A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.
-2
votes
1answer
35 views
w3af plugin development example [closed]
I'm new to w3af, and I would like to build my own plugin. I have searched on w3af web and googled it for some examples but no luck...
Can anyone give me an example how to start building plugins or ...
3
votes
1answer
72 views
Nessus HTML5 version 5.0.3 - PCI Scan
I've been searching for a couple days, even contacting support, to find out if Nessus has a bundle that scans for PCI compliance. It selects all 44 categories and regardless of what kind of scan I ...
4
votes
3answers
142 views
Failed PCI-DSS Compliance | Submitting Evidence
One of our web servers that is managed by a service provider (completely in their control, we have no login access) just failed PCI-DSS vuln. scan by TrustKeeper. The vuln scan detected the box as a ...
6
votes
1answer
264 views
How can I stop this DOS attack?
I have this entry appearing constantly in my router logs:
[DOS Attack] : 5 [RST Scan] packets detected in last 20 seconds, source ip [xx.xx.xx.xx]
They just never stop. It doesn't seem to affect ...
1
vote
3answers
520 views
How to use information from GHDB and FSDB (Google-Dorks)?
I am new to information security and analysis.
Recently, I came across FSDB (Foundstone database) and GHDB (Google Hacking database) while exploring the McAfee Foundstone Sitedigger tool.
What are ...
3
votes
1answer
79 views
What are good tools for CRLF discovery? [closed]
What are good tools for finding CRLF injection vulnerabilities?
0
votes
1answer
373 views
Pre Installed OpenVAS , light way Linux [closed]
Is there any Pre installed light way OpenVAS Linux distributions Or any light way Linux witch Openvas Tested on it and work properly on that Linux distribution ?
I have used Back Track (UBUNTU ...
6
votes
2answers
315 views
SQL Injection: Drop All Tables
I used some vulnerability scanners to check a site of mine, and an instance of blind SQL injection was returned. However, when I try to exploit this vulnerability by entering the following into the ...
8
votes
2answers
139 views
Any tool for scanning vulnerabilities in browser extensions?
I am scanning browser extensions of Chrome and Firefox for vulnerabilities. Is there any tool which would help me do this?
-5
votes
1answer
117 views
How to find bugs/ vulnerabilities in web apps/sites? [closed]
What knowledge is needed?
What software is to be used?
How are the reports written? PS: Websites like facebook.com
3
votes
2answers
65 views
How to assess severity/impact of vulnerability
In our organization we wanted to review the overall IT landscape and check the most critical applications for vulnerability in phase 1, and then look at lesser critical applications in phase 2... as ...
3
votes
3answers
1k views
Besides OpenVas and Nessus, what are my other options for vulnerability detection?
I know of Nessus (which is $1300 for a pro feed) and OpenVAS (which I don't like).
I use Linux so do I have any other options for vulnerability detection?
3
votes
1answer
118 views
Suddenly scans for 'formvars.php'
Suddenly, starting from about yesterday-evening (gmt+2), I get lots of -what I suspect are- 'hits' from bots that are looking variations of this file:
/somerealpath/includes/formvars.php
I'm ...
0
votes
2answers
162 views
Recomended Nessus Windows-7 scan settings?
In the Nessus FAQ it says
Microsoft Windows desktop systems have network limitations that may
impact the performance of Nessus. The TCP/IP stack limits the number
of simultaneous incomplete ...
0
votes
0answers
103 views
What is the best dynamic code analysis (scanning) tool? [closed]
I'm looking for a tool for scanning the code for vulnerabilities such as AppScan. I need more alternatives.
I have different applications written with different languages, and I need the tool to be ...
2
votes
2answers
162 views
Suspect Exchange Server appears to be hacked. How to determine if it was a false positive?
Our security vendor detected that our client's CAS server was doing a nessus scan in the internal network.
It's not uncommon for this vendor to issue a false positive, but I'm looking for general ...
0
votes
4answers
340 views
Antivirus Engine based MD5 or SHA1 hash?
I'm trying to understand more about MD5 and SHA1 hashes algorithms and their behavior in serious security software(found this but not helped me more).
