Sunday, 8. April 2012
Magix Xtreme Foto & Grafik Designer 5.1 - Happy Easter
A graphic software such as Photo & Graphic Designer is usually included in photo editing programs using multiple toolbars. The toolbar on the left side is the most important, for it determines which step will take place next. Here you will find an entire tool palette, from a simple cursor in the top corner (selection tool) to the photo tool (marked by a red cross) at the bottom left, which will be mentioned again later. To use these, you will first need a photo. After it has been archived on the PC, a photo may be uploaded directly from the program or placed into the program via drag-and-drop. The portrait, which serves as an example here, has been imported into the software in horizontal format. It may now be turned by hand into the desired position, for which you must left click once on the image with your mouse. Since the portrait has to be turned 90 degrees, there is another perfectly suitable function which may be used. Rotate left and rotate right are tools, appearing in the top toolbar after the photo tool is selected in the right toolbar.

Download
http://dl.cdn.chip.de/downloads/14931645/Xtreme_Foto_Grafik_Designer_5_DLM_chip_DE.exe?1333901261-1333908761-431de1-B-8d8f4eeeb1d5d631d0805c4bb825ff4b.exe

Permalink

 


Iphone runtastic Roadbike - Happy Easter
runtastic Roadbike is your comprehensive bike app for your smartphone. The integration of heart rate, cadence, and speed sensors lets you get more precise tracking and analysis of your biking.

Download
http://clk.tradedoubler.com/click?p=23761&a=411323&url=http%3A%2F%2Fitunes.apple.com%2Fde%2Fapp%2Froad-bike-pro-fahrrad-computer%2Fid468429333%3Fmt%3D8%26uo%3D4%26partnerId%3D2003

Permalink

 


Mercury - Android
Mercury is a framework that provides interactive tools that allow for dynamic interactions with the target applications running on a device. It is a free and open source framework for bug hunters to find vulnerabilities, write proof-of-concept exploits and play in Android. It also provides a platform for effective vulnerability hunting and exploitation on the Android operating system. Mercury was basically created to meet the need for a consolidated testing framework for Android.

Download
http://labs.mwrinfosecurity.com/tools/2012/03/16/mercury/downloads/

Permalink

 


Friday, 6. April 2012
Steganos Privacy Suite 2012 - Happy Easter
Safes: Locks and encrypts documents, photos and your e-mail post office in a virtual data safe. Secures USB sticks, CDs and DVDs when on the go.
Password Manager: Organizes and manages all of your passwords and access information. All securely encrypted, of course. Supports Drag and Drop, or fills out website forms automatically.
Shredder: Shreds unwanted data permanently—cannot be reconstructed by data recovery applications.
Plus: E-mail and web favorites encryption functions, trace destructor and Steganography.

Complement your firewall and antivirus software with a first-rate data protection and encryption system.

Download
http://dl.cdn.chip.de/downloads/14931568/sss12int_chip.exe?1333709164-1333716664-27dc9c-B-5247026e20ae20194b36eb3572a13ccb.exe

Permalink

 


TuneUp Utilities - Happy Easter
TuneUp Utilities 2011 is one of the most popular system utility suites for windows that optimizes the performance of your system, repairs problems, and helps you to customize the look of your system. Some of the key troubleshooting tasks performed by the app include repairing the windows registry, checking hard drive for errors, disabling startup entries, and stopping unused services or processes.

Info
http://www.tune-up.com/promo/pcf0512/

Permalink

 


Malware Classifier
Malware Classifier is an open-source tool which can be downloaded for free from SourceForge. In order to run the tool you will also need to download Python, Python pefile and in case you need to support Python < 2.7 you will also need Python argparse . For higher Python versions, the argparse module is part of the Python standard library.

Download
http://sourceforge.net/projects/malclassifier.adobe/files/

Permalink

 


siteinspector.comodo
SiteInspector allows website owners to choose 3 pages on a domain that they want to monitor. If malware is discovered or if the website is found on any one of a range of website blacklisting services, then the account owner is immediately notified via email.

