Tools used by security professionals

learn more… | top users | synonyms

1
vote
0answers
35 views

Simulation vs Formal Analysis of Authentication Protocols

I received a review for my journal paper in which we proposed WOOlim or nspk kind of authentication protocols. We proved the strength of our protocol with rigorous formal methods using CSP and rank ...
0
votes
0answers
19 views

Digital Signature - PKCS#7 Response

I have a long xml-style string which looks like this: MIILhMIILhAY......H9WH9W Task given to me is to digitally sign a pdf document. Is there a tool (like jdk keytool or openssl etc) which I can use ...
1
vote
1answer
76 views

Stronger Password-based File Encryption on OS X [closed]

I am wondering if there are any better alternatives than the zip command on the OS X terminal. My intention is to add a password to a compressed file. I have been using: zip -j -e -pMY_SECRET test....
1
vote
1answer
76 views

How can I detect the remote operating system?

Is it possible to detect the operating system type remotely from another system using any tools like nmap without admin privileges? What are the other alternatives for achieving this?
77
votes
6answers
9k views

How to find out what programming language a website is built in?

I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in. I know that URL extensions, HTTP headers, ...
5
votes
1answer
142 views

Restricting access to “hacking” sites and tools

I tried following a link from a post on this site and discovered that insecure.org is blocked by our internet proxy. What are the potential benefits and risks of allowing access to such sites to ...
0
votes
2answers
111 views

Is there a tool to detect what technologies a website uses? [closed]

I'm looking for the name of a tool I've used a long time ago, that for a given URL/website address would extract the technologies used for that site. For example that the site is running Apache, using ...
27
votes
8answers
3k views

Best way to administer all my passwords

I am trying to figure out what the best solution is to store different types of passwords: Personal passwords (my personal email, my company's email, all the services I use to buy things like ...
2
votes
1answer
103 views

How is Smurf Toolkit possible? [closed]

We've probably all heard about the Smurf Toolkit by now. It's the GCHQ's way of tapping phones revealed by Edward Snowden. So supposedly they can take over your phone (even power it off/on!) by simply ...
2
votes
0answers
54 views

Does hping support FTP Bounce scanning?

Does hping support FTP Bounce scanning? I googled it, but I couldn't find its command, so I think it didn't support it. I just find command for nmap not hping.
1
vote
1answer
122 views

How to configure WebScarab to intercept only POST requests?

I'm trying to make WebScarab intercept only POST requests. On the Intercept tab below Methods I've selected only POST, but it still intercepts all GET and POST requests, so it's quite hard to tamper ...
1
vote
1answer
343 views

keytool -genseckey -alias TDES -keyalg DESede -keysize 128 works within jre/bin folder but not when the keytool.exe is on another location

I would like to create a TDES key with size 128bits and 2KTDES key with 192bits for authentication in a Desfire smart card. Hence I have used the keytool to generate the jceks with the following ...
-6
votes
3answers
158 views

Is using netcat illegal? [closed]

Is using netcat to connect with a server that one does not own, illegal? For example, using netcat to connect with a web server and querying GET / HTTP/1.1 etc. I am asking this question because ...
0
votes
1answer
133 views

Haskell in the security industry? [closed]

I know of a tool called msf-haskell for security but are there others? Are there any security tools that are written in haskell? other than the one above How much use will haskell be in industry, ...
0
votes
0answers
417 views

Sysinternals tool suite not working on low priv shell

Currently oscp student. I asked this on the oscp forum yesterday, but no responses so far. I am new to infosec, but have 18 years of education / work experience in IT. As far as I can tell, ...
1
vote
3answers
4k views

Looking for a (simple) utility to decrypt rsa-encrypted text in Windows?

Quick question: I'm looking for a simple utility program to be able to decrypt rsa-encrypted data (either base64-encoded or binary attachment) on a Windows workstation. Scenario: There is a group of ...
14
votes
4answers
6k views

VeraCrypt/TruCrypt - I can't understand why you'd want to create a “hidden” volume…?

