The Social-Engineer Toolkit (SET) v1.4 released

The Social-Engineer Toolkit v1.4 “YAY DerbyCon” Edition has been released. The main new feature with this is the new addition into the web attack menu. SET now has the ability to help aid in steps needed in creating a code signing certificate. You still need to purchase the code signing certificate, but it will not be directly imported into SET and into the Java Applet attack making the attack much more believable and make the attack much more reliable. Overall, through doing the steps myself, it will cost you around $300-350 to get everything setup. You’ll need to register a business with the state (which takes 5 mins), wait for your papers, then purchase a code signing certificate and sign the apphttp://www.blogger.com/img/blank.giflet with whatever you made your business name. Sounds like a bit of a process I know, but when doing consulting engagements, should be easy to purchase a code signing certificate based on your company name or just register a quick LLC to get it.

Amongst this addition are a number of bug fixes and additions. Full change log can be found below:

Download: http://www.secmaniac.com

Metasploit Framework v.3.7.1 Released

This is a relatively small release focused on bug fixes and performance improvements.

Notable highlights include an improved IPv6 reverse_tcp stager from Stephen Fewer, a performance improvement for HTTP services (client-side modules), a bug fix to channel support in the PHP Meterpreter, an update to MSFGUI, and various small tweaks to the included modules. In addition, this release adds exploit modules for the VLC Media Player and the ICONICS WebHMI ActiveX control (SCADA), as well as a new ARP Poisoning auxiliary module.
Metasploit now ships with 687 exploit modules, 357 auxiliary modules, and 39 post modules.2 new exploits and 2 new auxiliary modules have been added since the last release.This release address a performance issue with HTTP Services and adds a few modules.In addition, a bug in the Windows auto-update task has been corrected, along with minor changes to the Windows installer.

Download: http://metasploit.com

Sandcat v.4.2.2 Free Edition Released

Sandcat - Web Application Security Scanner

Sandcat is a hybrid multilanguage web application security assessment scanner. It allows you to scan for the most common web application flaws from a hacker's perspective. Sandcat will remotely inject data in the web applications and analyze the application response in order to determine if the application code is vulnerable to specific attacks (such as SQL Injection, XSS, and many other web application vulnerability flaws). Sandcat will also scan the application's source code, if requested, in search for security issues.

Download and Features: http://www.syhunt.com

Safe3 Sql Injector v.8.1 released

Safe3SI is one of the most powerful and easy usage penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Features:
Full support for http, https website.
Full support for Basic, Digest, NTLM http authentications.
Full support for GET, Post, Cookie sql injection.
Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, SQLite, Firebird, Sybase and SAP MaxDB database management systems.
Full support for four SQL injection techniques: blind, error-based, UNION query and force guess.
Powerful AI engine to automatic recognite injection type, database type, sql injection best way.
Support to enumerate databases, tables, columns and data.
Support to read,list and write any file from the database server underlying file system when the database software is MySQL or Microsoft SQL Server.
Support to execute arbitrary commands and retrieve their standard output on the database server underlying operating system when the database software is Oracle or Microsoft SQL Server.
Support to ip domain query,web path guess,md5 crack etc.
Support for sql injection scan.

Download: http://sourceforge.net

Online VNC , SSH and Remote Desktop Scanner

Online VNC Scanner
This scans the VNC and gives you the IP address in Green.Doesn't brute the VNC at all only scans for the port

Online Remote Desktop Scanner
This scans the Remote Desktop / RDP and gives you the IP address in Green.Doesn't brute the Remote Desktop / RDP at all only scans for the port

Online SSH Scanner
This scans the SSH and gives you the IP address in Green.Doesn't brute the SSH at all only scans for the port

Online VNC , SSH and Remote Desktop Scanner

Online VNC Scanner
This scans the VNC and gives you the IP address in Green.Doesn't brute the VNC at all only scans for the port

Online Remote Desktop Scanner
This scans the Remote Desktop / RDP and gives you the IP address in Green.Doesn't brute the Remote Desktop / RDP at all only scans for the port

Online SSH Scanner
This scans the SSH and gives you the IP address in Green.Doesn't brute the SSH at all only scans for the port

SWFRETools v.1.1.0 Released

SWFRETools - A collection of tools for reverse engineering Flash files

The SWFRETools are a collection of tools built for vulnerability analysis of the Adobe Flash player and for malware analysis of malicious SWF files. The tools are partly written in Java and partly in Python and are licensed under the GPL 2.0 license.

