A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.
2
votes
2answers
183 views
Suspect Exchange Server appears to be hacked. How to determine if it was a false positive?
Our security vendor detected that our client's CAS server was doing a nessus scan in the internal network.
It's not uncommon for this vendor to issue a false positive, but I'm looking for general ...
2
votes
2answers
351 views
How do I find .asmx files?
I have a web service (ASP.NET) running on my application server. It can be reached via
http://xxxxxx/Servercomponents/servercomp.asmx
Is possible to find this even if you don't know the file name ...
2
votes
2answers
174 views
Modeling & Simulation: Do vulnerability-scanner software simulators exist?
In my research, i am attempting to develop a simulator that mimics the output of a vulnerability scanner, given a set of parameters (e.g., Network IP ranges, number of machines to scan, typical ...
2
votes
2answers
175 views
Scan Novell NetWare backend with Windows servers and clients
Could anyone provide some insight on performing an internal vulnerability assessment regarding Novell NetWare as the backend with client workstations and servers running various versions of Windows?
...
2
votes
2answers
212 views
PCI Scanning and authenticated user pages
I've just used a security vendor's automated PCI scanning tool to scan my web server.
It only has the ability, out of the box, to scan URLs as an un-authenticated user. This means it is only ...
2
votes
1answer
282 views
Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
I've see the PVS (passive vulnerability scanner) from Tenable Network Security.
I'm really interested in this kind of approach.
Anyone know if is there any FOSS solution to be used professionally ...
1
vote
3answers
300 views
Online security check via command line
My scenario is that I have a VPS with Apache (mostly for development of my own projects) accessed via SSH; and I time to time I would like to do a quick check just to be sure that there's no potential ...
1
vote
4answers
393 views
Antivirus Engine based MD5 or SHA1 hash?
I'm trying to understand more about MD5 and SHA1 hashes algorithms and their behavior in serious security software(found this but not helped me more).
Why does ClamAV use additional scanning ...
1
vote
2answers
103 views
Vulnerability scan scheduling approach on demand versus change?
I have a question regarding scheduling a vulnerability scanning and assessment exercise.
I'm in the process of laying a schedule for vulnerability scans. I'm wondering when and why to initiate the ...
1
vote
2answers
1k views
What is the best tool to anonymize your scans (network/ports)? [closed]
What are the best tools to anonymize my port scanners and vulnerability assessment tools (like nmap , metasploit ) ...?
I have been using Backtrack and tor network with proxychains to do this, but ...
1
vote
2answers
762 views
TCP / UDP port monitoring programs for mac?
Does anyone know of a free and effective port monitor for mac? Also, can a laymen, in relatively short order, learn to use such software to detect and thus prevent unauthorized remote access/control ...
1
vote
1answer
396 views
scanning my site for JavaScript/XSS vulnerabilities
It have had a report that my site may have a security issue and there is some JavaScript loading 10 times per second.
www.ayrshireminis.com
Is there anyway that I can "scan" my site to check if ...
1
vote
1answer
500 views
Pre Installed OpenVAS , light way Linux [closed]
Is there any Pre installed light way OpenVAS Linux distributions Or any light way Linux witch Openvas Tested on it and work properly on that Linux distribution ?
I have used Back Track (UBUNTU ...
1
vote
2answers
138 views
Changing IP ID generation of a server
I've seen plenty about Idle Scans and incremental IP IDs on the net, but I have trouble finding a "solution" to the problem. Is there a way to "set" IP IDs for example to all zeros or is it coded into ...
1
vote
2answers
256 views
vulnerabilities in a machine that detects vulnerability scanners
I currently have a machine (set by another person) that has (according to nmap) open ports as:
FreeBSD ftpd 6.00LS where anonymous login is possible
OpenSSH 4.5p1 (FreeBSD 20061110; protocol 2.0)
...
1
vote
1answer
55 views
How do I verify versions of Adobe?
I ran a vulnerability scan against a server and it is pulling back a lot of Adobe vulnerabilities. I ran a Wireshark capture on the scan but I can't seem to write up a Wireshark filter on the packets. ...
1
vote
3answers
324 views
Sample vulnerable web apps to test Pentesting platforms
I am looking into a web application vulnerability scanner for my organization. I would like a sample web application that is loaded with vulnerabilities (similar to metasploitable on the application ...
1
vote
1answer
430 views
NGINX / HTTP TRACE
I have a http server Nginx with HTTP TRACE Enabled.
A single nmap --script=http-methods.nse host.name give this result :
Not shown: 988 closed ports
PORT STATE SERVICE VERSION
[...]
...
1
vote
1answer
169 views
A BFE registry key's ACL is flagged by Microsoft Attack Surface Analyzer - what do I do?
Can anyone help me to understand which kind of action I should make to mitigate this issue, which emerged from Microsoft Surface Attack Analyzer? How I can tighten the ACL? Is there a standard ...
1
vote
3answers
204 views
web application security testing definition [duplicate]
Possible Duplicate:
What is the difference between a penetration test and a vulnerability assessment?
When people talk about webapp security testing, do they usually mean vulnerability ...
1
vote
0answers
263 views
Comparison of Whitehat Security and Veracode [closed]
I'm a research student. My topic is Web Application Security Scanners. The companies under my study are WhiteHat Security, Cenzic, Veracode, Qualys, IBM Rational Appscan, HP WebInspect, Fortify.
I'm ...
0
votes
3answers
2k views
PING BLOCKING: How to do? How to break?
