛讬讜讝专 砖讬爪专转, 转拽讘诇 讬讜讝专 讗讗讚诪讬谞讬住讟专讟讬讘讬.




讗诐 专讜爪讬诐 诇讛讬讜转 extra stelth , 讘诪拽讜诐 诇讬爪讜专 诪转砖诪砖 讞讚砖 - 谞砖谞讛 讗转 讛 GUEST 讗讜 讗转 讛 SUPPORT_388945a0

tip by k-zee

mRemote-All your remote connections in one place


mRemote allows you to manage all your remote connections in a single place. It currently

supports the RDP, VNC, SSH, Telnet, RAW, Rlogin, ICA and HTTP/S protocols


讗讞诇讛 讻诇讬 讞讬谞诪讬 讛诪专讻讝 诇讬 讗转 讻诇 讞讬讘讜专讬 讛 REMOTE 讘诪拽讜诐 讗讞讚 linux unix windows

讘谞讜住祝 拽讬讬诪转 转诪讬讻讛 讘讛注讘专转 拽讘爪讬诐 (SCP) , 诪讛专讜 讜讛讜专讬讚讜 -讛诐 转讬讻祝 讬转讞讬诇讜 诇拽讞转 讻住祝!

mRemote- download

讞拽讬专转 讛诪爪讗讜转 专讜讙诇讜转 讘诪注专讻转 讘讗诪爪注讜转 驻拽讜讚讜转 cmd 驻砖讜讟讜转

拽专讗转讬 诪讗诪专 砖诇 讗讚 住拽讜讚讬住 (san instatute) 讛诪讚讘专 注诇 讛注讜讘讚讛 砖讞诇拽 讙讚讜诇 诪讞拽讬专转 诪讞砖讘讬诐 讛讞砖讜讚讬诐 讻谞讙讜注讬诐 讘 mallwares 谞讬转谞转 诇讘讬爪讜注 注"讬 砖讬诪讜砖 讘驻拽讜讚讜转 built in 讘诪注专讻转 讛讛驻注诇讛.
诪谞讬住讬讜谞讬 讻讗讬砖 讗讘讟讞转 诪讬讚注 讘讗专讙讜谉 讙讚讜诇 , 讗谞讬 谞讚专砖 诇注转讬诐 转讻讜驻讜转 诇讘讚讜拽 诪讞砖讘讬诐 讛讞砖讜讚讬诐 讻"谞讙讜注讬诐" ,讜诇注转讬诐 讘讝诪谉 讘讚讬拽讛 讝讜 讗讬谉 讘专砖讜转讬 讙讬砖讛 诇讻讬诇讬诐 诪拽爪讜注讬讬诐 讜讻诇讬 GUI 诇诪讬谞讬讛诐. 讛诪讗诪专 谞讜转谉 讛住讘专讬诐 诇讻诇 驻拽讜讚讛 讗讱 讗谞讬 讗讞住讜讱 讗转 讝讛 诪讬诪谞讬 讜诪讬诪讻诐 (讗谞讞谞讜 讻讘专 诪讻讬专讬诐 讗转 诪砖诪注讜转 讛驻拽讜讚讜转...)
讗讝 讘专讜讞 讛OLD SCHOOL 诇讛诇谉 诪住驻专 驻拽讜讚讜转 诇讝讬讛讜讬 诪讛讬专 砖诇 讬转讻谞讜转 专讜讙诇讜转 讘诪注专讻转.


netstat –ano

拽讘诇转 诪讬讚注 注诇 诪注专讱 讛转拽砖讜专转 TCP UDP +PID 讘谞讜住祝, 讛讞诇 诪 2SP 谞讬转谉 诇讛砖转诪砖 讘 b- 讛诪讗驻砖专 讛爪讙转 讛转讻谞讬讜转 (EXE) 讛诪转拽砖专讜转 注诇 讻诇 驻讜专讟 讘讛转讗诪讛 .谞讬转谉 诇讝讛讜转 讘诪讛讬专讜转 转拽砖讜专转 注诇 驻讜专讟讬诐 诇讗 住讟谞讚专讟讬讬诐 +讞讬驻讜砖 讛驻讜专讟 讘 GOOGLE , 讗谞讬 诪诪诇讬抓 注诇 讞讬驻讜砖 讘住讬讙谞讜谉: insite:mcafee.com port 4444

讟讘诇讛讝讜 诪爪讬讬谞转 驻讜专讟讬诐 住讟谞讚专讟讬讬诐 砖诇 砖讬专讜转讬 诪注专讻转 -讞砖讜讘 诇讚注转 诇诪谞讬注转 fals positive

*

reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Run

reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce

reg query HKCU\Software\Microsoft\Windows\CurrentVersionRun

诪拽讜诪讜转 谞驻讜爪讬诐 讘 REGISTRY 诇讛诪爪讗讜转 专讜讙诇讜转 - 谞讬转谉 诇讛住讬专 讗转 讛专砖讜诪讜转 讛讞砖讜讚讜转 ( 诇讗 诇砖讻讜讞 诇讙讘讜转 诇驻谞讬:))

*

dir /A "C:\Documents and Settings\All Users\Start Menu\Programs\Startup"

讬砖谞诐 专讜讙诇讜转 讛诪诪拽诪讜转 拽讘爪讬诐 讘住驻专讬讛 讬讚讜注讛 讜谞砖讻讞转 讝讜 ...

*

'tasklist /svc'

诪讗驻砖专转 爪驻讬讛 讘转讛诇讬讻讬诐 讜讘转转 转讛诇讬讻讬诐 讛专爪讬诐 讘诪注专讻转 .

