Archives/2010

Tue, 30 Nov 2010 22:26:00 +0200  BackTrack4 tools explained, episode 6. /Backtrack/Network-Mapping/OS-Fingerprinting: 5nmp, Autoscan, Lanmap, Lanmap2, Nmap, Nsat, Onesixtyone, P0f, Protos, SSLscan, Unicornscan, Xprobe2, Zenmap.

Tue, 30 Nov 2010 22:22:00 +0200  BackTrack4 tools explained, episode 5. /Backtrack/Network-Mapping/Identify-Live-Hosts: 0trace, 5nmp, Angry-IPScan, Arping, Autoscan, Fping, Genlist, Hping2, Hping3, Lanmap, Lanmap2, Nbtscan, Netifera, Nmap, Nsat, Onesixtyone, OutputPBNJ, SCTPscan, SSLscan, ScanPBNJ, TCPtraceroute, Unicornscan, Zenmap.

Fri, 19 Nov 2010 04:20:00 +0200  BackTrack4 tools explained, episode 4. /Backtrack/Information-gathering/Search-engine: If the web application you are testing is accessible from the Internet, you must know how it is indexed by search engines. This is one of the simpliest way to gather information, you don't send anything to the target directly and it's free. That's one of the appreciated sources of information crackers and pentesters use to identify vulnerabilities in web applications and server misconfiguration.

Tue, 16 Nov 2010 21:34:00 +0200  BackTrack4 tools explained, episode 3. /Backtrack/Information-gathering/Route: This set of tools enable to identify the landscape target. It is composed of domain information tools, various traceroute-like tools and graphical mapping tools.

Sun, 14 Nov 2010 11:16:00 +0200  BackTrack4 tools explained, episode 2. During the first step of a penetration testing (reconnaissance, also called recon), the gathering of meta information is a critical step. Metagoofil and SEAT enable to collect as much information as possible about a target, using indexed information on the Internet. The output provides the auditor with useful information (path disclosures, usernames, OS fingerprinting, ...) to better target the following steps of the audit.

Sat, 13 Nov 2010 21:36:00 +0200  BackTrack4 tools explained, episode 1. DNS analysis is an important step in the reconnaissance process of a penetration test as it provides the auditor with relevant information about the target.

Sat, 06 Nov 2010 23:41:00 +0200  0trace.sh is a shell script written by Michal Zalewski. It is a reconnaissance / firewall bypassing tool that enables hop enumeration ("traceroute") within an established TCP connection, such as a HTTP or SMTP session. This is opposed to sending stray packets, as traceroute-type tools usually do. In case of a successful scan, 0trace provides useful additional servers for the penetration tester.

Sat, 30 Oct 2010 11:12:00 +0200  Web Application ToolBox aka Watobo is a tool that behaves like BurpSuite or WebScarab. It is capable of passive as well as active scanning and this latest is its real value added. It enables to automatize the discovery of common vulnerabilities (XSS, LFI, SQL injections, ...) in web applications. Its interface is developed in (Fx)Ruby and is quite simple to use.

Mon, 25 Oct 2010 19:47:00 +0200  VNCrack is a brute-forcer against VNC Server service. See how attackers crack authentication and ways to enhance the security of this service.

Sun, 24 Oct 2010 19:07:00 +0200  RandStorm Yet Another Brute Attacker aka RSYaba is developed by Robin Wood from www.randomstorm.com. It is tool to run brute force attacks against various services (http, https, ssh, mysql) in a similar way to Thc-hydra and Medusa. The tool was written after bad experiences at getting existing tools working correctly with HTTP and SSH so it was decided to make a tool that would be easier to configure.

Sat, 23 Oct 2010 11:02:00 +0200  Darkjumper.py has been developed by mywisdom & gunslinger_. This tool will try to find every website that is hosted at the same server at your target and will check for every vulnerability of the discovered websites. Some probed vulnerabilities: injections (sqli, blind sqli, lfi, rfi, rce), cgidirs, user enumeration, portscan, headerinfo, daemoninfo, admin paths discovery, hex and base64 converter, ip checker, ftp anonymous account checker.

