Questions tagged [tools]
Tools used by security professionals
201
questions
5
votes
2
answers
386
views
Human vs. Vulnerability Scanners [closed]
When would a human outperform a scripting tool when testing for vulnerabilities? For example, would a human ever find something that SQLmap wouldn't? In what cases would it be preferable/are there any ...
- 63
0
votes
0
answers
138
views
Difference between update and upgrade in ptf
What is the difference between update and upgrade when using a module in ptf (Penetration Testers Framework) ?
- 679
3
votes
1
answer
398
views
How to detect the OS running on IoT device?
Is there a tool (or Linux command) that can detect the OS running on IoT devices, such as smartwatches or wearable tracker devices?
Or a tool that can list as much information as possible about the ...
- 133
3
votes
1
answer
1k
views
Why can't scanners usually detect stored XSS? Is there a way to automate the detection of stored (persistent) xss,? [closed]
I'm desperately looking for tools, preferably with some guide, also preferably open-source, to detect stored xss vulnerabilities. It is observed that a handful of them doesn't give the expected ...
- 31
0
votes
1
answer
137
views
Account information gathering on subnet device
I have a cybersecurity test coming up. We have a practice test, but no solutions. One question involves being given a fresh Kali VM and a target IP on our subnet, and having to discover as many ...
- 139
0
votes
1
answer
5k
views
Is there a tool to test whether a server supports any cipher suite?
I would like to test whether a server is using some bad cipher suites.
The problem is, many of the bad cipher suites have been removed from openssl 1.x(e.g. suites exposed to FREAK). Therefore, ...
- 103
-1
votes
1
answer
2k
views
How netcat's -e functionality work? [closed]
I want to know how netcat uses -e parameter to serve executable over TCP/IP?
I want to write it on Python to understand it deeper, but I don't know how it is doing it?
If I am not mistaken, It is ...
- 72
2
votes
1
answer
984
views
Is it legal to teach about hacking and tools? [closed]
I'am currentliy working on a e-learning content about wireless security.
It is an app I want to launch on the AppStore and Google Play.
It shows what the problems and dangers are and also what tools ...
- 21
2
votes
2
answers
170
views
How to deal with administration tools such as ipscanners and PSTools?
In my company (And many others around the world) there is a wide usage by tech teams of tools such as ipscanners, psexec, pskill and other tools.
How do you deal or control the usage of such tools in ...
1
vote
0
answers
246
views
Simulation vs Formal Analysis of Authentication Protocols
I received a review for my journal paper in which we proposed WOOlim or nspk kind of authentication protocols. We proved the strength of our protocol with rigorous formal methods using CSP and rank ...
- 161
1
vote
1
answer
140
views
Stronger Password-based File Encryption on OS X [closed]
I am wondering if there are any better alternatives than the zip command on the OS X terminal.
My intention is to add a password to a compressed file. I have been using:
zip -j -e -pMY_SECRET test....
- 111
13
votes
3
answers
72k
views
How can I detect the remote operating system?
Is it possible to detect the operating system type remotely from another system using any tools like nmap without admin privileges? What are the other alternatives for achieving this?
- 1,070
125
votes
6
answers
252k
views
How to find out what programming language a website is built in?
I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in.
I know that URL extensions, HTTP headers, ...
- 1,742
7
votes
1
answer
210
views
Restricting access to "hacking" sites and tools
I tried following a link from a post on this site and discovered that insecure.org is blocked by our internet proxy.
What are the potential benefits and risks of allowing access to such sites to ...
- 3,059
1
vote
2
answers
2k
views
Is there a tool to detect what technologies a website uses? [closed]
I'm looking for the name of a tool I've used a long time ago, that for a given URL/website address would extract the technologies used for that site.
For example that the site is running Apache, using ...
- 19
30
votes
8
answers
4k
views
Best way to administer all my passwords
I am trying to figure out what the best solution is to store different types of passwords:
Personal passwords (my personal email, my company's email, all the services I use to buy things like ...
- 403
2
votes
1
answer
182
views
How is Smurf Toolkit possible? [closed]
We've probably all heard about the Smurf Toolkit by now. It's the GCHQ's way of tapping phones revealed by Edward Snowden. So supposedly they can take over your phone (even power it off/on!) by simply ...
- 92
2
votes
0
answers
133
views
Does hping support FTP Bounce scanning?