The following tools are part of the SWFRETools:
Flash Dissector: Binary viewer for SWF files
SWF Parser: Build your own tools using this parser
Minimizer: Automatically minimize crashing SWF files
FP Debugger: Trace the Flash Player dynamically
StatsGenerator: Generate stats over SWF files


Download: https://github.com

See also: Reverse-Engineering Flash Files with SWFRETools

SWFRETools v.1.1.0 Released

SWFRETools - A collection of tools for reverse engineering Flash files

The SWFRETools are a collection of tools built for vulnerability analysis of the Adobe Flash player and for malware analysis of malicious SWF files. The tools are partly written in Java and partly in Python and are licensed under the GPL 2.0 license.

The following tools are part of the SWFRETools:
Flash Dissector: Binary viewer for SWF files
SWF Parser: Build your own tools using this parser
Minimizer: Automatically minimize crashing SWF files
FP Debugger: Trace the Flash Player dynamically
StatsGenerator: Generate stats over SWF files


Download: https://github.com

See also: Reverse-Engineering Flash Files with SWFRETools

Metasploit Framework v.3.7.0 Released

The Metasploit team has spent the last two months focused on one of the least-visible, but most important pieces of the Metasploit Framework; the session backend. Metasploit 3.7 represents a complete overhaul of how sessions are tracked within the framework and associated with the backend database. This release also significantly improves the staging process for the reverse_tcp stager and Meterpreter session initialization. Shell sessions now hold their output in a ring buffer, which allows us to easily view session history -- even if you don't have a database.
This release also includes a long-awaited update to our SMB stack to enable signing. Thanks to some great work by Alexandre Maloteaux, you can now perform pass-the-hash and stolen password attacks against Windows 2008. Alexandre also added NTLM authentication support to the Microsoft SQL Server driver within Metasploit.In addition to the core library improvements, this release comes with 35 new remote exploits thanks in large part to our two newest full time developers, bannedit and sinn3r.

More details about this release can be found in the 3.7.0 Release Notes. As always, the latest version is available from the Metasploit download page.

Metasploit Framework v.3.7.0 Released

The Metasploit team has spent the last two months focused on one of the least-visible, but most important pieces of the Metasploit Framework; the session backend. Metasploit 3.7 represents a complete overhaul of how sessions are tracked within the framework and associated with the backend database. This release also significantly improves the staging process for the reverse_tcp stager and Meterpreter session initialization. Shell sessions now hold their output in a ring buffer, which allows us to easily view session history -- even if you don't have a database.
This release also includes a long-awaited update to our SMB stack to enable signing. Thanks to some great work by Alexandre Maloteaux, you can now perform pass-the-hash and stolen password attacks against Windows 2008. Alexandre also added NTLM authentication support to the Microsoft SQL Server driver within Metasploit.In addition to the core library improvements, this release comes with 35 new remote exploits thanks in large part to our two newest full time developers, bannedit and sinn3r.

More details about this release can be found in the 3.7.0 Release Notes. As always, the latest version is available from the Metasploit download page.

PacketFence v.2.2 Released

PacketFence: Open Source NAC (Network Access Control)

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2 isolation of problematic devices, integration with the Snort IDS and the Nessus vulnerability scanner; PacketFence can be used to effectively secure networks - from small to very large heterogeneous networks.

Changes in V.2.2

PacketFence's captive portal now features network access detection using JavaScript and Kerberos can be used for authentication. The integration with FreeRADIUS 2 has also been greatly simplified and it's now possible to modify and preview remediation pages directly from PacketFence's web interface.

Futhermore, support for new 3Com switches (4200G, E4800G and E5500G in MAC Authentication and 802.1X) and Motorola RF Switches wireless controllers was added. Apache's configuration is automatically adjusted on startup based on system resources to avoid performance degradation on heavy workloads. And finally, new reports were added such as "Nodes per SSID" or "Connection Type".

Download: http://www.packetfence.org

PacketFence v.2.2 Released

PacketFence: Open Source NAC (Network Access Control)

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2 isolation of problematic devices, integration with the Snort IDS and the Nessus vulnerability scanner; PacketFence can be used to effectively secure networks - from small to very large heterogeneous networks.

Changes in V.2.2

PacketFence's captive portal now features network access detection using JavaScript and Kerberos can be used for authentication. The integration with FreeRADIUS 2 has also been greatly simplified and it's now possible to modify and preview remediation pages directly from PacketFence's web interface.

