All other tools

winAUTOPWN is a minimal Interactive Exploit Framework which acts as a frontend for quick systems vulnerability exploitation. It is a collection of remote exploits using which one can compromise vulnerable systems. winAUTOPWN takes inputs like IP address, Hostname, CMS Path, etc. and does a smart multi-threaded portscan for TCP ports 1 to 65535. Open ports are then recognized and exploits applicable to those ports are executed with the aim of gaining a remote shell or the ability to run remote commands in certain cases.

 

Beef_logoWe haven’t featured any guest bloggers in a while, but we’re glad to be featuring Chirstian Frichot this month! Christian is a security professional based in Perth, Western Australia. He’s currently working in the finance industry as part of a tight-knit internal team of security consultants doing their best to protect their business and customers from technical threats such as malware or insecure web applications.

After having met Wade Alcorn (the initial author and project lead of BeEF), Christian mentioned his interest in helping out on the project where he could, which eventually led to Wade accepting his offer. The discussion was held over a couple of bottles of wine, so perhaps Wade’s regretting the decision now!

Christian’s role within the BeEF project, if it were to be defined, is odd-jobs-go-to-boy, command-module implementer, Ext-JS-fighter and twitter maintainer. When Christian is not working on BeEF, he’s doing his best to represent the Perth OWASP Chapter, or laying down crunchy beats on the drum-kit.

myphpipsWe have talked about PHPIDS in detail here. Now There is a new tool myphpips. When we have a IDS what is the need for IPS

An IDS does just what its name tells us – it detects network intrusion. Simple enough! However, the IDS is basically a “town crier” in that it will notify other network devices about the attack, but does not directly defend against the attack itself. Major issue using IDS is by the time the IDS detects an issue and notifies the appropriate network devices, the beginning of the infected traffic flow is already in the network.

where as Intrusion Prevention System (IPS) does sit in the middle of the traffic flow – in this case, the IPS will actually be our Cisco router. When the IPS detects a problem, the IPS itself can prevent the traffic from entering the network.

MyPHPIPS (MyPHP Intrusion Prevention System) is an open source PHP WebApplication Intrusion Prevention System. It was based on PHPIDS (phpids.org) and distributed under the LGPL License. This work is supported by CyberSecurity Malaysia. Small organisation can hope for some advance environment support from the developers.

android_packet_sniffer

This is a nice app to capture and display WiFi and bluetooth traffic on Android phones. But for using this app, you have to root your phone and have "su" command install.

This app is based on the tcpdump package therefor it have to be installed manually.
1. Download and Install PacketSniffer App from the market or from the following link.
http://dl.dropbox.com/u/3775726/PacketSniffer/PacketSniffer.apk
2. Copy the precompiled TCPDUMP file to the "/data"  library on your phone:    
first make sure your "/data" library has READ and WRITE privileges. if not use:  "chmod 777 data" 
in order to copy use the following command if you have ADB :"adb push c:\locationOfTheTcpdumpFile /data"
in case you don't have ADB you can copy the tcpdump file to the SD card and do:  "cat /sdcard/tcpdump > /data/tcpdump 
3. Give the tcpdump file Read Write and Exec privileges :    "chmod 777 /data/tcpdump"

Before you start to capture you can pick weather to save the captured data on a local SQL DB on the device
or on to a file on the SD card.

Read More.. https://sites.google.com/site/androidarts/packet-sniffer

More Articles …

  1. Hackertool test op zwakke Morto-wachtwoorden
  2. Uniscan 4.0 vulnerability scanner Released
  3. Microsoft verbetert software security tools
  4. RIPS - static analysis tool for PHP vulnerabilities
Page 12 of 19