Empty stares…from each corner of a shared prison cell

Tool


Webtunnel 0.0.2 – HTTP Encapsulation and Tunnel Tool

Webtunnel is a network utility that encapsulates arbitrary data in HTTP and transmits it through a web server. In that regard, it is similar to httptunnel, however, it has several key important differences: its server component runs in the context of a web server as a CGI application (with optional FastCGI support) so it does [...]

SHARETHIS.addEntry({ title: “Webtunnel 0.0.2 – HTTP Encapsulation and Tunnel Tool”, url: “http://www.darknet.org.uk/2009/02/webtunnel-002-http-encapsulation-and-tunnel-tool/” });ShareThis

<!– –>

January 30th, 2009

Complemento v0.6 – LetDown TCP Flooder, ReverseRaider Subdomain Scanner & Httsquash HTTP Server Scanner Tool

We first wrote about Complemento 0.4b a little while ago when it first hit the public domain just last month (December 2008).
Now there have been 2 major updated versions, the latest being 0.6.
What is Complemento?
Complemento is a collection of tools that the author originally created for his own personal toolchain for solving some problems or [...]

SHARETHIS.addEntry({ title: “Complemento v0.6 – LetDown TCP Flooder, ReverseRaider Subdomain Scanner & Httsquash HTTP Server Scanner Tool”, url: “http://www.darknet.org.uk/2009/01/complemento-v06-letdown-tcp-flooder-reverseraider-subdomain-scanner-httsquash-http-server-scanner-tool/” });ShareThis

<!– –>

January 23rd, 2009

CeWL – Custom Word List Generator Tool for Password Cracking

It seems to be trendy lately to make tools which can create custom or more specific word lists for password cracking, just last week we posted about the web application The Associative Word List Generator (AWLG), which crawls the whole web to look for associated words with a given topic.
This application is more towards creating [...]

SHARETHIS.addEntry({ title: “CeWL – Custom Word List Generator Tool for Password Cracking”, url: “http://www.darknet.org.uk/2009/01/cewl-custom-word-list-generator-tool-for-password-cracking/” });ShareThis

<!– –>

January 20th, 2009

Acunetix Web Vulnerability Scanner 6 Review

As you might know if you’ve been reading for some time, I do occasionally review commercial software if it’s interesting and relevant – the last one I remember doing was back in 2007 “Outpost Security Suite PRO Review“.
This time it’s for a much more relevant piece of software IMHO, and one which I actually like [...]

SHARETHIS.addEntry({ title: “Acunetix Web Vulnerability Scanner 6 Review”, url: “http://www.darknet.org.uk/2009/01/acunetix-web-vulnerability-scanner-6-review/” });ShareThis

<!– –>

January 16th, 2009

FireCAT 1.5 Released – Firefox Catalog of Auditing Extensions

FireCAT (Firefox Catalog of Auditing exTension) is a mindmap collection of the most efficient and useful firefox extensions oriented application security auditing and assessment
FireCAT 1.5 will be the last release of this 1.x branch. In fact, we are working on a new improved version 2.0 (management of plugins, instant download from security-database, ability to add [...]

SHARETHIS.addEntry({ title: “FireCAT 1.5 Released – Firefox Catalog of Auditing Extensions”, url: “http://www.darknet.org.uk/2009/01/firecat-15-released-firefox-catalog-of-auditing-extensions/” });ShareThis

<!– –>

January 14th, 2009

The Associative Word List Generator (AWLG) – Create Related Wordlists for Password Cracking

You may remember some time back we did a fairly exhaustive post on Password Cracking Wordlists and Tools for Brute Forcing.
Wyd the Password Profiling Tool also does something similar to AWLG but it’s a PERL script rather than being based online.

I’d prefer if AWLG let us download an offline version too personally.
About AWLG
The Associative Word [...]

SHARETHIS.addEntry({ title: “The Associative Word List Generator (AWLG) – Create Related Wordlists for Password Cracking”, url: “http://www.darknet.org.uk/2009/01/the-associative-word-list-generator-awlg-create-related-wordlists-for-password-cracking/” });ShareThis

<!– –>

January 6th, 2009

WITOOL v0.1 – GUI Based SQL Injection Tool in .NET

WITOOL is an graphical based SQL Injection Tool written in dotNET.
- For SQL Server, Oracle
- Error Base and Union Base

Interface

Features

Retrieve schema : DB/TableSpace, Table, Column, other object
Retrieve data : retrive paging, dump xml file
Log : View the raw data HTTP log

Environment
OS: Windows 2000/XP/VISTA
Requirement: Microsoft .NET(2.0) Library (Download Here).

You can download WITOOL v0.1 here:
WITOOL_V0.1_081231.zip
Or read more [...]

SHARETHIS.addEntry({ title: “WITOOL v0.1 – GUI Based SQL Injection Tool in .NET”, url: “http://www.darknet.org.uk/2009/01/witool-v01-gui-based-sql-injection-tool-in-net/” });ShareThis

<!– –>

December 30th, 2008

Burp Suite v1.2 Released – Web Application Security Testing & Attack Platform

Burp Suite is an integrated platform for attacking web applications. It contains all of the Burp tools with numerous interfaces between them designed to facilitate and speed up the process of attacking an application. All tools share the same robust framework for handling HTTP requests, persistence, authentication, downstream proxies, logging, alerting and extensibility.
Burp Suite [...]

SHARETHIS.addEntry({ title: “Burp Suite v1.2 Released – Web Application Security Testing & Attack Platform”, url: “http://www.darknet.org.uk/2008/12/burp-suite-v12-released-web-application-security-testing-attack-platform/” });ShareThis

<!– –>

December 22nd, 2008

MultiInjector v0.3 Released – Automatic SQL Injection and Defacement Tool

You might remember a while ago we posted about MultiInjector which claims to the first configurable automatic website defacement tool, it got quite a bit of interest and shortly after that it was updated. Anyway, good or bad I think people deserve to know what is out there.

Features

Receives a list of URLs as input
Recognizes the [...]

SHARETHIS.addEntry({ title: “MultiInjector v0.3 Released – Automatic SQL Injection and Defacement Tool”, url: “http://www.darknet.org.uk/2008/12/multiinjector-v03-released-automatic-sql-injection-and-defacement-tool/” });ShareThis

<!– –>

December 18th, 2008

sqlmap 0.6.3 Released – Automatic SQL Injection Tool

sqlmap is an automatic SQL injection tool developed in Python. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back end database management system [...]

SHARETHIS.addEntry({ title: “sqlmap 0.6.3 Released – Automatic SQL Injection Tool”, url: “http://www.darknet.org.uk/2008/12/sqlmap-063-released-automatic-sql-injection-tool/” });ShareThis

<!– –>

December 16th, 2008

Complemento v0.4b – LetDown TCP Flooder, ReverseRaider Subdomain Scanner & Httsquash HTTP Server Scanner Tool

An interesting collection of tools for pen-testing including a DoS tool (something you don’t often see publicly released).
Complemento is a collection of tools that the author originally created for his own personal toolchain for solving some problems or just for fun. Now he has decided to release it to the public.
The Tools

LetDown is a TCP [...]

SHARETHIS.addEntry({ title: “Complemento v0.4b – LetDown TCP Flooder, ReverseRaider Subdomain Scanner & Httsquash HTTP Server Scanner Tool”, url: “http://www.darknet.org.uk/2008/12/complemento-v04b-letdown-tcp-flooder-reverseraider-subdomain-scanner-httsquash-http-server-scanner-tool/” });ShareThis

<!– –>

December 12th, 2008

sapyto v0.98 Released – SAP Penetration Testing Framework Tool

sapyto is the first SAP Penetration Testing Framework, sapyto provides support to information security professionals in SAP platform discovery, investigation and exploitation activities.
sapyto is periodically updated with the outcome of the deep research on the various security aspects in SAP systems.

Although sapyto is a versatile and powerful tool, it is of major importance for it [...]

SHARETHIS.addEntry({ title: “sapyto v0.98 Released – SAP Penetration Testing Framework Tool”, url: “http://www.darknet.org.uk/2008/12/sapyto-v098-released-sap-penetration-testing-framework-tool/” });ShareThis

<!– –>

December 5th, 2008

The World’s Fastest MD5 Cracker – BarsWF

BarsWF is basically an MD5 cracking tool and at the moment, is currently the fastest. Right now on nVidia 9600GT/C2D 3Ghz CUDA version does 350 M keys/sec, SSE2 version does 108 M keys/sec. You may check benchmarks of all known good MD5 bruteforcers here.

Changes in 0.8

Added checks for errors when calling CUDA kernel.
Now you [...]

SHARETHIS.addEntry({ title: “The World’s Fastest MD5 Cracker – BarsWF”, url: “http://www.darknet.org.uk/2008/12/the-worlds-fastest-md5-cracker-barswf/” });ShareThis

<!– –>

November 27th, 2008

FireCAT 1.4 Released – Firefox Catalog of Auditing Extensions

FireCAT (Firefox Catalog of Auditing exTension) is a mindmap collection of the most efficient and useful firefox extensions oriented application security auditing and assessment
You can find an online map of Firecat v1.4 here.
Changes for version 1.4

Information Gathering (Enumeration and Fingerprinting)

Passive Recon : PassiveRecon allows Information Security professionals the ability to perform “packetless” discovery of target [...]

SHARETHIS.addEntry({ title: “FireCAT 1.4 Released – Firefox Catalog of Auditing Extensions”, url: “http://www.darknet.org.uk/2008/11/firecat-14-released-firefox-catalog-of-auditing-extensions/” });ShareThis

<!– –>

November 25th, 2008

Browser Rider – Web Browser Exploitation Framework

Browser Rider is a hacking framework to build payloads that exploit the browser. The project aims to provide a powerful, simple and flexible interface to any client side exploit.

Browser Rider is not a new concept. Similar tools such as BeEF or Backframe exploited the same concept. However most of the other existing tools out there [...]

SHARETHIS.addEntry({ title: “Browser Rider – Web Browser Exploitation Framework”, url: “http://www.darknet.org.uk/2008/11/browser-rider-web-browser-exploitation-framework/” });ShareThis

<!– –>

November 20th, 2008

ike-scan – IPsec VPN Scanning, Fingerprinting and Testing Tool

ike-scan is a command-line tool for discovering, fingerprinting and testing IPsec VPN systems. It constructs and sends IKE Phase-1 packets to the specified hosts, and displays any responses that are received.

ike-scan allows you to:

Send IKE packets to any number of destination hosts, using a configurable output bandwidth or packet rate. (This is useful for VPN [...]

SHARETHIS.addEntry({ title: “ike-scan – IPsec VPN Scanning, Fingerprinting and Testing Tool”, url: “http://www.darknet.org.uk/2008/11/ike-scan-ipsec-vpn-scanning-fingerprinting-and-testing-tool/” });ShareThis

<!– –>

November 12th, 2008

Samurai Web Testing Framework – Web Application Security LiveCD

The Samurai Web Testing Framework is a live linux environment that has been pre-configured to function as a web pen-testing environment. The CD contains the best of the open source and free tools that focus on testing and attacking websites. In developing this environment, we have based our tool selection on the tools we use [...]

SHARETHIS.addEntry({ title: “Samurai Web Testing Framework – Web Application Security LiveCD”, url: “http://www.darknet.org.uk/2008/11/samurai-web-testing-framework-web-application-security-livecd/” });ShareThis

<!– –>

November 7th, 2008

SARA – Security Auditor’s Research Assistant – Network Analysis Tool

This tool has been around for a LONG time in some form or another, some of you old-skool guys may remember a package called SATAN, this was the best semi-automatic security analysis tool around back then. From SATAN and it’s development came SARA, which is now in it’s 3rd generation.

Advanced Research’s philosophy relies heavily on [...]

SHARETHIS.addEntry({ title: “SARA – Security Auditor’s Research Assistant – Network Analysis Tool”, url: “http://www.darknet.org.uk/2008/11/sara-security-auditors-research-assistant-network-analysis-tool/” });ShareThis

<!– –>

November 5th, 2008

MultiInjector – Automated Stealth SQL Injection Tool

MultiInjector claims to the first configurable automatic website defacement software, I’m not sure if that’s a good thing – or a bad thing.
But well here it is anyway.

Features

Receives a list of URLs as input
Recognizes the parameterized URLs from the list
Fuzzes all URL parameters to concatenate the desired payload once an injection is successful
Automatic defacement – [...]

SHARETHIS.addEntry({ title: “MultiInjector – Automated Stealth SQL Injection Tool”, url: “http://www.darknet.org.uk/2008/11/multiinjector-automated-stealth-sql-injection-tool/” });ShareThis

<!– –>

November 3rd, 2008

Gooscan – Automated Google Hacking Tool

Whilst reading an article the other day I saw this mentioned and realised I haven’t written about this yet either, although I have written about the similar tool Goolag.
What is Gooscan?
Gooscan is a tool that automates queries against Google search appliances, but with a twist. These particular queries are designed to find potential vulnerabilities on [...]

SHARETHIS.addEntry({ title: “Gooscan – Automated Google Hacking Tool”, url: “http://www.darknet.org.uk/2008/11/gooscan-automated-google-hacking-tool/” });ShareThis

<!– –>

October 28th, 2008

sqlmap 0.6.1 released – Automatic SQL Injection Tool

sqlmap is an automatic SQL injection tool developed in Python. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, [...]

SHARETHIS.addEntry({ title: “sqlmap 0.6.1 released – Automatic SQL Injection Tool”, url: “http://www.darknet.org.uk/2008/10/sqlmap-061-released-automatic-sql-injection-tool/” });ShareThis

<!– –>

October 23rd, 2008

XSS-Proxy – Cross Site Scripting Attack Tool

XSS-Proxy is an advanced Cross-Site-Scripting (XSS) attack tool. The documents, tools and other content on this site assume you have a basic understanding of XSS issues and existing exploitation methods. If you are not famliar with XSS, then I recommend you check out the primer links/docs below to get a better of idea of what [...]

SHARETHIS.addEntry({ title: “XSS-Proxy – Cross Site Scripting Attack Tool”, url: “http://www.darknet.org.uk/2008/10/xss-proxy-cross-site-scripting-attack-tool/” });ShareThis

<!– –>

October 21st, 2008

lm2ntcrack – Microsoft Windows NT Hash Cracker (MD4 -LM)

We have covered quite a lot of Password Cracking tools and it’s not often a new one comes out, this one is for quite a specialised purpose (not a general all-purpose password cracker like John the Ripper or Cain & Abel), although you do need to use it alongside JTR.
This tool is for instantly cracking [...]

SHARETHIS.addEntry({ title: “lm2ntcrack – Microsoft Windows NT Hash Cracker (MD4 -LM)”, url: “http://www.darknet.org.uk/2008/10/lm2ntcrack-microsoft-windows-nt-hash-cracker-md4-lm/” });ShareThis

<!– –>

October 17th, 2008

Web-Harvest – Web Data Extraction Tool

Web-Harvest is Open Source Web Data Extraction tool written in Java. It offers a way to collect desired Web pages and extract useful data from them. In order to do that, it leverages well established techniques and technologies for text/xml manipulation such as XSLT, XQuery and Regular Expressions. Web-Harvest mainly focuses on HTML/XML based [...]

SHARETHIS.addEntry({ title: “Web-Harvest – Web Data Extraction Tool”, url: “http://www.darknet.org.uk/2008/10/web-harvest-web-data-extraction-tool/” });ShareThis

<!– –>

October 13th, 2008

p0f – Advanced Passive OS Fingerprinting Tool

Ah can’t believe I haven’t posted about this one before, one of my favourite tools! It was a big breakthrough to have a passive OS-fingerprinting tool after relying on Nmap and Xprobe2 for the longest time.
OS fingerprinting is a very important part of a pen-test during the information gathering stage.
P0f v2 is a versatile passive [...]

SHARETHIS.addEntry({ title: “p0f – Advanced Passive OS Fingerprinting Tool”, url: “http://www.darknet.org.uk/2008/10/p0f-advanced-passive-os-fingerprinting-tool/” });ShareThis

<!– –>

October 9th, 2008

NetStumbler – Windows Freeware to Detects Insecure Wireless Networks

Another one from the old school, this tool has been around forever since way before wardriving was fashionable and when people still used pringles cans for antenna boosting.
It’s a favourite amongst Windows users, although it can’t do any real hacking (like breaking a WEP key) – it’s extremely fast and effecient in the detection of [...]

SHARETHIS.addEntry({ title: “NetStumbler – Windows Freeware to Detects Insecure Wireless Networks”, url: “http://www.darknet.org.uk/2008/10/netstumbler-windows-freeware-to-detects-insecure-wireless-networks/” });ShareThis

<!– –>

October 1st, 2008

Superscan v4.0 – Fast TCP & UDP Port Scanner for Windows

This is another tool that has been around for a long time and I’ve been using it for years since it’s earliest versions, oddly however I’ve never posted about it.
So here it for the few of you that haven’t heard of it, probably the best port scanner on the Windows platform, very fast and compact [...]

SHARETHIS.addEntry({ title: “Superscan v4.0 – Fast TCP & UDP Port Scanner for Windows”, url: “http://www.darknet.org.uk/2008/10/superscan-v40-fast-tcp-udp-port-scanner-for-windows/” });ShareThis

<!– –>

September 29th, 2008

dnsscan – DNS Open Recursive Resolver Scanner/Scanning Tool

Dnsscan is a tool for finger printing open recursive resolvers. It runs in conjuction with a small server that knows how to reply to queries forwarded from probed resolvers. For example, assume that you have delegated osd.example.org:
osd.example.org. 900 IN [...]

SHARETHIS.addEntry({ title: “dnsscan – DNS Open Recursive Resolver Scanner/Scanning Tool”, url: “http://www.darknet.org.uk/2008/09/dnsscan-dns-open-recursive-resolver-scannerscanning-tool/” });ShareThis

<!– –>

September 25th, 2008

BSQL Hacker – Automated SQL Injection Framework

BSQL Hacker is an automated SQL Injection Framework / Tool designed to exploit SQL injection vulnerabilities in virtually any database.
It ships with Automated Attack modules which allows the dumping of whole databases for the following DBMS:

MS-SQL Server

ORACLE
MySQL (experimental)

Attack Templates for:

MS Access
MySQL

ORACLE
PostgreSQL

MS-SQL Server

Also you can write your own attack template for any other database as well [...]

SHARETHIS.addEntry({ title: “BSQL Hacker – Automated SQL Injection Framework”, url: “http://www.darknet.org.uk/2008/09/bsql-hacker-automated-sql-injection-framework/” });ShareThis

<!– –>

September 23rd, 2008

ohrwurm – RTP Fuzzing Tool (SIP Phones)

ohrwurm is a small and simple RTP fuzzer, it has been tested it on a small number of SIP phones, none of them withstood the fuzzing.

Features:

reads SIP messages to get information of the RTP port numbers
reading SIP can be omitted by providing the RTP port numbers, so that any RTP traffic can be fuzzed
RTCP traffic [...]

SHARETHIS.addEntry({ title: “ohrwurm – RTP Fuzzing Tool (SIP Phones)”, url: “http://www.darknet.org.uk/2008/09/ohrwurm-rtp-fuzzing-tool-sip-phones/” });ShareThis

<!– –>

September 19th, 2008

Surf Jack – Cookie Session Stealing Tool

A tool which allows one to hijack HTTP connections to steal cookies – even ones on HTTPS sites! Works on both Wifi (monitor mode) and Ethernet.
Features:

Does Wireless injection when the NIC is in monitor mode

Supports Ethernet

Support for WEP (when the NIC is in monitor mode)

Known issues:

Sometimes the victim is not redirected correctly (particularly seen when [...]

SHARETHIS.addEntry({ title: “Surf Jack – Cookie Session Stealing Tool”, url: “http://www.darknet.org.uk/2008/09/surf-jack-cookie-session-stealing-tool/” });ShareThis

<!– –>

September 15th, 2008

PorkBind v1.3 – Nameserver (DNS) Security Scanner

This program retrieves version information for the nameservers of a domain and produces a report that describes possible vulnerabilities of each.
Vulnerability information is configurable through a configuration file; the default is porkbind.conf. Each nameserver is tested for recursive queries and zone transfers. The code is parallelized with libpthread.