Futhermore, support for new 3Com switches (4200G, E4800G and E5500G in MAC Authentication and 802.1X) and Motorola RF Switches wireless controllers was added. Apache's configuration is automatically adjusted on startup based on system resources to avoid performance degradation on heavy workloads. And finally, new reports were added such as "Nodes per SSID" or "Connection Type".

Download: http://www.packetfence.org

Fastest Online SQL Injection Dumper

What is this ?

Understand the situation !! You have Pen tested or Injected some website and you want to retrieve the values.The values might be greater than 1000 to 10000 or even more can you do like limit 1,1 limit 2,1 or group_concat()some times group_concat retrieve all values but every value wont be shown on the site So u again do limit 1,1 etc.And let us suppose in a table called Email there are Columns emailid,password.When u saw the count of it you understood that there are 10000 emails in the site

Now how do you retrieve them ?
You just cant wait for looong time by limit 1,1 or you might use some tools like Havji or Pangolin etc but they aren't fast enough to retrieve the values hey take around 2 to 3 hours Plus to retrieve those many values

So what to do ?

Well for this situation i made a Fastest Online SQLI Dumper . I am saying Fastest because it uses 1000 threads at a time and retrieves 10000 values in less than 2 minutes :) And another important information is it is Not a tool complete online nothing to be downloaded.

http://scan.subhashdasyam.com/dumper.php

Fastest Online SQL Injection Dumper

What is this ?

Understand the situation !! You have Pen tested or Injected some website and you want to retrieve the values.The values might be greater than 1000 to 10000 or even more can you do like limit 1,1 limit 2,1 or group_concat()some times group_concat retrieve all values but every value wont be shown on the site So u again do limit 1,1 etc.And let us suppose in a table called Email there are Columns emailid,password.When u saw the count of it you understood that there are 10000 emails in the site

Now how do you retrieve them ?
You just cant wait for looong time by limit 1,1 or you might use some tools like Havji or Pangolin etc but they aren't fast enough to retrieve the values hey take around 2 to 3 hours Plus to retrieve those many values

So what to do ?

Well for this situation i made a Fastest Online SQLI Dumper . I am saying Fastest because it uses 1000 threads at a time and retrieves 10000 values in less than 2 minutes :) And another important information is it is Not a tool complete online nothing to be downloaded.

http://scan.subhashdasyam.com/dumper.php

Updates: ZoomIt v4.2, Process Explorer v14.11, ProcDump v3.04, and Mark Live: Zero Day Malware Cleaning with the Sysinternals Tools

ZoomIt v4.2: This update to ZoomIt, a screen magnification and annotation utility, now adjusts the drawing pen size when you enter drawing mode from live zoom to match the static zoom pen size.

Process Explorer v14.11: Process Explorer v14.11 includes the ability to configure network and disk activity icons in the tray.

ProcDump v3.04: This update to ProcDump’s miniplus dump type (-mp) includes heuristics that include thread stack memory.

Mark Live: Zero Day Malware Cleaning with the Sysinternals Tools: Join Mark on Saturday, July 23 live or via webcast for a deep dive into key Sysinternals tools, including Process Explorer, Process Monitor and Autoruns, that focuses on their features and functionality useful for malware analysis and cleaning.

Source: http://blogs.technet.com

Updates: ZoomIt v4.2, Process Explorer v14.11, ProcDump v3.04, and Mark Live: Zero Day Malware Cleaning with the Sysinternals Tools

ZoomIt v4.2: This update to ZoomIt, a screen magnification and annotation utility, now adjusts the drawing pen size when you enter drawing mode from live zoom to match the static zoom pen size.

Process Explorer v14.11: Process Explorer v14.11 includes the ability to configure network and disk activity icons in the tray.

ProcDump v3.04: This update to ProcDump’s miniplus dump type (-mp) includes heuristics that include thread stack memory.

Mark Live: Zero Day Malware Cleaning with the Sysinternals Tools: Join Mark on Saturday, July 23 live or via webcast for a deep dive into key Sysinternals tools, including Process Explorer, Process Monitor and Autoruns, that focuses on their features and functionality useful for malware analysis and cleaning.

Source: http://blogs.technet.com

ArpON updated to v.2.2

ArpON (ARP handler inspection) is a portable handler daemon that make ARP secure in order to avoid the Man In The Middle (MITM) through ARP Spoofing/Poisoning attacks. It detects and blocks also derived attacks by it for more complex attacks, as: DHCP Spoofing, DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.