I can't think of a reason as to why you'd want to create a hidden volume in VeraCrypt. It says because "you may be asked to hand the information," but why would I need to hand it over? Nobody has any ...
0
votes
1answer
98 views

What are features of a suitable tool for tracking and reporting security incidents? [closed]

What are features of a suitable tool for tracking and reporting security incidents? Is it a bad idea to have one central repository for tracking all types of incidents, from helpdesk issues, to ...
2
votes
1answer
1k views

secure use of psexec?

As of March 7, 2014 PsExec now "encrypts all communication between local and remote systems, including the transmission of command information such as the user name and password under which the remote ...
3
votes
2answers
880 views

Principal DOM Based XSS detect using python

I am working for a project make a XSS scan tool using python. I have a sample url: http://www.foo.bar/index.php?ids=111 I've found that it has a vulnerability by http://www.foo.bar/index.php?ids=">...
1
vote
1answer
241 views

Is it noticeable when you take a copy of a website?

Is it noticeable when you use a tool to take a copy of a website? - how likely are you to trigger logs and whatnot when you use tools like HTTrack? Is it actually illegal or 'bad' to do this? - alls ...
-1
votes
1answer
394 views

Scanner / tool to generate a list with all forms and input fields of a website [closed]

I'm not very experienced with information security but know some basics about injection attacks and other web based attacks. Is there a tool / crawler to find all forms and input fields of a whole ...
9
votes
4answers
108 views

Fingerprinting the webpage content

I'm moderating a closed section of a forum - think 'covered by NDA' (not actually, but it's a good equivalent of the situation), with restricted access. Sometimes we find screenshots from that forum ...
1
vote
1answer
413 views

Etterfilter file-contents injection

On the etterfilter(8) man page, there is a section about the inject() function, which takes the contents of a file and injects it in a packet, or as its own packet when coupled with drop(): inject(...
1
vote
0answers
93 views

Preferred features of CDN with DDoS?

I am putting together a presentation comparing CDN services that also provide DDoS protection. I have to do a really good job on this and I'm not a security expert. For lack of direction, I've copied ...
3
votes
1answer
144 views

Similar products to MS EMET [closed]

Following the weekend announcement from Microsoft regarding the vulnerability in IE I have been looking at additional security defences for our endpoints. I've read some technical documentation and ...
3
votes
1answer
269 views

Tools for Verifying Secure Deletion [closed]

It is recommended to verify the zeroing-out was done properly when you try to secure delete a HDD. From this post, some drives with firmware bugs prevent secure erase from working properly. What are ...
1
vote
0answers
92 views

Does whosthere.exe of pth toolkit have to run with administrative rights?

To see the users that are connected to the machine and they're pass hashes with Whosthere.exe, do I have to run it as an administrator?
0
votes
2answers
428 views

How to use WinObj for detecting security issues?

The description of WinObj says: WinObj is a must-have tool if you are a system administrator concerned about security What kind of security issues can it detect and what is the rough usage?
8
votes
1answer
1k views

Any MITM tool for forcing weak SSL cipher suite?

Let's say I'm trying to reverse engineering communctions between an Android app and a web server uing HTTPS. At beginning, I tried to do MITM using webmitm and a fake cert. But the app failed to ...
1
vote
1answer
658 views

RK Hunter Warns about /usr/lib/apache2/mpm-event/apache2 uses deleted files, how to further investigate the matter and how shall I treat it?

I have a cloud server that I am preparing for a small E-Commerce website deployment. I've used a RSA-2048 keys right before booting the newly purchased server, with the help of the Provider's Control ...
3
votes
2answers
197 views

Is it possible to make a “proof of anteriority” for sites content?

