the internet security encyclopedia
Showing 1 - 25 of 5,279 RSS Feed

Files

Port Tester 0.1
Posted Feb 3, 2012
Authored by localh0t

This is a simple little port scanning script written in python.

tags | tool, scanner, python
systems | unix
MD5 | b8fc2783fbb4849e4ceac338b595bcb3
WeBaCoo (Web Backdoor Cookie) 0.2.2
Posted Feb 2, 2012
Authored by Anestis Bechtsoudis | Site github.com

WeBaCoo (Web Backdoor Cookie) is a web backdoor script-kit, aiming to provide a stealth terminal-like connection over HTTP between client and web server. It is a post exploitation tool capable to maintain access to a compromised web server. WeBaCoo was designed to operate under the radar of modern up-to-dated AV, NIDS, IPS, Network Firewalls and Application Firewalls, proving a stealth mechanism to execute system commands to the compromised server. The obfuscated communication is accomplished using HTTP header's Cookie fields under valid client HTTP requests and relative web server's responses.

Changes: Support for extension modules, MySQL CLI extension module, Upload extension module, various other additions.
tags | tool, web, rootkit
systems | unix
MD5 | b74689916ea156d422177f331fe570c8
Lightidra IRC Router Scanner
Posted Jan 30, 2012
Authored by eurialo | Site ahacktivia.org

Lightaidra is an IRC commanded tool that allows for scanning and exploiting routers. It also performs flooding.

tags | tool, scanner
systems | unix
MD5 | a5192e2428d901e1f57b9b5d16671073
Zorp Proxy Firewall Suite 3.9.3
Posted Jan 29, 2012
Authored by Balazs Scheidler | Site balabit.com

Zorp is a proxy firewall suite with its core architecture built around today's security demands. It uses application level proxies, is modular and component based, uses a script language to describe policy decisions, makes it possible to monitor encrypted traffic, lets you override client actions, and lets you protect your servers with its built in IDS capabilities.

Changes: This release fixes passphrase handling of trusted CA private keys and removes support for obsolete Linux versions and Solaris.
tags | tool, firewall
systems | unix
MD5 | 308a11d1584fa7ca26fc1594249cfdf0
FatCat SQL Injector
Posted Jan 28, 2012
Authored by Sandeep K

This is an automatic SQL Injection tool called FatCat. It has features that help you to extract the database information, table information, and column information from a web application.

tags | tool, web, scanner, sql injection
systems | unix
MD5 | 4f817b144c8f53343c8aa637f785cfa7
Dark D0rk3r 0.5
Posted Jan 28, 2012
Authored by baltazar

Dark D0rk3r is a python script that performs dork searching and searches for local file inclusion and SQL injection errors.

Changes: New options added.
tags | tool, local, scanner, sql injection, python, file inclusion
systems | unix
MD5 | 889d6c7b94e9b4b4eca15f9e04ce9a86
p0f 3.03b Windows Port
Posted Jan 25, 2012
Authored by Michal Zalewski, David Coomber | Site lcamtuf.coredump.cx

P0f is a tool that utilizes an array of sophisticated, purely passive traffic fingerprinting mechanisms to identify the players behind any incidental TCP/IP communications (often as little as a single normal SYN) without interfering in any way. Version 3 is a complete rewrite of the original codebase, incorporating a significant number of improvements to network-level fingerprinting, and introducing the ability to reason about application-level payloads (e.g., HTTP).

Changes: This is a Windows port of the latest release created by David Coomber.
tags | tool, web, scanner, tcp
systems | windows
MD5 | aea524324828790b24a90be3bb7a0d93
Dark D0rk3r 0.4
Posted Jan 24, 2012
Authored by baltazar

Dark D0rk3r is a python script that performs dork searching and searches for local file inclusion and SQL injection errors.

Changes: Various updates.
tags | tool, local, scanner, sql injection, python, file inclusion
systems | unix
MD5 | 805a42d36e42f5901d0a6497306713a7
OpenDNSSEC 1.3.5
Posted Jan 24, 2012
Site opendnssec.org

OpenDNSSEC is software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.

