Tools used by security professionals
0
votes
1answer
22 views
How can I view the NTFS $MFT using correct field names?
I am trying to view an NTFS master file table. Each tool I have used so far extracts all of the entries, but puts non standard headers such as STANDARD_INFORMATION_ON instead of say ...
1
vote
2answers
128 views
Tools to extract code comments from sites?
I often come across sites that have way to many comments included in their source code, sometimes these comments offer valuable insight into whats happening in the code, the logic of functions, unused ...
3
votes
1answer
139 views
How to determine hashes/second in password cryptanalysis
I'm working on my dissertation concerning cryptanalysis on password hashes. As part of my research, I aim to crack a number of passwords with John the Ripper and rainbowcrack-mt.
I'd like to ...
4
votes
2answers
254 views
SQL Injection - Extracting database data from the page content
I have a question I am hoping someone could help with..
I am in the process of writing an SQL Injection tool from scratch (I am aware there are already excellent tools out there such as SQL Map, but ...
3
votes
1answer
80 views
What are good tools for CRLF discovery? [closed]
What are good tools for finding CRLF injection vulnerabilities?
4
votes
2answers
228 views
SQL Injection - Automating the fingerprinting of the DBMS
I have a problem I'm hoping someone could help with regarding the fingerprinting of the DBMS using sql injection, in a scripted/automated way to accurately and reliabling determine the DBMS.
I am in ...
5
votes
1answer
261 views
SQL Injection - UNION SELECT and returning a 'keyword' to find exploitable columns
I have a problem I'm hoping someone could help with regarding the use of UNION SELECT, in a scripted/automated way to find columns that are exploitable (having already found the number of columns ...
14
votes
3answers
1k views
What's an easy way to perform a man-in-the-middle attack on SSL?
I'd like to perform a man-in-the-middle attack on SSL connections between clients and a server.
Assuming the following:
I've got a certificate that the client will accept, via poor cert validation ...
4
votes
3answers
243 views
How to evaluate a password manager?
How can we quantify the trade-off between password aggregation and convenience?
Password managers such as lastpass are convenient, but aggregation of passwords into a common store may reduce ...
2
votes
1answer
101 views
Pointers for john the ripper rulesets
I've been pouring over the JtR ruleset documentation and making little progress. I understand how to use it to make various permutations from a given wordlist, that's fine. However, I'm trying to ...
-2
votes
1answer
111 views
Is there website for FastTrack? [closed]
i have searched about this automated penetration testing tool to get its docs and source code, i searched a lot and all i found is tutorials and this
$ svn co http://svn.thepentest.com/fasttrack/
a ...
3
votes
5answers
443 views
Affordable web application attack tools
I've been using Burp Intruder (part of Burp suite), but in the free edition of Burp Suite the Intruder functionality is Time-throttled. As a student pen tester however, I can't justify the cost of ...
2
votes
3answers
638 views
Tools for performing HTTP FLOOD attack?
I'a looking for tools which can perform HTTP FLOOD ATTACK .
I seached a lot and this is the only tool I've found DoSHTTP.
Does anyone know another tool ?
I want to test them on my localhost to ...
4
votes
1answer
153 views
Finding all AJAX entrypoints
Is there any tool to (automatically) find all backend JavaScript entrypoints within a site?
I have to check a site for vulnerabilities in the backend code that validates AJAX parameters and I would ...
0
votes
2answers
334 views
Msf and exploitdb on Backtrack 5
Metasploit (msf) doesn't see exploits from exploitdb. I've just updated directory on my Backtrack
cd /pentest/exploits/exploitdb
svn update
How can I load them now into msf? When i use a script ...
0
votes
1answer
99 views
Comparison between Data Encryption Tools and Data Sanitization Tools [closed]
What are the famous Data Sanitization Tools for languages such as ASP/PHP/Html Web Sites?
Which Data Sanitization tools have the best results?
Difference between Data encryption and Data ...
4
votes
1answer
328 views
Creating a DDoS attack using DirectConnect
I have been trying to hack around with Apex DirectConnect. What I wish to do is to utilize the querying nature of P2P apps like DC to generate a DDoS attack (see links for reference here, here and ...
-3
votes
2answers
105 views
GPS tracking device [closed]
Could anyone please tell me if there exists a GPS tracking device that is light, small and safe (e.g., does not cause harmful radiation) and can be tracked back via say an app on a phone?
3
votes
2answers
253 views
Tools for analyzing Perl 5 code?
I'm looking for good tools for analyzing and/or detecting security issues in a large software project written in Perl 5. It could be static or dynamic analysis. I know that Perl is undecidable, but ...
6
votes
1answer
151 views
Identifying, analyzing, and predicting weak session cookies
To elaborate on this, I'm looking at this from the perspective of a hacker/penetration tester. Many times I have seen web applications that I know have weak cookies. I can tell this because I can ...
0
votes
1answer
176 views
DNS Vulnerabilities Scanner [closed]
I'm looking for a DNS Vulnerabilities Scanner tools, which is specially for DNS vulnerabilities, that shows me the Vulnerabilities, and the solution for that, like "Nessus" and "Acunetix" but just ...
4
votes
1answer
176 views
Is Window's system restoration useful for getting rid of malware?
If your computer has been infected with some kind of malware, could a restoration of the system, using the tool provided by windows, help you getting rid of that malware?
We should suppose that it ...
3
votes
2answers
116 views
What information will dig leak to an attacker?
What information will the axfr and ixfr commands in DIG provide to an attacker?
1
vote
2answers
452 views
Can an insecure wifi connection block users who download a lot, from say: torrents or usenet? [closed]
Can an 'insecure community network' have automated features to block internet or slow speeds on computers which download a lot, from say: torrents or usenet?
I have two computers and one has ...
5
votes
3answers
494 views
Secure source code review tool for jQuery
Does anyone know any secure source code review tool for jQuery/jQueryUI. I've looked around a bit but couldn't find anything. Its too good if it is opensource.
4
votes
3answers
623 views
Are there any tools that focus on shellcode analysis?
Shellcode presents certain challenges for disassembly. It often self-modifies, jumps to the stack (where the shellcode will likely be placed), and relies on certain unusual tricks that standard ...
1
vote
1answer
186 views
What CVE identifier will follow after CVE-2012-9999?
I am writing an application which uses CVE identifiers to cross-reference vulnerabilities. I would like to make it compatible with future CVE identifiers.
If it happens that there are more than 9999 ...
1
vote
1answer
214 views
Diagnosing possible svchost.exe thread on Windows 7
I used win64dd.exe to get a memory image on a 64-bit computer running Windows 7 and had Mandiant Redline analyze the image. One of the things marked red was one of the svchost.exe processes. Redline ...
2
votes
1answer
784 views
Snort & Logging
I am looking for some support on using Snort in Windows 7. My experience so far is using WireShark, so this is new territory to me.
I would like to use Snort to perform a trace, which, after it ...
3
votes
3answers
390 views
Conky for PenTesters
I have been working on a conky configuration to help me manage penetration tests, but after much research, I cannot find anyone else speaking of their configs in any way other than the glitz.
...
1
vote
3answers
409 views
How to intercept an application that bypasses local proxy
I am behind a corporate proxy and the application that i have to test will work only if it is given an exception for using proxy server(i.e it is added to the exceptions list of the sites that do not ...
3
votes
5answers
261 views
Tool to grab sensitive information from command lines
Of the information entered on the command line (command name and arguments) have to be considered public (everyone can access it using commands like ps).
Is there a known tool to automate this kind ...
0
votes
1answer
82 views
Is there a compatibility issue between IPv6 and security testing tools?
Now that IPv6 is slowly coming into the picture, will there be a compatibility issue with using security testing tools, e.g.,:
Network vulnerability scanning tools
Web Applicaiton vulnerability ...
