Archive for the 'Penetration Testing' Category

WordPress Exploit Scanner

Wednesday, July 9th, 2008

This WordPress plugin searches the files on your site for a few known strings sometimes used by hackers, and lists them with code fragments taken from the files.

Posted in Code Audit, Vuln. Scanner, Penetration Testing, Web Applications | No Comments »

SideJacking - Stealth WiFi Attack

Thursday, August 16th, 2007

SideJacking is about sniffing HTTP traffic and cloning whatever cookies are exchanged between the browser and the server. In this way, the attacker can clone your session IDs and eventualy they can hijack your account.

Posted in Penetration Testing, Web Applications, Tools | 4 Comments »

USB Switchblade - the silent killer

Tuesday, July 17th, 2007

If you are looking for a way to silently run information gathering tools out of a U3 compatible USB thumb drive, look no further. The Hack5 USB Switchblade is a great tool to turn a harmless USB pen drive into a dangerous hacking tool.

Posted in internal threats, Penetration Testing, Tools | 2 Comments »

New SQL Power Injector 1.2 Released

Monday, July 16th, 2007

Francois Larouche announced today the availability of a new version of Sql Power Injector , an excelent application created in .Net 1.1 that helps the penetration tester to find and exploit SQL injections on a web application.

Posted in Sql Injection, Penetration Testing, Tools | No Comments »

Finally a GUI for Evolution Intelligence Tool

Monday, July 9th, 2007

Evolution is a program that can be used to determine the relationships and real world links between people, systems and internet resources. Passive information gathering and intelligence.

Posted in Penetration Testing, Fingerprinting, Tools | No Comments »

Top 15 free SQL Injection Scanners by Security Hacks

Thursday, May 31st, 2007

Security Hacks assembled a list of Top 15 free SQL Injection Scanners which include some of the most popular SQL injection tools such as : SQLibf, Absinthe, NGSS SQL Injector, etc.

Posted in Sql Injection, Penetration Testing, Tools | 1 Comment »

Security Hacks Bluetooth Hacking Tools

Monday, May 28th, 2007

great resource of bluetooth security hacking tools

Posted in Penetration Testing, Tools | 1 Comment »

Metasploit Framework version 3.0 RELEASED

Tuesday, March 27th, 2007

Metasploit is pleased to announce the immediate, free availability of the Metasploit Framework version 3.

Posted in Penetration Testing, Framework | No Comments »

Web App Audit in 3 easy steps - powered by SANS

Thursday, March 22nd, 2007

SANS released a paper on Web Applications Audit. It’s more of a guide to low hanging fruit website assessment, but still is a good resource . The article begins with setting up , adjusting and configuring the tool arsenal and then walks the reader trough implementation and conclusions.

Posted in Penetration Testing, Framework, Web Applications | No Comments »

BackTrack v.2.0 Final is Out

Wednesday, March 7th, 2007

BackTrack is the most Top rated linux live distribution focused on penetration testing. The long-awaited (~5 months) tool has reached it’s Version 2.0 final stage. There are a lot of changes since the last Version as mentioned on the Changelog.

Posted in Penetration Testing, Tools | No Comments »