I can access each page of a site through the browser (firefox). I can also see the ip and port address in firebug, but when I open cmd->ping site ->it says "request timeout".
I also tried traceroute. ...
0
votes
3answers
1k views
How to exploit this SQL inection vulnerability?
I am learning SQL injection on a vulnerable Web App. I scanned it with w3af. It showed many vulnerabilities. One of them is :
SQL injection in a Microsoft SQL database was found at: ...
0
votes
2answers
189 views
Recomended Nessus Windows-7 scan settings?
In the Nessus FAQ it says
Microsoft Windows desktop systems have network limitations that may
impact the performance of Nessus. The TCP/IP stack limits the number
of simultaneous incomplete ...
0
votes
5answers
218 views
Can I scan with nmap from cloud services?
Can i conduct nmap scanning from cloud services (i.e AWS)? i am looking to do external scanning for my company and want to set up something that will be quick, efficient, and cheap. I dont want to ...
0
votes
1answer
1k views
my site with joomla 1.5.14 got defaced and I'd like to know how he did it and stop it
I am supposed to manage the content of a site and it got defaced.
The site is hosted on a Linux server running Apache.
Apache version: 2.2.13
Linux version is Debian 4.0(I think I don't really have ...
0
votes
1answer
656 views
nessus scan against metasploit exploits
I am thinking about launching wide nessus scans (in the "IP range" sense) against exploits present in metasploit. The idea is to limit the number of plugins so that that the scan finishes in a ...
0
votes
1answer
32 views
how to access to arachni scanner web interface? [closed]
I have downloaded Arachni package. It is said in the README file to run bin/arachni_web to access to web interface of this scanner.
I run it but no web page appears. I just see these lines:
...
0
votes
2answers
748 views
Vulnerability scanner tools to use with Snort
We plan to add Snort with the firewall for our network to have improved security. The purpose, apart from protection from malicious traffic, is to customize Snort to detect and block specific traffic ...
0
votes
1answer
139 views
FoundStone scan + URI filtering
I have a server that is protected with a firewall with URI filtering rule.
So if you go http://x.x.x.x/URIFilter/Something you will get to the server, but if you don't put URIfilter into URL or use ...
0
votes
0answers
109 views
What is the best dynamic code analysis (scanning) tool? [closed]
I'm looking for a tool for scanning the code for vulnerabilities such as AppScan. I need more alternatives.
I have different applications written with different languages, and I need the tool to be ...
0
votes
0answers
59 views
vendors for internal PCI scan for linux [closed]
Does anybody have a good recommendation for a vendor or software that I can use to comply with PCI internal vulnerability scan requirements?
0
votes
1answer
200 views
DNS Vulnerabilities Scanner [closed]
I'm looking for a DNS Vulnerabilities Scanner tools, which is specially for DNS vulnerabilities, that shows me the Vulnerabilities, and the solution for that, like "Nessus" and "Acunetix" but just ...
0
votes
0answers
72 views
Web application scanners that output reports? [closed]
I've been poking around the web looking for a web app security scanner I could introduce into by build/QA process to pick up some of the common issues in my applications. The tricky part is that I ...
0
votes
1answer
122 views
Nessus doesn't find self-written plugins [closed]
I'm trying to write a nessus plugin. So I took an existing plugin (10056), and only added the line
display("hello world");
in the appropriate section and altered the script_id to a non-existing one.
...
0
votes
0answers
250 views
which scanner can detect scripts with malicious javascript on the server? [closed]
We've noticed several security warnings from antivirus software when visiting one of our customer's pages.
Besides other steps to improve security, we now want to scan the server's directories for ...
-1
votes
2answers
113 views
How do you search for new vulnerabilities? [closed]
I've been asked this question, and I really don't know how would I do it. My answer was to take known vulnerabilities and try to exploit them on a different way, but this is not really a new ...
-1
votes
0answers
32 views
What makes the metasploit command “vulns” use test ids in “refs=” instead of bugtrac ids,cves, etc? [closed]
I am trying to use Metasploitable2 and Kali linux (both qemu virtual appliances), to teach people the basics of automatic vulnerability assessment.
I am trying to use OpenVAS + Metasploit in order ...
-1
votes
1answer
77 views
Reverse scan from cloud authentication server [closed]
I was wondering if the vulnerability scan is OK to perform on IP trying to register an account via internet. This is to help identifying rouge hosts. Do I need to put this in terms and conditions? I ...
-2
votes
2answers
444 views
What are the limitations of vulnerability scanners?
What are the limitations of vulnerability scanners?
If it is related to how these scanners work, how these work?
Thanks very much.
-2
votes
1answer
49 views
w3af plugin development example [closed]
I'm new to w3af, and I would like to build my own plugin. I have searched on w3af web and googled it for some examples but no luck...
Can anyone give me an example how to start building plugins or ...
-4
votes
1answer
463 views
Best free website vulnerability scanners [closed]
I need to check web security and vulnerability in my web application. Whatever free vulnerability scanners application or vulnerability scan online site's are available?
-5
votes
1answer
227 views
How to scan internet? [closed]
I was wondering if you know how to portscan internet and be compliant with law. I mean a SYN scan and a little UDP one.
Such database would be very useful, and should be public anyway. I think this ...
-5
votes
1answer
175 views
How to find bugs/ vulnerabilities in web apps/sites? [closed]
What knowledge is needed?
What software is to be used?
How are the reports written? PS: Websites like facebook.com