Given a site that publishes unique content online and given that there are lots of site scrapers and persons stealing content and reposting it as their own, inevitably you will have the same content ...
0
votes
3answers
148 views

Basic simple encryption with already installed tools

If you are exchanged email messages with people using Linux, Windows and some odd Mac and want to implement some really basic security, encrypting all messages, just trying to avoid some non-...
1
vote
2answers
18k views

sqlmap unable to find SQL injection vulnerablitity

so i just started up with sqlmap to learn sql injection vulnerability on my application. Here I followed steps as per some tutorials. So this are the steps which i followed : sqlmap.py -u "http://...
2
votes
2answers
3k views

Sniffing From Squid SSL

I created a Squid proxy and a self-signed SSL certificate. The SSL certificate on the server is a private certificate linked to the ssl-bump feature. I am using tshark to dump the SSL traffic, but I ...
0
votes
2answers
628 views

SQLMap extracts weird chars in one column

I saw this behaviour many times but I never solved it. Sometimes using sqlmap after retrieving good data from columns it fails retrieving only one of them. I can't figure out why this happens for just ...
-1
votes
2answers
298 views

How can we trust the tools? [closed]

There is a lot of tools out there to do a lot of things with, like sniffing, scanning, and even backdoors. However, I have a really hard time trusting these tools. When I install them at home and ...
4
votes
6answers
19k views

Are there any tools for scanning for SQL injection vulnerabilities while logged in?

Some pages of my website were vulnerable to SQL injection. The injection worked only when the user was logged in. I have now fixed this problem, and now I want to make sure that no similar problems ...
5
votes
2answers
3k views

Event monitoring for a home network

I'd like to utilise some of the free SIEM type products out there to increase the chances that I will detect attacks and compromises of any of the devices on my home network. Most of my home devices ...
8
votes
1answer
427 views

CERT FOE Fuzzing Framework documentation

So I read another post here about fuzzing local standalone applications. I have understood how to exploit basic buffer overflow vulnerabilities in standalone applications and am now looking on how to ...
2
votes
2answers
3k views

What exactly is 'single' mode in John the Ripper doing?

I'm testing out John the Ripper (1.7.9 Jumbo 7) on a file containing MD5 hashes without any usernames. I've been experimenting with different rules and configurations – I am currently using a wordlist ...
0
votes
1answer
1k views

Where can I find a list of Indicators of Compromise (IOC) conditions?

OpenIOC.org has several schemas defining Indicators of Compromise. The Schema is defined here: http://schemas.mandiant.com/2010/ioc/ioc.xsd While under IndicatorItemContext/search says it is xs:...
7
votes
2answers
6k views

How can I view the NTFS $MFT using correct field names?

I am trying to view an NTFS master file table. Each tool I have used so far extracts all of the entries, but puts non standard headers such as STANDARD_INFORMATION_ON instead of say $...
0
votes
2answers
579 views

Tools to extract code comments from sites? [closed]

I often come across sites that have way to many comments included in their source code, sometimes these comments offer valuable insight into whats happening in the code, the logic of functions, unused ...
3
votes
1answer
323 views

How to determine hashes/second in password cryptanalysis

I'm working on my dissertation concerning cryptanalysis on password hashes. As part of my research, I aim to crack a number of passwords with John the Ripper and rainbowcrack-mt. I'd like to ...
4
votes
2answers
7k views

SQL Injection - Extracting database data from the page content

I have a question I am hoping someone could help with.. I am in the process of writing an SQL Injection tool from scratch (I am aware there are already excellent tools out there such as SQL Map, but ...
3
votes
1answer
304 views

What are good tools for CRLF discovery? [closed]

What are good tools for finding CRLF injection vulnerabilities?
4
votes
2answers
1k views

SQL Injection - Automating the fingerprinting of the DBMS

I have a problem I'm hoping someone could help with regarding the fingerprinting of the DBMS using sql injection, in a scripted/automated way to accurately and reliabling determine the DBMS. I am in ...
6
votes
1answer
9k views

SQL Injection - UNION SELECT and returning a 'keyword' to find exploitable columns

I have a problem I'm hoping someone could help with regarding the use of UNION SELECT, in a scripted/automated way to find columns that are exploitable (having already found the number of columns ...
41
votes
4answers
46k views

What's an easy way to perform a man-in-the-middle attack on SSL?

I'd like to perform a man-in-the-middle attack on SSL connections between clients and a server. Assuming the following: I've got a certificate that the client will accept, via poor cert validation ...