Changes for v1.3

Wrote in-a-bind shell script that [...]

SHARETHIS.addEntry({ title: “PorkBind v1.3 – Nameserver (DNS) Security Scanner”, url: “http://www.darknet.org.uk/2008/09/porkbind-v13-nameserver-dns-security-scanner/” });ShareThis

<!– –>

September 10th, 2008

reDuh – TCP Redirection over HTTP

What Does reDuh Do?
reDuh is actually a tool that can be used to create a TCP circuit through validly formed HTTP requests.
Essentially this means that if we can upload a JSP/PHP/ASP page on a server, we can connect to hosts behind that server trivially

What is it for?
a) Bob.Hacker has the ability to upload / create [...]

SHARETHIS.addEntry({ title: “reDuh – TCP Redirection over HTTP”, url: “http://www.darknet.org.uk/2008/09/reduh-tcp-redirection-over-http/” });ShareThis

<!– –>

September 8th, 2008

onesixtyone 0.3.2 – An Efficient SNMP Scanner

The SNMP protocol is a stateless, datagram oriented protocol. An SNMP scanner is a program that sends SNMP requests to multiple IP addresses, trying different community strings and waiting for a reply. Unfortunately SNMP servers don’t respond to requests with invalid community strings and the underlying UDP protocol does not reliably report closed UDP ports. [...]

SHARETHIS.addEntry({ title: “onesixtyone 0.3.2 – An Efficient SNMP Scanner”, url: “http://www.darknet.org.uk/2008/09/onesixtyone-032-an-efficient-snmp-scanner/” });ShareThis

<!– –>

September 4th, 2008

XTest – VoIP Infrastructure Security Testing Tool

What is XTest?
XTest is a simple, practical, and free, wired 802.1x supplicant security tool implementing the RFC 3847 EAP-MD5 Authentication method. It can be used to assess the password strength within wired ethernet environments that rely on 802.1x to protect IP Phones and the VoIP Infrastructure against rogue PC access. XTest is developed in C [...]

SHARETHIS.addEntry({ title: “XTest – VoIP Infrastructure Security Testing Tool”, url: “http://www.darknet.org.uk/2008/09/xtest-voip-infrastructure-security-testing-tool/” });ShareThis

<!– –>

August 29th, 2008

ISR-evilgrade – Inject Updates to Exploit Software

ISR-evilgrade is a modular framework that allow us to take advantage of poor upgrade implementations by injecting fake updates and exploiting the system or software.
How does it work?
It works with modules, each module implements the structure needed to emulate a false update of specific applications/systems. Evilgrade needs the manipulation of the victims [...]

SHARETHIS.addEntry({ title: “ISR-evilgrade – Inject Updates to Exploit Software”, url: “http://www.darknet.org.uk/2008/08/isr-evilgrade-inject-updates-to-exploit-software/” });ShareThis

<!– –>

August 18th, 2008

OpenVAS – Open Vulnerability Assessment System (Nessus is Back!)

As you all probably known since version 3 Nessus turned to a proprietary model and started charging for the latest plugins locking most of us out. Now we finally have a new, properly organised forked development with the name of OpenVAS – at last a decent and free Vulnerability Scanner!
OpenVAS stands for Open Vulnerability Assessment [...]

SHARETHIS.addEntry({ title: “OpenVAS – Open Vulnerability Assessment System (Nessus is Back!)”, url: “http://www.darknet.org.uk/2008/08/openvas-open-vulnerability-assessment-system-nessus-is-back/” });ShareThis

<!– –>

August 13th, 2008

raWPacket HeX – Network Security Monitoring & Analysis LiveCD

HeX is a project aimed at the NSM (Network Security Monitoring) community for use by network security analysts. The developers believe that simplicity and analysis work flow logic must be enhanced and emphasized through-out the process of designing this liveCD. Not only have they carefully chosen all the necessary applications and tools to be included [...]

SHARETHIS.addEntry({ title: “raWPacket HeX – Network Security Monitoring & Analysis LiveCD”, url: “http://www.darknet.org.uk/2008/08/rawpacket-hex-network-security-monitoring-analysis-livecd/” });ShareThis

<!– –>

August 11th, 2008

PuttyHijack V1.0 – Hijack SSH/PuTTY Connections on Windows

PuttyHijack is a POC tool that injects a dll into the PuTTY process to hijack an existing, or soon to be created, connection.

This can be useful during penetration tests when a windows box that has been compromised is used to SSH/Telnet into other servers. The injected DLL installs some hooks and creates a socket for [...]

SHARETHIS.addEntry({ title: “PuttyHijack V1.0 – Hijack SSH/PuTTY Connections on Windows”, url: “http://www.darknet.org.uk/2008/08/puttyhijack-v10-hijack-sshputty-connections-on-windows/” });ShareThis

<!– –>

August 1st, 2008

SIPcrack – SIP Login Dumper & Hash/Password Cracker

SIPcrack is a suite for sniffing and cracking the digest authentication used in the SIP protocol.
The tools offer support for pcap files, wordlists and many more to extract all needed information and bruteforce the passwords for the sniffed accounts.

If you don’t have OpenSSL installed or encounter any building problems try ‘make no-openssl’ to build with [...]

SHARETHIS.addEntry({ title: “SIPcrack – SIP Login Dumper & Hash/Password Cracker”, url: “http://www.darknet.org.uk/2008/08/sipcrack-sip-login-dumper-hashpassword-cracker/” });ShareThis

<!– –>

July 28th, 2008

nUbuntu Development Kicking Off Again – Security LiveCD

We did mention nUbuntu long ago in our famous 10 Best Security Live CD Distros (Pen-Test, Forensics & Recovery) article.
After that it stopped development for quite some time, thankfully some new blood has picked it up and development has started again!

With over a year of inactivity, the latest alpha of nUbuntu 8.04 has finally surfaced.
With [...]

SHARETHIS.addEntry({ title: “nUbuntu Development Kicking Off Again – Security LiveCD”, url: “http://www.darknet.org.uk/2008/07/nubuntu-development-kicking-off-again-security-livecd/” });ShareThis

<!– –>

July 22nd, 2008

TSGrinder – Brute Force Terminal Services Server

This is a tool that has been around quite some time too, it’s still very useful though and it’s a very niche tool specifically for brute forcing Windows Terminal Server.

TSGrinder is the first production Terminal Server brute force tool, and is now in release 2. The main idea here is that the Administrator account, since [...]

SHARETHIS.addEntry({ title: “TSGrinder – Brute Force Terminal Services Server”, url: “http://www.darknet.org.uk/2008/07/tsgrinder-brute-force-terminal-services-server/” });ShareThis

<!– –>

July 18th, 2008

Zodiac – DNS Protocol Monitoring and Spoofing Tool

Zodiac is a DNS protocol analyzation and exploitation program. It is a robust tool to explore the DNS protocol. Internally it contains advanced DNS routines for DNS packet construction and disassembling and is the optimal tool if you just want to try something out without undergoing the hassle to rewrite DNS packet routines or packet [...]

SHARETHIS.addEntry({ title: “Zodiac – DNS Protocol Monitoring and Spoofing Tool”, url: “http://www.darknet.org.uk/2008/07/zodiac-dns-protocol-monitoring-and-spoofing-tool/” });ShareThis

<!– –>

July 10th, 2008

DNSenum – Domain Information Gathering Tool

The first stage of penetration testing is usually passive information gathering and enumeration (active information gathering). This is where tools like dnsenum come in, the purpose of DNSenum is to gather as much information as possible about a domain.

The program currently performs the following operations:

Get the host’s addresse (A record).
Get the namservers (threaded).

Get the MX [...]

SHARETHIS.addEntry({ title: “DNSenum – Domain Information Gathering Tool”, url: “http://www.darknet.org.uk/2008/07/dnsenum-domain-information-gathering-tool/” });ShareThis

<!– –>

July 3rd, 2008

ratproxy – Passive Web Application Security Audit Tool

Ratproxy is a semi-automated, largely passive web application security audit tool. It is meant to complement active crawlers and manual proxies more commonly used for this task, and is optimized specifically for an accurate and sensitive detection, and automatic annotation, of potential problems and security-relevant design patterns based on the observation of existing, user-initiated traffic [...]

SHARETHIS.addEntry({ title: “ratproxy – Passive Web Application Security Audit Tool”, url: “http://www.darknet.org.uk/2008/07/ratproxy-passive-web-application-security-audit-tool/” });ShareThis

<!– –>

July 1st, 2008

PAW/PAWS – Python Advanced Wardialing System

Now this is an oldskool topic, wardialling! Some people still ask me about wardialling tools though, so here’s one I found recently written in Python.
PAW / PAWS is a wardialing software in python. It is designed to scan for ISDN (PAWS only) and “modern” analog modems (running at 9.6kbit/s or higher). Wardialing tools are – [...]

SHARETHIS.addEntry({ title: “PAW/PAWS – Python Advanced Wardialing System”, url: “http://www.darknet.org.uk/2008/07/pawpaws-python-advanced-wardialing-system/” });ShareThis

<!– –>

June 27th, 2008

Bsqlbf V2 – Blind SQL Injection Brute Forcer Tool

There are quite a lot of SQL Injection Tools available and now there is one more to add to the stable for testing – Bsqlbf V2, which is a Blind SQL Injection Brute Forcer.

The original tool (bsqlbfv1.2-th.pl) was intended to exploit blind sql injection against a mysql backend database, this new version supports blind sql [...]

SHARETHIS.addEntry({ title: “Bsqlbf V2 – Blind SQL Injection Brute Forcer Tool”, url: “http://www.darknet.org.uk/2008/06/bsqlbf-v2-blind-sql-injection-brute-forcer-tool/” });ShareThis

<!– –>

June 11th, 2008

SIPVicious v0.2.3 – VoIP/SIP Auditing Toolkit

SIPVicious suite is a set of tools that can be used to audit SIP based VoIP systems. It currently consists of four tools:

svmap – this is a sip scanner. Lists SIP devices found on an IP range
svwar – identifies active extensions on a PBX
svcrack – an online password cracker for SIP PBX
svreport – manages sessions [...]

SHARETHIS.addEntry({ title: “SIPVicious v0.2.3 – VoIP/SIP Auditing Toolkit”, url: “http://www.darknet.org.uk/2008/06/sipvicious-v023-voipsip-auditing-toolkit/” });ShareThis

<!– –>

June 9th, 2008

OSWA Assistant – Wireless Hacking & Auditing LiveCD Toolkit

The OSWA-Assistant is a no-Operating-System-required standalone toolkit which is solely focused on wireless auditing. As a result, in addition to the usual WiFi (802.11) auditing tools, it also covers Bluetooth and RFID auditing. Using the toolkit is as easy as popping it into your computer’s CDROM and making your computer boot from it!

This toolkit is [...]

SHARETHIS.addEntry({ title: “OSWA Assistant – Wireless Hacking & Auditing LiveCD Toolkit”, url: “http://www.darknet.org.uk/2008/06/oswa-assistant-wireless-hacking-auditing-livecd-toolkit/” });ShareThis

<!– –>

June 5th, 2008

Angry IP Scanner – Cross Platform Port Scanner

Angry IP scanner is a very fast IP address and port scanner.
It can scan IP addresses in any range as well as any their ports. It is cross-platform and lightweight. Not requiring any installations, it can be freely copied and used anywhere.

Angry IP scanner simply pings each IP address to check if it’s alive, then [...]

SHARETHIS.addEntry({ title: “Angry IP Scanner – Cross Platform Port Scanner”, url: “http://www.darknet.org.uk/2008/06/angry-ip-scanner-cross-platform-port-scanner/” });ShareThis

<!– –>

June 3rd, 2008

Sipflanker – Locate SIP (VoIP) Device Web Interfaces

SIP devices are getting to be very common now, especially with open source bundled OS offerings like Trixbox making it easy to setup your own digital or IP-PBX.

Along with the frequent installations, many (if not most) VoIP devices have available a Web GUI for their configuration, management, and report generation. These Web GUIs are often [...]

SHARETHIS.addEntry({ title: “Sipflanker – Locate SIP (VoIP) Device Web Interfaces”, url: “http://www.darknet.org.uk/2008/06/sipflanker-locate-sip-voip-device-web-interfaces/” });ShareThis

<!– –>

May 30th, 2008

sqlninja 0.2.3 released – Advanced Automated SQL Injection Tool for MS-SQL

We’ve been folowing the development of sqlninja since the early days, it’s growing into a well matured and more polished tool with advanced features.
Sqlninja is a tool written in PERL to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote [...]

SHARETHIS.addEntry({ title: “sqlninja 0.2.3 released – Advanced Automated SQL Injection Tool for MS-SQL”, url: “http://www.darknet.org.uk/2008/05/sqlninja-023-released-advanced-automated-sql-injection-tool-for-ms-sql/” });ShareThis

<!– –>

May 28th, 2008

fgdump 2.1.0 and pwdump 1.7.1 Released – Dump LanMan & NTLM Hashes

The major change is both tools now support 64-bit targets! Good news for us.
pwdump6 is a password hash dumper for Windows 2000 and later systems. It is capable of dumping LanMan and NTLM hashes as well as password hash histories. It is based on pwdump3e, and should be stable on XP SP2 and 2K3. If [...]

SHARETHIS.addEntry({ title: “fgdump 2.1.0 and pwdump 1.7.1 Released – Dump LanMan & NTLM Hashes”, url: “http://www.darknet.org.uk/2008/05/fgdump-210-and-pwdump-171-released-dump-lanman-ntlm-hashes/” });ShareThis

<!– –>

May 23rd, 2008

thc-Amap – Application Protocol Detection & Fingerprinting

thc-Amap (Application MAPper) is another excellent tool more towards banner grabbing and protocol detection than OS-fingerprinting. But from the services running on a machine you can get a good idea of the OS and the purpose of the server.
Amap is a next-generation scanning tool for pentesters. It attempts to identify applications even if they are [...]

SHARETHIS.addEntry({ title: “thc-Amap – Application Protocol Detection & Fingerprinting”, url: “http://www.darknet.org.uk/2008/05/thc-amap-application-protocol-detection-fingerprinting/” });ShareThis

<!– –>

May 21st, 2008

Tmin – Test Case Optimizer for Automated Security Testing

Tmin is a simple utility meant to make it easy to narrow down complex test cases produced through fuzzing. It is closely related to another tool of this type, delta, but meant specifically for unknown, underspecified, or hard to parse data formats (without the need to tokenize and re-serialize data), and for easy integration with [...]

SHARETHIS.addEntry({ title: “Tmin – Test Case Optimizer for Automated Security Testing”, url: “http://www.darknet.org.uk/2008/05/tmin-test-case-optimizer-for-automated-security-testing/” });ShareThis

<!– –>

May 16th, 2008

Xprobe2 – Active OS Fingerprinting Tool

Sometimes I wonder to myself have I mentioned a certain tool on the site, usually one of my favourites…often I search the site to find I have never posted about it.
It just goes to show how we often overlook some of the more ‘obvious’ choices, and to many people they may not be that obvious. [...]

SHARETHIS.addEntry({ title: “Xprobe2 – Active OS Fingerprinting Tool”, url: “http://www.darknet.org.uk/2008/05/xprobe2-active-os-fingerprinting-tool/” });ShareThis

<!– –>

May 12th, 2008

Metagoofil v1.4 Released – Metadata and Information Gathering Tool

Metagoofil is an information gathering tool designed for extracting metadata of public documents (pdf,doc,xls,ppt,odp,ods) available on the target/victim website.
It will generate a html page with the results of the metadata extracted, plus a list of potential usernames very useful for preparing a bruteforce attack on open services like ftp, pop3,web applications, vpn and so on. [...]

SHARETHIS.addEntry({ title: “Metagoofil v1.4 Released – Metadata and Information Gathering Tool”, url: “http://www.darknet.org.uk/2008/05/metagoofil-v14-released-metadata-and-information-gathering-tool/” });ShareThis

<!– –>

May 7th, 2008

rtpbreak 1.3a Released – RTP Analysis and Hacking

rtpbreak 1.3a has been released, we initially brought you news of this tool back in August 2007 with the first announcement of rtpbreak.

With rtpbreak you can detect, reconstruct and analyze any RTP session. It doesn’t require the presence of RTCP packets and works independently form the used signaling protocol (SIP, H.323, SCCP etc). The input [...]

SHARETHIS.addEntry({ title: “rtpbreak 1.3a Released – RTP Analysis and Hacking”, url: “http://www.darknet.org.uk/2008/05/rtpbreak-13a-released-rtp-analysis-and-hacking/” });ShareThis

<!– –>

May 5th, 2008

Sandman – Read the Windows Hibernation File

This is a pretty new tool and a very cool one, Hibernation is a fairly new feature for Windows so it’s good to see a new tool targeting that.
Microsoft provides a feature called Hibernation also know as suspend to disk that aims to save the system state into an undocumented file called hiberfil.sys. This file [...]

SHARETHIS.addEntry({ title: “Sandman – Read the Windows Hibernation File”, url: “http://www.darknet.org.uk/2008/05/sandman-read-the-windows-hibernation-file/” });ShareThis

<!– –>

April 30th, 2008

CDPSnarf – CDP Packet Sniffer

CDPSnarf if a network sniffer exclusively written to extract information from CDP packets. It provides all the information a “show cdp neighbors detail” command would return on a Cisco router and even more.
The application is written in C using the popular PCAP library.

Sample Output
Cisco AIR-AP1231G-E-K9 Access Point:

$ sudo ./cdpsnarf eth2
Waiting for a CDP packet…

[#0] Sniffed [...]

SHARETHIS.addEntry({ title: “CDPSnarf – CDP Packet Sniffer”, url: “http://www.darknet.org.uk/2008/04/cdpsnarf-cdp-packet-sniffer/” });ShareThis

<!– –>

April 24th, 2008

Pass-The-Hash Toolkit v1.3 is Available for Download

The Pass-The-Hash Toolkit contains utilities to manipulate the Windows Logon Sessions maintained by the LSA (Local Security Authority) component. These tools allow you to list the current logon sessions with its corresponding NTLM credentials (e.g.: users remotely logged in thru Remote Desktop/Terminal Services), and also change in runtime the current username, domain name, and NTLM [...]

SHARETHIS.addEntry({ title: “Pass-The-Hash Toolkit v1.3 is Available for Download”, url: “http://www.darknet.org.uk/2008/04/pass-the-hash-toolkit-v13-is-available-for-download/” });ShareThis

<!– –>

April 22nd, 2008

WifiZoo v1.3 Released – Passive Info Gathering for Wifi

WifiZoo is a tool to gather wifi information passively. It is created to be helpful in wifi pentesting and was inspired by ‘Ferret‘ from Errata Security.

The tool is intended to get all possible info from open wifi networks (and possibly encrypted also in the future, at least with WEP) without joining any network, and covering [...]

SHARETHIS.addEntry({ title: “WifiZoo v1.3 Released – Passive Info Gathering for Wifi”, url: “http://www.darknet.org.uk/2008/04/wifizoo-v13-released-passive-info-gathering-for-wifi/” });ShareThis

<!– –>

April 15th, 2008

sqlninja 0.2.2 Released for Download – SQL Injection Tool

Sqlninja is a tool to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of [...]

SHARETHIS.addEntry({ title: “sqlninja 0.2.2 Released for Download – SQL Injection Tool”, url: “http://www.darknet.org.uk/2008/04/sqlninja-022-released-for-download-sql-injection-tool/” });ShareThis

<!– –>

April 9th, 2008

Wfuzz v1.4 Released for Download – Bruteforcing & Fuzzing Web Applications

A new version of Wfuzz is available, many improvements and fixes since first release which was in the middle of 2007. Fuzzing is definitely in, an article was posted recently about how everyone should keep on fuzzing! Will post it up soon.
Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for [...]

