Tags: ,,,.

黑客”是一种神秘、危险却又渗出魅力的身份,他们在网络上几乎无所不能,为非作歹者有之,惩恶扬善者有之,穷极无聊亦有之。某国国防部被黑、某官方网站被黑的新闻时常见诸报端,这是他们象征着力量与胜利的图腾,换来的是我们心中隐隐的崇拜。但是,黑客与黑客互掐的新闻似乎极其罕见。

据 ZD Net 报道,曾经声称黑进北约(NATO)数据库的黑客组织 Inj3ct0r 在 Facebook 上宣布成功黑掉了另一个知名黑客组织——ExploitHub。

其中 Inj3ct0r 团队是提供零日(0day)漏洞的一大卖家,而 ExploitHub 是由 NSS Labs 建立的漏洞中心。两个团队都属于独立的黑客组织,靠寻找漏洞和售卖黑客软件牟利,因此乍看之下似乎是典型的“黑帮内讧”。

但若深究一下 ExploitHub 的来头,就会发现此事必有蹊跷。

NSS Labs 是全球最知名的网络安全研究和评测机构,他们通过模拟用户真实应用场景,进行产品评测和数据分析。NSS Labs 在 1999 年首创的入侵检测/防护系统评测标准已经成为业界公认的入侵防护系统(IPS)的“试金石”,其 Real-world 测试方案是业界唯一能够真正评估 IPS 防御力的方法。

因此 ExploitHub 严格来说并不能算是“黑客组织”,更像是一个市场,攻击代码的开发者可以将恶意软件和漏洞直接销售给安全专家用于实际测试。

在宣布“战况”的同时,Inj3ct0r 声称这次攻击盗取了总共价值 242333 美金的私有漏洞利用代码。下图为 Inj3ct0r 为证明他们的入侵而提供的 PHPinfo:

随后,ExploitHub 发表了声明承认受到入侵,并表示被入侵的服务器确实在安装程序后遗漏了“安装脚本”没有删除,以至于可被访问。同时声称被黑的数据库“只包含网络应用程序以及相关的产品信息,比如(被出售的)漏洞名称、价格、作者等,不包括任何有实际用途的信息,比如漏洞利用代码。”

紧接着,Inj3ct0r 团队在 Facebook 上放出了一分公告,包括漏洞名称,价格,创建日期,作者id,作者用户名和各种漏洞的价码,其中大部分都是 Inj3ct0r 的黑客 Mario的作品。并承诺如果“like”次数超过 30000 他们就会在本月 16 日公布这些漏洞的更多信息。目前“like”数字达到了 15500 个,而增速却明显放缓。

目前 ExploitHub 的网站已经被关闭。

NSS 实验室在向世人介绍他们新奇的检测模式时,其总裁里克·莫伊是这样解释的:

“如果不能从坏人的角度思考的话,何谈‘检测’?于是,我们选择走出实验室,来到真实的网络环境中直面威胁,以找到那些罪恶的本源。”

如此看来,这似乎是“道高一尺,魔高一丈”的节奏。


73条评论

  1. 如果不能从坏人的角度思考的话,何谈‘检测’?于是,我们选择走出实验室,来到真实的网络环境中直面威胁,以找到那些罪恶的本源。这句话是相当的经典呀!!!!

  2. Thank you very much for sharing.Your article is wonderful.囧

  3. 谁的技术牛呗 这还用说啊

  4. 黑客干掉黑客,有难度。

  5. 博主呀,预测未来的最好方法,就是创造未来。

  6. Here are a number of the websites we suggest for our visitors.

  7. always a large fan of linking to bloggers that I adore but don

  8. Sites of interest we have a link to

  9. the time to read or check out the content or web-sites we’ve linked to beneath the

  10. we like to honor many other web web-sites on the internet, even if they aren

  11. just beneath, are numerous totally not associated web sites to ours, even so, they’re surely worth going over

  12. although sites we backlink to beneath are considerably not associated to ours, we feel they’re actually really worth a go by means of, so have a look

  13. Every when inside a while we pick blogs that we read. Listed beneath would be the most current web-sites that we pick

  14. Wonderful story, reckoned we could combine several unrelated data, nevertheless actually really worth taking a appear, whoa did one particular master about Mid East has got additional problerms as well

  15. although internet websites we backlink to below are considerably not related to ours, we really feel they are basically worth a go by way of, so have a look

