... neuere Einträge
Wednesday, 29. June 2011
BSQLBF v.2.7 - Blind Sql Injection Brute Forcer Linux
Am Wednesday, 29. Jun 2011 im Topic 'Pentest'
An updated version is now available for download. This supports “-nomatch” switch. The -nomatch switch is exactly opposite of the -match switch, ie, it will look for the supplied unique keyword which only appears in the false page and NOT in true page. Remember, the “-match” looks for a unique string which only appears in true and do not appear in false cases.
The -nomatch switch is particularly useful which carying out injections in the following scenarios:
Injection in insert statement
True and Error Scenario
Injection in order by etc
Download
http://code.google.com/p/bsqlbf-v2/downloads/list
The -nomatch switch is particularly useful which carying out injections in the following scenarios:
Injection in insert statement
True and Error Scenario
Injection in order by etc
Download
http://code.google.com/p/bsqlbf-v2/downloads/list
OWASP Mantra - Security Framework v.6.1
Am Wednesday, 29. Jun 2011 im Topic 'Tools'
Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. Mantra is a security framework which can be very helpful in performing all the five phases of attacks including reconnaissance, scanning and enumeration, gaining access, escalation of privileges, maintaining access, and covering tracks. Apart from that it also contains a set of tools targeted for web developers and code debuggers which makes it handy for both offensive security and defensive security related tasks.
Download: http://www.getmantra.com
More: https://www.owasp.org
Download: http://www.getmantra.com
More: https://www.owasp.org
XSSF - Cross-Site Scripting Framework v.2.0 Released Linux
Am Wednesday, 29. Jun 2011 im Topic 'Tools'
XSSF - Cross-Site Scripting Framework v.2.0 Released
The Cross-Site Scripting Framework (XSSF) is a security tool designed to turn the XSS vulnerability exploitation task into a much easier work. The XSSF project aims to demonstrate the real dangers of XSS vulnerabilities, vulgarizing their exploitation. This project is created solely for education, penetration testing and lawful research purposes.
XSSF allows creating a communication channel with the targeted browser (from a XSS vulnerability) in order to perform further attacks. Users are free to select existing modules (a module = an attack) in order to target specific browsers.
XSSF provides a powerfull documented API, which facilitates development of modules and attacks. In addition, its integration into the Metasploit Framework allows users to launch MSF browser based exploit easilly from an XSS vulnerability.
Download: https://code.google.com/p/xssf/downloads/list
Video demo: http://www.youtube.com/user/X0x1RG9f
The Cross-Site Scripting Framework (XSSF) is a security tool designed to turn the XSS vulnerability exploitation task into a much easier work. The XSSF project aims to demonstrate the real dangers of XSS vulnerabilities, vulgarizing their exploitation. This project is created solely for education, penetration testing and lawful research purposes.
XSSF allows creating a communication channel with the targeted browser (from a XSS vulnerability) in order to perform further attacks. Users are free to select existing modules (a module = an attack) in order to target specific browsers.
XSSF provides a powerfull documented API, which facilitates development of modules and attacks. In addition, its integration into the Metasploit Framework allows users to launch MSF browser based exploit easilly from an XSS vulnerability.
Download: https://code.google.com/p/xssf/downloads/list
Video demo: http://www.youtube.com/user/X0x1RG9f