SHARETHIS.addEntry({ title: “Wfuzz v1.4 Released for Download – Bruteforcing & Fuzzing Web Applications”, url: “http://www.darknet.org.uk/2008/04/wfuzz-v14-released-for-download-bruteforcing-fuzzing-web-applications/” });ShareThis

<!– –>

April 4th, 2008

ProxyStrike – Active Web Application Proxy

ProxyStrike is an active Web Application Proxy, is a tool designed to find vulnerabilities while browsing an application. It was created because the problems faced in the pentests of web applications that depends heavily on Javascript, not many web scanners did it good in this stage, so ProxyStrike was born.
Right now it has available SQL [...]

SHARETHIS.addEntry({ title: “ProxyStrike – Active Web Application Proxy”, url: “http://www.darknet.org.uk/2008/04/proxystrike-active-web-application-proxy/” });ShareThis

<!– –>

April 2nd, 2008

Wireshark v1.0.0 Released – Cross Platform Graphical Packet Sniffer

After nearly 10 years of developement Wireshark (formely known as Ethereal) has finally reached version 1!
For those that don’t know, Wireshark is the world’s foremost network protocol analyzer, and is the de facto (and often de jure) standard across many industries and educational institutions.
Wireshark development thrives thanks to the contributions of networking experts across the [...]

SHARETHIS.addEntry({ title: “Wireshark v1.0.0 Released – Cross Platform Graphical Packet Sniffer”, url: “http://www.darknet.org.uk/2008/04/wireshark-v100-released-cross-platform-graphical-packet-sniffer/” });ShareThis

<!– –>

March 31st, 2008

WSFuzzer – Web Services Fuzzing Tool for HTTP and SOAP

WSFuzzer is a fuzzing tool targetting HTTP and SOAP based web services.
The program currently targets Web Services. In the current version HTTP based SOAP services are the only supported targets. This tool was created based on, and to automate, some of the manual SOAP pen testing work we perform. This tool is NOT meant to [...]

SHARETHIS.addEntry({ title: “WSFuzzer – Web Services Fuzzing Tool for HTTP and SOAP”, url: “http://www.darknet.org.uk/2008/03/wsfuzzer-web-services-fuzzing-tool-for-http-and-soap/” });ShareThis

<!– –>

March 27th, 2008

Webshag v1.00 – Web Server Auditing Tool (Scanner and File Fuzzer)

Webshag is a multi-threaded, multi-platform web server audit tool. Written in Python, it gathers commonly useful functionalities for web server auditing like website crawling, URL scanning or file fuzzing.
Webshag can be used to scan a web server in HTTP or HTTPS, through a proxy and using HTTP authentication (Basic and Digest). In addition to that [...]

SHARETHIS.addEntry({ title: “Webshag v1.00 – Web Server Auditing Tool (Scanner and File Fuzzer)”, url: “http://www.darknet.org.uk/2008/03/webshag-v100-web-server-auditing-tool-scanner-and-file-fuzzer/” });ShareThis

<!– –>

March 26th, 2008

httprecon – Advanced Web Server Fingerprinting

httprecon is a tool for advanced web server fingerprinting, similar to httprint that we mentioned previously.
The httprecon project is doing some research in the field of web server fingerprinting, also known as http fingerprinting. The goal is the highly accurate identification of given httpd implementations. This is very important within professional vulnerability analysis.
Besides the discussion [...]

SHARETHIS.addEntry({ title: “httprecon – Advanced Web Server Fingerprinting”, url: “http://www.darknet.org.uk/2008/03/httprecon-advanced-web-server-fingerprinting/” });ShareThis

<!– –>

March 24th, 2008

SecurityCompass Exploit-Me – Firefox Web Application Testing Tools

Exploit-Me is a suite of Firefox web application security testing tools. Exploit-Me tools are designed to be lightweight and easy to use. Instead of using a proxy like many web application testing tools, Exploit-Me integrates directly with Firefox. It currently consists of two tools, one for XSS and one for SQL Injection.
The Exploit-Me series was [...]

SHARETHIS.addEntry({ title: “SecurityCompass Exploit-Me – Firefox Web Application Testing Tools”, url: “http://www.darknet.org.uk/2008/03/securitycompass-exploit-me-firefox-web-application-testing-tools/” });ShareThis

<!– –>

March 17th, 2008

Inguma 0.0.7.2 Released for Download – Penetration Testing Toolkit

For those that don’t know, Inguma is an open source penetration testing and vulnerability research toolkit written completely in Python. The environment is mainly oriented to attack Oracle related systems but, anyway, it can be used against any other kind of systems.
It’s becoming a mature and useful package! I’m glad to see continued developing and [...]

SHARETHIS.addEntry({ title: “Inguma 0.0.7.2 Released for Download – Penetration Testing Toolkit”, url: “http://www.darknet.org.uk/2008/03/inguma-0072-released-for-download-penetration-testing-toolkit/” });ShareThis

<!– –>

March 14th, 2008

Nipper 0.11.5 Released – Network Device Configuration Security Auditing Tool

Nipper performs security audits of network device configuration files. The report produced by Nipper includes; detailed security-related issues with recommendations, a configuration report and various appendices. Nipper has a large number of configuration options which are described on this page.

Nipper currently supports the following device types:

Cisco Switches (IOS)
Cisco Routers (IOS)
Cisco Firewalls [...]

SHARETHIS.addEntry({ title: “Nipper 0.11.5 Released – Network Device Configuration Security Auditing Tool”, url: “http://www.darknet.org.uk/2008/03/nipper-0115-released-network-device-configuration-security-auditing-tool/” });ShareThis

<!– –>

March 13th, 2008

Goolag – GUI Tool for Google Hacking

cDc (Cult of the Dead Cow) recently released a GUI driven tool for Google Hacking called Goolag.
Google Dorks have been around for several years and have been researched most assiduously by Johnny I Hack Stuff.

If one searches the Web, one will find multiple collections of dorks, and also some applications – standalone and Web-based – [...]

SHARETHIS.addEntry({ title: “Goolag – GUI Tool for Google Hacking”, url: “http://www.darknet.org.uk/2008/03/goolag-gui-tool-for-google-hacking/” });ShareThis

<!– –>

March 11th, 2008

Fusil Fuzzer 0.7 – Fuzzing Functions in Python

Fusil is a fuzzing framework written in Python and distributed under GNU GPLv2 license. Fusil allows you to easily write “Fuzzing Projects” from a set of functions such as:

Create a process
Compile a C program
Watch a process
Watch syslog and so on

Fusil uses small “agents” which exchange messages to launch actions. e.g. MangleFile injects errors into [...]

SHARETHIS.addEntry({ title: “Fusil Fuzzer 0.7 – Fuzzing Functions in Python”, url: “http://www.darknet.org.uk/2008/03/fusil-fuzzer-07-fuzzing-functions-in-python/” });ShareThis

<!– –>

March 7th, 2008

Ferret Version 1.1 – Data Seepage Detection Tool

Ferret works on the concept of “data seepage”: bits of benign data that people willingly broadcast to the world (as opposed to “leakage”, which is data people want to hide from the world).

Examples of data seepage are what happens when you power-on your computer. It will broadcast to the world the list of WiFi access-points [...]

SHARETHIS.addEntry({ title: “Ferret Version 1.1 – Data Seepage Detection Tool”, url: “http://www.darknet.org.uk/2008/03/ferret-version-11-data-seepage-detection-tool/” });ShareThis

<!– –>

March 4th, 2008

Burp Suite v1.1 Available for Download

One of our favourite all time tools for attacking web applications has been updated! Burp Suite has now reached version 1.1! This is a major release – not a minor upgrade.
Burp Suite is an integrated platform for attacking web applications. It contains all of the Burp tools with numerous interfaces between them designed to facilitate [...]

SHARETHIS.addEntry({ title: “Burp Suite v1.1 Available for Download”, url: “http://www.darknet.org.uk/2008/03/burp-suite-v11-available-for-download/” });ShareThis

<!– –>

February 25th, 2008

Nessconnect 1.0.1 Released – GUI, CLI & API Client for Nessus

Nessconnect is an open-source software package that can connect to a Nessus or Nessus compatible server and provides an advanced graphical user interface. It also provides a command line interface, and an application programming interface in Java. Users can create custom scan profiles, generate extensive reports, and perform differential scans and analysis. Nessconnect was previously [...]

SHARETHIS.addEntry({ title: “Nessconnect 1.0.1 Released – GUI, CLI & API Client for Nessus”, url: “http://www.darknet.org.uk/2008/02/nessconnect-101-released-gui-cli-api-client-for-nessus/” });ShareThis

<!– –>

February 19th, 2008

Russix – LiveCD Linux Distro for Wireless Penetration Testing & WEP Cracking

It looks like it might be time to update our very well received list of the 10 Best Security Live CD Distros (Pen-Test, Forensics & Recovery) since we have Russix now and Backtrack new version is on the way out.
Russix is a Slax based Wireless Live Linux. It has been designed to be light (circa [...]

SHARETHIS.addEntry({ title: “Russix – LiveCD Linux Distro for Wireless Penetration Testing & WEP Cracking”, url: “http://www.darknet.org.uk/2008/02/russix-livecd-linux-distro-for-wireless-penetration-testing-wep-cracking/” });ShareThis

<!– –>

February 14th, 2008

Password Cracking Wordlists and Tools for Brute Forcing

I quite often get people asking me where to get Wordlists, after all brute forcing and password cracking often relies on the quality of your word list.
Do note there are also various tools to generate wordlists for brute forcing based on information gathered such as documents and web pages (such as Wyd – password profiling [...]

SHARETHIS.addEntry({ title: “Password Cracking Wordlists and Tools for Brute Forcing”, url: “http://www.darknet.org.uk/2008/02/password-cracking-wordlists-and-tools-for-brute-forcing/” });ShareThis

<!– –>

February 6th, 2008

Kismet – Wireless Network Hacking, Sniffing & Monitoring

For some reason I’ve never posted about Kismet, and I don’t like to assume everyone knows everything. So for those who may not have heard of it, here’s Kismet.
Kismet is one of foundation tools Wireless Hacking, it’s very mature and does what it’s supposed to do.
Kismet is an 802.11 layer2 wireless network detector, sniffer, and [...]

SHARETHIS.addEntry({ title: “Kismet – Wireless Network Hacking, Sniffing & Monitoring”, url: “http://www.darknet.org.uk/2008/02/kismet-wireless-network-hacking-sniffing-monitoring/” });ShareThis

<!– –>

February 4th, 2008

FireCAT 1.3 Released – Firefox Catalog of Auditing Extensions

FireCAT is a Firefox Framework Map collection of the most useful security oriented extensions. Version 1.3 was pending the ExploitMe tools availability to the public.
Changes for version 1.3
Category Information Gathering (Googling and Spidering)

GSI Google Site indexer (GSI Creates Site Maps based on Google queries. Useful for both Penetration Testing and Search Engine Optimization. GSI sends [...]

SHARETHIS.addEntry({ title: “FireCAT 1.3 Released – Firefox Catalog of Auditing Extensions”, url: “http://www.darknet.org.uk/2008/02/firecat-13-released-firefox-catalog-of-auditing-extensions/” });ShareThis

<!– –>

January 31st, 2008

Bruter 1.0 Released – Parallel Windows Password Brute Forcing Tool

Bruter 1.0 BETA 1 has been released. Bruter is a parallel login brute-forcer. This tool is intended to demonstrate the importance of choosing strong passwords. The goal of Bruter is to support a variety of services that allow remote authentication.
Bruter is a tool for the Win32 platform only.

PROTOCOL SUPPORT
It currently supports the following services:

FTP
HTTP (Basic)
HTTP [...]

SHARETHIS.addEntry({ title: “Bruter 1.0 Released – Parallel Windows Password Brute Forcing Tool”, url: “http://www.darknet.org.uk/2008/01/bruter-10-released-parallel-windows-password-brute-forcing-tool/” });ShareThis

<!– –>

January 29th, 2008

Metasploit Framework v3.1 Released for Download

Ah Metasploit development cycle seems to be picking up, I guess with greater community support the bugs get ironed out and the new features introduced faster.
Good to see an update so soon after Metasploit Framework v3.0 was released.
I keep closely up to date with Metasploit as it’s pretty much the best free tool out there [...]

SHARETHIS.addEntry({ title: “Metasploit Framework v3.1 Released for Download”, url: “http://www.darknet.org.uk/2008/01/metasploit-framework-v31-released-for-download/” });ShareThis

<!– –>

January 22nd, 2008

BackTrack Live Hacking CD BETA 3 Released

The guys at BackTrack e-mailed me to let me know their Version 3 BETA has been released recently, and perhaps our readers would like to know about it.
For those that don’t know BackTrack evolved from the merging of two wide spread security related distributions – Whax and Auditor Security Collection. By joining forces and replacing [...]

SHARETHIS.addEntry({ title: “BackTrack Live Hacking CD BETA 3 Released”, url: “http://www.darknet.org.uk/2008/01/backtrack-live-hacking-cd-beta-3-released/” });ShareThis

<!– –>

January 18th, 2008

sqlmap 0.5 – Automated SQL Injection Tool

sqlmap is an automatic SQL injection tool entirely developed in Python. It is capable to perform an extensive database management system back-end fingerprint, retrieve remote DBMS databases, usernames, tables, columns, enumerate entire DBMS, read system files and much more taking advantage of web application programming security flaws that lead to SQL injection vulnerabilities.

Features

Full support for [...]

SHARETHIS.addEntry({ title: “sqlmap 0.5 – Automated SQL Injection Tool”, url: “http://www.darknet.org.uk/2008/01/sqlmap-05-automated-sql-injection-tool/” });ShareThis

<!– –>

January 16th, 2008

w3af Fifth BETA for Download – Automated Web Auditing and Exploitation Framework

As you all seem to pretty interested in Inguma, there’s something else similar called w3af – the fifth BETA was released a while back and the team are now working on the sixth.
w3af is a Web application attack and Audit Framework. The project goal is to create a framework to find and exploit web application [...]

SHARETHIS.addEntry({ title: “w3af Fifth BETA for Download – Automated Web Auditing and Exploitation Framework”, url: “http://www.darknet.org.uk/2008/01/w3af-fifth-beta-for-download-automated-web-auditing-and-exploitation-framework/” });ShareThis

<!– –>

January 14th, 2008

VoIP Hopper – VLAN Hopping Tool

VoIP Hopper is a GPLv3 licensed security tool, written in C, that rapidly runs a VLAN Hop into the Voice VLAN on specific Ethernet switches. VoIP Hopper does this by mimicking the behavior of an IP Phone, in both Cisco and Avaya IP Phone environments.
In Cisco IP Phone networks, it first dissects either [...]

SHARETHIS.addEntry({ title: “VoIP Hopper – VLAN Hopping Tool”, url: “http://www.darknet.org.uk/2008/01/voip-hopper-vlan-hopping-tool/” });ShareThis

<!– –>

January 10th, 2008

Unicornscan v0.4.7 Released for Download – Fast Port Scanner

Unicornscan has always been a favourite of mine, especially for UDP scanning and scanning large networks (and getting it done fast).
Unicornscan is a new information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. [...]

SHARETHIS.addEntry({ title: “Unicornscan v0.4.7 Released for Download – Fast Port Scanner”, url: “http://www.darknet.org.uk/2008/01/unicornscan-v047-released-for-download-fast-port-scanner/” });ShareThis

<!– –>

January 8th, 2008

The Revisionist – Metadata Retrieval Tool

The Revisionist is a tool for extracting and indexing hidden metadata (such as deleted or modified text) from large collections of MS Word files. It can operate whole Web sites or SMB or NFS directories. It is handy for pen-testing, or it can be used just to spot embarrassing secrets.
It’s useful in that it can [...]

SHARETHIS.addEntry({ title: “The Revisionist – Metadata Retrieval Tool”, url: “http://www.darknet.org.uk/2008/01/the-revisionist-metadata-retrieval-tool/” });ShareThis

<!– –>

December 31st, 2007

wsScanner – Web Services Footprinting, Discovery, Enumeration, Scanning and Fuzzing tool

wsScanner is a toolkit for Web Services scanning and vulnerability detection.
This tool has the following functions:
Discovery tool
By leveraging search engine this tool helps in discovering Web Services running on any particular domain or with certain name pattern.

Vulnerability detection
It is possible to enumerate and profile Web Services using this tool and one can follow it [...]

SHARETHIS.addEntry({ title: “wsScanner – Web Services Footprinting, Discovery, Enumeration, Scanning and Fuzzing tool”, url: “http://www.darknet.org.uk/2007/12/wsscanner-web-services-footprinting-discovery-enumeration-scanning-and-fuzzing-tool/” });ShareThis

<!– –>

December 24th, 2007

Nikto 2 Released – Web Server Scanning Tool

Another one that has been a long time coming, but finally here it is! Nikto 2.
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers. Scan items [...]

SHARETHIS.addEntry({ title: “Nikto 2 Released – Web Server Scanning Tool”, url: “http://www.darknet.org.uk/2007/12/nikto-2-released-web-server-scanning-tool/” });ShareThis

<!– –>

December 19th, 2007

Inguma 0.0.6 Released for Download – Free Pen-testing Framework

Quite a few people seem to be interested in this tool, so here is the latest revision – Inguma 0.0.6.
For those that don’t know, Inguma is a free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, [...]

SHARETHIS.addEntry({ title: “Inguma 0.0.6 Released for Download – Free Pen-testing Framework”, url: “http://www.darknet.org.uk/2007/12/inguma-006-released-for-download-free-pen-testing-framework/” });ShareThis

<!– –>

December 13th, 2007

Nmap Port Scanner 4.50 Released for Download

At last a new major release of Nmap!
If for some odd reason you don’t already know what Nmap is, it is a free and open source utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host [...]

SHARETHIS.addEntry({ title: “Nmap Port Scanner 4.50 Released for Download”, url: “http://www.darknet.org.uk/2007/12/nmap-port-scanner-450-released-for-download/” });ShareThis

<!– –>

December 12th, 2007

KisMAC – Free WiFi Stumbler/Scanner for Mac OS X

KisMAC is an opensource and free stumbler/scanner application for Mac OS X. It has an advantage over MacStumbler/iStumbler/NetStumbler in that it uses monitor mode and passive scanning.
KisMAC supports several third party PCMCIA cards – Orinoco, PrismII, Cisco Aironet, Atheros and PrismGT. USB Prism2 is supported as well, and USB Ralink support is in development. All [...]

SHARETHIS.addEntry({ title: “KisMAC – Free WiFi Stumbler/Scanner for Mac OS X”, url: “http://www.darknet.org.uk/2007/12/kismac-free-wifi-stumblerscanner-for-mac-os-x/” });ShareThis

<!– –>

December 10th, 2007

scanrand – Download Stateless TCP Scanner with Syn Cookies

Scanrand is extremely quick and effective port scanner. It works by forking two distinct processes:

One to send the initial queries
One to receive responses and reconcile them from the above

This makes it extremely fast.
If you haven’t heard of the suite, Scanrand is one of the five tools in Paketto Keiretsu by Dan “Effugas” Kaminsky [...]

SHARETHIS.addEntry({ title: “scanrand – Download Stateless TCP Scanner with Syn Cookies”, url: “http://www.darknet.org.uk/2007/12/scanrand-download-stateless-tcp-scanner-with-syn-cookies/” });ShareThis

<!– –>

December 6th, 2007

MSF eXploit Builder – Free Win32 Exploit Development Platform

The MSF eXploit Builder (MSF-XB) is a free win32 application (GUI) that wants to be an Exploit Development Platform. The main goal is to speed up the exploit development process, this is accomplished by using the powerful functionalities and neat design of The Metasploit Framework.
MSF-XB automatically generates MSF compliants exploits modules.
The MSF-XB package also includes [...]

SHARETHIS.addEntry({ title: “MSF eXploit Builder – Free Win32 Exploit Development Platform”, url: “http://www.darknet.org.uk/2007/12/msf-exploit-builder-free-win32-exploit-development-platform/” });ShareThis

<!– –>

November 28th, 2007

Chaosreader – Trace TCP/UDP Sessions from tcpdump

A freeware tool to trace TCP/UDP sessions and fetch application data from snoop or tcpdump logs. This is a type of “any-snarf” program, as it will fetch telnet sessions, FTP files, HTTP transfers (HTML, GIF, JPEG), SMTP emails and so on from the captured data inside network traffic logs.
Similar to tcpflow which we mentioned recently.
A [...]