*

net users

net localgroup administrators

讛爪讙转 诪砖转诪砖讬 讛诪注专讻转 - 讬砖谞诐 专讜讙诇讜转 讜讘讜讟讬诐 (BOTS) 讛诪讜住讬驻讬诐 诪砖转诪砖讬 诪注专讻转 - 专爪讜讬 诇讘讚讜拽 讝讗转 .

wmic startup list full

驻拽讜讚讛 砖讛讬转讛 讞讚砖讛 诇讬 注讚 诇讗 诪讝诪谉 ,诪讗驻砖专转 拽讘诇转 谞转讜谞讬诐 诪驻讜专讟讬诐 注诇 讻诇 讛转讜讻谞讬讜转 讜讛转讛诇讬讻讬诐 讛注讜诇讬诐 讘 startup . 砖讬诪讜砖讬 讘讬讜转专!

注讚 讻讗谉.

诇讙讘讬 驻拽讜讚转 WMIC - 讗谞讬 讗驻专讟 讘驻讜住讟 谞驻专讚

讗谞讬 讬讜转专 砖讛讝讻专转讬 讻讗谉 谞讬砖讻讞讜转 诇讞诇拽 诪讛讗谞砖讬诐 ,讗讱 讛讗诪讬谞讜 诇讬 - 讛驻拽讜讚讜转 讛讗诇讛 砖讬诪讜砖讬转 讘讬讜转专 .


Netrworking 讜讝诪讬砖讜转...

讘砖讘讜注 砖注讘专 谞讻讞转讬 讘讛专爪讗讛 诪注谞讬讬谞转 诪讗讚 NETWORKING 讘讗专讙讜谉, 讘转讜讱 诪讞诇拽转 讛 IT 讜讘讻诇诇 讘讞讬讬诐.
讘讙讚讜诇 诪讚讜讘专 注诇 讬爪讬专转 拽砖专讬诐 讗谞讜砖讬讬诐 讜讛专讞讘转 讛专砖转 讛讞讘专转讬转 砖诇 讛讗讚诐 讘诪讟专讛 诇讬爪讜专 "讘谞讬 讘专讬转" 讜砖讜转驻讬诐 讟讜讘讬诐 诇讛谞注转 转讛诇讬讻讬诐 讘讞讘专讛 讘驻专讟 讜讘讞讬讬诐 讛讗讬砖讬讬诐 讘讻诇诇. 专砖诪转讬 诇讬 讻诪讛 谞拽讜讚讜转 诇讝讻讜专 诪讛讛专爪讗讛:

讛诪讜谞讞: agile - 讝 诪 讬 砖 - 讝专讬专讝讜转 讜讙诪讬砖讜转 : 诪讚讚 讛讬讻讜诇转 诇拽讘诇 讜诇讘爪注 砖讬谞讜讬讬诐 讘爪讜专讛 讝专讬讝讛 讜注"讬 讻讱 诇讛转诪讜讚讚 讘爪讜专讛 转讞专讜转讬转 讜讙诪讬砖讛 讘砖讜拽 讛诪砖转谞讛.


  1. 讘讻诇 诪拽讜诐 讜讘讻诇 住讬讟讜讗爪讬讛 谞讬转谉 诇注砖讜转 networking
  2. networking 注讜砖讬诐 注诐 诪讬 砖诇讗 诪讻讬专讬诐:)
  3. 专讜讘 讛讗谞砖讬诐 讞讬讬诐 讘"讘讜注转 讛谞讜讞讜转 砖诇讛诐" 讜讛驻讞讚 诪讛讞讚砖 讗讜 讛讚讞讬讛 诪讛讞讚砖 讛诐 诪讛 砖诪注拽讘讬诐 讗转 讛讛转驻转讞讜转 砖诇讛诐.
  4. networking 诪转讘爪注 注"讬 谞转讬谞讛 拽讜讚诐 讻诇 , 讗讬谉 诇讞驻砖 专讜讜讞 讗讬砖讬 诪讬讚讬 - 讝讜 讟注讜转!
  5. 注"讬 注砖讬讬讛 诪专讜讘讛 注讘讜专 讛讗讚诐 讛砖谞讬 ,讬讻讜诇讛 诇讛讜讜爪专 砖讜转驻讜转 讟讜讘讛 讜讘谉 讘专讬转 诇注转讬讚 , 讬砖 诇讝讻讜专 砖诪讞拽专讬诐 诪专讗讬诐 砖砖讜转驻讜讬讜转 讟讜讘讜转 讗讬谞诐 诪讘讜住住讜转 注诇 50-50 讗诇讗 注诇 注砖讬讬讛 " 诪注诇 讜诪注讘专 " 讜讛砖拽注讛 砖诇1000% 讻诇 讗讞讚 讘砖谞讬. 诪讜讚诇 讛 50-50 讘95 讗讞讜讝 诪讛诪拽专讬诐 拽讜专住.
  6. 讗讞转 讛讚专讻讬诐 诇讛转拽讚诪讜转 讜砖讘讬专转 "转拽专转 讛讝讻讜讻讬转" 讛转注住讜拽转讬转 讛讬讗 讚专讱 networking 诪讜诇 讗谞砖讬诐 讘讚专讙讬诐 讙讘讜讛讬诐 诪诪讞诇拽讜转 讗讞专讜转 讗讜 转讞讜诪讬诐 讗讞专讬诐 .

讝讛 诪讛 砖讗谞讬 讝讜讻专 讻专讙注 , 诇讚注转讬 讗讜讻诇 诇爪专讬讱 讻讗谉 讗转 讛诪爪讙转 讘拽专讜讘.

爪'讗讜



.