本地密码CRACK工具
作者： isno
本地密码CRACK工具v0.1
下载地址： http://isno.ys168.com/ 文件名：lapc.rar
用途：在某些系统上获得了users权限，但有又没其他办法提权，可以试试用这个小工具在对方电脑（不是在自己电脑跑）跑一下管理员密码。
2009年7月 的日志
风讯 4.0 SP7 getshell 0day
MS Internet Explorer 7 Video ActiveX Remote Buffer Overflow Exploit
milw0rm.com [2009-07-10]
#!/usr/bin/env python
###############################################################################
# MS Internet Explorer 7 Video ActiveX Exploit (Advisory 972890) #
###############################################################################
SEBUG 开源
作者： amxku
Info:sebug Information Management System
Author:amxku@sebug.net
http://sebug.net
http://wolfexp.net
http://huaidan.org
sebug.net的建立离不开一些朋友和组织的帮助,在此对他们表示感谢!
如果有什么漏洞，也请大家高抬贵手。谢谢。如果有什么好的建议，我们很欢迎。
同时也希望有志同道合的朋友能一起来运营这个站点。
Rcmd.vbs 1.01修正版
milw0rm 关闭了
update（2009-7-9 22:46）：milw0rm 现在又开了，不知道为什么，欺骗感情啊，原来的公告没了，投递也又开放了，没有任何说明，在 str0ke 的 twitter 上有这么 一条 （43分钟前发的）：
milw0rm's back up & posting will start once again, I can't let all of the emails in my submit box to just sit there. 43 minutes ago from web
ps：刚才更新过，说又开放了，结果现在又打不开了，不知道在做什么。
--------------------------------------------------------
上午看到 milw0rm.com 首页的 banner 位置这样写着：
Well, this is my goodbye header for milw0rm. I wish I had the time I did in the past to post exploits, I just don't :(. For the past 3 months I have actually done a pretty crappy job of getting peoples work out fast enough to be proud of, 0 to 72 hours (taking off weekends) isn't fair to the authors on this site. I appreciate and thank everyone for their support in the past.
Be safe, /str0ke
Sun One WebServer 6.1 JSP Source Viewing vulnerability
作者： Kingcope Kingcope < kcope2_(at)_googlemail.com >
Sun One WebServer 6.1 JSP Source Viewing vulnerability
System: Sun-ONE-Web-Server/6.1, Windows Server 2003
SunOne WebServer (formerly Netscape Enterprise Server, iPlanet) on Windows Systems lets remote people disclose
JSP Source code.
More on ColdFusion hacks
来源： http://isc.sans.org/diary.html?storyid=6730
Thanks to our reader Adam we received some additional information regarding recent ColdFusion hacks.
As I wrote in the previous diary ( http://isc.sans.org/diary.html?storyid=6715
), the attackers are exploiting vulnerable FCKEditor installations, which come enabled by default with ColdFusion 8.0.1 as well as some other ColdFusion packages.