SHARETHIS.addEntry({ title: “Chaosreader – Trace TCP/UDP Sessions from tcpdump”, url: “http://www.darknet.org.uk/2007/11/chaosreader-trace-tcpudp-sessions-from-tcpdump/” });ShareThis

<!– –>

November 20th, 2007

sqlninja 0.2.1-r1 – SQL Injection Tool for MS-SQL Released for Download

Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process [...]

SHARETHIS.addEntry({ title: “sqlninja 0.2.1-r1 – SQL Injection Tool for MS-SQL Released for Download”, url: “http://www.darknet.org.uk/2007/11/sqlninja-021-r1-sql-injection-tool-for-ms-sql-released-for-download/” });ShareThis

<!– –>

November 16th, 2007

Medusa 1.4 – Parallel Password Cracker Released for Download

It’s been a long time coming but here it is, after almost a year (Remember Medusa 1.3?) finally version 1.4 is here!
Version 1.4 of Medusa is now available for public download!
What is Medusa? Medusa is a speedy, massively parallel, modular, login brute-forcer for network services created by the geeks at Foofus.net.
The Key Features are as [...]

SHARETHIS.addEntry({ title: “Medusa 1.4 – Parallel Password Cracker Released for Download”, url: “http://www.darknet.org.uk/2007/11/medusa-14-parallel-password-cracker-released-for-download/” });ShareThis

<!– –>

November 14th, 2007

Inguma 0.0.5 Released for Download – Penetration Testing Toolkit

Inguma is a free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler.
We did mention it back in August when it first hit the streets.

With new QT interface:

If you haven’t used it for a [...]

SHARETHIS.addEntry({ title: “Inguma 0.0.5 Released for Download – Penetration Testing Toolkit”, url: “http://www.darknet.org.uk/2007/11/inguma-005-released-for-download-penetration-testing-toolkit/” });ShareThis

<!– –>

November 12th, 2007

WifiZoo v1.2 – Gather Wifi Information Passively

WifiZoo is a tool to gather wifi information passively. Similar to dsniff but for wireless work, the author wanted to do something wifi-related somewhat helpful in wifi pentesting. Something of an extension of Ferret from Errata.
It’s essentially a tool to get information from open wifi networks without joining any network, and covering all wifi [...]

SHARETHIS.addEntry({ title: “WifiZoo v1.2 – Gather Wifi Information Passively”, url: “http://www.darknet.org.uk/2007/11/wifizoo-v12-gather-wifi-information-passively/” });ShareThis

<!– –>

November 8th, 2007

untidy – XML Fuzzer

Seen as though untidy was mentioned again fairly recent, it sparked my memory that I have a fairly old draft regarding untidy the XML Fuzzer.
Fuzzing is definitely becoming an important part of Pen Testing and especially application security – we’ve published about quite a few and I’m sure there are more in development.

Anyway, back [...]

SHARETHIS.addEntry({ title: “untidy – XML Fuzzer”, url: “http://www.darknet.org.uk/2007/11/untidy-xml-fuzzer/” });ShareThis

<!– –>

November 6th, 2007

WSBang – Python Based SOAP Services Testing Tool

WSBang is designed to be a lightweight, open source fuzzer for web services. It takes as input the URL or file system location of a WSDL for the web service to be tested. Upon completion, a simple HTML view of the test results will be displayed.
Method parameters are fuzzed based on their type [...]

SHARETHIS.addEntry({ title: “WSBang – Python Based SOAP Services Testing Tool”, url: “http://www.darknet.org.uk/2007/11/wsbang-python-based-soap-services-testing-tool/” });ShareThis

<!– –>

November 2nd, 2007

Pass-The-Hash Toolkit v1.1 Available for Download

The concept of passing the hash on Windows came about a while ago, now there’s a tool for it in it’s second revision (which fixed some problems with foreign language Windows versions and Windows 2003).
The Pass-The-Hash Toolkit contains utilities to manipulate the Windows Logon Sessions mantained by the LSA (Local Security Authority) component. These tools [...]

SHARETHIS.addEntry({ title: “Pass-The-Hash Toolkit v1.1 Available for Download”, url: “http://www.darknet.org.uk/2007/11/pass-the-hash-toolkit-v11-available-for-download/” });ShareThis

<!– –>

November 1st, 2007

Tutorial for Fuzzled – Writing a Fuzzer with the Fuzzled Framework

If you remember we mentioned Fuzzled a little while back, the PERL fuzzing framework. Apparently Fuzzled 1.1 should be coming out soon.
Fuzzled is a powerful fuzzing framework. Fuzzled includes helper functions, namespaces, factories which allow a wide variety of fuzzing tools to be developed. Fuzzled comes with several example protocols and drivers for them.

Someone was [...]

SHARETHIS.addEntry({ title: “Tutorial for Fuzzled – Writing a Fuzzer with the Fuzzled Framework”, url: “http://www.darknet.org.uk/2007/11/tutorial-for-fuzzled-writing-a-fuzzer-with-the-fuzzled-framework/” });ShareThis

<!– –>

October 26th, 2007

Metagoofil 1.2 – Metadata Extractor Tool

What is this?
Metagoofil is a tool for written in Python for extracting the metadata from public documents (pdf,doc,xls,ppt) available in the target websites. This information could be useful because you can get valid usernames, or people names, for using later in brute force password attacks (vpn, ftp, webapps etc.)

How it works?
The tool first queries Google [...]

SHARETHIS.addEntry({ title: “Metagoofil 1.2 – Metadata Extractor Tool”, url: “http://www.darknet.org.uk/2007/10/metagoofil-12-metadata-extractor-tool/” });ShareThis

<!– –>

October 19th, 2007

HttpBee – Web Application Hacking Toolkit

HttpBee is a swiss-army-knife tool for web application hacking. It is multi-threaded, embedded with scriptable engine and has both command-line and daemon mode (if executed in daemon mode, HttpBee can become an agent of a distributed framework).
This is a tool for more advanced users and there isn’t much documentation so if anyone feels like writing [...]

SHARETHIS.addEntry({ title: “HttpBee – Web Application Hacking Toolkit”, url: “http://www.darknet.org.uk/2007/10/httpbee-web-application-hacking-toolkit/” });ShareThis

<!– –>

October 5th, 2007

Official release of SQL Power Injector 1.2 – Download Now!

SQL Power Injector is a graphical application created in .NET 1.1 that helps the penetrating tester to inject SQL commands on a web page.
For now it is SQL Server, Oracle and MySQL compliant, but it is possible to use it with any existing DBMS when using the inline injection (Normal mode).
Moreover this application will get [...]

SHARETHIS.addEntry({ title: “Official release of SQL Power Injector 1.2 – Download Now!”, url: “http://www.darknet.org.uk/2007/10/official-release-of-sql-power-injector-12-download-now/” });ShareThis

<!– –>

October 1st, 2007

aircrack-ng – WEP and WPA-PSK Key Cracking Program

aircrack is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, thus making the attack much faster compared to other WEP cracking tools. In fact, aircrack is a set of tools for [...]

SHARETHIS.addEntry({ title: “aircrack-ng – WEP and WPA-PSK Key Cracking Program”, url: “http://www.darknet.org.uk/2007/10/aircrack-ng-wep-and-wpa-psk-key-cracking-program/” });ShareThis

<!– –>

September 27th, 2007

httprint v301 – Web Server Fingerprinting Tool – Download

I was looking through my toolbox to see what else is useful and I came across this one, httprint – the only caveat is that it’s a little out of date. It still does a good job though.
httprint is a web server fingerprinting tool.
It relies on web server characteristics to accurately identify web servers, despite [...]

SHARETHIS.addEntry({ title: “httprint v301 – Web Server Fingerprinting Tool – Download”, url: “http://www.darknet.org.uk/2007/09/httprint-v301-web-server-fingerprinting-tool-download/” });ShareThis

<!– –>

September 25th, 2007

aircrack-ptw – Fast WEP Cracking Tool for Wireless Hacking

WEP is a protocol for securing wireless LANs. WEP stands for “Wired Equivalent Privacy” which means it should provide the level of protection a wired LAN has. WEP therefore uses the RC4 stream to encrypt data which is transmitted over the air, using usually a single secret key (called the root key or WEP key) [...]

SHARETHIS.addEntry({ title: “aircrack-ptw – Fast WEP Cracking Tool for Wireless Hacking”, url: “http://www.darknet.org.uk/2007/09/aircrack-ptw-fast-wep-cracking-tool-for-wireless-hacking/” });ShareThis

<!– –>

September 19th, 2007

IPAudit – Network Activity Monitor with Web Interface

IPAudit monitors network activity on a network by host, protocol and port. It listens to a network device in promiscuous mode, and records every connection between two ip addresses. A unique connection is determined by the ip addresses of the two machines, the protocol used between them, and the port numbers (if they are communicating [...]

SHARETHIS.addEntry({ title: “IPAudit – Network Activity Monitor with Web Interface”, url: “http://www.darknet.org.uk/2007/09/ipaudit-network-activity-monitor-with-web-interface/” });ShareThis

<!– –>

September 13th, 2007

FLARE – Flash Decompiler to Extract ActionScript

Flare processes an SWF and extracts all scripts from it. The output is written to a single text file. Only ActionScript is extracted, no text or images. Flare is freeware. Windows, Mac OS X and Linux versions are available.
The main purpose of decompiler is to help you recover your own lost source code. However, there [...]

SHARETHIS.addEntry({ title: “FLARE – Flash Decompiler to Extract ActionScript”, url: “http://www.darknet.org.uk/2007/09/flare-flash-decompiler-to-extract-actionscript/” });ShareThis

<!– –>

September 11th, 2007

Hack to Learn with the Ethical Hacker Kit from HackersCenter.com

There has been some debate on Darknet about this kit and it’s use, obviously it’s a kit for beginners but it is useful. Advanced chaps like you and me (you guys know who you are) most likely have the requisite tools and knowledge to build/find/etc whatever we need to get the job done.
That’s partially what [...]

SHARETHIS.addEntry({ title: “Hack to Learn with the Ethical Hacker Kit from HackersCenter.com”, url: “http://www.darknet.org.uk/2007/09/hack-to-learn-with-the-ethical-hacker-kit-from-hackerscentercom/” });ShareThis

<!– –>

September 10th, 2007

PIRANA – Exploitation Framework for Email Content Filters

PIRANA is an exploitation framework that tests the security of a email content filter. By means of a vulnerability database, the content filter to be tested will be bombarded by various emails containing a malicious payload intended to compromise the computing platform.
PIRANA’s goal is to test whether or not any vulnerability exists on the content [...]

SHARETHIS.addEntry({ title: “PIRANA – Exploitation Framework for Email Content Filters”, url: “http://www.darknet.org.uk/2007/09/pirana-exploitation-framework-for-email-content-filters/” });ShareThis

<!– –>

September 5th, 2007

ServiceCapture – HTTP Traffic Capture for Debugging Flash

ServiceCapture runs on your pc and captures all HTTP traffic sent from your browser or IDE. It is designed to help Rich Internet Application(RIA) developers in the debugging, analysis, and testing of their applications.
You can download the free trial below. After it is installed and running, visit the Macromedia Exchange with your web browser (some [...]

SHARETHIS.addEntry({ title: “ServiceCapture – HTTP Traffic Capture for Debugging Flash”, url: “http://www.darknet.org.uk/2007/09/servicecapture-http-traffic-capture-for-debugging-flash/” });ShareThis

<!– –>

August 31st, 2007

Download pwdump6 and fgdump version 1.6.0 available now.

New versions of the excellent pwdump6 and fgdump have been released (1.6.0 for both!).
For those that don’t know what pwdump or gfdump are..
pwdump6 is a password hash dumper for Windows 2000 and later systems. It is capable of dumping LanMan and NTLM hashes as well as password hash histories. It is based on pwdump3e, [...]

SHARETHIS.addEntry({ title: “Download pwdump6 and fgdump version 1.6.0 available now.”, url: “http://www.darknet.org.uk/2007/08/download-pwdump6-and-fgdump-version-160-available-now/” });ShareThis

<!– –>

August 29th, 2007

FireCAT 1.1 Released – Turn Firefox into a Security Platform

FireCAT is a Firefox Framework Map collection of the most useful security oriented extensions. It can be used to turn your favorite browser (Firefox) into a powerful security framework.

FireCAT comes from “Firefox Catalog of Auditing Toolbox”
Changes for FireCAT 1.1
+ Category Network Utililies
- Added ffsniff to subcat “Sniffers”
- Added CrossFTP to subcat FTP (thanks to Benjamin [...]

SHARETHIS.addEntry({ title: “FireCAT 1.1 Released – Turn Firefox into a Security Platform”, url: “http://www.darknet.org.uk/2007/08/firecat-11-released-turn-firefox-into-a-security-platform/” });ShareThis

<!– –>

August 28th, 2007

KGB Keylogger from Refog Software – Review

KGB Keylogger from Refog Software is a decent light weight Key Logger.
KGB Keylogger is a multi-functional keyboard tracking software that is widely used by both regular users and IT security specialists for tracking the key strokes typed on a given machine.

KGB Keylogger Features at a Glance

Stealth mode and visible mode of work;
Logs keyboard input, including [...]

SHARETHIS.addEntry({ title: “KGB Keylogger from Refog Software – Review”, url: “http://www.darknet.org.uk/2007/08/kgb-keylogger-from-refog-software-review/” });ShareThis

<!– –>

August 27th, 2007

Pixy – New & Free Open-source XSS and SQL Injection Scanner for PHP Programs

Cross-site scripting (XSS) and SQL injection (SQLI) vulnerabilities are present in many modern web applications, and are reported continuously on pages such as BugTraq. In the past, finding such vulnerabilities usually involved manual source code audits.

Unfortunately, this manual vulnerability search is a very tiresome and error-prone task.
Pixy is a Java program that performs automatic [...]

SHARETHIS.addEntry({ title: “Pixy – New & Free Open-source XSS and SQL Injection Scanner for PHP Programs”, url: “http://www.darknet.org.uk/2007/08/pixy-new-free-open-source-xss-and-sql-injection-scanner-for-php-programs/” });ShareThis

<!– –>

August 22nd, 2007

w3af – Web Application Attack and Audit Framework

A pretty cool tool was released a while back called w3af ( Web Application Attack and Audit Framework ), a fully automated auditing and exploiting framework for the web. This framework has been in development for almost a year and has the following features:

Audit

SQL injection detection
XSS detection
SSI detection
Local file include detection
Remote file include detection
Buffer Overflow [...]

SHARETHIS.addEntry({ title: “w3af – Web Application Attack and Audit Framework”, url: “http://www.darknet.org.uk/2007/08/w3af-web-application-attack-and-audit-framework/” });ShareThis

<!– –>

August 20th, 2007

Immunity Debugger v1.0 (immdbg) Release – Download it Now!

After almost a year of intensive development and internal use, Immunity (The guys who bought us CANVAS) has announced the public release of Immunity Debugger v1.0. The main objective for this tool was to combine the best of commandline based and GUI based debuggers.

Immunity Debugger is a powerful new way to write exploits, analyze malware, [...]

SHARETHIS.addEntry({ title: “Immunity Debugger v1.0 (immdbg) Release – Download it Now!”, url: “http://www.darknet.org.uk/2007/08/immunity-debugger-v10-immdbg-release-download-it-now/” });ShareThis

<!– –>

August 15th, 2007

rtpBreak – RTP Analysis & Hacking Tool

rtpBreak detects, reconstructs and analyzes any RTP [rfc1889] session through heuristics over the UDP network traffic. It works well with SIP, H.323, SCCP and any other signaling protocol. In particular, it doesn’t require the presence of RTCP packets (voipong needs them) that aren’t always transmitted from the recent VoIP clients.
The RTP sessions are composed by [...]

SHARETHIS.addEntry({ title: “rtpBreak – RTP Analysis & Hacking Tool”, url: “http://www.darknet.org.uk/2007/08/rtpbreak-rtp-analysis-hacking-tool/” });ShareThis

<!– –>

August 10th, 2007

mssql-hax0r v0.9 – Multi-purpose MS-SQL injection script

mssql-hax0r v0.9 is a Multi-purpose MS-SQL injection attack tool for advanced Microsoft SQL Server exploitation. Three modes of operation are currently available: info (Information Gathering), dump (Record Dump), and brute (Brute Force).
You may need to tweak the code a bit to make it fit your needs (i.e. modifying the injection string and/or the language used [...]

SHARETHIS.addEntry({ title: “mssql-hax0r v0.9 – Multi-purpose MS-SQL injection script”, url: “http://www.darknet.org.uk/2007/08/mssql-hax0r-v09-multi-purpose-ms-sql-injection-script/” });ShareThis

<!– –>

August 6th, 2007

Inguma – Penetration Testing Toolkit

Inguma is a penetration testing toolkit entirely written in python. The framework includes modules to discover hosts, gather information about, fuzz targets, brute force user names and passwords and, of course, exploits for many products.
Inguma the word is the name of a Basque’s mythological spirit who kills people while sleeping and, also, the one who [...]

SHARETHIS.addEntry({ title: “Inguma – Penetration Testing Toolkit”, url: “http://www.darknet.org.uk/2007/08/inguma-penetration-testing-toolkit/” });ShareThis

<!– –>

August 2nd, 2007

LLDP – Link Layer Discovery Protocol Fuzzer

The first Link Layer Discovery Protocol Fuzzer is now available, test cases are also ready to be used along with the tool. The fuzzing architecure makes it easy to extend the tool with new test cases and more LLDP compliant devices arise.
LLDP is a Layer 2 protocol which allows network devices to advertise their identity [...]

SHARETHIS.addEntry({ title: “LLDP – Link Layer Discovery Protocol Fuzzer”, url: “http://www.darknet.org.uk/2007/08/lldp-link-layer-discovery-protocol-fuzzer/” });ShareThis

<!– –>

August 1st, 2007

Security Freak Video Lectures – Hacking, Programming, Networking & More

A while back a reader e-mailed us about a new site they have called Security Freak, the site is about informatin security education and is mostly using video lectures to illustrate and convey the lessons.
Security-Freak.net is an attempt to lower the entry barrier for starting computer security research. The author has noticed that during his [...]

SHARETHIS.addEntry({ title: “Security Freak Video Lectures – Hacking, Programming, Networking & More”, url: “http://www.darknet.org.uk/2007/08/security-freak-video-lectures-hacking-programming-networking-more/” });ShareThis

<!– –>

July 31st, 2007

Wfuzz – A Tool for Bruteforcing/Fuzzing Web Applications

Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for finding resources not linked (directories, servlets, scripts, etc), bruteforce GET and POST parameters for checking different kind of injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters (User/Password), Fuzzing,etc.

The tool is based on dictionaries and ranges, you choose where you want to bruteforce [...]

SHARETHIS.addEntry({ title: “Wfuzz – A Tool for Bruteforcing/Fuzzing Web Applications”, url: “http://www.darknet.org.uk/2007/07/wfuzz-a-tool-for-bruteforcingfuzzing-web-applications/” });ShareThis

<!– –>

July 23rd, 2007

piggy – Download MS-SQL Password Brute Forcing Tool

Piggy is yet another tool for performing online password guessing against Microsoft SQL servers.
It supports scanning multiple servers using a dictionary file or a file with predefined accounts (username and password combinations).

It’s a pretty simple tool and has a Win32 binary verson – it is a command line tool however.
Piggy v1.0.1 by patrik@cqure.net
——————————–
usage: piggy [options]

options:
[...]

SHARETHIS.addEntry({ title: “piggy – Download MS-SQL Password Brute Forcing Tool”, url: “http://www.darknet.org.uk/2007/07/piggy-download-ms-sql-password-brute-forcing-tool/” });ShareThis

<!– –>

July 20th, 2007

Learn to use Metasploit – Tutorials, Docs & Videos

Metasploit is a great tool, but it’s not the easiest to use and some people get completely lost when trying to get the most out of it.
To help you guys out here is a bunch of links, videos, tutorials and documents to get you up to speed.
You can start with this, a good flash tutorial [...]

