Thursday, 12. January 2012
Become a Metasploit Expert l
Metasploit Framework Expert Certification DVD
The DVD contains over 10+ solid hours of how to get started using Metasploit, Vulnerability assessment and hacking, and finally basics of Exploit Research with it! The course and online labs in the cloud are still running at the promotional pricing and we highly recommend you have a look.
Info:
http://securitytube-training.com/certifications/securitytube-metasploit-framework-expert/
Download:
http://dvd.securitytube.net/SMFE-Community.zip


SMFE Part 1 from Vivek Ramachandran on Vimeo.

SecurityTube Metasploit Framework Expert Part 2 from Vivek Ramachandran on Vimeo.

SecurityTube Metasploit Framework Expert (SMFE) Part 3 from Vivek Ramachandran on Vimeo.

SMFE Part 4 from Vivek Ramachandran on Vimeo.

Part 5 from Vivek Ramachandran on Vimeo.

Part 6 from Vivek Ramachandran on Vimeo.

Part 7 from Vivek Ramachandran on Vimeo.

Part 8 from Vivek Ramachandran on Vimeo.

Part 9 from Vivek Ramachandran on Vimeo.

Part 10 from Vivek Ramachandran on Vimeo.

Part 11 from Vivek Ramachandran on Vimeo.

Part 12 from Vivek Ramachandran on Vimeo.

Part 13 from Vivek Ramachandran on Vimeo.

Part 14 from Vivek Ramachandran on Vimeo.

Part 15 from Vivek Ramachandran on Vimeo.

Part 16 from Vivek Ramachandran on Vimeo.

Part 17 - Broadband from Vivek Ramachandran on Vimeo.

Part 18 - Broadband from Vivek Ramachandran on Vimeo.

Part 19 - Broadband from Vivek Ramachandran on Vimeo.

19A - Broadband from Vivek Ramachandran on Vimeo.

20 from Vivek Ramachandran on Vimeo.

21 from Vivek Ramachandran on Vimeo.

22 - Broadband from Vivek Ramachandran on Vimeo.

23 - Broadband from Vivek Ramachandran on Vimeo.

24 - Broadband from Vivek Ramachandran on Vimeo.

25 - Broadband from Vivek Ramachandran on Vimeo.

26 from Vivek Ramachandran on Vimeo.

Permalink

 


DNSChanger Trojan - Check System
DNSChanger is a family of Trojan which, as its name can tell, alters the DNS settings of infected computers (to force the computer to use a rogue DNS server) in order to redirect the user to malicious web sites or services. As a reminder, the DNS protocol allows systems to obtain the IP address of a server from its name: this process is called DNS resolution, and it happens for instance each time a user enters an URL in its favourite web browser.

Check System
http://www.dns-ok.de/

Permalink

 


NQ Mobile Security & Antivirus - Android
Protect your android phone and tablet with NQ Mobile Security & Antivirus from viruses, malware, spyware, trojans and phone hacking. Download NQ Mobile Security & Antivirus for FREE Antivirus, privacy protection, phone locator, data backup, safe browsing, traffic monitoring and safe apps recommendations for your Samsung Galaxy, HTC Desire, HTC Evo, LG Optimus, Motorola Droid, Milestone, Huawei etc.

Download
https://market.android.com/details?id=com.nqmobile.antivirus20&hl=en

Permalink

 


Magix PC Check and Tuning 2011 - Free
Magix PC Check and Tuning is complete system utility suite that provides all the tools necessary to maintain and speed up your computer. Unlike other ordinary system utilities, the application is very simple to use. One click function buttons such as the “Check PC” button automatically performs a complete system analysis, which includes analysis of system start, garbage data, internet traces, swap file, windows registry, hard drive fragmentation, registry fragmentation, unwanted services and more. After the analysis is complete, the application displays the issues that need to be fixed. Users can fix all the issues at once by clicking on the “Fix all problems” button.

Click here
http://www.magix.com/pcct-2011/
to visit
http://www.pentestit.com/tag/promotional-offer/
promotional offer for Magix PC Check and Tuning.
Enter the required details to create a Magix account for Existing users – select “I have already registered with Magix” and login to your account.
Login to your email and check an email from register@magix.net with your free serial number and download link Magix PC Check and Tuning

Permalink

 


FreeDOS
FreeDOS 1.1 has been released after being in development for several years. FreeDOS is an opensource operating system aiming to provide the same (or better) functionality as Microsoft'sold MS-DOS. Right now the main use is running old games and software, but you might encounter it on somefreshly sold computers, motherboard setup CDs, BIOS flashing diskettes, embedded hardware and other uses.

