06-07-2011, 02:04 PM
http://www.informationweek.com/news/secu.../231000983
LulzSec's Top 3 Hacking Tools Deconstructed
Analysis suggests LulzSec was most effective using a relatively unknown vulnerability to launch large-scale, botnet-driven attacks against everyone from Sony to the Senate.
By Mathew J. Schwartz InformationWeek
July 05, 2011 01:11 PM
(click image for larger view)
Slideshow: 10 Massive Security Breaches
In its 50-day hacking spree, how did the hacking group known as LulzSec manage to break into so many websites? All told, the group appears to have relied heavily on three attack techniques: using remote file include (RFI), SQL injections, and cross-site scripting. That's according to an analysis conducted by data security vendor Imperva, which studied the leaked LulzSec IRC chat logs recently published by the Guardian.
LulzSec's Top 3 Hacking Tools Deconstructed
Analysis suggests LulzSec was most effective using a relatively unknown vulnerability to launch large-scale, botnet-driven attacks against everyone from Sony to the Senate.
By Mathew J. Schwartz InformationWeek
July 05, 2011 01:11 PM
(click image for larger view)
Slideshow: 10 Massive Security Breaches
In its 50-day hacking spree, how did the hacking group known as LulzSec manage to break into so many websites? All told, the group appears to have relied heavily on three attack techniques: using remote file include (RFI), SQL injections, and cross-site scripting. That's according to an analysis conducted by data security vendor Imperva, which studied the leaked LulzSec IRC chat logs recently published by the Guardian.