Hidden iFrame injection attacks

I've been browsing for some new things to try when I stumble upon this....
http://www.diovo.com/2009/03/hidden-iframe-injection-attacks/

Backtrack 4 R1 now Out =)

BACKTRACK 4 R1

HASH Data on Downloads

A few months ago I was wondering why is there a HASH data on a download page's information area



After a few googling I found out that this data is very useful when trying to verify a download, after downloading, you can use a tool that can also compute the HASH which you can compare to the one that is publish on the download site. A free tool that you can use is SlavaSoft's HashCalc which you can download in http://www.slavasoft.com/hashcalc/index.htm

Sample screen shot



So similar Hash computations will simply mean that the file is not corrupt or is not altered.

Hello Everyone,

I am Humprey Cogay, Software Developer and an Aspiring IT Security Analysts, I am putting up this blog to share my experiences regarding the ever wonderful world of IT Security. You are all welcome to comment/suggest/criticized any post, Your simple replies will help me improved, correct and perfect any workflow, tool and ideas that I may Have. =)

I would also like to give thank you to my Instructor Mr. Semi Lianto (http://flexi-train.blogspot.com/) for sharing his knowledge during my training.

Mabuhay Everyone………