Why does ClamAV use additional scanning ...
0
votes
5answers
190 views
Can I scan with nmap from cloud services?
Can i conduct nmap scanning from cloud services (i.e AWS)? i am looking to do external scanning for my company and want to set up something that will be quick, efficient, and cheap. I dont want to ...
3
votes
5answers
121 views
How to introduce delay in scanning tools that do not implement delay without touching source code?
Usually scanning tools implement a switch in order to delay requests and not flood the target. Sometimes there tools that do not implement this delay option.
Is there a way to delay packets from ...
3
votes
2answers
558 views
Is SNMPing available anymore?
I am researching SNMP and I read about a scanning tool from SANS called SNMPing. Is this tool still available?
I cannot find anywhere to download it. Sending an empty email to snmptool@sans.org just ...
0
votes
1answer
1k views
my site with joomla 1.5.14 got defaced and I'd like to know how he did it and stop it
I am supposed to manage the content of a site and it got defaced.
The site is hosted on a Linux server running Apache.
Apache version: 2.2.13
Linux version is Debian 4.0(I think I don't really have ...
2
votes
2answers
230 views
Why Nessus freezes at 0% and how to fix it
Does anybody know why Nessus freezes at 0%.
I am not sure that I've done the right configuration, but it is becoming painful
How long approximately takes to scan one machine?
Thank you
1
vote
2answers
98 views
Vulnerability scan scheduling approach on demand versus change?
I have a question regarding scheduling a vulnerability scanning and assessment exercise.
I'm in the process of laying a schedule for vulnerability scans. I'm wondering when and why to initiate the ...
2
votes
3answers
824 views
Open Source Vulnerability Scanner
I'm looking for an open source vulnerability scanner that I could install on one of my machines and point to all my others. Ideally, I'd be able to configure a nightly scan where all of my other nodes ...
-4
votes
1answer
415 views
Best free website vulnerability scanners [closed]
I need to check web security and vulnerability in my web application. Whatever free vulnerability scanners application or vulnerability scan online site's are available?
3
votes
2answers
246 views
Tools for analyzing Perl 5 code?
I'm looking for good tools for analyzing and/or detecting security issues in a large software project written in Perl 5. It could be static or dynamic analysis. I know that Perl is undecidable, but ...
1
vote
3answers
319 views
Sample vulnerable web apps to test Pentesting platforms
I am looking into a web application vulnerability scanner for my organization. I would like a sample web application that is loaded with vulnerabilities (similar to metasploitable on the application ...
0
votes
0answers
52 views
vendors for internal PCI scan for linux [closed]
Does anybody have a good recommendation for a vendor or software that I can use to comply with PCI internal vulnerability scan requirements?
4
votes
3answers
482 views
How to figure out which open ports or services are insecure?
We have around one thousand machines on internet. We do port scanning with nmap, and find many ports open on these machines. Sometime we found administrative website using HTTP instead of HTTPS, we ...
1
vote
3answers
284 views
Online security check via command line
My scenario is that I have a VPS with Apache (mostly for development of my own projects) accessed via SSH; and I time to time I would like to do a quick check just to be sure that there's no potential ...
83
votes
8answers
4k views
Attacking an office printer?
I did an nmap scan on an advanced office printer that has a domain name and is accessible from outside the corporate network. Surprisingly I found many open ports like http:80, https:443, and ...
3
votes
1answer
192 views
Conceptual design of vulnerability scanning program in global retail network (PCI DSS)
I am trying to design yearly program to scan for vulnerabilities on a very large network of payment terminals.
The company has thousands of retail points all around the world which need to be ...
7
votes
3answers
564 views
How to validate if a JavaScript library is secure?
I'm the main developer for an Open Source JavaScript library. That library is used in the company I work for, for several clients. Every now and then there is a client that feels paranoid about ...
0
votes
1answer
175 views
DNS Vulnerabilities Scanner [closed]
I'm looking for a DNS Vulnerabilities Scanner tools, which is specially for DNS vulnerabilities, that shows me the Vulnerabilities, and the solution for that, like "Nessus" and "Acunetix" but just ...
