NASA hacked by Iranian students

By Anonymous -
NASA Hacked by Iranian Hackers
Iranian Hackers Claim They Compromised NASA SSL Digital Certificate
There's still no official response from NASA officials after a group of Iranian student programmers calling themselves Cyber Warriors Team claimed to have swiped records for thousands of NASA researchers by compromising an agency site's SSL certificate.
In a May 16 statement posted on Pastebin, the group claimed (in poorly constructed English) to have exploited a vulnerability in a login system to gain administrative rights. "Our main work and we target Is in use. Our target was not Internet sabotage. Our Target was Do ‘MAN IN THE MIDDLE’ attack (with using Confirmation obtained) and also Clear the track after each connection in the network For Hide and Disclosing my presence in Two-way communication between. But the problem still exists And its use isn't Hard For We (CW.T)."
NASA has come under federal scrutiny since admitting earlier this year that it's suffered more than 5,400 cyberattacks between 2010 and 2011.
At the time of the disclosure, the agency's Inspector General noted some incidents included the theft of several dozen laptop and mobile devices  lacking any type of encryption to help hide sensitive data stored within. Others took advantage of flaws on Web sites to gain illegal access.
“These incidents spanned a wide continuum from individuals testing their skill to break into NASA systems, to well-organized criminal enterprises hacking for profit, to intrusions that may have been sponsored by foreign intelligence services seeking to further their countries’ objectives,” Paul K. Martin wrote.
Cyber Warriors Team is apparently an independent group of Iranian student hackers and programmers who promised to post video of the NASA attack at a later date. The team says it created an HTTPS protocol scanner to locate the vulnerability in the NASA Web site, later identified as the Solicitation and Proposal Integrated Review and Evaluation System (NSPIRES) site.
"For further evaluation, We Extract CSS File. We have used the vulnerability of existing (For identification and more information )," according to their post. "We use the cavity  IN “ /external/login/login.do. “ and Extract Username Column and Find Input details."

Regards,
Hardeep Singh

Comments

Post a Comment

Popular posts from this blog

The power of Bluetooth 4.0

By -
Image
Bluetooth, once trumpeted as the ultimate convenience, quickly proved a headache with plenty of pairing problems and inexplicable connection snafus. Bluetooth 4.0, the newest version of the technology, is about to change all that. The bad Bluetooth rep I personally use Bluetooth daily, and love it. My trusty   LG BHS-700s   works like a charm. For others, however, living with this technology can be frustrating. Often users are asked to enter annoying passwords before linking devices, and sudden reception drops or other software glitches make Bluetooth feel more painful than fun. Honestly I believe the bad old days of Bluetooth are behind us, especially with Bluetooth 4.0, AKA   Bluetooth Smart Ready , on the edge of mass adoption. Already available in the   Motorola Droid Razr   and   Droid Razr Maxx   smartphones plus Apple's   iPhone 4S , Bluetooth 4.0 is expected to hit more handsets and all manner of accessories this year. High-end hands...
Read more

How to hack your xbox 360 completely

By Anonymous -
Image
So you want to hack your 360. Have no idea where to start? This thread should give you a general idea on what you can do with your 360. Lets get started. First of all you'll need to determine the age of your console. This will give you a general idea of what hack you can apply. On the back of the 360 there is a sticker near the AV port (Phat*&Slim*) On that you'll find the MFR date as well as the Console Serial and Product ID. Determining the age of the 360 ​ ​ You'll need to write down your MFR date. This will roughly tell you what board you have in your 360. Xenon: 2005 - 2007 203w power supply, can be JTAGged and RGH'd (14699 only) & R-JTAGged. Zephyr: 2007 - 2008 203w power supply, can be JTAGged and RGH'd (Hard to achieve) & R-JTAGged. Opus: Only from RRoD Repairs from MS (rare revisions) 203/175w power supply, can be JTAGged and RGH'd & R-JTAGged. Falcon: 2007 - 2009 175w power supply, can be JTAGged and ...
Read more

Wii Remote IR Camera Hack with Arduino Interface

By Anonymous -
Image
Step 1: Extract the Wii IR camera You'll need a Wii remote or "Wiimote" to start with. Normally they are about $40, in the end that is not too bad for a pretty awesome sensor. Otherwise you can check out ebay or elsewhere for used or broken Wii remotes. You'll need to rip apart the case. It has some crazy three pronged screws. I didn't want to completely trash the case so I made a small tool to take it apart. Now you need to desolder the 8 pins and the 2 struts holding the camera on the board. I used some desoldering braid. It wicks the solder away and makes it easy to get the camera out. Be careful, don't break the camera! You might want to keep the rest of the parts. You might be able to scrap other parts. Also, If you decide later to use the Wiimote again, you could always put the camera back in. Step 2: Interface Circuitry We'll need a small circuit to interface the IR camera to the arduino. I got all m...
Read more