SHARETHIS.addEntry({ title: “Learn to use Metasploit – Tutorials, Docs & Videos”, url: “http://www.darknet.org.uk/2007/07/learn-to-use-metasploit-tutorials-docs-videos/” });ShareThis

<!– –>

July 19th, 2007

FTester – Firewall Tester and IDS Testing tool

The Firewall Tester (FTester) is a tool designed for testing firewalls filtering policies and Intrusion Detection System (IDS) capabilities.
The tool consists of two perl scripts, a packet injector (ftest) and the listening sniffer (ftestd). The first script injects custom packets, defined in ftest.conf, with a signature in the data part while the sniffer listens for [...]

SHARETHIS.addEntry({ title: “FTester – Firewall Tester and IDS Testing tool”, url: “http://www.darknet.org.uk/2007/07/ftester-firewall-tester-and-ids-testing-tool/” });ShareThis

<!– –>

July 17th, 2007

Sandcat by Syhunt – Web Server & Application Vulnerability Scanner

Sandcat allows web administrators to perform aggressive and comprehensive scans of an organization’s web server to isolate vulnerabilities and identify security holes.
The Sandcat scanner requires basic inputs such as host names, start URLs and port numbers to scan a complete web site and test all the web applications for security vulnerabilities.
This is a pretty nifty [...]

SHARETHIS.addEntry({ title: “Sandcat by Syhunt – Web Server & Application Vulnerability Scanner”, url: “http://www.darknet.org.uk/2007/07/sandcat-by-syhunt-web-server-application-vulnerability-scanner/” });ShareThis

<!– –>

July 13th, 2007

FG-Injector – SQL Injection & Proxy Tool

FG-Injector Framework is a set of tools designed to help find SQL injection vulnerabilities in web applications, and help the analyst assess their severity. It includes a powerful proxy feature for intercepting and modifying HTTP requests, and an inference engine for automating SQL injection exploitation.

Often web developers think that by disabling error messages in their [...]

SHARETHIS.addEntry({ title: “FG-Injector – SQL Injection & Proxy Tool”, url: “http://www.darknet.org.uk/2007/07/fg-injector-sql-injection-proxy-tool/” });ShareThis

<!– –>

July 9th, 2007

sqlget v1.0.0 – Blind SQL Injection Tool in PERL

sqlget is a blind SQL injection tool developed in Perl, it lets you get databases schemas and tables rows. Using a single GET/POST you can access quietly the database structure and using a single GET/POST you can dump every table row to a csv-like file.

Databases supported:

IBM DB2
Microsoft SQL Server
Oracle
Postgres
Mysql
IBM Informix
Sybase
Hsqldb
Mime
Pervasive
Virtuoso
SQLite
Interbase/Yaffil/Firebird (Borland)
H2
Mckoi
Ingres
MonetDB
MaxDB
ThinkSQL
SQLBase

Evasion features:

Full-width/Half-width Unicode encoding
Apache non [...]

SHARETHIS.addEntry({ title: “sqlget v1.0.0 – Blind SQL Injection Tool in PERL”, url: “http://www.darknet.org.uk/2007/07/sqlget-v100-blind-sql-injection-tool-in-perl/” });ShareThis

<!– –>

July 5th, 2007

Proxmon – Proxy Log Monitoring Tool

ProxMon is an extensible Python based framework that reduces testing effort, improves consistency and reduces errors. Its use requires limited additional effort as it processes the proxy logs that you’re already generating and reports discovered issues. In addition to penetration testing, ProxMon is useful in QA, developer testing and regression testing scenarios.
Formerly announced as ScarabMon [...]

SHARETHIS.addEntry({ title: “Proxmon – Proxy Log Monitoring Tool”, url: “http://www.darknet.org.uk/2007/07/proxmon-proxy-log-monitoring-tool/” });ShareThis

<!– –>

July 3rd, 2007

Selenium – JavaScript Web Application Security Testing Tool

Selenium is a test tool for web applications. Selenium tests run directly in a browser, just as real users do. And they run in Internet Explorer, Mozilla and Firefox on Windows, Linux, and Macintosh. No other test tool covers such a wide array of platforms.

Browser compatibility testing. Test your application to see if it works [...]

SHARETHIS.addEntry({ title: “Selenium – JavaScript Web Application Security Testing Tool”, url: “http://www.darknet.org.uk/2007/07/selenium-javascript-web-application-security-testing-tool/” });ShareThis

<!– –>

July 2nd, 2007

tcpxtract – Extract Files from Network Traffic AKA Carving

tcpxtract is a tool for extracting files from network traffic based on file signatures. Extracting files based on file type headers and footers (sometimes called “carving”) is an age old data recovery technique. Tools like Foremost employ this technique to recover files from arbitrary data streams. tcpxtract uses this technique specifically for the application of [...]

SHARETHIS.addEntry({ title: “tcpxtract – Extract Files from Network Traffic AKA Carving”, url: “http://www.darknet.org.uk/2007/07/tcpxtract-extract-files-from-network-traffic-aka-carving/” });ShareThis

<!– –>

June 29th, 2007

OAPScan – Oracle Application Server Scanner

We got an e-mail a while back about this new and apparently simple Oracle Application Server scanner.
It detects web pages, DADs (Database Access Descriptors) and test applications installed by default.

It may be useful for system hardening and pen-test.
You can download OAPScan here:
OAPScan.tar.gz

SHARETHIS.addEntry({ title: “OAPScan – Oracle Application Server Scanner”, url: “http://www.darknet.org.uk/2007/06/oapscan-oracle-application-server-scanner/” });ShareThis

<!– –>

June 27th, 2007

ProxyFuzz – MITM Network Fuzzer in Python

ProxyFuzz is a man-in-the-middle non-deterministic network fuzzer written in Python. ProxyFuzz randomly changes (fuzzes) contents on the network traffic. It supports TCP and UDP protocols and can also be configured to fuzz only one side of the communication. ProxyFuzz is protocol agnostic so it can randomly fuzz any network communication.

ProxyFuzz is a good tool for [...]

SHARETHIS.addEntry({ title: “ProxyFuzz – MITM Network Fuzzer in Python”, url: “http://www.darknet.org.uk/2007/06/proxyfuzz-mitm-network-fuzzer-in-python/” });ShareThis

<!– –>

June 26th, 2007

The Kcpentrix Project – Penetration Testing Toolkit LiveDVD

The Kcpentrix Project was founded in May 2005 , KCPentrix 1.0 was liveCD designed to be a standalone Penetration testing toolkit for pentesters, security analysts and System administrators
What’s New in KcPentrix 2.0
Now release 2.0 is a liveDVD, It features a lot of new or up to date tools for auditing and testing a network, from [...]

SHARETHIS.addEntry({ title: “The Kcpentrix Project – Penetration Testing Toolkit LiveDVD”, url: “http://www.darknet.org.uk/2007/06/the-kcpentrix-project-penetration-testing-toolkit-livedvd/” });ShareThis

<!– –>

June 22nd, 2007

sqlninja 0.1.2 Released for Download – SQL Injection Tool

sqlninja is a tool to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable DB server, even in a very hostile environment.
It should be used by penetration testers to help and automate the process of taking [...]

SHARETHIS.addEntry({ title: “sqlninja 0.1.2 Released for Download – SQL Injection Tool”, url: “http://www.darknet.org.uk/2007/06/sqlninja-012-released-for-download-sql-injection-tool/” });ShareThis

<!– –>

June 20th, 2007

Fake NetBIOS Tool – Simulate Windows Hosts

Some cool free tools made by folks from the French Honeynet Project.
FakeNetBIOS is a family of tools designed to simulate Windows hosts on a LAN. The individual tools are:

FakeNetbiosDGM (NetBIOS Datagram)
FakeNetbiosNS (NetBIOS Name Service)

Each tool can be used as a standalone tool or as a honeyd responder or subsystem.
FakeNetbiosDGM sends NetBIOS Datagram service packets on [...]

SHARETHIS.addEntry({ title: “Fake NetBIOS Tool – Simulate Windows Hosts”, url: “http://www.darknet.org.uk/2007/06/fake-netbios-tool-simulate-windows-hosts/” });ShareThis

<!– –>

June 18th, 2007

Trinity Rescue Kit – Free Recovery and Repair for Windows

Trinity Rescue Kit or TRK is a free live Linux distribution that aims specifically at recovery and repair operations on Windows machines, but is equally usable for Linux recovery issues.
It is possible to boot TRK in three different ways:

As a bootable CD which you can burn yourself from a downloadable isofile
From a USB stick/disk (optionally [...]

SHARETHIS.addEntry({ title: “Trinity Rescue Kit – Free Recovery and Repair for Windows”, url: “http://www.darknet.org.uk/2007/06/trinity-rescue-kit-free-recovery-and-repair-for-windows/” });ShareThis

<!– –>

June 14th, 2007

Fuzzled – PERL Fuzzing Framework

There has been an explosion of fuzzing tools lately, quite a few we have mentioned here on Darknet.
Someone else noticed this, and wondered where is the Perl framework to complete the family? With that in mind he spent the last few months working on something that should fill the gap – Fuzzled.

Fuzzled is a [...]

SHARETHIS.addEntry({ title: “Fuzzled – PERL Fuzzing Framework”, url: “http://www.darknet.org.uk/2007/06/fuzzled-perl-fuzzing-framework/” });ShareThis

<!– –>

June 8th, 2007

stealth techniques – syn

Or half-open scanning technique is the first of three to come series about stealth scanning… The other two are Xmas/Fin/Null and idle/zombie scan techniques…
Intro
This is a series of three to come articles about stealth scanning, everything that I am going to present is hping oriented so if you want to learn this techniques you’d better [...]

SHARETHIS.addEntry({ title: “stealth techniques – syn”, url: “http://www.darknet.org.uk/2007/06/stealth-techniques-syn/” });ShareThis

<!– –>

June 8th, 2007

Priamos Project – SQL Injector and Scanner

PRIAMOS is a powerful SQL Injector & Scanner

You can search for SQL Injection vulnerabilities and inject vulnerable string to get all Database names, Tables and Column data with the injector module.
You should only use PRIAMOS to test the security vulnerabilities of your own web applications (obviously).
The first release of PRIAMOS contain only SQL Server Database [...]

SHARETHIS.addEntry({ title: “Priamos Project – SQL Injector and Scanner”, url: “http://www.darknet.org.uk/2007/06/priamos-project-sql-injector-and-scanner/” });ShareThis

<!– –>

June 5th, 2007

SQLBrute – SQL Injection Brute Force Tool

SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities. It supports time based and error based exploit types on Microsoft SQL Server, and error based exploit on Oracle. It is written in Python, uses multi-threading, and doesn’t require non-standard libraries (there is some code in there for pycurl, [...]

SHARETHIS.addEntry({ title: “SQLBrute – SQL Injection Brute Force Tool”, url: “http://www.darknet.org.uk/2007/06/sqlbrute-sql-injection-brute-force-tool/” });ShareThis

<!– –>

May 30th, 2007

OWASP – SQLiX Project – SQL Injection Scanner

SQLiX, coded in Perl, is a SQL Injection scanner, able to crawl, detect SQL injection vectors, identify the back-end database and grab function call/UDF results (even execute system commands for MS-SQL). The concepts in use are different than the one used in other SQL injection scanners. SQLiX is able to find normal and blind SQL [...]

SHARETHIS.addEntry({ title: “OWASP – SQLiX Project – SQL Injection Scanner”, url: “http://www.darknet.org.uk/2007/05/owasp-sqlix-project-sql-injection-scanner/” });ShareThis

<!– –>

May 28th, 2007

Technitium Free MAC Address Changer v4.5 Released

Technitium MAC Address Changer v4.5 has been released.
Technitium MAC Address Changer allows you to change Media Access Control (MAC) Address of your Network Interface Card (NIC) irrespective to your NIC manufacturer or its driver. It has a very simple user interface and provides ample of information regarding each NIC in the machine. Every NIC [...]

SHARETHIS.addEntry({ title: “Technitium Free MAC Address Changer v4.5 Released”, url: “http://www.darknet.org.uk/2007/05/technitium-free-mac-address-changer-v45-released/” });ShareThis

<!– –>

May 24th, 2007

Foundstone Blast – TCP Network Service Stress Test Tool

Foundstone Blast v2.0 is a small, quick TCP service stress test tool. Blast does a good amount of work very quickly and can help spot potential weaknesses in your network servers.
Features:
/trial switch adds the ability to see how the buffer looks before sending it
/v switch adds verbose option – off by default
/nr switch turns off [...]

SHARETHIS.addEntry({ title: “Foundstone Blast – TCP Network Service Stress Test Tool”, url: “http://www.darknet.org.uk/2007/05/foundstone-blast-tcp-network-service-stress-test-tool/” });ShareThis

<!– –>

May 22nd, 2007

Nemesis – Packet Injection Suite

Nemesis is a command-line network packet crafting and injection utility for UNIX-like and Windows systems. Nemesis, is well suited for testing Network Intrusion Detection Systems, firewalls, IP stacks and a variety of other tasks. As a command-line driven utility, Nemesis is perfect for automation and scripting.

Nemesis can natively craft and inject packets for:

ARP
DNS
ETHERNET
ICMP
IGMP
IP
OSPF
RIP
TCP

UDP

Using the IP [...]

SHARETHIS.addEntry({ title: “Nemesis – Packet Injection Suite”, url: “http://www.darknet.org.uk/2007/05/nemesis-packet-injection-suite/” });ShareThis

<!– –>

May 18th, 2007

pwdump6 1.5.0 as well as fgdump 1.5.0 Released for Download

A while ago some updates of pwdump and fgdump were released, namely pwdump6 1.5.0 as well as fgdump 1.5.0.
Version 1.5.0 of both programs takes advantage of some changes which makes them less likely to be detected by antivirus, at least as of today. This will be particularly helpful to those of you dealing with [...]

SHARETHIS.addEntry({ title: “pwdump6 1.5.0 as well as fgdump 1.5.0 Released for Download”, url: “http://www.darknet.org.uk/2007/05/pwdump6-150-as-well-as-fgdump-150-released-for-download/” });ShareThis

<!– –>

May 17th, 2007

ISIC – IP Stack Integrity & Stability Checker

ISIC is a suite of utilities to exercise the stability of an IP Stack and its component stacks (TCP, UDP, ICMP et. al.) It generates piles of pseudo random packets of the target protocol. The packets be given tendencies to conform to. Ie 50% of the packets generated can have IP Options. 25% of the [...]

SHARETHIS.addEntry({ title: “ISIC – IP Stack Integrity & Stability Checker”, url: “http://www.darknet.org.uk/2007/05/isic-ip-stack-integrity-stability-checker/” });ShareThis

<!– –>

May 14th, 2007

VoIP Security Testing Tools List from VoIPSA

The VoIP Security Alliance (VOIPSA) is pleased to announce the public release of its VoIP security tool list. Check it out at:
http://www.voipsa.org/Resources/tools.php
This VoIP Security Tool List provides categories, descriptions and links to current free and commercial VoIP security tools.

This list was developed to address the current void of VoIP security testing resources and sites, [...]

SHARETHIS.addEntry({ title: “VoIP Security Testing Tools List from VoIPSA”, url: “http://www.darknet.org.uk/2007/05/voip-security-testing-tools-list-from-voipsa/” });ShareThis

<!– –>

May 7th, 2007

Hacker Files, Tools & Software Repository – leetupload.com

This site is dedicated as a repository for “hacking” programs for Windows and Linux. Please note that hacking means nothing but tweaking or cleverly resolving a problem. Use the programs as you wish, but this site or its provider are not responsible in terms of how you use these programs, (i.e. for educational purposes only).

http://www.leetupload.com/
The [...]

SHARETHIS.addEntry({ title: “Hacker Files, Tools & Software Repository – leetupload.com”, url: “http://www.darknet.org.uk/2007/05/hacker-files-tools-software-repository-leetuploadcom/” });ShareThis

<!– –>

May 4th, 2007

Scapy – Interactive Network Packet Manipulation

What is Scapy?
Scapy is a powerful interactive packet manipulation program. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more. It can easily handle most classical tasks like scanning, tracerouting, probing, unit tests, attacks or network discovery [...]

SHARETHIS.addEntry({ title: “Scapy – Interactive Network Packet Manipulation”, url: “http://www.darknet.org.uk/2007/05/scapy-interactive-network-packet-manipulation/” });ShareThis

<!– –>

April 24th, 2007

Techm4sters Releases ProTech Security Distribution

Techm4sters e-mailed us recently to let us know about their new security distro called ProTech, we haven’t had time to download it and test it yet but it certainly looks promising.
- What is PROTECH? Protech is a very light live security distribution based on Ubuntu Linux.

- Is this like Nubuntu? It is similar, yes! But [...]

SHARETHIS.addEntry({ title: “Techm4sters Releases ProTech Security Distribution”, url: “http://www.darknet.org.uk/2007/04/techm4sters-releases-protech-security-distribution/” });ShareThis

<!– –>

April 23rd, 2007

LLTD – Link Layer Topology Discovery Protocol

Gomor released a LLTD (Link Layer Topology Discovery Protocol) implementation written in Perl (using Net::Frame framework).
You may use this two modules to write fuzzers, or anything.

You can find the modules here:

Net Frame LLTD

SHARETHIS.addEntry({ title: “LLTD – Link Layer Topology Discovery Protocol”, url: “http://www.darknet.org.uk/2007/04/lltd-link-layer-topology-discovery-protocol/” });ShareThis

<!– –>

April 17th, 2007

Damn Vulnerable Linux – DVL – IT-Security Attack and Defense

Damn Vulnerable Linux (DVL) is a Linux-based (modified Damn Small Linux) tool for IT-Security & IT-Anti-Security and Attack & Defense. It was initiated for training tasks during university lessons by the IITAC (International Institute for Training, Assessment, and Certification) and S²e – Secure Software Engineering in cooperation with the French Reverse Engineering Team.

Damn Vulnerable Linux [...]

SHARETHIS.addEntry({ title: “Damn Vulnerable Linux – DVL – IT-Security Attack and Defense”, url: “http://www.darknet.org.uk/2007/04/damn-vulnerable-linux-dvl-it-security-attack-and-defense/” });ShareThis

<!– –>

April 13th, 2007

BackTrack v2.0 – Hackers LiveCD Finally Released

BackTrack is the result of the merging of the two innovative penetration testing live linux distributions Auditor security collection and Whax. By combining the best features from both distributions and putting continous development energy, the most complete and finest security testing live distro was born: BackTrack

BackTrack v.2.0 is finally released, it’s been a long wait [...]

SHARETHIS.addEntry({ title: “BackTrack v2.0 – Hackers LiveCD Finally Released”, url: “http://www.darknet.org.uk/2007/04/backtrack-v20-hackers-livecd-finally-released/” });ShareThis

<!– –>

April 10th, 2007

DNS Brute Force eXtract – WS-DNS-BFX

There is another option for DNS Brute Forcing which uses threads, so may be faster than TXDNS 2.0 which we posted about recently.
What does it do?
This program was written to extract valid hosts of a domain that deny zone transfers.
The program supports:

IPv4 => IP Address of [...]

SHARETHIS.addEntry({ title: “DNS Brute Force eXtract – WS-DNS-BFX”, url: “http://www.darknet.org.uk/2007/04/dns-brute-force-extract-ws-dns-bfx/” });ShareThis

<!– –>

April 4th, 2007

SSA 1.5.1 – Security System Analyzer an OVAL Based Scanner

Open Vulnerability and Assessment Language (OVAL) is an international, information security, community standard to promote open and publicly available security content, and to standardize the transfer of this information across the entire spectrum of security tools and services. OVAL includes a language used to encode system details, and an assortment of content repositories held throughout [...]

SHARETHIS.addEntry({ title: “SSA 1.5.1 – Security System Analyzer an OVAL Based Scanner”, url: “http://www.darknet.org.uk/2007/04/ssa-151-security-system-analyzer-an-oval-based-scanner/” });ShareThis

<!– –>

March 30th, 2007

Metasploit Exploit Framework Version 3.0 Released

Finally it’s out of BETA, Metasploit Framework Version 3.0 has been released and it’s a lot more Windows friendly.
The Metasploit Framework (”Metasploit”) is a development platform for creating security tools and exploits. Version 3.0 contains 177 exploits, 104 payloads, 17 encoders, and 3 nop modules. Additionally, 30 auxiliary modules are included that perform a wide [...]