Does hping support FTP Bounce scanning?
I googled it, but I couldn't find its command, so I think it didn't support it.
I just find command for nmap not hping.
- 129
1
vote
1
answer
843
views
How to configure WebScarab to intercept only POST requests?
I'm trying to make WebScarab intercept only POST requests. On the Intercept tab below Methods I've selected only POST, but it still intercepts all GET and POST requests, so it's quite hard to tamper ...
- 119
1
vote
1
answer
1k
views
keytool -genseckey -alias TDES -keyalg DESede -keysize 128 works within jre/bin folder but not when the keytool.exe is on another location
I would like to create a TDES key with size 128bits and 2KTDES key with 192bits for authentication in a Desfire smart card. Hence I have used the keytool to generate the jceks with the following ...
-6
votes
2
answers
957
views
Is using netcat illegal? [closed]
Is using netcat to connect with a server that one does not own, illegal? For example, using netcat to connect with a web server and querying GET / HTTP/1.1 etc.
I am asking this question because ...
1
vote
1
answer
1k
views
Haskell in the security industry? [closed]
I know of a tool called msf-haskell for security but are there others?
Are there any security tools that are written in haskell? other
than the one above
How much use will haskell be in industry, ...
- 13
1
vote
0
answers
1k
views
Sysinternals tool suite not working on low priv shell
Currently oscp student. I asked this on the oscp forum yesterday, but no responses so far. I am new to infosec, but have 18 years of education / work experience in IT.
As far as I can tell, ...
- 215
2
votes
3
answers
9k
views
Looking for a (simple) utility to decrypt rsa-encrypted text in Windows?
Quick question: I'm looking for a simple utility program to be able to decrypt rsa-encrypted data (either base64-encoded or binary attachment) on a Windows workstation.
Scenario: There is a group of ...
- 232
16
votes
5
answers
19k
views
VeraCrypt/TruCrypt - I can't understand why you'd want to create a "hidden" volume...?
I can't think of a reason as to why you'd want to create a hidden volume in VeraCrypt. It says because "you may be asked to hand the information," but why would I need to hand it over? Nobody has any ...
- 421
1
vote
1
answer
333
views
What are features of a suitable tool for tracking and reporting security incidents? [closed]
What are features of a suitable tool for tracking and reporting security incidents?
Is it a bad idea to have one central repository for tracking all types of incidents, from helpdesk issues, to ...
- 915
2
votes
1
answer
5k
views
secure use of psexec?
As of March 7, 2014 PsExec now "encrypts all communication between local and remote systems, including the transmission of command information such as the user name and password under which the remote ...
- 111
3
votes
2
answers
2k
views
Principal DOM Based XSS detect using python
I am working for a project make a XSS scan tool using python.
I have a sample url: http://www.foo.bar/index.php?ids=111
I've found that it has a vulnerability by http://www.foo.bar/index.php?ids=">...
- 191
1
vote
2
answers
845
views
Is it noticeable when you take a copy of a website?
Is it noticeable when you use a tool to take a copy of a website? - how likely are you to trigger logs and whatnot when you use tools like HTTrack?
Is it actually illegal or 'bad' to do this? - alls ...
- 2,617
-1
votes
1
answer
4k
views
Scanner / tool to generate a list with all forms and input fields of a website [closed]
I'm not very experienced with information security but know some basics about injection attacks and other web based attacks. Is there a tool / crawler to find all forms and input fields of a whole ...
- 111
9
votes
4
answers
207
views
Fingerprinting the webpage content
I'm moderating a closed section of a forum - think 'covered by NDA' (not actually, but it's a good equivalent of the situation), with restricted access.
Sometimes we find screenshots from that forum ...
- 223
1
vote
1
answer
1k
views
Etterfilter file-contents injection
On the etterfilter(8) man page, there is a section about the inject() function, which takes the contents of a file and injects it in a packet, or as its own packet when coupled with drop():
inject(...
- 353
1
vote
0
answers
142
views
Preferred features of CDN with DDoS?
I am putting together a presentation comparing CDN services that also provide DDoS protection. I have to do a really good job on this and I'm not a security expert. For lack of direction, I've copied ...
- 203
3
votes
1
answer
278
views
Similar products to MS EMET [closed]
Following the weekend announcement from Microsoft regarding the vulnerability in IE I have been looking at additional security defences for our endpoints. I've read some technical documentation and ...
