[pchelpers] News:Hackers turn Google into vulnerability scanner

By Matthew Broersma, Techworld.com
February 22, 2008

The hacking group Cult of the Dead Cow (CDC) this week released a tool
that turns Google into an automated vulnerability scanner, scouring Web
sites for sensitive information such as passwords or server
vulnerabilities.


CDC first achieved notoriety 10 years ago with its backdoor Back
Orifice, which demonstrated in a highly public way just how easy it was
to take unauthorized control of a Windows PC. 

The new tool, called Goolag Scan, is equally provocative, making it easy
for unskilled users to track down vulnerabilities and sensitive
information on specific websites or broad web domains. 

This capability should serve as a wake-up call for system administrators
to run the tool on their own sites before attackers get around to it,
according to CDC. 

"It's no big secret that the Web is the platform, and this platform
pretty much sucks from a security perspective," said CDC spokesperson
Oxblood Ruffin, in a statement. "We've seen some pretty scary holes
through random tests with the scanner in North America, Europe, and the
Middle East. If I were a government, a large corporation, or anyone with
a large website, I'd be downloading this beast and aiming it at my site
yesterday." 

More here:
http://www.infoworld.com/article/08/02/22/Hackers-turn-Google-into-vulnerability-scanner_1.html?source=rss&url=http://www.infoworld.com/article/08/02/22/Hackers-turn-Google-into-vulnerability-scanner_1.html
-- 
John Durham
Site http://modecideas.com
Server hosted on Ubuntu 4.10
Good advice is like good paint. It only works when applied.



-- 
-------list-services-below-----------
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig
Good advice is like good paint- it only works if applied.

Other related posts: