A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.
0
votes
1answer
32 views
how to access to arachni scanner web interface? [closed]
I have downloaded Arachni package. It is said in the README file to run bin/arachni_web to access to web interface of this scanner.
I run it but no web page appears. I just see these lines:
...
-1
votes
0answers
32 views
What makes the metasploit command “vulns” use test ids in “refs=” instead of bugtrac ids,cves, etc? [closed]
I am trying to use Metasploitable2 and Kali linux (both qemu virtual appliances), to teach people the basics of automatic vulnerability assessment.
I am trying to use OpenVAS + Metasploit in order ...
-1
votes
2answers
113 views
How do you search for new vulnerabilities? [closed]
I've been asked this question, and I really don't know how would I do it. My answer was to take known vulnerabilities and try to exploit them on a different way, but this is not really a new ...
1
vote
1answer
55 views
How do I verify versions of Adobe?
I ran a vulnerability scan against a server and it is pulling back a lot of Adobe vulnerabilities. I ran a Wireshark capture on the scan but I can't seem to write up a Wireshark filter on the packets. ...
-2
votes
1answer
48 views
w3af plugin development example [closed]
I'm new to w3af, and I would like to build my own plugin. I have searched on w3af web and googled it for some examples but no luck...
Can anyone give me an example how to start building plugins or ...
4
votes
1answer
102 views
Nessus HTML5 version 5.0.3 - PCI Scan
I've been searching for a couple days, even contacting support, to find out if Nessus has a bundle that scans for PCI compliance. It selects all 44 categories and regardless of what kind of scan I ...
4
votes
3answers
174 views
Failed PCI-DSS Compliance | Submitting Evidence
One of our web servers that is managed by a service provider (completely in their control, we have no login access) just failed PCI-DSS vuln. scan by TrustKeeper. The vuln scan detected the box as a ...
7
votes
1answer
308 views
How can I stop this DOS attack?
I have this entry appearing constantly in my router logs:
[DOS Attack] : 5 [RST Scan] packets detected in last 20 seconds, source ip [xx.xx.xx.xx]
They just never stop. It doesn't seem to affect ...
2
votes
3answers
662 views
How to use information from GHDB and FSDB (Google-Dorks)?
I am new to information security and analysis.
Recently, I came across FSDB (Foundstone database) and GHDB (Google Hacking database) while exploring the McAfee Foundstone Sitedigger tool.
What are ...
3
votes
1answer
87 views
What are good tools for CRLF discovery? [closed]
What are good tools for finding CRLF injection vulnerabilities?
6
votes
2answers
479 views
SQL Injection: Drop All Tables
I used some vulnerability scanners to check a site of mine, and an instance of blind SQL injection was returned. However, when I try to exploit this vulnerability by entering the following into the ...
8
votes
2answers
151 views
Any tool for scanning vulnerabilities in browser extensions?
I am scanning browser extensions of Chrome and Firefox for vulnerabilities. Is there any tool which would help me do this?
-5
votes
1answer
174 views
How to find bugs/ vulnerabilities in web apps/sites? [closed]
What knowledge is needed?
What software is to be used?
How are the reports written? PS: Websites like facebook.com
3
votes
2answers
70 views
How to assess severity/impact of vulnerability
In our organization we wanted to review the overall IT landscape and check the most critical applications for vulnerability in phase 1, and then look at lesser critical applications in phase 2... as ...
1
vote
1answer
500 views
Pre Installed OpenVAS , light way Linux [closed]
Is there any Pre installed light way OpenVAS Linux distributions Or any light way Linux witch Openvas Tested on it and work properly on that Linux distribution ?
I have used Back Track (UBUNTU ...
0
votes
2answers
188 views
Recomended Nessus Windows-7 scan settings?
In the Nessus FAQ it says
Microsoft Windows desktop systems have network limitations that may
impact the performance of Nessus. The TCP/IP stack limits the number
of simultaneous incomplete ...
0
votes
0answers
109 views
What is the best dynamic code analysis (scanning) tool? [closed]
I'm looking for a tool for scanning the code for vulnerabilities such as AppScan. I need more alternatives.
I have different applications written with different languages, and I need the tool to be ...
2
votes
2answers
183 views
Suspect Exchange Server appears to be hacked. How to determine if it was a false positive?
Our security vendor detected that our client's CAS server was doing a nessus scan in the internal network.
It's not uncommon for this vendor to issue a false positive, but I'm looking for general ...
3
votes
5answers
127 views
How to introduce delay in scanning tools that do not implement delay without touching source code?
Usually scanning tools implement a switch in order to delay requests and not flood the target. Sometimes there tools that do not implement this delay option.
Is there a way to delay packets from ...
0
votes
5answers
218 views
Can I scan with nmap from cloud services?
Can i conduct nmap scanning from cloud services (i.e AWS)? i am looking to do external scanning for my company and want to set up something that will be quick, efficient, and cheap. I dont want to ...
0
votes
1answer
1k views
my site with joomla 1.5.14 got defaced and I'd like to know how he did it and stop it
I am supposed to manage the content of a site and it got defaced.
The site is hosted on a Linux server running Apache.
Apache version: 2.2.13
Linux version is Debian 4.0(I think I don't really have ...
2
votes
2answers
312 views
Why Nessus freezes at 0% and how to fix it
Does anybody know why Nessus freezes at 0%.
I am not sure that I've done the right configuration, but it is becoming painful
How long approximately takes to scan one machine?
Thank you
1
vote
2answers
103 views
Vulnerability scan scheduling approach on demand versus change?
I have a question regarding scheduling a vulnerability scanning and assessment exercise.
I'm in the process of laying a schedule for vulnerability scans. I'm wondering when and why to initiate the ...
-4
votes
1answer
463 views
Best free website vulnerability scanners [closed]
I need to check web security and vulnerability in my web application. Whatever free vulnerability scanners application or vulnerability scan online site's are available?
0
votes
0answers
59 views
vendors for internal PCI scan for linux [closed]
Does anybody have a good recommendation for a vendor or software that I can use to comply with PCI internal vulnerability scan requirements?
1
vote
4answers
391 views
Antivirus Engine based MD5 or SHA1 hash?
I'm trying to understand more about MD5 and SHA1 hashes algorithms and their behavior in serious security software(found this but not helped me more).
Why does ClamAV use additional scanning ...
4
votes
3answers
556 views
How to figure out which open ports or services are insecure?
We have around one thousand machines on internet. We do port scanning with nmap, and find many ports open on these machines. Sometime we found administrative website using HTTP instead of HTTPS, we ...
3
votes
2answers
269 views
Tools for analyzing Perl 5 code?
I'm looking for good tools for analyzing and/or detecting security issues in a large software project written in Perl 5. It could be static or dynamic analysis. I know that Perl is undecidable, but ...
1
vote
3answers
300 views
Online security check via command line
My scenario is that I have a VPS with Apache (mostly for development of my own projects) accessed via SSH; and I time to time I would like to do a quick check just to be sure that there's no potential ...
85
votes
8answers
4k views
Attacking an office printer?
I did an nmap scan on an advanced office printer that has a domain name and is accessible from outside the corporate network. Surprisingly I found many open ports like http:80, https:443, and ...
3
votes
1answer
203 views
Conceptual design of vulnerability scanning program in global retail network (PCI DSS)
I am trying to design yearly program to scan for vulnerabilities on a very large network of payment terminals.
The company has thousands of retail points all around the world which need to be ...
7
votes
4answers
669 views
How to validate if a JavaScript library is secure?
I'm the main developer for an Open Source JavaScript library. That library is used in the company I work for, for several clients. Every now and then there is a client that feels paranoid about ...
0
votes
1answer
200 views
DNS Vulnerabilities Scanner [closed]
I'm looking for a DNS Vulnerabilities Scanner tools, which is specially for DNS vulnerabilities, that shows me the Vulnerabilities, and the solution for that, like "Nessus" and "Acunetix" but just ...
8
votes
6answers
892 views
Whats the probability of a personal computer being hacked?
For a normal computer user following these practices:
Have an up to date anti-virus with a firewall installed (Norton).
Do not install cracked software.
Do not open suspicious links or download ...
1
vote
3answers
324 views
Sample vulnerable web apps to test Pentesting platforms
I am looking into a web application vulnerability scanner for my organization. I would like a sample web application that is loaded with vulnerabilities (similar to metasploitable on the application ...
0
votes
0answers
72 views
Web application scanners that output reports? [closed]
I've been poking around the web looking for a web app security scanner I could introduce into by build/QA process to pick up some of the common issues in my applications. The tricky part is that I ...
1
vote
2answers
138 views
Changing IP ID generation of a server
I've seen plenty about Idle Scans and incremental IP IDs on the net, but I have trouble finding a "solution" to the problem. Is there a way to "set" IP IDs for example to all zeros or is it coded into ...
1
vote
0answers
263 views
Comparison of Whitehat Security and Veracode [closed]
I'm a research student. My topic is Web Application Security Scanners. The companies under my study are WhiteHat Security, Cenzic, Veracode, Qualys, IBM Rational Appscan, HP WebInspect, Fortify.
I'm ...
1
vote
1answer
428 views
NGINX / HTTP TRACE
I have a http server Nginx with HTTP TRACE Enabled.
A single nmap --script=http-methods.nse host.name give this result :
Not shown: 988 closed ports
PORT STATE SERVICE VERSION
[...]
...
3
votes
2answers
259 views
How realistic and possible is this sort of attack
I scanned a host with Nessus, in order to do a vulnerability Assessment, and one of the findings looked really odd to me.
Nessus rated this finding's risk as Medium. The finding was, that a service ...
8
votes
3answers
228 views
Building list of vulnerabilities that should be verified during pentest
I am currently studying how to do server pentesting and need some advice/protip related to methology/best practices.
People often mention that it is a good idea to gather intelligence and enumerate ...
1
vote
1answer
396 views
scanning my site for JavaScript/XSS vulnerabilities
It have had a report that my site may have a security issue and there is some JavaScript loading 10 times per second.
www.ayrshireminis.com
Is there anyway that I can "scan" my site to check if ...
1
vote
2answers
256 views
vulnerabilities in a machine that detects vulnerability scanners
I currently have a machine (set by another person) that has (according to nmap) open ports as:
FreeBSD ftpd 6.00LS where anonymous login is possible
OpenSSH 4.5p1 (FreeBSD 20061110; protocol 2.0)
...
1
vote
1answer
169 views
A BFE registry key's ACL is flagged by Microsoft Attack Surface Analyzer - what do I do?
Can anyone help me to understand which kind of action I should make to mitigate this issue, which emerged from Microsoft Surface Attack Analyzer? How I can tighten the ACL? Is there a standard ...
2
votes
2answers
178 views
unix config scanner / compliance checks
I'm looking for a tool, that scans unix operating systems for configuration issues. E.g. a script that finds
PermitRootLogin yes
in the ssh config file or with other words: a script that automates ...
0
votes
1answer
122 views
Nessus doesn't find self-written plugins [closed]
I'm trying to write a nessus plugin. So I took an existing plugin (10056), and only added the line
display("hello world");
in the appropriate section and altered the script_id to a non-existing one.
...
0
votes
0answers
250 views
which scanner can detect scripts with malicious javascript on the server? [closed]
We've noticed several security warnings from antivirus software when visiting one of our customer's pages.
Besides other steps to improve security, we now want to scan the server's directories for ...
-1
votes
1answer
77 views
Reverse scan from cloud authentication server [closed]
I was wondering if the vulnerability scan is OK to perform on IP trying to register an account via internet. This is to help identifying rouge hosts. Do I need to put this in terms and conditions? I ...
-5
votes
1answer
227 views
How to scan internet? [closed]
I was wondering if you know how to portscan internet and be compliant with law. I mean a SYN scan and a little UDP one.
Such database would be very useful, and should be public anyway. I think this ...
2
votes
3answers
854 views
Open Source Vulnerability Scanner
I'm looking for an open source vulnerability scanner that I could install on one of my machines and point to all my others. Ideally, I'd be able to configure a nightly scan where all of my other nodes ...