Tue, 19 Oct 2010 06:50:00 +0200  NOSEC Malware Detector (aka NSDecoder) is an automated website malware detection tool that analyzes the potential presence of malware on provided URLs.

Sat, 16 Oct 2010 18:01:00 +0200  Social Engineering Ninja (aka S-E Ninja) is a PHP toolkit with popular sites fake pages (gmail.com, msn.com, yahoo.com, facebook.com, ...) and anonymous mailer via mail() function in PHP. It allows attackers to redirect victims to these portals and steal sensitive data (credentials, credit card number, ...). See how to use this tool and how to protect against it.

Sat, 16 Oct 2010 09:10:00 +0200  Windows Credentials Editor (WCE) is a tool for Windows boxes that will list, add, edit and delete logon sessions. It outputs a file containing LM/NT hashes that are then crackable via a NTLM brute-forcer.

Fri, 15 Oct 2010 23:42:00 +0200  Google Hacking Diggity Project is a tool developed by Stach & Liu. It uses Google and Bing databases to look for vulnerabilities in web sites.

Fri, 15 Oct 2010 18:44:00 +0200  Arachni is a smart, fast and asynchronous Web Application Security Scanner.

Sat, 09 Oct 2010 23:02:00 +0200  Havij is a tool that automates SQL injections (blind SQL, SQL errors, UNION) to reverse-engineer a database and gather relevant data on a server.

Sat, 09 Oct 2010 11:53:00 +0200  md5cracker.sh is a shell script that connects to various online resources to gather hash corresponding to a provided MD5 string. It has been developed by FuRt3X.

Fri, 08 Oct 2010 08:07:00 +0200  CWE/SANS Top 25 is a set of 25 rules classified in 3 categories, relative to most dangerous programming errors.

Thu, 07 Oct 2010 23:44:00 +0200  OWASP Top 10 Project (2010 version) is a set of 10 rules for avoiding common programming errors in web applications.

Thu, 07 Oct 2010 22:42:00 +0200  Inspathx is a tool developed by YGN Ethical Hacker Group. It uses local source tree to make requests to the url and search for path inclusion error messages.

Sat, 02 Oct 2010 23:51:00 +0200  BlindElephant has been introduced at DEFCON 18. It is a web application fingerprinter that attempts to determine the web application installed and its version.

Fri, 01 Oct 2010 19:26:00 +0200  Shell-in-a-box is a small web server that emulates a terminal window that you can access through a web interface. It simplifies administration, but how secure is this?

Sun, 12 Sep 2010 16:55:00 +0200  Main network commands for Windows and *nix systems.

Sun, 12 Sep 2010 05:13:00 +0200  Medusa is a speedy, massively parallel, modular, login brute-forcer that supports many services which allow remote authentication: AFP, CVS, FTP, HTTP, IMAP, MS-SQL, MySQL, NetWare NCP, NNTP, PcAnywhere, POP3, PostgreSQL, REXEC, RLOGIN, RSH, SMBNT, SMTP-AUTH, SMTP-VRFY, SNMP, SSHv2, Subversion (SVN), Telnet, VMware Authentication Daemon (vmauthd), VNC, Generic Wrapper, Web Form.

Tue, 31 Aug 2010 15:45:00 +0200  This article explains how to use DropBox as a solution for automatizing cloud backups for your server.

Wed, 25 Aug 2010 23:02:00 +0200  DotDotPwn is a tool that automatizes the discovery process of finding hidden directories (directory traversal) within HTTP and FTP structures. Its database currently contains 881 payload attacks and is Windows oriented (tests the presence of boot.ini file) but future updates will come soon.

Tue, 10 Aug 2010 11:32:00 +0200  This article deals with common web attacks and aims at making people aware of these attacks in order that they better code their applications. Each of these attacks is going to be explained, theoretically and practically and a way to patch your applications is also given.

Fri, 06 Aug 2010 10:31:00 +0200  HackThisSite.org is a hacking site, which objective is to teach hacking of websites. There are many exercises, from basic to expert.