SHARETHIS.addEntry({ title: “Metasploit Exploit Framework Version 3.0 Released”, url: “http://www.darknet.org.uk/2007/03/metasploit-exploit-framework-version-30-released/” });ShareThis

<!– –>

March 27th, 2007

FireCAT – Firefox Catalog of Auditing Tools

After the web 2.0 hacking with firefox and its plugins article I wrote some months ago, recently I found a new way to transform firefox in the ultimate pen-testing tool… actually it has been lying in my inbox for days…

…new Firefox Framework Map collection of the most useful security oriented extensions. We called the framework [...]

SHARETHIS.addEntry({ title: “FireCAT – Firefox Catalog of Auditing Tools”, url: “http://www.darknet.org.uk/2007/03/firecat-firefox-catalog-of-auditing-tools/” });ShareThis

<!– –>

March 27th, 2007

JBroFuzz 0.5 from OWASP – Stateless Network Protocol Fuzzer

OWASP JBroFuzz is a stateless network protocol fuzzer that emerged from the needs of penetration testing. Written in Java, it allows for the identification of certain classess of security vulnerabilities, by means of creating malformed data and having the network protocol in question consume the data.
The purpose of this application is to provide a single, [...]

SHARETHIS.addEntry({ title: “JBroFuzz 0.5 from OWASP – Stateless Network Protocol Fuzzer”, url: “http://www.darknet.org.uk/2007/03/jbrofuzz-05-from-owasp-stateless-network-protocol-fuzzer/” });ShareThis

<!– –>

March 23rd, 2007

ObiWaN – Web Server Brute Forcing from Phenoelit

This Phenoelit tool called ObiWaN is written to carry out brute force security testing on Webservers.
The idea behind this is webservers with simple challenge-response authentication mechanism mostly have no switches to set up intruder lockout or delay timings for wrong passwords. In fact this is the point to start from. Every user with a [...]

SHARETHIS.addEntry({ title: “ObiWaN – Web Server Brute Forcing from Phenoelit”, url: “http://www.darknet.org.uk/2007/03/obiwan-web-server-brute-forcing-from-phenoelit/” });ShareThis

<!– –>

March 21st, 2007

Technika – Automate Common Exploit Tasks

Technika was developed for the computer security professionals to automate common exploitative task from the browser. It acts like a standard OS shell scripting environment. You can script everything from the currently viewed page just like Greasemonkey (spawn processes, unrestricted XMLHttpRequest connections and sockets). You can autorun bookmarklets and perform safe operations on the currently [...]

SHARETHIS.addEntry({ title: “Technika – Automate Common Exploit Tasks”, url: “http://www.darknet.org.uk/2007/03/technika-automate-common-exploit-tasks/” });ShareThis

<!– –>

March 19th, 2007

ADN – Win32 Active Directory Navigator

ADN – Active Directory Navigator is a little tool to visually explore an Active Directory and perform a simple dictionary attack against users’ password.
You can download the tool here:

ADN – Active Directory Navigator
MD5 4a1e3bb33a25d91d7d7a70877f8374ef
SHA1 a0bf80e9426835b88cc6604784d2d949efe5645f
Notes: It requires .NET framework and PCSoft framework

SHARETHIS.addEntry({ title: “ADN – Win32 Active Directory Navigator”, url: “http://www.darknet.org.uk/2007/03/adn-win32-active-directory-navigator/” });ShareThis

<!– –>

March 15th, 2007

Stompy – The Web Application Session Analyzer Tool

A new tool dealing with web sessions was recently announced, it’s called stompy, a free tool to perform a fairly detailed black-box assessment of WWW session identifier generation algorithms. Session IDs are commonly used to track authenticated users, and as such, whenever they’re predictable or simply vulnerable to brute-force attacks, we do have a problem.
The [...]

SHARETHIS.addEntry({ title: “Stompy – The Web Application Session Analyzer Tool”, url: “http://www.darknet.org.uk/2007/03/stompy-the-web-application-session-analyzer-tool/” });ShareThis

<!– –>

March 8th, 2007

PReplay – A pcap Network Traffic Replay Tool for Windows

There are not many good tools for replaying traffic, most people use WireShark (formely known as Ethereal) for capturing the traffic, but what happens if you want to take that capture and reply it over the wire?
Someone has this problem so they decided to code their own solution, thankfully for us! There are quite a [...]

SHARETHIS.addEntry({ title: “PReplay – A pcap Network Traffic Replay Tool for Windows”, url: “http://www.darknet.org.uk/2007/03/preplay-a-pcap-network-traffic-replay-tool-for-windows/” });ShareThis

<!– –>

March 1st, 2007

A Collection of Web Backdoors & Shells – cmdasp cmdjsp jsp-reverse php-backdoor

Michael Daw has collected some WEB backdoors to exploit vulnerable file upload facilities and others. It’s a pretty useful library for a variety of situations, especially for those doing web application security audits and web app security.
Understanding how these backdoors work can also help security administrators implement firewalling and security policies to mitigate obvious attacks.

All [...]

SHARETHIS.addEntry({ title: “A Collection of Web Backdoors & Shells – cmdasp cmdjsp jsp-reverse php-backdoor”, url: “http://www.darknet.org.uk/2007/03/a-collection-of-web-backdoors-shells-cmdasp-cmdjsp-jsp-reverse-php-backdoor/” });ShareThis

<!– –>

February 26th, 2007

ADTool – Active Directory Domain Listing Tool

ADtool is a neat tool to help you list all the machines that are part of an Active Directory driven domain or network.
It is intended to help pentesters and admins in their day to day work, there are some other tools that can accomplish the work for listing domain servers, but unfortunately all other tools [...]

SHARETHIS.addEntry({ title: “ADTool – Active Directory Domain Listing Tool”, url: “http://www.darknet.org.uk/2007/02/adtool-active-directory-domain-listing-tool/” });ShareThis

<!– –>

February 23rd, 2007

LFT – Layer Four Traceroute and WhoB

LFT
LFT, short for Layer Four Traceroute, is a sort of ‘traceroute’ that often works much faster (than the commonly-used Van Jacobson method) and goes through many configurations of packet-filters (firewalls). More importantly, LFT implements numerous other features including AS number lookups through several reliable sources, loose source routing, netblock name lookups, et al.
What makes LFT [...]

SHARETHIS.addEntry({ title: “LFT – Layer Four Traceroute and WhoB”, url: “http://www.darknet.org.uk/2007/02/lft-layer-four-traceroute-and-whob/” });ShareThis

<!– –>

February 20th, 2007

Fierce Domain Scanner Released – Domain Reconnaissance Tool

Fierce domain scan was born out of personal frustration after performing a web application security audit. It is traditionally very difficult to discover large swaths of a corporate network that is non-contiguous. It’s terribly easy to run a scanner against an IP range, but if the IP ranges are nowhere near one another you can [...]

SHARETHIS.addEntry({ title: “Fierce Domain Scanner Released – Domain Reconnaissance Tool”, url: “http://www.darknet.org.uk/2007/02/fierce-domain-scanner-released-domain-reconnaissance-tool/” });ShareThis

<!– –>

February 17th, 2007

sqlmap – Automated Blind SQL Injection Tool

sqlmap is an automatic blind SQL injection tool, developed in python, capable of enumerating an entire remote database, performing an active database fingerprint and much more. The aim of this project is to implement a fully functional database mapper tool which takes advantages of web application programming security flaws which lead to SQL injection vulnerabilities.

Features

Test [...]

SHARETHIS.addEntry({ title: “sqlmap – Automated Blind SQL Injection Tool”, url: “http://www.darknet.org.uk/2007/02/sqlmap-automated-blind-sql-injection-tool/” });ShareThis

<!– –>

February 14th, 2007

THC-Hydra – The Fast and Flexible Network Login Hacking Tool

THC-Hydra rocks, it’s pretty much the most up to date and currently developed password brute forcing tool around at the moment.
It supports a LOT of services and protocols too.
Number one of the biggest security holes are passwords, as every password security study shows. Hydra is a parallelized login cracker which supports numerous protocols to attack. [...]

SHARETHIS.addEntry({ title: “THC-Hydra – The Fast and Flexible Network Login Hacking Tool”, url: “http://www.darknet.org.uk/2007/02/thc-hydra-the-fast-and-flexible-network-login-hacking-tool/” });ShareThis

<!– –>

February 12th, 2007

AccessDiver – Web Site Security Testing Tool

AccessDiver is a security tester for WEB sites. It incorporates a set of powerful features which help you find and organize failures and weaknesses from your web site.
AccessDiver can detect security failures on your web pages. It has multiple efficient tools which will verify the robustness of your accounts and directories [...]

SHARETHIS.addEntry({ title: “AccessDiver – Web Site Security Testing Tool”, url: “http://www.darknet.org.uk/2007/02/accessdiver-web-site-security-testing-tool/” });ShareThis

<!– –>

February 5th, 2007

Caecus – Web Brute Forcing Tool with OCR Support

Caecus is a unique tool which can bruteforce some OCR form based protections.
As far as we know at Darknet, this is the only publicly available OCR brute forcing tool.
These scripts generates a digital image as an extra layer of security called OCR. Some versions of this script also use session id’s to keep track [...]

SHARETHIS.addEntry({ title: “Caecus – Web Brute Forcing Tool with OCR Support”, url: “http://www.darknet.org.uk/2007/02/caecus-web-brute-forcing-tool-with-ocr-support/” });ShareThis

<!– –>

February 2nd, 2007

Odysseus Win32 Proxy & Telemachus HTTP Transaction Analysis

Introducing a pair of tools that go well together and give you some good control for HTTP transaction analysis and looking at the security of web applications.
Odysseus is a tool designed for testing the security of web applications.
Odysseus is a proxy server, which acts as a man-in-the-middle during an HTTP session. A typical HTTP proxy [...]

SHARETHIS.addEntry({ title: “Odysseus Win32 Proxy & Telemachus HTTP Transaction Analysis”, url: “http://www.darknet.org.uk/2007/02/odysseus-win32-proxy-telemachus-http-transaction-analysis/” });ShareThis

<!– –>

January 30th, 2007

Burp Proxy & Burp Suite – Attacking Web Applications

I love the Burp Suite, I really do. It’s pretty much my favourite local proxy program and my favourite suite of tools for security testing web applications (especially the session investigation and manipulation parts).
Another great thing is it’s cross platform, so you don’t have to learn different tools for Windows and Linux.

Basically Burp suite is [...]

SHARETHIS.addEntry({ title: “Burp Proxy & Burp Suite – Attacking Web Applications”, url: “http://www.darknet.org.uk/2007/01/burp-proxy-burp-suite-attacking-web-applications/” });ShareThis

<!– –>

January 27th, 2007

Introducing WHCC – Web Hack Control Center

Web Hack Control Center is a GUI based web server vulnerability scanner or assessment tool. This application gives you the means to identify which security vulnerabilities exist on your web servers by scanning them for the most popular server exploits. WHCC contains a database of thousands of exploits for a variety of web servers. This [...]

SHARETHIS.addEntry({ title: “Introducing WHCC – Web Hack Control Center”, url: “http://www.darknet.org.uk/2007/01/introducing-whcc-web-hack-control-center/” });ShareThis

<!– –>

January 25th, 2007

Technitium MAC Address Changer v4 (TMACv4) Released

Technitium MAC Address Changer v4 (TMACv4 C4) has been officially released.
Technitium MAC Address Changer allows you to change Machine Access Control (MAC) Address of your Network Interface Card (NIC) irrespective to your NIC manufacturer or its driver. It has a very simple user interface and provides ample of information regarding each NIC in the machine. [...]

SHARETHIS.addEntry({ title: “Technitium MAC Address Changer v4 (TMACv4) Released”, url: “http://www.darknet.org.uk/2007/01/technitium-mac-address-changer-v4-tmacv4-released/” });ShareThis

<!– –>

January 23rd, 2007

SIP Proxy – VoIP Security Testing Tool

SIP Proxy is an Open Source VoIP security test tool which has been developed by the students Philipp Haupt and Matthias Halimann during their diploma thesis and second student research project at the University of Applied Sciences Rapperswil.
With SIP Proxy you will have the opportunity to eavesdrop and manipulate SIP traffic. Furthermore, predefined security test [...]

SHARETHIS.addEntry({ title: “SIP Proxy – VoIP Security Testing Tool”, url: “http://www.darknet.org.uk/2007/01/sip-proxy-voip-security-testing-tool/” });ShareThis

<!– –>

January 19th, 2007

Wep0ff – Wireless WEP Key Cracker Tool

Wep0ff is new tool to crack WEP-key without access to AP by mount fake access point attack against WEP-based wireless clients.
It uses combination of fragmentation and evil twin attacks to generate
traffic which can be used for KoreK-style WEP-key recovery.
This tool can be used to mount fake access point attack against WEP-based wireless clients.

This code tested [...]

SHARETHIS.addEntry({ title: “Wep0ff – Wireless WEP Key Cracker Tool”, url: “http://www.darknet.org.uk/2007/01/wep0ff-wireless-wep-key-cracker-tool/” });ShareThis

<!– –>

January 15th, 2007

SPIKE Proxy – Application Level Security Assessment

SPIKE Proxy is part of the SPIKE Application Testing Suite, It functions as an HTTP and HTTPS proxy, and allows the web developer or web application auditor low level access to the entire web application interface, while also providing a bevy of automated tools and techniques for discovering common problems. These automated tools include:

Automated SQL [...]

SHARETHIS.addEntry({ title: “SPIKE Proxy – Application Level Security Assessment”, url: “http://www.darknet.org.uk/2007/01/spike-proxy-application-level-security-assessment/” });ShareThis

<!– –>

January 12th, 2007

Nmapview – Graphical Interface (GUI) for Nmap on Windows

Finally a replacement for the way outdated and rather crappy NmapFE!
Unfortunately sometimes we do have to actually use Windows, and Nmap cleverly overcame the problems with raw sockets on Windows SP2 by using ATM frames instead, so it’s cool.
Now we just need a decent GUI so it fits into the whole scheme of things, and [...]

SHARETHIS.addEntry({ title: “Nmapview – Graphical Interface (GUI) for Nmap on Windows”, url: “http://www.darknet.org.uk/2007/01/nmapview-graphical-interface-gui-for-nmap-on-windows/” });ShareThis

<!– –>

January 10th, 2007

AttackAPI 2.0 Alpha – JavaScript Hacking Suite

AttackAPI provides simple and intuitive web programmable interface for composing attack vectors with JavaScript and other client (and server) related technologies. The current release supports several browser based attacking techniques, simple but powerful JavaScript console and powerful attack channel and associated API for controlling zombies.

AttackAPI 2.0 branch is a lot better then the 1.x. Now [...]

SHARETHIS.addEntry({ title: “AttackAPI 2.0 Alpha – JavaScript Hacking Suite”, url: “http://www.darknet.org.uk/2007/01/attackapi-20-alpha-javascript-hacking-suite/” });ShareThis

<!– –>

January 6th, 2007

LMCrack – Windows LanMan Hash Cracking Tool with Download

As a security consultant, job functions include Penetration Testing and Vulnerability Assessments. The aim of these types of engagements is to demonstrate risk to the customer. One of the steps involved in demonstrating risk is password auditing (”cracking”) in order to assess the strength and quality of passwords in use in the environment.
On a Windows [...]

SHARETHIS.addEntry({ title: “LMCrack – Windows LanMan Hash Cracking Tool with Download”, url: “http://www.darknet.org.uk/2007/01/lmcrack-windows-lanman-hash-cracking-tool-with-download/” });ShareThis

<!– –>

January 2nd, 2007

Cain & Abel – Download the Super Fast and Flexible Password Cracker with Network Sniffing

Cain & Abel is easily one of our favourite password crackers here at Darknet, especially because it’s oldskool but still under development, unlike most other projects which have been abandoned as time passed.
Cain & Abel has some awesome stuff built in like native network sniffing and network password grabbing.

Cain & Abel is a password recovery [...]

SHARETHIS.addEntry({ title: “Cain & Abel – Download the Super Fast and Flexible Password Cracker with Network Sniffing”, url: “http://www.darknet.org.uk/2007/01/cain-abel-download-the-super-fast-and-flexible-password-cracker-with-network-sniffing/” });ShareThis

<!– –>

December 31st, 2006

wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool

WWWhack is a brute force utility that will try to crack web sites guarded by an web access password. This utility can use a word file or try all possible combinations, and by trial-and-error, will attempt to find a combination of username/password that is accepted by the web server.
This shows the weakness in securing sensitive [...]

SHARETHIS.addEntry({ title: “wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool”, url: “http://www.darknet.org.uk/2006/12/wwwhack-19-download-wwwhack19zip-web-hacking-tool/” });ShareThis

<!– –>

December 29th, 2006

GoldenEye (GoldEye) Password Cracker – Download goldeye.zip or goldeneye.zip

GoldenEye is a brute-force hacking program and was written for web-masters to test the security of their own sites. This is an oldskool file, a lot of people are still looking for this.
It should not be use by others to hack sites – this would be illegal! Under no circumstances should the author or any [...]

SHARETHIS.addEntry({ title: “GoldenEye (GoldEye) Password Cracker – Download goldeye.zip or goldeneye.zip”, url: “http://www.darknet.org.uk/2006/12/goldeneye-goldeye-password-cracker-download-goldeyezip-or-goldeneyezip/” });ShareThis

<!– –>

December 28th, 2006

TXDNS 2.0.0 Released – DNS Digger for Brute Force

TXDNS 2.0.0 has been released.
TXDNS is a Win32 aggressive multithreaded DNS digger. Capable of placing, on the wire, thousands of DNS queries per minute. TXDNS main goal is to expose a domain namespace trough a number of techniques:

Typos

TLD rotation

Dictionary attack

Brute force

This new version features a distributed model which further boosts TXDNS’s parallelism and performance. This [...]

SHARETHIS.addEntry({ title: “TXDNS 2.0.0 Released – DNS Digger for Brute Force”, url: “http://www.darknet.org.uk/2006/12/txdns-200-released-dns-digger-for-brute-force/” });ShareThis

<!– –>

December 20th, 2006

XSS Shell v0.3.9 – Cross Site Scripting Backdoor Tool

XSS Shell is a powerful XSS backdoor which allows interactively getting control over a Cross-site Scripting (XSS) vulnerability in a web application. Demonstrates the real power and damage of Cross-site Scripting attacks.
WHAT IS XSS SHELL ?
XSS Shell is powerful a XSS backdoor and zombie manager. This concept first presented by XSS-Proxy (http://xss-proxy.sourceforge.net/). Normally in XSS [...]

SHARETHIS.addEntry({ title: “XSS Shell v0.3.9 – Cross Site Scripting Backdoor Tool”, url: “http://www.darknet.org.uk/2006/12/xss-shell-v039-cross-site-scripting-backdoor-tool/” });ShareThis

<!– –>

December 18th, 2006

SinFP 2.0.4 – OS Detection – Now Works On Windows

SinFP is a new approach to OS fingerprinting, which bypasses limitations that nmap has.
Nmap approaches to fingerprinting as shown to be efficient for years. Nowadays, with the omni-presence of stateful filtering devices, PAT/NAT configurations and emerging packet normalization technologies, its approach to OS fingerprinting is becoming to be obsolete.
SinFP uses the aforementioned limitations as a [...]

SHARETHIS.addEntry({ title: “SinFP 2.0.4 – OS Detection – Now Works On Windows”, url: “http://www.darknet.org.uk/2006/12/sinfp-204-os-detection-now-works-on-windows/” });ShareThis

<!– –>

December 13th, 2006

Backframe (Formerly Backweb) JavaScript Attack Console

There has been a recent release of Backframe (Formerly Backweb) Attack Console.
Backframe Attack Console was started as an experiment to create a full featured attack console for exploiting web browsers, web users and remote applications. Those who are familiar with XSS Proxy or even BEEF might already be familiar with the core principles of the [...]