- 107
3
votes
1
answer
1k
views
Tools for Verifying Secure Deletion [closed]
It is recommended to verify the zeroing-out was done properly when you try to secure delete a HDD. From this post, some drives with firmware bugs prevent secure erase from working properly.
What are ...
- 131
1
vote
0
answers
163
views
Does whosthere.exe of pth toolkit have to run with administrative rights?
To see the users that are connected to the machine and they're pass hashes with Whosthere.exe, do I have to run it as an administrator?
- 203
0
votes
2
answers
1k
views
How to use WinObj for detecting security issues?
The description of WinObj says:
WinObj is a must-have tool if you are a system administrator concerned about security
What kind of security issues can it detect and what is the rough usage?
- 3,376
9
votes
1
answer
3k
views
Any MITM tool for forcing weak SSL cipher suite?
Let's say I'm trying to reverse engineering communctions between an Android app and a web server uing HTTPS.
At beginning, I tried to do MITM using webmitm and a fake cert. But the app failed to ...
- 777
1
vote
1
answer
847
views
RK Hunter Warns about /usr/lib/apache2/mpm-event/apache2 uses deleted files, how to further investigate the matter and how shall I treat it?
I have a cloud server that I am preparing for a small E-Commerce website deployment.
I've used a RSA-2048 keys right before booting the newly purchased server, with the help of the Provider's Control ...
- 173
3
votes
2
answers
374
views
Is it possible to make a "proof of anteriority" for sites content?
Given a site that publishes unique content online and given that there are lots of site scrapers and persons stealing content and reposting it as their own, inevitably you will have the same content ...
- 33
0
votes
2
answers
209
views
Basic simple encryption with already installed tools
If you are exchanged email messages with people using Linux, Windows and some odd Mac and want to implement some really basic security, encrypting all messages, just trying to avoid some non-...
- 1,881
2
votes
2
answers
56k
views
sqlmap unable to find SQL injection vulnerablitity
so i just started up with sqlmap to learn sql injection vulnerability on my application. Here I followed steps as per some tutorials.
So this are the steps which i followed :
sqlmap.py -u "http://...
- 197
3
votes
2
answers
8k
views
Sniffing From Squid SSL
I created a Squid proxy and a self-signed SSL certificate. The SSL certificate on the server is a private certificate linked to the ssl-bump feature. I am using tshark to dump the SSL traffic, but I ...
- 31
0
votes
2
answers
2k
views
SQLMap extracts weird chars in one column
I saw this behaviour many times but I never solved it. Sometimes using sqlmap after retrieving good data from columns it fails retrieving only one of them. I can't figure out why this happens for just ...
- 429
-1
votes
2
answers
540
views
How can we trust the tools? [closed]
There is a lot of tools out there to do a lot of things with, like sniffing, scanning, and even backdoors. However, I have a really hard time trusting these tools. When I install them at home and ...
- 169
8
votes
7
answers
33k
views
Are there any tools for scanning for SQL injection vulnerabilities while logged in?
Some pages of my website were vulnerable to SQL injection. The injection worked only when the user was logged in. I have now fixed this problem, and now I want to make sure that no similar problems ...
- 442
5
votes
2
answers
4k
views
Event monitoring for a home network
I'd like to utilise some of the free SIEM type products out there to increase the chances that I will detect attacks and compromises of any of the devices on my home network. Most of my home devices ...
- 2,128
8
votes
1
answer
565
views
CERT FOE Fuzzing Framework documentation
So I read another post here about fuzzing local standalone applications. I have understood how to exploit basic buffer overflow vulnerabilities in standalone applications and am now looking on how to ...
- 97
4
votes
2
answers
18k
views
What exactly is 'single' mode in John the Ripper doing?
I'm testing out John the Ripper (1.7.9 Jumbo 7) on a file containing MD5 hashes without any usernames. I've been experimenting with different rules and configurations – I am currently using a wordlist ...
- 107
0
votes
1
answer
4k
views
Where can I find a list of Indicators of Compromise (IOC) conditions?
OpenIOC.org has several schemas defining Indicators of Compromise.
The Schema is defined here:
http://schemas.mandiant.com/2010/ioc/ioc.xsd
While under IndicatorItemContext/search says it is xs:...
- 161