8
votes
6answers
856 views
Whats the probability of a personal computer being hacked?
For a normal computer user following these practices:
Have an up to date anti-virus with a firewall installed (Norton).
Do not install cracked software.
Do not open suspicious links or download ...
8
votes
3answers
878 views
Can anyone suggest good open source tools for scanning source code for vulnerabilities?
I'm particularly looking ones which detect vulnerabilities in C/C++ code. I've seen a bunch of proprietary tools but no open source ones.
0
votes
0answers
70 views
Web application scanners that output reports? [closed]
I've been poking around the web looking for a web app security scanner I could introduce into by build/QA process to pick up some of the common issues in my applications. The tricky part is that I ...
1
vote
2answers
132 views
Changing IP ID generation of a server
I've seen plenty about Idle Scans and incremental IP IDs on the net, but I have trouble finding a "solution" to the problem. Is there a way to "set" IP IDs for example to all zeros or is it coded into ...
1
vote
0answers
254 views
Comparison of Whitehat Security and Veracode [closed]
I'm a research student. My topic is Web Application Security Scanners. The companies under my study are WhiteHat Security, Cenzic, Veracode, Qualys, IBM Rational Appscan, HP WebInspect, Fortify.
I'm ...
1
vote
1answer
397 views
NGINX / HTTP TRACE
I have a http server Nginx with HTTP TRACE Enabled.
A single nmap --script=http-methods.nse host.name give this result :
Not shown: 988 closed ports
PORT STATE SERVICE VERSION
[...]
...
7
votes
3answers
170 views
How do I test and secure ASN.1 Parsers?
As far as I can tell, .NET doesn't have an ASN.1 parser for reading or writing data built in the framework. This means that any code that creates or verifies ASN.1 data is using a 3rd party library ...
3
votes
2answers
243 views
How realistic and possible is this sort of attack
I scanned a host with Nessus, in order to do a vulnerability Assessment, and one of the findings looked really odd to me.
Nessus rated this finding's risk as Medium. The finding was, that a service ...
7
votes
3answers
210 views
Building list of vulnerabilities that should be verified during pentest
I am currently studying how to do server pentesting and need some advice/protip related to methology/best practices.
People often mention that it is a good idea to gather intelligence and enumerate ...
-1
votes
1answer
76 views
Reverse scan from cloud authentication server [closed]
I was wondering if the vulnerability scan is OK to perform on IP trying to register an account via internet. This is to help identifying rouge hosts. Do I need to put this in terms and conditions? I ...
1
vote
1answer
379 views
scanning my site for JavaScript/XSS vulnerabilities
It have had a report that my site may have a security issue and there is some JavaScript loading 10 times per second.
www.ayrshireminis.com
Is there anyway that I can "scan" my site to check if ...
1
vote
2answers
248 views
vulnerabilities in a machine that detects vulnerability scanners
I currently have a machine (set by another person) that has (according to nmap) open ports as:
FreeBSD ftpd 6.00LS where anonymous login is possible
OpenSSH 4.5p1 (FreeBSD 20061110; protocol 2.0)
...
0
votes
3answers
1k views
How to exploit this SQL inection vulnerability?
I am learning SQL injection on a vulnerable Web App. I scanned it with w3af. It showed many vulnerabilities. One of them is :
SQL injection in a Microsoft SQL database was found at: ...
1
vote
2answers
1k views
What is the best tool to anonymize your scans (network/ports)? [closed]
What are the best tools to anonymize my port scanners and vulnerability assessment tools (like nmap , metasploit ) ...?
I have been using Backtrack and tor network with proxychains to do this, but ...
1
vote
1answer
163 views
A BFE registry key's ACL is flagged by Microsoft Attack Surface Analyzer - what do I do?
Can anyone help me to understand which kind of action I should make to mitigate this issue, which emerged from Microsoft Surface Attack Analyzer? How I can tighten the ACL? Is there a standard ...
2
votes
2answers
173 views
unix config scanner / compliance checks
I'm looking for a tool, that scans unix operating systems for configuration issues. E.g. a script that finds
PermitRootLogin yes
in the ssh config file or with other words: a script that automates ...