Changes: This release adds bugfixes. Auditor now includes the zone name in the log. ldns 1.6.12 is required. ods-ksmutil suppresses database connection information when no -v flag is given. ods-enforcerd stops multiple instances of the enforcer from running. ods-ksmutil's "zone delete" renames the signconf file, so if the zone is put back, the signer will not pick up the old file. Signer Engine's verbosity can now be set via conf.xml (the default is 3).
tags | tool
systems | unix
MD5 | e82098192f4a3965de7a84e6ae9f1f75
MIMEDefang Email Scanner 2.73
Posted Jan 24, 2012
Authored by David F. Skoll | Site mimedefang.org

MIMEDefang is a flexible MIME email scanner designed to protect Windows clients from viruses. Includes the ability to do many other kinds of mail processing, such as replacing parts of messages with URLs. It can alter or delete various parts of a MIME message according to a very flexible configuration file. It can also bounce messages with unacceptable attachments. MIMEDefang works with the Sendmail 8.11 and newer "Milter" API, which makes it more flexible and efficient than procmail-based approaches.

Changes: This release contains three new features. A new -G option causes files created by mimedefang to be group-readable and sockets to be group-readable/writable. The multiplexor snoops in on communications and saves the Sendmail queue-ID for logging purposes. It logs the queue ID when logging a slave's STDERR. Finally, MIMEDefang passes along the client port number, server IP address, and server port number to all filter functions. In addition to the three new features, there are several minor bugfixes.
systems | windows, unix
MD5 | 385680c16fb7ecb345d7806a5ee31843
MagicHash Collision Testing Tool
Posted Jan 24, 2012
Authored by ILM Informatique | Site magic-hash.com

PostTest is a jar file that will send POST requests to servers in order to test for the hash collision vulnerability discussed at the Chaos Communication Congress in Berlin.

tags | tool, scanner
systems | unix
MD5 | 7e94c05959065b9e3ee16b155ee0fe4b
Dark D0rk3r 0.3
Posted Jan 23, 2012
Authored by baltazar

Dark D0rk3r is a python script that performs dork searching and searches for local file inclusion and SQL injection errors.

Changes: Searches 269 domains and collects the links for checking.
tags | tool, local, scanner, sql injection, python, file inclusion
systems | unix
MD5 | 1135026518d9d2e547c7fc2030142efc
Dark D0rk3r 0.2
Posted Jan 21, 2012
Authored by baltazar

Dark D0rk3r is a python script that performs dork searching and searches for local file inclusion and SQL injection errors.

Changes: Added local file inclusion support.
tags | tool, local, scanner, sql injection, python, file inclusion
systems | unix
MD5 | 59c92aeebbb4e725bb20482451ef06f3
Suricata IDPE 1.2.1
Posted Jan 21, 2012
Site openinfosecfoundation.org

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.

Changes: Writing of malformed unified2 log records was fixed. TCP timeout handling was improved.
tags | tool, intrusion detection
systems | unix
MD5 | 79a74f7d9cc32d7cacd9783e258d6fee
Small Python Backdoor
Posted Jan 21, 2012
Authored by Reflex

This is a very small backdoor written in Python.

tags | tool, rootkit, python
systems | unix
MD5 | abf97854fff55fbaf20ea64011da1522
Dark D0rk3r 0.1
Posted Jan 21, 2012
Authored by baltazar

Dark D0rk3r is a python script that performs dork searching and searches for SQL injection errors.

tags | tool, scanner, sql injection, python
systems | unix
MD5 | 4ec2f206ba19629bd6d4dfd5372246bc
Suricata IDPE 1.2
Posted Jan 19, 2012
Site openinfosecfoundation.org

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.

