SHALB.org - Hacker's Social Network

Most of you don’t even need to read this post to know why outsourcing your software development work to cheaper countries may not ultimately help you. You already know why.

The thing is that many people outsource their work to IT hubs like Bangalore to save a lot of money. But the problem is that you get a low quality product at last. The reason? You tried to cut cost too much.

You cannot get a high quality work done for a low cost. Never. Quality always comes with a price.

VMware ESX(i) 3.5 Update 2 Virtual Machine power on problem

The ESX(i) 3.5 Update 2 Virtual Machine power on problem that surfaced today is not related to exploitation of a security issue on ESX. Several customers have been worried that their ESX systems had been compromised by an attack and that this was the cause for not booting of their ESX update 2 Virtual Machines today.

When I originally posted to Bugtraq regarding the use of country-by-country sets to control traffic to or from any particular country, I knew that it was not a new idea. However, applying the concept for use with Microsoft's ISA Server was at least a new application for it, and apparently has had some utility for people based on the thousands of downloads that have been made of the free sets from the Hammer of God Web site.

Blackhats, security researchers and network intrusion detection system (NIDS) developers have continually played a game of point-counterpoint when it comes to NIDS technology. The BlackHat community continually develops methods to evade or bypass NIDS sensors while NIDS vendors continually counter act these methods with patches and new releases. Due to the inherent complexities involved in capturing, analyzing and understanding network traffic there are several common techniques that can be used to exploit inherent weaknesses in NIDSs.

Yesterday i found a way of defacing website without the need to learn programming languages,
nor to explorer vulnerabilities of programs, hardware configuration or operative systems.
You can do whatever you want with any website, deface any website as you like, literaly!

Description

When an attacker executes SQL Injection attacks sometimes the server responds with error messages from the database server complaining that the SQL Query’s syntax is incorrect. Blind SQL injection is identical to normal SQL Injection except that when an attacker attempts to exploit an application rather then getting a useful error message they get a generic page specified by the developer instead. This makes exploiting a potential SQL Injection attack more difficult but not impossible. An attacker can still steal data by asking a series of True and False questions through sql statements.