Download
http://www.freedos.org/freedos/files/

Permalink

 


Wednesday, 4. January 2012
Firefox Add-ons List for Penetration Tester
Access Me
FormBug
JavaScript Deobfuscator
SQL Inject ME
Add N Edit Cookies+
FoxyProxy
Key Manager
Selenium IDE
CookieSwap
FoxySpider
Library Detector
Tamper Data
Domain Details
Google Site Indexer
Live HTTP Headers
URL Flipper
FireFTP
Greasemonkey
PassiveRecon
User Agent Switcher
FireFlash
Groundspeed
Poster
Vitzo WHOIS
Firebug
HackBar
RESTClient
Wappalyzer
Firebug
Host Spy
RESTTest
Web Developer
Firecookie
HttpFox
RefControl
XSS Me
Firesheep
JSview
Resurrect Pages
refspoof
No Script
Proxybar
Acunetix Web Scanner
Coockie Watcher
CryptoFox
Toggle Web Developer Toolbar
Torbutton
WOT
View Cookies

Permalink

 


Monday, 2. January 2012
Reaver Cracking WPA
Reaver is a WPA attack tool developed by Tactical Network Solutions that exploits a protocol design flaw in WiFi Protected Setup (WPS). This vulnerability exposes a side-channel attack against Wi-Fi Protected Access (WPA) versions 1 and 2 allowing the extraction of the Pre-Shared Key (PSK) used to secure the network. With a well-chosen PSK, the WPA and WPA2 security protocols are assumed to be secure by a majority of the 802.11 security community.

Download
http://code.google.com/p/reaver-wps/downloads/list

Usage is simple just specify the target BSSID and the monitor mode interface to use:

# reaver -i mon0 -b 00:01:02:03:04:05

Info
http://securityxploit.blogger.de/stories/1970771/



Permalink

 


Bluelog- Linux
Bluelog is a simple Bluetooth scanner designed to tell you how many discoverable devices there are in an area as quickly as possible. It is written in C. That so eliminating compatibility issues in most platforms.

Download
ftp://ftp.digifail.com/downloads/software/bluelog/bluelog-1.0.0.tar.gz

Permalink

 


Lilupophilupop - SQL
Infections are shows on .com, .de, & .uk as the most affected regions.
If you want to find out if you have a problem just google for



by
Kumar

Permalink

 


Easy Router PIN
There is a newly discovered vulnerability in the WiFi Protected Setup standard that reduces the number of attempts it would take an attacker to brute-force the PIN for a wireless router's setup process. The flaw results in too much information about the PIN being returned to an attacker and makes the PIN quite weak, affecting the security of millions of WiFi routers and access points. Security researcher Stefan Viehbock discovered the vulnerability (PDF)

Download PDF
http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf

Permalink

 


Password Security Scanner
This utility scans the passwords stored by popular Windows applications (Microsoft Outlook, Internet Explorer, Mozilla Firefox, and more...)
Supported Applications

Internet Explorer 4.0 - 6.0
Internet Explorer 7.0 - 9.0
Mozilla Firefox (All Versions)
Dialup/VPN passwords of Windows
MSN/Windows Messenger
Microsoft Outlook
Windows Live Mail


Download
http://www.nirsoft.net/utils/password_security_scanner.html

Permalink

 


Canape - Network testing tool
CANAPE is a network testing tool for arbitrary protocols, but specifically designed for binary ones. It contains code to implement standard network proxies and provide the user the ability to capture and modify traffic to and from a server.The core can be extended through multiple .NET programming languages to parse protocols as required and implement custom proxies.Canape was released during Blackhat Europe 2012 where Context presented Canape with a worked example against Citrix ICA.

Download
http://www.contextis.co.uk/research/tools/canape/download/Canape%20Version%201.msi

Permalink

 


Saturday, 24. December 2011
Merry Christmas & Happy New Year
Thanks for following SecurityXploit events along with us in 2011. We look forward to continuing to bring you the latest SecurityXploit security-related news and analysis in January 2012.

All the best to you and yours this holiday.

Yours sincerely
Xploit


Permalink

 


Friday, 23. December 2011
Google Hack DB Vulnerability Tool - Linux
7974 (Including 4203 in SQL Injection)
Generate google vulnerability queries with your site.
Find out if you are litsed in google with vulnerabilities.

Download
http://www.secpoint.com/freetools/google-hack-db-tool-1.5.zip

Permalink

 


A Bug Hunter’s Diary
Chapter 1: Bug Hunting
Chapter 2: Back to the 90s
Chapter 3: Escape from the WWW Zone
Chapter 4: NULL Pointer FTW
Chapter 5: Browse and You’re Owned
Chapter 6: One Kernel to Rule Them All
Chapter 7: A Bug Older Than 4.4BSD
Chapter 8: The Ringtone Massacre
Appendix A: Hints for Hunting
Appendix B: Debugging
Appendix C: Mitigation of Exploitation

Title:A Bug Hunter’s Diary
Author: Tobias Klein
Publisher: No Starch Press
Pages: 208
Release Date: November 11, 2011

Visit
http://nostarch.com/bughunter.htm

Download Chapter 2: "Back to the 90s"
http://nostarch.com/download/bughunter_ch2.pdf

Permalink

 


THN Magazine - December 2011
New attack and defense techniques
Vulnerability discovery
Small tactics and techniques; Big attacks and impact
Mobile hacking
Professional exploit development
Security and hacking events around the world
Technical book reviews
Security and hacking threats
Security tools
Expert interviews

Download PDF
http://news.thehackernews.com/THN-dec2011.pdf

Permalink