Changes: PCAP live runmodes were fixed. CPU affinity settings for live runmodes were fixed. Windows/Cygwin path handling was improved.
tags | tool, intrusion detection
systems | unix
MD5 | bd7dbcb882281b5a2bdceed5821c114c
Distributed Access Control System 1.4.27
Posted Jan 18, 2012
Site dacs.dss.ca

DACS is a light-weight single sign-on and role-based access control system providing flexible, modular authentication methods and powerful, transparent rule-based authorization checking for Web services, CGI programs, or virtually any program.

Changes: This minor bugfix release upgrades third-party support packages, includes upgrades/fixes for Mac OS X 10.7.2, and fixes and extends the HTTP_AUTH directive and the dacsauth(1) command.
tags | tool, web, cgi
systems | linux, unix
MD5 | 72899c20059569317f6efe66baf888bf
OATH Toolkit 1.10.5
Posted Jan 17, 2012
Site nongnu.org

OATH Toolkit attempts to collect several tools that are useful when deploying technologies related to OATH, such as HOTP one-time passwords. It is a fork of the earlier HOTP Toolkit.

Changes: Build fixes. The Gnulib files were updated.
tags | tool
systems | unix
MD5 | b15754a7419592c57b8a98cc413eb873
P0f 3.0.0b
Posted Jan 17, 2012
Authored by Michal Zalewski | Site lcamtuf.coredump.cx

P0f is a tool that utilizes an array of sophisticated, purely passive traffic fingerprinting mechanisms to identify the players behind any incidental TCP/IP communications (often as little as a single normal SYN) without interfering in any way. Version 3 is a complete rewrite of the original codebase, incorporating a significant number of improvements to network-level fingerprinting, and introducing the ability to reason about application-level payloads (e.g., HTTP).

Changes: This complete rewrite adds a range of new TCP fingerprinting mechanisms, sophisticated NAT detection, HTTP inspection and fingerprinting, and updated signatures.
tags | tool, web, scanner, tcp
systems | linux, unix
MD5 | 8a7ea1821b4599bdd1749b6112865c41
TCP Fast Scan
Posted Jan 17, 2012
Authored by James Stevenson | Site stev.org

This is a very fast TCP port scanner for Linux that can scan multiple hosts and ports at once.

tags | tool, scanner, tcp
systems | linux, unix
MD5 | b5d0e5e019e3d6a9d81a48d0489ad883
ICMP Ping Sweep
Posted Jan 17, 2012
Authored by James Stevenson | Site stev.org

This is a simple ICMP ping sweeping tool that takes in a range of IP addresses.

tags | tool, scanner
systems | unix
MD5 | 543666de6d9557dbd4451e5bf90b0ea9
Exploit Next Generation SQL Fingerprint 1.12.120115/RC0
Posted Jan 16, 2012
Authored by Nelson Brito

The Exploit Next Generation® SQL Fingerprint tool uses well-known techniques based on several public tools capable of identifying the Microsoft SQL Server version (such as: SQLping and SQLver), but, instead of showing only the "raw version" (i.e., Microsoft SQL Version 10.00.2746), the Exploit Next Generation® SQL Fingerprint shows the mapped Microsoft SQL Server version (i.e., Microsoft SQL 2008 SP1 (CU5)).

tags | tool, scanner
systems | windows
MD5 | 6757930a2010359d3e06309e60bd4db4
Priv8 2012 Bypass Shell
Posted Jan 16, 2012
Authored by izleyici

This is a php shell that offers various connect-back methods, the ability to read files, grab source, execute code, etc.

tags | tool, shell, php, rootkit
systems | unix
MD5 | 3b6013b3e9ec147f00de99feedbc7172
Ban Facebook SSL Script 1.0
Posted Jan 15, 2012
Authored by Alexandru Cuciureanu

This tool pulls down all netblocks for Facebook and block access to the site via IPTables.

tags | tool
systems | unix
MD5 | 27a4b16cb5c6021f589fad3b2c92ccf0
Page 1 of 212
Back12345Next

Top Authors In Last 30 Days

packet storm

© 2011 Packet Storm. All rights reserved.

close