Archives/2011

Sun, 10 Apr 2011 07:58:00 +0200  Streams is developed by Tillmann Werner, Senior Virus Analyst by Kaspersky Lab. Streams is a tool for browsing, mining and processing TCP streams in pcap files and will be particularly suitable for large pcap files.

Sat, 9 Apr 2011 08:48:00 +0200  DRIL (Domain Reverse IP Lookup) is a Reverse Domain Tool developed by Mr.Treasure Priyamal in JAVA. The tool uses the Bing API to find out domain names listed in a target host.

Tue, 5 Apr 2011 06:03:00 +0200  Suricata is an emerging IDS/IPS developed by the Open Information Security Foundation (OISF) that brings new features in the realm of known IDS/IPS: multi-threading, high performances, HTP normalizer and parser, ... This article describes the features, the installation and configuration of Suricata.

Fri, 1 Apr 2011 06:37:00 +0200  SensePost Yeti performs requests from a given domain name: domain discovery (TLD expansion), forward lookup brute forcing, reverse lookups, Bing searching (IP: and SITE: searches), SSL certificate scraping and Web spider.

Thu, 24 Mar 2011 19:39:00 +0100  Scapytain is a Python framework that enables to save Scapy payloads, organize them and replay them in the shape of (pen)test campaigns. It structures these payloads into tests, test plans, objectives and campaigns, and has the ability to dynamically inject contextual elements to tests (e.g. IP addresses).

Sun, 13 Mar 2011 12:05:00 +0100  Aung Khant from the YGN Ethical Hacker Group has developed a tool that parses the content of web sites to reveal clues in the source code. The tool is capable of revealing architecture details, the usage of cache systems, Content Delivery Network (CDN), local and external IP addresses.

Sun, 20 Feb 2011 10:34:00 +0100  TellMeWeb is a Ruby script written by Aung Khant from YGN Ethical Hacker Group. It takes nmap output (-oG) generated together with -sV option. It takes all hosts with http & https ports open. Then it feeds them into whatweb to try to determine the application that is installed.

Tue, 15 Feb 2011 22:35:00 +0100  ExifTool is a tool that manipulates meta information on pictures (reads, writes and edits meta information). The tool is also able to retrieve thumbnails embedded in jpeg images. It supports a wide variety of metadata formats (EXIF, GPS, IPTC, XMP, JFIF, ...). Exiftool is certainly the most complete tool that manipulates meta data on pictures.

Sat, 12 Feb 2011 14:02:00 +0100  Tor (originally acronym of "The Onion Routing") is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. This article explains how Tor works and introduces some examples, including a Nmap scan through the Tor network.

wed, 09 Feb 2011 18:10:00 +0100  GetTorExitNode is a Python script that I have written in the shape of tests about anonymity via Tor. It is meant to be used in conjunction with tortunnel and provides one or all valid Tor exit node(s).

Tue, 08 Feb 2011 22:03:00 +0100  XSSer is an open source penetration testing tool (written by psy) that automates the process of detecting and exploiting XSS injections against different applications. "The Mosquito" (version 1.0) is a very (the most) complete tool that has several options to bypass certain filters, and various special techniques of code injection.

Thu, 03 Feb 2011 21:33:00 +0100  Simple Local File Inclusion Exploiter is a Python script that enables to identify if a page is vulnerable to Local File Inclusions (LFI) attacks.

Thu, 03 Feb 2011 07:38:00 +0100  LFI Map is a Python script that challenges web applications against Local File Inclusions (LFI) attacks. It is based on a set of directories that are injected in detected parameters. Among others, the tool is capable of exporting the results in a HTML file, finding the root of the file system automatically, finding default files (linux and windows), sending null bytes to bypass some controls, detecting passwords in files, detecting OS and hex-encoding URLs. In addition, it supports basic authentication and proxy.

Sun, 30 Jan 2011 20:58:00 +0100  GetHttpStatus.py is a Python script that connects to a web server and sends HEAD request from a list of URLs to get the returned status (e.g. 200 for OK, 404 for Not Found, ...). I have written this tool in the shape of a counter-expertise of Apache log files, as a PoC to check that resources where available.

Sat, 29 Jan 2011 21:58:00 +0100  Netbios Shares Scanner has been developed by SecPoint. The tool scans an IP address and tries to retrieve shared disks and their content. It works for Windows workstations/servers as well as for Linux boxes (smbclient used for login).

Sat, 29 Jan 2011 16:32:00 +0100  Inspathx has been updated. Inspathx is a tool developed by YGN Ethical Hacker Group. It uses local sources to make requests to a web application (php, asp[x], jsp[x], cfm) and searches for path inclusion error messages.

Tue, 25 Jan 2011 03:20:00 +0100  WAFP is a Web Application Finger Printer written in Ruby using a SQLite3 database. WAFP compares checksum of a web application files with the one in the fingerprint database. If an entry is found, the application fingerprint is then displayed (application name, version).

