Automatic tools play an important role in the field of penetration testing, either the test will going to conduct for network or for web application.

Web application penetration testing is very important for the high profile companies and for those services like E-commerce to secure the data of the user.


Key Feature

It support MySQL, Oracle, PostgreSQL and Microsoft SQL Server.
Full support for three SQL injection techniques: inferential blind SQL injection, UNION query (inband) SQL injection and batched queries support.
It support anonymous proxy.
It support http header cookies.
Basic web server software and web application technology fingerprint.
And more....

It available for both windows and linux plate form.

Download
Linux Source: sqlmap-0.9.tar.gz
http://sourceforge.net/projects/sqlmap/files/sqlmap/0.9/sqlmap-0.9.tar.gz/download
Windows Portable: sqlmap-exe.zip
http://downloads.sourceforge.net/sqlmap/sqlmap-0.7_exe.zip

Source
http://pastebin.com/jCNvzw1s

by
xero

How NESSUS works
http://www.cs.cmu.edu/~dwendlan/personal/nessus.html

How to use NESSUS
http://www.symantec.com/connect/articles/introduction-nessus

Download
http://www.nessus.org/products/nessus/nessus-download-agreement

If you don't know how XSS (Cross Site Scripting) works, this page probably won't help you.
http://ha.ckers.org/xss.html

Here you find my custom XSS and CSRF cheat sheet
http://www.xenuser.org/xss-cheat-sheet/

Metasploit 4.0


Metasploit 4.1

1
http://vimeo.com/26638955
2
http://vimeo.com/26943860
3
http://vimeo.com/26639228
4
http://vimeo.com/26652073
5
http://vimeo.com/26639622
6
http://vimeo.com/26677580

by
Raphael Mudge

What is persistence?
http://www.linuxliveusb.com/help/guide/step3

1 choose usb key
2 choose iso
3 choose much space you want for persistence
4 klik create
5 wait till done
6 enjoy your persistent usb key

Download
http://www.linuxliveusb.com/

Presentation “A crushing blow at the heart of SAP J2EE Engine” from BlackHat USA 2011
Download
http://erpscan.com/wp-content/uploads/2011/08/A_crushing_blow_at_the_heart_of_SAP_J2EE_Engine.pdf

Whitepaper “Architecture and program vulnerabilities in SAP’s J2EE engine” from BlackHat USA 2011
Download
http://erpscan.com/wp-content/uploads/2011/08/A-crushing-blow-at-the-heart-SAP-J2EE-engine_whitepaper.pdf

1. Brief overview of drive-by downloads
http://blog.armorize.com/2011/04/newest-adobe-flash-0-day-used-in-new.html#section-1-drive-by-download
2. Drive by cache
http://blog.armorize.com/2011/04/newest-adobe-flash-0-day-used-in-new.html#drive-by-cache
3. Real-world example
http://blog.armorize.com/2011/04/newest-adobe-flash-0-day-used-in-new.html#example
4. Complete codes
http://blog.armorize.com/2011/04/newest-adobe-flash-0-day-used-in-new.html#complete-exploit-codes