SHARETHIS.addEntry({ title: “Backframe (Formerly Backweb) JavaScript Attack Console”, url: “http://www.darknet.org.uk/2006/12/backframe-formerly-backweb-javascript-attack-console/” });ShareThis

<!– –>

December 8th, 2006

NMAP 4.20 released

This is just a simple warning to all NMAP users out there. If you’re registered on the announcement mailing list you already now this, otherwise, heads up.
NMAP 4.20 has been released with something that looks promising. 2nd generation OS detection. The changelog is available here.
Enjoy!

SHARETHIS.addEntry({ title: “NMAP 4.20 released”, url: “http://www.darknet.org.uk/2006/12/nmap-420-released/” });ShareThis

<!– –>

December 5th, 2006

Metasploit 3.0 Beta 3 Released

The Metasploit Framework is an advanced open-source exploit development platform. The 3.0 tree represents a complete rewrite of the 2.0 codebase and provides a scalable and extensible framework for security tool development. The 3.0 Beta 3 release includes support for exploit automation, 802.11 wireless packet injection, and kernel-mode payloads.
Windows users are now presented with a [...]

SHARETHIS.addEntry({ title: “Metasploit 3.0 Beta 3 Released”, url: “http://www.darknet.org.uk/2006/12/metasploit-30-beta-3-released/” });ShareThis

<!– –>

November 27th, 2006

Metasploit 2.7 Released – Automated Hacking

The Metasploit Framework is an advanced open-source exploit development platform. The 2.7 release includes three user interfaces, 157 exploits and 76 payloads.The Framework will run on any modern operating system that has a working Perl interpreter. The Windows installer includes a slimmed-down version of the Cygwin environment.
Windows users are encouraged to update as soon [...]

SHARETHIS.addEntry({ title: “Metasploit 2.7 Released – Automated Hacking”, url: “http://www.darknet.org.uk/2006/11/metasploit-27-released-automated-hacking/” });ShareThis

<!– –>

November 22nd, 2006

Web 2.0 Hacking with Firefox and it’s plugins

A dream come true, would I say… recently found this article on securityfocus, it’s awesome… all that you need (beside Firefox) is pointed out in the article, so go on, what are you waiting for…
http://www.securityfocus.com/infocus/1879

SHARETHIS.addEntry({ title: “Web 2.0 Hacking with Firefox and it’s plugins”, url: “http://www.darknet.org.uk/2006/11/web-20-hacking-with-firefox-and-its-plugins/” });ShareThis

<!– –>

November 21st, 2006

AttackAPI 0.8 JavaScript Hacking Suite Available

AttackAPI provides simple and intuitive web programmable interface for composing attack vectors with JavaScript and other client (and server) related technologies. The current release supports several browser based attacking techniques, simple but powerful JavaScript console and powerful attack channel and associated API for controlling zombies.
The standalone components of the library can be found at the [...]

SHARETHIS.addEntry({ title: “AttackAPI 0.8 JavaScript Hacking Suite Available”, url: “http://www.darknet.org.uk/2006/11/attackapi-08-javascript-hacking-suite-available/” });ShareThis

<!– –>

November 17th, 2006

w3bfukk0r 0.2 Forced Browsing Tool Released

w3bfukk0r is a forced browsing tool, it basically scans webservers (HTTP/HTTPS) for a directory by using HTTP HEAD command and brute force mechanism based on a word list. Features:

HTTP/HTTPS(SSL) support
Banner grabbing
User-Agent faking
Proxy support (HTTP/S)
Reports found and non-existend directories

Example output:

w3bfukk0r http://nion.modprobe.de
Starting w3bfukk0r 0.2
Scanning http://nion.modprobe.de/ with 76 words from words.txt

Found http://nion.modprobe.de/tmp/ (HTTP 200)
Found http://nion.modprobe.de/blog/ (HTTP 200)
Found http://nion.modprobe.de/img/ [...]

SHARETHIS.addEntry({ title: “w3bfukk0r 0.2 Forced Browsing Tool Released”, url: “http://www.darknet.org.uk/2006/11/w3bfukk0r-02-forced-browsing-tool-released/” });ShareThis

<!– –>

November 15th, 2006

Windows XP ToolBox

This a very old article based on my tiny document “WinDOS tools” which was for a short while on Blackcode, before it was shutdown… It was an article to impres my friends, but found some usefull stuff two when writing it… so let’s take a look at some “hidden” Windows XP programs…
MAC Address (getmac)
It seems [...]

SHARETHIS.addEntry({ title: “Windows XP ToolBox”, url: “http://www.darknet.org.uk/2006/11/windows-xp-toolbox/” });ShareThis

<!– –>

November 14th, 2006

Installing Nessus on Debian-based OSs like Ubuntu

With this simple tutorial I will explain how to install Nessus client (nessus) and Nessus Daemon (nessusd) and properly register it, so you don’t end up with the limitations of a non-registered version of the vulnerability scanner.
Installing:
I personally use apt-, however, you may choose any other package manager.
apt-get install nessus nessusd -y
This will install the [...]

SHARETHIS.addEntry({ title: “Installing Nessus on Debian-based OSs like Ubuntu”, url: “http://www.darknet.org.uk/2006/11/installing-nessus-on-debian-based-oss-like-ubuntu/” });ShareThis

<!– –>

November 11th, 2006

Medusa Fast Parallel Password Cracker 1.3 Released

Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application:

Thread-based parallel testing. Brute-force testing can be performed against multiple hosts, users or passwords concurrently.
Flexible user [...]

SHARETHIS.addEntry({ title: “Medusa Fast Parallel Password Cracker 1.3 Released”, url: “http://www.darknet.org.uk/2006/11/medusa-fast-parallel-password-cracker-13-released/” });ShareThis

<!– –>

November 8th, 2006

Taof 0.1 Network Protocol Fuzzer Released

Taof is a GUI cross-platform Python generic network protocol fuzzer. It has been designed for minimizing set-up time during fuzzing sessions and it is especially useful for fast testing of proprietary or undocumented protocols.

Taof aids the researcher during the data retrieval process by providing a transparent proxy functionality that forwards and logs requests from a [...]

SHARETHIS.addEntry({ title: “Taof 0.1 Network Protocol Fuzzer Released”, url: “http://www.darknet.org.uk/2006/11/taof-01-network-protocol-fuzzer-released/” });ShareThis

<!– –>

November 2nd, 2006

Wyd – Automated Password Profiling Tool

Wyd is a neat tool I found recently for Password Profiling.
In current IT security environments, files and services are often password protected. In certain situation it is required to get access to files and/or data even when they are protected and the password is unknown.

wyd.pl was born out of those two of situations:

A penetration test [...]

SHARETHIS.addEntry({ title: “Wyd – Automated Password Profiling Tool”, url: “http://www.darknet.org.uk/2006/11/wyd-automated-password-profiling-tool/” });ShareThis

<!– –>

October 28th, 2006

BobCat SQL Injection Tool based on Data Thief

BobCat is a tool to aid a security consultant in taking full advantage of SQL injection vulnerabilities. It is based on a tool named “Data Thief” that was published as PoC by appsecinc. BobCat can list the linked severs, database schema, and allow the retrieval of data from any table that the current application user [...]

SHARETHIS.addEntry({ title: “BobCat SQL Injection Tool based on Data Thief”, url: “http://www.darknet.org.uk/2006/10/bobcat-sql-injection-tool-based-on-data-thief/” });ShareThis

<!– –>

October 22nd, 2006

Odysseus Proxy for MITM Attacks Testing Security of Web Applications.

Odysseus is a proxy server, which acts as a man-in-the-middle during an HTTP session. A typical HTTP proxy will relay packets to and from a client browser and a web server. Odysseus will intercept an HTTP session’s data in either direction and give the user the ability to alter the data before transmission.

For example, during [...]

SHARETHIS.addEntry({ title: “Odysseus Proxy for MITM Attacks Testing Security of Web Applications.”, url: “http://www.darknet.org.uk/2006/10/odysseus-proxy-for-mitm-attacks-testing-security-of-web-applications/” });ShareThis

<!– –>

October 16th, 2006

Download pwdump 1.4.2 and fgdump 1.3.4 – Windows Password Dumping

New versions of the ultracool tools pwdump (1.4.2) and fgdump (1.3.4) have been released.
Both versions provide some feature upgrades as well as bug fixes. Folks with really old versions of either program should definitely look at upgrading, since there are numerous performance improvements and full multithreading capabilities in both packages.
If you don’t know..what are pwdump6 [...]

SHARETHIS.addEntry({ title: “Download pwdump 1.4.2 and fgdump 1.3.4 – Windows Password Dumping”, url: “http://www.darknet.org.uk/2006/10/download-pwdump-142-and-fgdump-134-windows-password-dumping/” });ShareThis

<!– –>

October 9th, 2006

Inprotect 0.22.5 Released – Web Interface for Nessus & Nmap

A new revision of Inprotect has just been released, 0.22.5 in order to fix bugs and implement feature requests submitted by the development team and users. Existing users are recommended to upgrade.
Inprotect is a web interface for Nessus and Nmap security scanners, released under GNU/GPL license. This version has the following enhancements:

Improved and fixed [...]

SHARETHIS.addEntry({ title: “Inprotect 0.22.5 Released – Web Interface for Nessus & Nmap”, url: “http://www.darknet.org.uk/2006/10/inprotect-0225-released-web-interface-for-nessus-nmap/” });ShareThis

<!– –>

October 4th, 2006

Echo Mirage – A Generic Network Proxy

Echo Mirage is a generic network proxy. It uses DLL injection and function hooking to redirect network related function calls so that data transmitted and received by local applications can be observed and modified.
Think of it as Odysseus (or Burp, if you prefer) that will proxy (almost) anything…

Windows encryption and OpenSSL functions are also hooked [...]

SHARETHIS.addEntry({ title: “Echo Mirage – A Generic Network Proxy”, url: “http://www.darknet.org.uk/2006/10/echo-mirage-a-generic-network-proxy/” });ShareThis

<!– –>

October 2nd, 2006

arp-sk – ARP Swiss Army Knife Tool

arp-sk is basically an ARP Traffic Generation Tool. It’s quite old but still very useful!
There are 2 basics mode:
- who-has: build a request ARP message.
- reply: build a reply ARP message (default)
Other advanced modes should come very soon
- arping: send a who-has to every host on the LAN to [...]

SHARETHIS.addEntry({ title: “arp-sk – ARP Swiss Army Knife Tool”, url: “http://www.darknet.org.uk/2006/10/arp-sk-arp-swiss-army-knife-tool/” });ShareThis

<!– –>

October 1st, 2006

BeEF – Browser Exploitation Framework

There’s been a lot of nice Web relevant testing and hacking tools coming out lately, I’ve gotten quite a collection to post about, so do try them out and let me know what you think.
BeEF is the browser exploitation framework. Its purposes in life is to provide an easily integratable framework to demonstrate the impact [...]

SHARETHIS.addEntry({ title: “BeEF – Browser Exploitation Framework”, url: “http://www.darknet.org.uk/2006/10/beef-browser-exploitation-framework/” });ShareThis

<!– –>

September 28th, 2006

Security Compass Web Application Analysis Tool – SWAAT

Announcing a new web application source code analysis tool called the Securitycompass Web Application Analysis Tool or SWAAT.
You may know it as a static analysis tool.
Currently in its beta release, this .Net command-line tool searches through source code for potential vulnerabilities in the following languages:

Java and JSP
ASP.Net
PHP

Using xml-based signature files, it searches for common functions [...]

SHARETHIS.addEntry({ title: “Security Compass Web Application Analysis Tool – SWAAT”, url: “http://www.darknet.org.uk/2006/09/security-compass-web-application-analysis-tool-swaat/” });ShareThis

<!– –>

September 22nd, 2006

SIFT Web Method Search Tool

SIFT has just published a world-first tool for identifying rogue web methods. The Web Method Search tool is a Windows based application that uses a hybrid dictionary attack in an attempt to find unpublished administrative and other web services functions.

As web services are becoming more prevalent, poor security practices from previous generations of application architectures [...]

SHARETHIS.addEntry({ title: “SIFT Web Method Search Tool”, url: “http://www.darknet.org.uk/2006/09/sift-web-method-search-tool/” });ShareThis

<!– –>

September 11th, 2006

LCP – A Good FREE Alternative to L0phtcrack (LC5)

Since Symantec stopped development of L0phtcrack many people have been looking for alternatives.
So don’t forget…

Jack the Ripper is still king
Medusa is good
Ophcrack for Rainbow Tables
And now one more, introducting LCP, which we have talked about before in the article Password Cracking with Rainbowcrack and Rainbow Tables.
LCP is freeware!
The main purpose of LCP program is user [...]

SHARETHIS.addEntry({ title: “LCP – A Good FREE Alternative to L0phtcrack (LC5)”, url: “http://www.darknet.org.uk/2006/09/lcp-a-good-free-alternative-to-l0phtcrack-lc5/” });ShareThis

<!– –>

September 6th, 2006

Brutus Password Cracker – Download brutus-aet2.zip AET2

A lot of people come to Darknet looking for Brutus AET2 (brutus-aet2.zip) to download, but unfortunately due to some stupid Homeland security bullshit I actually had to remove the file or risk having no hosting left..
If you don’t know, Brutus is one of the fastest, most flexible remote password crackers you can get your hands [...]

SHARETHIS.addEntry({ title: “Brutus Password Cracker – Download brutus-aet2.zip AET2″, url: “http://www.darknet.org.uk/2006/09/brutus-password-cracker-download-brutus-aet2zip-aet2/” });ShareThis

<!– –>

August 30th, 2006

AttackAPI 0.5 – JavaScript Security Tools

AttackAPI provides simple and intuitive web programmable interface for composing attack vectors. The project was primary inspired by the JythonShell applet. At its very early stage AttackAPI was a single extensible web enabled python console with a few modules.

The 0.5 release of AttackAPI is purely JavaScript based. This is not a shift in the project [...]

SHARETHIS.addEntry({ title: “AttackAPI 0.5 – JavaScript Security Tools”, url: “http://www.darknet.org.uk/2006/08/attackapi-05-javascript-security-tools/” });ShareThis

<!– –>

August 7th, 2006

Wapiti – Web Application Scanner / Black-box testing

Wapiti allows you to audit the security of your web applications.
It performs “black-box” scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data.
Once it gets this list, Wapiti acts like a fuzzer, injecting payloads [...]

SHARETHIS.addEntry({ title: “Wapiti – Web Application Scanner / Black-box testing”, url: “http://www.darknet.org.uk/2006/08/wapiti-web-application-scanner-black-box-testing/” });ShareThis

<!– –>

August 3rd, 2006

eEye Duster – Dead/Uninitialized Stack Eraser

Duster is the Dead/Uninitialized Stack Eraser, an injectable DLL that causes uninitialized stack and heap memory in its host process to be wiped over with a specific value. It is intended as a crude tool to assist in the run-time discovery of uninitialized memory usage problems by increasing the chances that the host process will [...]

SHARETHIS.addEntry({ title: “eEye Duster – Dead/Uninitialized Stack Eraser”, url: “http://www.darknet.org.uk/2006/08/eeye-duster-deaduninitialized-stack-eraser/” });ShareThis

<!– –>

August 2nd, 2006

eEye Binary Diffing Suite (EBDS)

The eEye Binary Diffing Suite (EBDS) is a free and open source set of utilities for performing automated binary differential analysis. This becomes very useful for reverse engineering patches as well as program updates.

The first tool is BDS, the Binary Diffing Starter from Andre Derek Protas. This tool helps reverse engineers with batch-analysis of patches [...]

SHARETHIS.addEntry({ title: “eEye Binary Diffing Suite (EBDS)”, url: “http://www.darknet.org.uk/2006/08/eeye-binary-diffing-suite-ebds/” });ShareThis

<!– –>

August 1st, 2006

SpikeSource Spike PHP Security Audit Tool

Spike is an Open Source tool based on the popular RATS C based auditing tool implemented for PHP.
The tool Spike basically does static analysis of php code for security exploits, PHP5 and call-time pass-by-reference are currently required, but a PHP4 version is coming out this week.

This tool is especially welcomed by Darknet as there aren’t [...]

SHARETHIS.addEntry({ title: “SpikeSource Spike PHP Security Audit Tool”, url: “http://www.darknet.org.uk/2006/08/spikesource-spike-php-security-audit-tool/” });ShareThis

<!– –>

July 28th, 2006

BASE 1.2.6 Released (Basic Analysis & Security Engine)

We are happy to announce that the 1.2.6 (christine) release of the Basic Analysis and Security Engine (BASE) is available.

BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts [...]

SHARETHIS.addEntry({ title: “BASE 1.2.6 Released (Basic Analysis & Security Engine)”, url: “http://www.darknet.org.uk/2006/07/base-126-released-basic-analysis-security-engine/” });ShareThis

<!– –>

July 25th, 2006

Hping 2 Fixed for Windows XP SP2 (Service Pack 2)

We are happy to announce that Hping 2 works with Windows XP again! Hping support on Windows was never that great.
Darknet is indeed a great fan of Hping! Glad to see it has overcome the Raw sockets problems Windows XP SP2 brought about.
hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to [...]

SHARETHIS.addEntry({ title: “Hping 2 Fixed for Windows XP SP2 (Service Pack 2)”, url: “http://www.darknet.org.uk/2006/07/hping-2-fixed-for-windows-xp-sp2-service-pack-2/” });ShareThis

<!– –>

July 21st, 2006

Freeware MAC Address Changer – Technitium v3.1

I saw a Freeware MAC Address Changing tool today which I thought I’d share with you all, as I used to use SMAC, a nice tool, until the guy started charging for it!
Hopefully this one won’t go the same way.
Technitium MAC Address Changer, which allows you to change Machine Access Control (MAC) Address of your [...]

SHARETHIS.addEntry({ title: “Freeware MAC Address Changer – Technitium v3.1″, url: “http://www.darknet.org.uk/2006/07/freeware-mac-address-changer-technitium-v31/” });ShareThis

<!– –>

July 8th, 2006

WebScarab – Web Application Analysis – New Version

WebScarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. It is written in Java, and is thus portable to many platforms. WebScarab has several modes of operation, implemented by a number of plugins.
In its most common usage, WebScarab operates as an intercepting proxy, allowing the operator to review and [...]

SHARETHIS.addEntry({ title: “WebScarab – Web Application Analysis – New Version”, url: “http://www.darknet.org.uk/2006/07/webscarab-web-application-analysis-new-version/” });ShareThis

<!– –>

July 4th, 2006

Absinthe Blind SQL Injection Tool/Software

Absinthe is a gui-based tool that automates the process of downloading the schema & contents of a database that is vulnerable to Blind SQL Injection.

Absinthe does not aid in the discovery of SQL Injection holes. This tool will only speed up the process of data recovery.
Features:

Automated SQL Injection
Supports MS SQL Server, MSDE, Oracle, Postgres
Cookies / [...]

SHARETHIS.addEntry({ title: “Absinthe Blind SQL Injection Tool/Software”, url: “http://www.darknet.org.uk/2006/07/absinthe-blind-sql-injection-toolsoftware/” });ShareThis

<!– –>

July 3rd, 2006

Universal Hooker – An Ollydbg Plugin

The Universal Hooker is a tool to intercept execution of programs. It enables the
user to intercept calls to API calls inside DLLs, and also arbitrary addresses within the executable file in memory.
Why is it ‘Universal’? There are different ways of hooking functions in a program, for example, it can be done by setting software breakpoints [...]

SHARETHIS.addEntry({ title: “Universal Hooker – An Ollydbg Plugin”, url: “http://www.darknet.org.uk/2006/07/universal-hooker-an-ollydbg-plugin/” });ShareThis

<!– –>

June 30th, 2006

ARP Scanning and Fingerprinting Tool – arp-scan

NTA-Monitor has released the arp-scan detection and fingerprinting tool under the open source (LGPL license) concept.
It has been tested under various Linux based operating systems and seems to work fine.
This will only compile on Linux systems. You will need a C compiler, the “make” utility and the appropriate system header files to compile arp-scan. It [...]