2010-03-28   Samhain is a Host-based Intrusion Detection System (HIDS) that ensures file integrity checks rootkit detection, log file monitoring, port monitoring, detection of rogue SUID executables and detection of hidden processes

2010-03-27   Flint is a tool that analyzes your firewall rules and produces a comprehensive report which highlights eventual misconfiguration issues. It is based on a modified version of Ubuntu 8.04 JeOS.

2010-03-27   Satoril is the Linux version of Satori, a passive OS fingerprinting tool, written by Eric Kollmann.

2010-03-26   PenTBox is a Security Suite with programs like Password Crackers, Denial of Service testing tools (DoS and DDoS), Secure Password Generators, Honeypots and much more. Destined to test security/stability of networks and more. Programmed in Ruby, and oriented to GNU/Linux systems (but compatible with Windows, MacOS and more).

2010-03-24   SkipFish has been developed by Michal Zalewski (Google engineer). This tool automatizes vulnerability assessment on web applications. It is capable of processing between 500 requests per second for a remote scan and 7,000 requests per second for a local one. The tool is compatible with Linux, FreeBSD 7.0+, MacOS X, and Windows (Cygwin) environments.

2010-03-20   pyScanXtract.py is a script, written in Python, created in the shape of forensicscontest (puzzle #4). It enables to analyse a pcap file and to produce statistics about potential portscans.

2010-03-20   My write-up for Forensicscontest.com, Puzzle #4: The Curious Mr. X. See also pyScanXtract, a tool that graphically analyzes scans from a pcapfile

2010-03-17   JBroFuzz is a web application fuzzer from OWASP. It enables to fuzz any http/https based web application.

2010-03-16   WhatWeb is a web scanner that identifies installed stuff (forums, CMS, blogs, etc.) on a remote server. It is based on a set of 70 plugins and has two modes of processing: a passive mode enables to detect installed applications while you are surfing on a site; an aggressive mode enables to forge requests to gather more information.

2010-03-10   Sentinel is a portable tool, designed to remotely detect promiscuous mode on interfaces. It uses different techniques, such as DNS test, ICMP etherping test and ARP test.

2010-03-08   Maltego is an open source intelligence and forensics application, enabling to easily gather information about DNS, domains, IP addresses, websites, persons, etc. The information is rendered on a graph, showing the relationships between objects. This is the perfect tool for social engineering.

2010-03-06   La commande patch permet d'appliquer un patch à un fichier. Elle est très pratique car elle permet d'appliquer une série de modifications à partir d'un fichier patch, sans avoir à relivrer l'ensemble du fichier modifié.

2010-03-06   Dsniff est un ensemble d'outils permettant de réaliser du sniffing actif. Il est utilisé dans le cadre d'audits et de tests de pénétration.

2010-03-01   Brute force attacks on various services.

2010-03-01   John The Ripper is a fast password cracker, available for any OS. It understands many encryptions.

2010-02-28   Pangolin is an automatic SQL injection penetration testing tool developed by NOSEC. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it has detected one or more SQL injections on the target host, it is possible to perform an extensive back-end database management...

2010-02-28   Autoscan-Network permet la détection automatique d'équipements sur un réseau. Pour chaque hôte découvert, il va tenter de récolter une série d'informations (prise d'empreinte de l'OS, liste des services, liste des partages, informations SNMP, etc.). A cela est ajoutée une fonctionnalité de détection d'intrusion.

2010-02-27   ScreamingCSS.pl est un script écrit en Perl, permettant de mettre en évidence des points d'entrée XSS sur un site Web.

2010-02-07   DMitry (Deepmagic Information Gathering Tool) is a tool that gathers as much information as possible about a host (subdomains, email addresses, uptime information, tcp port scan, whois lookups, ...)

2010-02-02   My response to forensicscontest.com, puzzle #3 (Ann’s AppleTV)

2010-01-30   Detailed Snort attack signatures

2010-01-23   Installation de Debian 5 Lenny sur un portable Lenovo G550

Older entries »