  16. below you will come across the link to some web pages that we think you ought to visit

  17. here are some hyperlinks to web-sites that we link to simply because we think they are really worth visiting

  18. below you

  19. one of our visitors a short while ago proposed the following website

  20. that is the end of this write-up. Right here you

  21. Here is a superb Weblog You might Discover Fascinating that we Encourage You

  22. we prefer to honor a lot of other web web pages around the net, even though they aren

  23. below you

  24. we came across a cool web page which you could possibly take pleasure in. Take a look in case you want

  25. please visit the sites we stick to, such as this one, because it represents our picks in the web

  26. Here is a superb Blog You might Obtain Intriguing that we Encourage You

  27. here are some hyperlinks to web-sites that we link to due to the fact we consider they’re really worth visiting

  28. that could be the finish of this post. Here you will come across some web-sites that we think you

  29. although internet websites we backlink to beneath are considerably not related to ours, we feel they’re in fact really worth a go as a result of, so have a look

  30. always a big fan of linking to bloggers that I adore but really don’t get quite a bit of link adore from

  31. very couple of web sites that transpire to become in depth below, from our point of view are undoubtedly effectively really worth checking out

  32. the time to study or check out the material or websites we’ve linked to below the

  33. we came across a cool internet site that you simply may possibly delight in. Take a appear should you want

  34. below you

  35. just beneath, are a lot of completely not associated websites to ours, however, they are certainly worth going over

  36. one of our guests lately encouraged the following website

  37. we came across a cool internet site that you just could enjoy. Take a appear should you want

  38. one of our guests recently advised the following website

  39. we prefer to honor quite a few other world-wide-web web sites on the net, even when they aren

  40. one of our visitors not too long ago proposed the following website

  41. the time to study or go to the content material or internet sites we have linked to beneath the

  42. Here are some of the websites we advocate for our visitors

  43. we came across a cool internet site that you could appreciate. Take a appear for those who want

  44. Here is a good Weblog You might Come across Interesting that we Encourage You

  45. usually posts some very exciting stuff like this. If you are new to this site

  46. Here are several of the web sites we advise for our visitors

  47. please visit the web pages we follow, such as this one, because it represents our picks in the web

  48. usually posts some extremely fascinating stuff like this. If you

  49. very few internet sites that transpire to be comprehensive below, from our point of view are undoubtedly well worth checking out

  50. just beneath, are a lot of entirely not connected internet sites to ours, on the other hand, they are certainly really worth going over

  51. Here are a few of the internet sites we recommend for our visitors

  52. we prefer to honor lots of other internet web pages around the web, even if they aren

  53. usually posts some incredibly intriguing stuff like this. If you are new to this site

  54. Here is a good Weblog You might Locate Intriguing that we Encourage You

  55. we came across a cool site which you may possibly delight in. Take a look for those who want

  56. here are some hyperlinks to websites that we link to mainly because we feel they may be worth visiting

  57. please check out the internet sites we adhere to, such as this 1, because it represents our picks in the web

  58. please check out the web-sites we stick to, including this 1, because it represents our picks through the web

  59. Here is a good Blog You might Find Fascinating that we Encourage You

  60. N2v99g Really informative article.Really thank you! Fantastic.

  61. The information mentioned in the write-up are a few of the ideal readily available

  62. that would be the finish of this article. Right here you

  63. always a big fan of linking to bloggers that I appreciate but do not get a great deal of link love from

  64. 短篇小说我爱你母亲的上半部分,今天就播送到这里,明天同一时间请继续欣赏,我爱你母亲的下半部分 玉不琢,不成器

  65. very few internet websites that transpire to be in depth below, from our point of view are undoubtedly effectively really worth checking out

  66. please go to the web sites we adhere to, which includes this 1, as it represents our picks in the web

  67. check below, are some totally unrelated internet sites to ours, however, they may be most trustworthy sources that we use

  68. here are some hyperlinks to web-sites that we link to for the reason that we believe they’re really worth visiting

  69. although sites we backlink to below are considerably not associated to ours, we feel they may be really worth a go by way of, so possess a look

  70. although internet websites we backlink to beneath are considerably not associated to ours, we feel they may be really worth a go by, so have a look

  71. usually posts some extremely fascinating stuff like this. If you

  72. please check out the internet sites we stick to, such as this 1, as it represents our picks from the web

  73. below you

发表评论

评论也有版权!

无觅相关文章插件