Info
http://siteinspector.comodo.com/

Permalink

 


Wednesday, 4. April 2012
The Art of Win32 Shellcoding
Table of Contents

Introduction
Part 1: The Basics
What’s Shellcode?
The Types of Shellcode
Part 2: Writing Shellcode
Shellcode Skeleton
The Tools
Getting the Delta
Getting the Kernel32 imagebase
Getting the APIs
Null-Free byte Shellcode
Alphanumeric Shellcode
Egg-hunting Shellcode
Part 2: The Payload
Socket Programming
Bind Shell Payload
Reverse Shell Payload
Download & Execute Payload
Put All Together
Part 4: Implement your Shellcode into Metasploit
Conclusion
References
Appendix I – Important Structures

Info
http://www.codeproject.com/Articles/325776/The-Art-of-Win32-Shellcoding#ch2.1

Download source code
http://www.codeproject.com/KB/web-security/325776/win32-shellcode-src.zip

Permalink

 


Cracking WPA/WPA2 - TUT
Cracking the pre-shared key in five different ways:
1. Use aircrack-ng (without CUDA support) to crack the pre-shared key (slow)
2. Use Pyrit and Cowpatty to crack key on the fly (passthrough mode using CUDA) (faster than way 1)
3. Use Pyrit alone to crack key on the fly (attack_passthrough mode) (faster than way 2 and is most recommended)
4. Pyrit CUDA Batch Mode – Create rainbow tables with pyrit
5. Brute force with Crunch and Pyrit (not recommended)

Download PDF
http://www.uploadarea.de/upload/rmm2kr87l97gbeogv82n2u324.html

Permalink

 


Tuesday, 3. April 2012
Artillery - Linux
Artillery is a honeypot/monitoring/prevention tool used to protect Linux-based systems. Artillery will setup multiple ports on the nix system and if anything touches it will automatically blacklist them. In addition, it monitors the filesystem for changes and emails the changes back to you. It also detects SSH brute force attacks and automatically blocks them as well.

Download
svn co http://svn.secmaniac.com/artillery artillery/
Then python install.py

Artillery with Artillery from Hackett on Vimeo.

Permalink

 


Building an HTTP shell with AES + Proxy Support in Python
Got a little bored today and decided to write a reverse HTTP shell in Python thats platform independent and supports AES encryption when passing information back and forth. So this works on Linux, OSX, and Windows. The shell also supports proxy settings as well. This Python shell will initiate a reverse connection out of the network and connect to the attacker machine via pure HTTP communications. It’s pretty straight forward on how it works. I’ve byte compiled the code so you do not need to have Python installed on the victim, it will simply run as a normal executable.

Download compiled shell.exe and all of the source code
https://www.secmaniac.com/files/encrypted_http_shell.zip

Permalink

 


OATH Toolkit - Linux
The OATH Toolkit contains a shared library, command line tool and a PAM module that makes it possible to build one-time password authentication systems. Supported technologies include the event-based HOTP algorithm and the time-based TOTP algorithm. OATH is the Open AuTHentication organization which specify the algorithms.

Download
http://download.savannah.gnu.org/releases/oath-toolkit/

Permalink

 


Monday, 2. April 2012
John the Ripper - GUI
John The Ripper(JTR), a Fastest command line password cracker tool. 'Johnny' is a GUI for John the Ripper.
This GUI version will be very helpful to those who struggle with Command line tool.


Download
http://openwall.info/wiki/john/johnny

Permalink

 


WSO 2.5 Webshell
This utility provides a Web interface for remote operation c operating system and its service / daemon.
Opportunity Description / features:

Authorization for cookies
Server Information
File manager (copy, rename, move, delete, chmod, touch, creating files and folders)
View, hexview, editing, downloading,
uploading files
Working with zip archives (packing, unpacking) + compression tar.gz
Console
SQL Manager (MySql, PostgreSql)
Execute PHP code
Working with Strings + hash search online databases
Bindport and back-Connect (Perl)
Bruteforce FTP, MySQL, PgSQL
Search files, search text in files
Support for * nix-like and Windows systems
Antipoiskovik (check User-Agent, if a search engine then returns 404 error)
You can use AJAX
Small size. The boxed version is 22.8 Kb
Choice of encoding, which employs a shell.

Info
Default password: root
(if you want to change it change the auth_pass variable value with your md5 encoded password.
http://pastebin.com/Qra8yeWX

Permalink

 


X-Scan
Create: 2005-07-18
X-Scan is a general scanner for scanning network vulnerabilities for specific IP address scope or stand-alone computer by multi-threading method, plug-ins are supportable. Which X-Scan feature include in the following: service type, remote OS type and version detection, weak user/password pair, and all of the nessus attack scripts combination.

Download
http://xfocus.org/programs/200507/X-Scan-v3.3-en.rar

Permalink