Thu, 19 Jan 2011 20:51:00 +0100  WackoPicko is a website written by Adam Doupé. It contains known and common vulnerabilities (XSS vulnerabilities, SQL injections, command-line injections, sessionID vulnerabilities, file inclusions, parameters manipulation, ...). It was first used for the paper Why Johnny Can't Pentest: An Analysis of Black-box Web Vulnerability Scanners.

Mon, 17 Jan 2011 22:38:00 +0200  MagicTree is a tool developed in Java by Gremwell. It enables to organize data gathered during a pentest. The tool also enables to launch commands (nmap, nikto, ...) for a better integration of the results. Here are some of the features: Automatic creation of nodes from netblock address, Drag and drop objects from the tree, Launch CLI-based tools (nmap, nikto, ...) from MagicTree, Import results from other tools (Nessus, ...), Sort findings by severity, Generate reports (*.odt, *.docx)...

Thu, 13 Jan 2011 20:47:00 +0200  Browser Fuzzer 3 (aka bf3) is designed as a hybrid framework/standalone fuzzer that generates test cases. The tools currently supports following features: Fuzzes CSS, DOM, HTML, JavaScript and XML; Attended and Unattended Fuzzing Modes; 7th Generation Fuzzing Oracle; Random Data Generator; Mutation Fuzzing Engine.

Sat, 8 Jan 2011 17:00:00 +0200  There has been an issue in the script that generates the RSS flaw today. All news between 2011-01-08 11:08 GMT+1 and 2011-01-08 16:54 GMT+1 have been corrupted. The issue has been resolved. We are sorry for the inconvience.

Tue, 04 Jan 2011 06:15:00 +0200  PuzlBox is a PHP fuzzing tool written by John Leitch. It scans for several different vulnerabilities by performing dynamic program analysis. Following tests are currently performed: Arbitrary Command Execution, Arbitrary File Read/Write/Change/Rename/Delete, Local File Inclusion (LFI), Arbitrary PHP Execution, SQL Injection, Reflected Cross-site Scripting (XSS).

Sat, 01 Jan 2011 13:38:00 +0200  THC-Hydra is a very fast (multi-threaded) network logon cracker which support many different services: afp, cisco, cisco-enable, cvs, firebird, ftp, http-get, http-head, http-proxy, https-get, https-head, https-form-get, https-form-post, icq, imap, imap-ntlm, ldap2, ldap3, mssql, mysql, ncp, nntp, oracle-listener, pcanywhere, pcnfs, pop3, pop3-ntlm, postgres, rexec, rlogin, rsh, sapr3, sip, smb, smbnt, smtp-auth, smtp-auth-ntlm, snmp, socks5, ssh2, svn, teamspeak, telnet, vmauthd, vnc.

Sat, 01 Jan 2011 01:04:00 +0200  I wish you a happy new year and lots of good things for 2011.

Fri, 31 Dec 2010 19:07:00 +0200  WebRaider is a tool for Windows, developed by Mavituna Security, that enables to simplify the exploitation of SQL injections (one click ownage). It quickly and easily enables to get a reverse shell from an SQL Injection with one request without using an extra channel. It currently supports MS-SQL Server and Oracle.

Thu, 30 Dec 2010 08:48:00 +0200  Httprecon is a http fingerprinting tool for Windows. The results are based on the analysis of 9 requests: GET existing, GET long request, GET non-existing, GET wrong protocol, HEAD existing, OPTIONS common, DELETE existing, TEST method, Attack Request.

Mon, 13 Dec 2010 22:09:00 +0200  BackTrack4 tools explained, episode 9. /Backtrack/Network-mapping/VPN: ike-scan and psk-crack are tools that enable to test the security of VPNs based on the IKE (Internet Key Exchange) network protocol.

Sun, 12 Dec 2010 23:26:00 +0200  BackTrack4 tools explained, episode 8. /Backtrack/Network-mapping/Service-fingerprinting: Amap, Dmitry, Httprint (CLI and GUI), Complemento (Httsquash, LetDown, ReverseRaider).

Sat, 11 Dec 2010 13:20:00 +0200  On Sunday, the 28th of November 2010, the main distribution server of the ProFTPD project was compromised. The modified version enables arbitrary commands to be executed. Feedbacks on the backdoor, tools and PoC: bitchscan (chr1x) and MSF plugin (darkharper2).

Sun, 5 Dec 2010 22:52:00 +0200  BackTrack4 tools explained, episode 7. /Backtrack/Network-mapping/Portscanning: Angry-IPScan, Autoscan, Genlist, Netifera, Nmap, Nsat, OutputPBNJ, Propecia, SCTPscan, ScanPBNJ, Unicornscan, Zenmap.

Sun, 5 Dec 2010 13:07:00 +0200  Armitage is a graphical frontend for Metasploit that shows targets and recommends exploits. Armitage aims at simplifying the usage of Metasploit.

Wed, 1 Dec 2010 21:58:00 +0200  Don't miss it, register! Arachni webinar on 2010-12-03, 1pm EST • More info: http://trainofthought.segfault.gr/2010/12/01/arachni-webinar/ • Registration: http://www.nopsec.com/index.php/company/news/nopsec-vrm-webinar-registration.

Older entries »