SHARETHIS.addEntry({ title: “ARP Scanning and Fingerprinting Tool – arp-scan”, url: “http://www.darknet.org.uk/2006/06/arp-scanning-and-fingerprinting-tool-arp-scan/” });ShareThis

<!– –>

June 27th, 2006

sqlninja 0.1.0alpha – MS-SQL Injection Tool

sqlninja is a little toy that has been coded during a couple of pen-tests done lately and it is aimed to exploit SQL Injection vulnerabilities on web applications that use Microsoft SQL Server as their back-end.
It borrows some ideas from similar tools like bobcat, but it is more targeted in providing a remote shell even [...]

SHARETHIS.addEntry({ title: “sqlninja 0.1.0alpha – MS-SQL Injection Tool”, url: “http://www.darknet.org.uk/2006/06/sqlninja-010alpha-ms-sql-injection-tool/” });ShareThis

<!– –>

June 22nd, 2006

FireMaster 2.1 – A Firefox Master Password Recovery Tool

FireMaster version 2.1 has been released with its new features and new speed.
Firemaster is the Firefox master password recovery tool. If you have forgotten the master password, then using FireMaster you can find out the master password and get back your lost signon information. It uses various methods such as dictionary, hybrid and brute force [...]

SHARETHIS.addEntry({ title: “FireMaster 2.1 – A Firefox Master Password Recovery Tool”, url: “http://www.darknet.org.uk/2006/06/firemaster-21-a-firefox-master-password-recovery-tool/” });ShareThis

<!– –>

June 21st, 2006

Yersinia 0.7 Released with 802.1x Support – Layer 2 Attack Framework

Yersinia is a network tool designed to take advantage of some weakeness in different network protocols. It pretends to be a solid framework for analyzing and testing the deployed networks and systems.
It’s a very useful for any network based penetration testing or vulnerability assessment. There isn’t many tools working on Layer 2 and this is [...]

SHARETHIS.addEntry({ title: “Yersinia 0.7 Released with 802.1x Support – Layer 2 Attack Framework”, url: “http://www.darknet.org.uk/2006/06/yersinia-07-released-with-8021x-support-layer-2-attack-framework/” });ShareThis

<!– –>

June 19th, 2006

SinFP v2.00 Released – Next Generation OS Detection Tool

OS Fingerprinting is an important part of any penetration test or hack as it allows you focus your efforts a lot more effeciently when point testing, rather than throwing everything at a machine like a script kiddy would. So let’s introduce a new option, other than p0f and xprobe2.

SinFP uses the aforementioned limitations as a [...]

SHARETHIS.addEntry({ title: “SinFP v2.00 Released – Next Generation OS Detection Tool”, url: “http://www.darknet.org.uk/2006/06/sinfp-v200-released-next-generation-os-detection-tool/” });ShareThis

<!– –>

June 15th, 2006

SQL Power Injector v1.1 Released

SQL Power Injector is a graphical application created in .Net 1.1 that helps the penetrating tester to inject SQL commands on a web page.
For now it is SQL Server, Oracle and MySQL compliant, but it is possible to use it with any existing DBMS when using the inline injection (Normal Mode).
Moreover this application will get [...]

SHARETHIS.addEntry({ title: “SQL Power Injector v1.1 Released”, url: “http://www.darknet.org.uk/2006/06/sql-power-injector-v11-released/” });ShareThis

<!– –>

June 13th, 2006

Oedipus – Open Source Web Application Security Analysis

Oedipus is an open source web application security analysis and testing suite written in Ruby by Penetration Testers for Penetration Testers. It is capable of parsing different types of log files off-line and identifying security vulnerabilities. Using the analyzed information, Oedipus can dynamically test web sites for application and web server vulnerabilities.

Oedipus can be broken [...]

SHARETHIS.addEntry({ title: “Oedipus – Open Source Web Application Security Analysis”, url: “http://www.darknet.org.uk/2006/06/oedipus-open-source-web-application-security-analysis/” });ShareThis

<!– –>

May 23rd, 2006

hackers playground… windows?

Only as I am writing these lines I can imagine some people who will start laughing when reading this article… But my dear friends this may be the real thing… will see who will laugh 10 years from now…
I. Introduction
This article was ment to be, because, as you will notice, more and more hacking tools [...]

SHARETHIS.addEntry({ title: “hackers playground… windows?”, url: “http://www.darknet.org.uk/2006/05/hackers-playground-windows/” });ShareThis

<!– –>

May 22nd, 2006

PBNJ 1.14 Released – Diff Your Nmap Results

PBNJ is a network tool that can be used to give an overview of an machine or multiple machines by identifying the details about the services running on them. PBNJ is different from other tools because it is based on using a scan from nmap parsed to amap. PBNJ parses the data from a scan [...]

SHARETHIS.addEntry({ title: “PBNJ 1.14 Released – Diff Your Nmap Results”, url: “http://www.darknet.org.uk/2006/05/pbnj-114-released-diff-your-nmap-results/” });ShareThis

<!– –>

May 22nd, 2006

The Ultimate Net Monitoring Tool – Semantic Traffic Analyzer

Packet sniffing goes hi-tech? What’s wrong with ethereal?
The equipment that technician Mark Klein learned was installed in the National Security Agency’s “secret room” inside AT&T’s San Francisco switching office isn’t some sinister Big Brother box designed solely to help governments eavesdrop on citizens’ internet communications.
Rather, it’s a powerful commercial network-analysis product with all sorts of [...]

SHARETHIS.addEntry({ title: “The Ultimate Net Monitoring Tool – Semantic Traffic Analyzer”, url: “http://www.darknet.org.uk/2006/05/the-ultimate-net-monitoring-tool-semantic-traffic-analyzer/” });ShareThis

<!– –>

May 19th, 2006

Paros Proxy 3.2.12 Released – MITM HTTP and HTTPS Proxy

Paros 3.2.12 is released. This version is a maintenance release which fix a potental 100% cpu consumption issue. All users are recommended to upgrade to this version.
The changes are:
- Use newest external library for HTTP handling.
- Enable/disable spider to POST forms in options panel to avoid generating unwanted traffic (default to enable). This [...]

SHARETHIS.addEntry({ title: “Paros Proxy 3.2.12 Released – MITM HTTP and HTTPS Proxy”, url: “http://www.darknet.org.uk/2006/05/paros-proxy-3212-released-mitm-http-and-https-proxy/” });ShareThis

<!– –>

May 18th, 2006

Sprajax – An Open Source AJAX Security Scanner

Denim Group Ltd. announced today the public release of Sprajax, an open source web application security scanner developed to assess the security of AJAX-enabled web applications.

Sprajax is the first web security scanner developed specifically to scan AJAX web applications for security vulnerabilities. Denim Group, an IT consultancy specializing in web application security, recognized that there [...]

SHARETHIS.addEntry({ title: “Sprajax – An Open Source AJAX Security Scanner”, url: “http://www.darknet.org.uk/2006/05/sprajax-an-open-source-ajax-security-scanner/” });ShareThis

<!– –>

May 17th, 2006

Source Code & Software Security Analysis with BogoSec

Bogosec is essentially a tool for finding security vulnerabilities in source code.
BogoSec aims to increase awareness regarding code security vulnerabilities, while encouraging developers to produce more secure code over time. By simplifying the code scanning process, BogoSec achieves a goal of allowing developers to scan their code regularly and more effectively.

BogoSec is a source code [...]

SHARETHIS.addEntry({ title: “Source Code & Software Security Analysis with BogoSec”, url: “http://www.darknet.org.uk/2006/05/source-code-software-security-analysis-with-bogosec/” });ShareThis

<!– –>

May 16th, 2006

Anonymity – Hiding Your Identity in 2006

Introduction
Anonymity is derived from the greek word ανωνυμία, meaning without a name or name-less. In colloquial use, the term typically refers to a person, and often means that the Ppersonal identity, or personally identifiable information of that person is not known.
The main question is of course, what are you trying to hide? Closely following that [...]

SHARETHIS.addEntry({ title: “Anonymity – Hiding Your Identity in 2006″, url: “http://www.darknet.org.uk/2006/05/anonymity-hiding-your-identity-in-2006/” });ShareThis

<!– –>

May 10th, 2006

SecureDVD – Multiboot Live Security Distro’s

SecureDVD is a DVD with the 10 Best Security related Live CD’s.
Yes that’s right, they authored this DVD based on the recommendations made by Darknet!

Now you can have all your favorite CDs ‘compiled’ into a single DVD. I love this idea.
SecureDVD is available to download, but due to it’s size, only in BitTorrent. You can [...]

SHARETHIS.addEntry({ title: “SecureDVD – Multiboot Live Security Distro’s”, url: “http://www.darknet.org.uk/2006/05/securedvd-multiboot-live-security-distros/” });ShareThis

<!– –>

May 8th, 2006

SinFP – Next Generation OS Detection Tool

OS Fingerprinting is an important part of any penetration test or hack as it allows you focus your efforts a lot more effeciently when point testing, rather than throwing everything at a machine like a script kiddy would. So let’s introduce a new option, other than p0f and xprobe2.
SinFP is a new approach to OS [...]

SHARETHIS.addEntry({ title: “SinFP – Next Generation OS Detection Tool”, url: “http://www.darknet.org.uk/2006/05/sinfp-next-generation-os-detection-tool/” });ShareThis

<!– –>

May 3rd, 2006

Medusa Password Cracker Version 1.1 Now Available For Download

Medusa is a speedy, massively parallel, modular, login brute-forcer for network services created by the geeks at Foofus.net. It currently has modules for the following services: CVS, FTP, HTTP, IMAP, MS-SQL, MySQL, NCP (NetWare), PcAnywhere, POP3, PostgreSQL, rexec, rlogin, rsh, SMB, SMTP (VRFY), SNMP, SSHv2, SVN, Telnet, VmAuthd, VNC, and a generic wrapper module.

While Medusa [...]

SHARETHIS.addEntry({ title: “Medusa Password Cracker Version 1.1 Now Available For Download”, url: “http://www.darknet.org.uk/2006/05/medusa-password-cracker-version-11-now-available-for-download/” });ShareThis

<!– –>

April 28th, 2006

Paros Proxy 3.2.11 Released – MITM HTTP and HTTPS Proxy

Paros 3.2.11 has been released. This version is a maintenance release with a useful feature requested by various users. All users are recommended to upgrade to this version.
One of my favourite proxy options, along side the Burp Proxy (evolved into Burp Suite).

Paros labels itself as MITM Proxy + Spider + Scanner plus anything [...]

SHARETHIS.addEntry({ title: “Paros Proxy 3.2.11 Released – MITM HTTP and HTTPS Proxy”, url: “http://www.darknet.org.uk/2006/04/paros-proxy-3211-released-mitm-http-and-https-proxy/” });ShareThis

<!– –>

April 27th, 2006

Oracle Releases a Default Password Scanner

Oracle is getting serious with security? Again..?
Oracle Corp. has published a collection of software patches that address security vulnerabilities in a range of the company’s products, including its database and application server software. As part of this update, it also released a tool designed to ferret out commonly used default passwords that theoretically could [...]

SHARETHIS.addEntry({ title: “Oracle Releases a Default Password Scanner”, url: “http://www.darknet.org.uk/2006/04/oracle-releases-a-default-password-scanner/” });ShareThis

<!– –>

April 26th, 2006

Alternatives to FrSIRT – Where to Download Exploits?

Since FrSIRT closed it’s public archives and starting charging for access (blaming it on French laws…), people have been wondering where they can their dose of Exploits..For legitimate purposes obviously.
Security Forest
The most comprehensive collection in my opinion comes from SecurityForest. They also have a BETA exploitation framework in development, something like a Metasploit, but with [...]

SHARETHIS.addEntry({ title: “Alternatives to FrSIRT – Where to Download Exploits?”, url: “http://www.darknet.org.uk/2006/04/alternatives-to-frsirt-where-to-download-exploits/” });ShareThis

<!– –>

April 20th, 2006

Symantec Dumps L0phtcrack Password Cracker

Man this blows.
It seems it happened quite a while ago, I only just found out about it recently though when I was checking to see if L0phtcrack had been updated past version 5.

Symantec has quietly pulled the plug on sales of L0phtCrack, the venerable password auditing and recovery application.
The decision to discontinue support for L0phtCrack, [...]

SHARETHIS.addEntry({ title: “Symantec Dumps L0phtcrack Password Cracker”, url: “http://www.darknet.org.uk/2006/04/symantec-dumps-l0phtcrack-password-cracker/” });ShareThis

<!– –>

April 17th, 2006

Top 15 Security/Hacking Tools & Utilities

1. Nmap
I think everyone has heard of this one, recently evolved into the 4.x series.
Nmap (”Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what [...]

SHARETHIS.addEntry({ title: “Top 15 Security/Hacking Tools & Utilities”, url: “http://www.darknet.org.uk/2006/04/top-15-securityhacking-tools-utilities/” });ShareThis

<!– –>

April 14th, 2006

bsqlbf 1.1 – Blind SQL Injection Tool

bsqlbf is a tool for Blind SQL Injection attacks, a pretty nifty one too!
The author says there are similar tools about, but he’s tried to combine all the techniques into one compact but complete tool.

# CHANGELOG:
# -get now support resume (with -start option)
# -get to fetch files (thank you ilo AGAIN)
# + -time option added [...]

SHARETHIS.addEntry({ title: “bsqlbf 1.1 – Blind SQL Injection Tool”, url: “http://www.darknet.org.uk/2006/04/bsqlbf-11-blind-sql-injection-tool/” });ShareThis

<!– –>

April 12th, 2006

Paros Proxy 3.2.10 Released – MITM HTTP and HTTPS Proxy

One of my favourite proxy options, along side the Burp Proxy (evolved into Burp Suite).
I’ll definately talk more about the Burp Suite later as it’s excellent for testing anything web-based.

Paros labels itself as MITM Proxy + Spider + Scanner plus anything else you want it to be, it is a pretty neat piece of software.
It’s [...]

SHARETHIS.addEntry({ title: “Paros Proxy 3.2.10 Released – MITM HTTP and HTTPS Proxy”, url: “http://www.darknet.org.uk/2006/04/paros-proxy-3210-released-mitm-http-and-https-proxy/” });ShareThis

<!– –>

March 28th, 2006

Ophcrack 2.2 Password Cracker Released

Ophcrack is a Windows password cracker based on a time-memory trade-off using rainbow tables. This is a new variant of Hellman’s original trade-off, with better performance. It recovers 99.9% of alphanumeric passwords in seconds.
We mentioned it in our RainbowCrack and Rainbow Tables article.

Changes:

(feature) support of the new table set (alphanum + 33 special chars – [...]

SHARETHIS.addEntry({ title: “Ophcrack 2.2 Password Cracker Released”, url: “http://www.darknet.org.uk/2006/03/ophcrack-22-password-cracker-released/” });ShareThis

<!– –>

March 23rd, 2006

kArp – Linux Kernel Level ARP Hijacking/Spoofing Utility

Introduction
kArp is a linux patch that allows one to implement ARP hijacking in the kernel, but control it easily via userland. You may configure, enable and disable kArp via ProcFS or the sysctl mechanism.
kArp is implemented almost on the device driver level. Any ethernet driver (including 802.11 drivers) is supported. The kArp code is [...]

SHARETHIS.addEntry({ title: “kArp – Linux Kernel Level ARP Hijacking/Spoofing Utility”, url: “http://www.darknet.org.uk/2006/03/karp-linux-kernel-level-arp-hijackingspoofing-utility/” });ShareThis

<!– –>

March 21st, 2006

pwdump6 version 1.2 BETA Released

Version 1.2 (Beta) of the pwdump6 software has been released.
There are three major changes from the previous version:

Uses “random” named pipes (GUIDs) to allow concurrent copies of the client to run. This is predominately for the next version of fgdump, which will be multithreaded.
Will turn off password histories if the requisite APIs are not available [...]

SHARETHIS.addEntry({ title: “pwdump6 version 1.2 BETA Released”, url: “http://www.darknet.org.uk/2006/03/pwdump6-version-12-beta-released/” });ShareThis

<!– –>

March 12th, 2006

JTR (Password Cracking) – John the Ripper 1.7 Released – FINALLY

The new “features” this time are primarily performance improvements possible due to the use of better algorithms (bringing more inherent parallelism of trying multiple candidate passwords down to processor instruction level), better optimized code, and new hardware capabilities (such as AltiVec available on PowerPC G4 and G5 processors).
In particular, John the Ripper 1.7 is a [...]

SHARETHIS.addEntry({ title: “JTR (Password Cracking) – John the Ripper 1.7 Released – FINALLY”, url: “http://www.darknet.org.uk/2006/03/jtr-password-cracking-john-the-ripper-17-released-finally/” });ShareThis

<!– –>

February 27th, 2006

Password Cracking with Rainbowcrack and Rainbow Tables

What is RainbowCrack & Rainbow Tables?
RainbowCrack is a general propose implementation of Philippe Oechslin’s faster time-memory trade-off technique.
In 1980 Martin Hellman described a cryptanalytic time-memory trade-off which reduces the time of cryptanalysis by using precalculated data stored in memory. This technique was improved by Rivest before 1982 with the introduction of distinguished points which drastically [...]

SHARETHIS.addEntry({ title: “Password Cracking with Rainbowcrack and Rainbow Tables”, url: “http://www.darknet.org.uk/2006/02/password-cracking-with-rainbowcrack-and-rainbow-tables/” });ShareThis

<!– –>

February 18th, 2006

NSA Tracking Nmap and Other Open Source Tools

Check it out!

US President George W. Bush visited the NSA headquarters at Fort Meade in January 2006. A wall-sized status screen in the background displays the latest versions of Nmap and some of our other favorite open source tools. Pictures were printed in the February 6, 2006 edition of Newsweek (article) and the Jan 27 [...]

SHARETHIS.addEntry({ title: “NSA Tracking Nmap and Other Open Source Tools”, url: “http://www.darknet.org.uk/2006/02/nsa-tracking-nmap-and-other-open-source-tools/” });ShareThis

<!– –>

February 17th, 2006

BackTrack – A merger between WHAX and Auditor

BackTrack is the result of the merging of two Innovative Penetration Testing live Linux distributions namely Whax and Auditor.

Combining the best features from both distributions, and paying special attention to small details, this is probably the best version of either distributions to ever come out.

Based on SLAX (Slackware), BackTrack provides user modularity. This means the [...]

SHARETHIS.addEntry({ title: “BackTrack – A merger between WHAX and Auditor”, url: “http://www.darknet.org.uk/2006/02/backtrack-a-merger-between-whax-and-auditor/” });ShareThis

<!– –>

February 15th, 2006

Nmap 4.01 Released – New Features

Nmap (”Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts [...]

SHARETHIS.addEntry({ title: “Nmap 4.01 Released – New Features”, url: “http://www.darknet.org.uk/2006/02/nmap-401-released-new-features/” });ShareThis

3 Responses

Subscribe to comments with RSS.

  1. Barack Obama said, on 09/18/2009 at 12:54 am

    I stand here today humbled by the task before dofus kamas, grateful for the trust you have bestowed, mindful of the sacrifices borne by our cheap dofus kamas. I thank President dofus for his service to buy dofus kamas, as well as the generosity and cooperation he has shown throughout this transition.

    Reply
  2. Clizina said, on 10/12/2009 at 11:38 am

    I am looking for an iPhone 3G case. I want it to be a hardcase with as much shock protection as possible, in case I drop it. I don’t want there to be a cover built into the case for the screen because I prefer having just a film on it. Also, I would like the case to protect the buttons and the screen as much as possible. Also, I am looking for a case that is simple. I hate fancy cases. Thanks.

    ________________
    unlock iphone 3gs

    Reply
  3. AKfour seven said, on 10/14/2009 at 9:41 pm

    I stand here today humbled by the task before dofus kamas, grateful for the trust you have bestowed, mindful of the sacrifices borne by our cheap dofus kamas. I thank President dofus for his service to buy dofus kamas, as well as the generosity and cooperation he has shown throughout this transition.

    Reply

Leave a Reply