5
votes
1answer
541 views
How to Perform Vulnerability Assessment for WCF services
Does anyone know how to perform penetration testing/vulnerability assessment for Microsoft WCF services I couldn't find a tools till now , any tools available and guides are welcome
1
vote
1answer
101 views
Reliability of DNSBLs for Stopping Forum Spam
I know that certain DNS blacklists are considered more reliable than others, in that they don't have as many false positives.
I run a forum that is known to be spammed, and I've installed a mod to ...
2
votes
2answers
174 views
How can I protect content distributed on a linux virtual machine?
What assets am I trying to protect?
An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
4
votes
4answers
3k views
Secure use of psexec or better alternative to it
I want to remotely start VMWare virtual machines (I own VMWare Workstation) and to this end I need to execute on host something like "vmrun -T ws H:\VMWare\VM1\VM1.vmx nogui" with user desktop ...
4
votes
1answer
104 views
Complex Consumer Matching Queries with PGP Universal
For group membership I am using LDAP for performing the consumer matching. I can pretty clearly see how to do simple matches with ORs or ANDs, but I would like to match in a more complicated fashion. ...
0
votes
2answers
238 views
In TrueCrypt Hidden / Normal overriding?
If I have a normal TrueCrypt volume, and I want to create a Hidden volume inside of it, how do I stop the 2 from overriding each other? Or do I just have to manually make sure the inner volume does ...
-3
votes
2answers
680 views
Could somebody explain the basics of Wireshark to me [closed]
I've downloaded Wireshark, messed around with the GUI a bit and, honestly, I can't make head nor tail of what I am looking at.
I understand that Winpcap allows me to create a copy of every packet ...
1
vote
2answers
1k views
What is the best tool to anonymize your scans (network/ports)? [closed]
What are the best tools to anonymize my port scanners and vulnerability assessment tools (like nmap , metasploit ) ...?
I have been using Backtrack and tor network with proxychains to do this, but ...
2
votes
2answers
389 views
up2date tools for security audit linux / centos
I'm setting up a new CentOS 6 server and am looking into some security audit tools to validate my configuration and to point out weak spots in the server.
There are a lot of non up2date tools out ...
3
votes
1answer
2k views
Is there a sms authentication that works like 10minutemail?
I remember reading on this site a user recommending 10minutemail.com as a way to register or give email address to non-trusted websites.
Is there any similar site for disposable phone number for ...
6
votes
6answers
2k views
Good file encryption tools
Could you please help me find a good file encryption tool? The target OS is Linux, but tools for Windows are welcome, too. FOSS tools are preferred. The tool must be reliable both for the recovery of ...
4
votes
1answer
164 views
Data analyzer tools
I have to find information that can be located in files on a hard drive.
Are there good tools to search for specific keywords (even in the hard disk free space area ;-), detect encrypted files, detect ...
6
votes
5answers
964 views
How can I remotely wipe the contents of a Linux Laptop if its been stolen?
I am currently investigating using Linux Laptops for my development team. We currently run Windows. The one advantage that keeps coming up for Windows over Linux from a system administration / ...
1
vote
3answers
4k views
What sites are still vulnerable to FireSheep?
Am doing a Firesheep Demo in a few weeks as a security awareness project. However I can't seem to get it working, and I'm wondering if it's just because the handlers it ships with are now outdated ...
0
votes
4answers
283 views
Completely wiping a HDD (i.e. nothing is recoverable) [duplicate]
Possible Duplicate:
How can I reliably erase all information on a hard drive?
I'm looking to see if there's a method that can completely wipe out the content of a HDD, so that nothing ...
2
votes
3answers
704 views
Recommendations for security gateway/firewall management tools (Juniper SRX)
I am seeking recommendations for management tools for high-end firewalls, such as the Juniper SRX3000 series. When I say "management", I mean operations, configuration management, policy management, ...
6
votes
3answers
587 views
Who (which process) is calling curl?
On my mac (Lion), I know that curl is bing used by some unknown process to communicate with a server.
Basically I installed little Snitch and find out that "somebody" is using curl periodically.
...
