Microsoft Blue Hat Prize Contest for Hackers

Tweet

WHY MICROSOFT IS DOING THIS?

The Microsoft BlueHat Prize contest is designed to generate new ideas for defensive approaches to support computer security. As part of our commitment to a more secure computing experience, we hope to inspire security researchers to develop innovative solutions intended to address serious security threats.

WHAT IS THE CONTEST?

The inaugural Microsoft BlueHat Prize contest challenges security researchers to design a novel runtime mitigation technology designed to prevent the exploitation of memory safety vulnerabilities. The solution considered to be the most innovative by the Microsoft BlueHat Prize board will be presented the grand prize of US $200,000. Important information:

• Entries will be accepted and must be received by email to bluehatprize@microsoft.com between August 3, 2011 to midnight Pacific Time on April 1, 2012.
• The winning entry will be announced at Black Hat USA 2012.
• Submitters retain all rights to the intellectual property in the content they submit and Microsoft has the right to license that content.

YOU COULD WIN

• First prize: $200,000 (USD)
• Second prize: $50,000 (USD)
• Third prize: MSDN Universal subscription valued at $10,000 (USD)

HOW TO ENTER?

• To enter, send an email to bluehatprize@microsoft.com include your technical description and prototype as outlined in the official rules.
• The Microsoft BlueHat Prize board will reply with additional information applicants will need to submit a complete entry.

Read More

Firesheep Makes Facebook Hacking Easy

Tweet

Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:

• Public wifi access
• winpcap
  
• Firesheep(Download)

Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser

2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep

3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

Hope you liked the post! Pass the comments

Some posts from Past on Facebook Hacking:

How to hack Facebook Password
Hack Facebook Password using winspy
4 ways on how to hack Facebook password
Hack Facebook account using Facebook freezer

Read More

www.music.aol.com Vulnerable to Xss Attack

Tweet

Hey Freinds I have a shocking news for you guys the website www.music.aol.com is vulnerable To Xss Cross Site Scripting Attack. Xss Cross Site scripting Cross-site scripting or XSS is a threat to a website's security. It is the most common and popular hacking a websiteto gain access information from a user on a website. There are hackers with malicious objectives that utilize this to attack certain websites on the Internet. But mostly good hackers do this to find security holes for websites and help them find solutions.


Below is the Screen Shot Which I took While Testing the Vulnerability

The hacker can exploit this venerability and hack thousands of sessions.I have notified Aol of this vulnerability and hope Aol Fix it soon

Read More