This is possible using three kinds of anti ARP Poisoning tecniques: the first is based on SARPI or "Static ARP Inspection" in statically configured networks without DHCP; the second on DARPI or "Dynamic ARP Inspection" in dinamically configured networks having DHCP; the third on HARPI or "Hybrid ARP Inspection" in "hybrid" networks, that is in statically and dynamically (DHCP) configured networks together.

Features:
- It detects and blocks Man In The Middle through ARP Spoofing/Poisoning attacks in statically, dinamically (DHCP), hybrid configured networks
- It detects and blocks derived attacks: DHCP Spoofing, DNS Spoofing WEB Spoofing, Session Hijacking, SSL/TLS Hijacking & co
- It detects and blocks unidirectional, bidirectional and distributed attacks
- Doesn't affect the communication efficiency of ARP protocol
- Doesn't affect the race response time from attacks
- Multithreading on all OS supported
- It manages the network interface into unplug, boot, hibernation and suspension OS features
- It works in userspace for OS portability reasons
- Easily configurable via command line switches, provided that you have root permissions
- Tested against Ettercap, Cain & Abel, dsniff and other tools

Download: http://arpon.sourceforge.net

ArpON updated to v.2.2

ArpON (ARP handler inspection) is a portable handler daemon that make ARP secure in order to avoid the Man In The Middle (MITM) through ARP Spoofing/Poisoning attacks. It detects and blocks also derived attacks by it for more complex attacks, as: DHCP Spoofing, DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.

This is possible using three kinds of anti ARP Poisoning tecniques: the first is based on SARPI or "Static ARP Inspection" in statically configured networks without DHCP; the second on DARPI or "Dynamic ARP Inspection" in dinamically configured networks having DHCP; the third on HARPI or "Hybrid ARP Inspection" in "hybrid" networks, that is in statically and dynamically (DHCP) configured networks together.

Features:
- It detects and blocks Man In The Middle through ARP Spoofing/Poisoning attacks in statically, dinamically (DHCP), hybrid configured networks
- It detects and blocks derived attacks: DHCP Spoofing, DNS Spoofing WEB Spoofing, Session Hijacking, SSL/TLS Hijacking & co
- It detects and blocks unidirectional, bidirectional and distributed attacks
- Doesn't affect the communication efficiency of ARP protocol
- Doesn't affect the race response time from attacks
- Multithreading on all OS supported
- It manages the network interface into unplug, boot, hibernation and suspension OS features
- It works in userspace for OS portability reasons
- Easily configurable via command line switches, provided that you have root permissions
- Tested against Ettercap, Cain & Abel, dsniff and other tools

Download: http://arpon.sourceforge.net

AntiXSS v.4.0 Released

Microsoft Anti-Cross Site Scripting Library V4.0

The Microsoft Anti-Cross Site Scripting Library V4.0 (AntiXSS V4.0) is an encoding library designed to help developers protect their ASP.NET web-based applications from XSS attacks. It differs from most encoding libraries in that it uses the white-listing technique -- sometimes referred to as the principle of inclusions -- to provide protection against XSS attacks. This approach works by first defining a valid or allowable set of characters, and encodes anything outside this set (invalid characters or potential attacks). The white-listing approach provides several advantages over other encoding schemes. New features in this version of the Microsoft Anti-Cross Site Scripting Library include:- A customizable safe list for HTML and XML encoding- Performance improvements- Support for Medium Trust ASP.NET applications- HTML Named Entity Support- Invalid Unicode detection- Improved Surrogate Character Support for HTML and XML encoding- LDAP Encoding Improvements- application/x-www-form-urlencoded encoding support

Download: http://www.microsoft.com

AntiXSS v.4.0 Released

Microsoft Anti-Cross Site Scripting Library V4.0

The Microsoft Anti-Cross Site Scripting Library V4.0 (AntiXSS V4.0) is an encoding library designed to help developers protect their ASP.NET web-based applications from XSS attacks. It differs from most encoding libraries in that it uses the white-listing technique -- sometimes referred to as the principle of inclusions -- to provide protection against XSS attacks. This approach works by first defining a valid or allowable set of characters, and encodes anything outside this set (invalid characters or potential attacks). The white-listing approach provides several advantages over other encoding schemes. New features in this version of the Microsoft Anti-Cross Site Scripting Library include:- A customizable safe list for HTML and XML encoding- Performance improvements- Support for Medium Trust ASP.NET applications- HTML Named Entity Support- Invalid Unicode detection- Improved Surrogate Character Support for HTML and XML encoding- LDAP Encoding Improvements- application/x-www-form-urlencoded encoding support

Download: http://www.microsoft.com