Main Page
|
Pentesting • Network • Web Hacking • Network Forensics • Research |
|
|
RitX, discovery of all domains hosted on the same server as a given IP/domain Thu, 17 May 2012 22:00:00 +0200 RitX is a Perl-based script that automatizes the discovery of domains hosted on the same server as a given IP or domain. It requests following services: Ewhois.com, Viewdns.info, Yougetsignal.com, Myiptest.com, Ip-adress.com, DNStrails.com, My-ip-neighbors.com, Domainsbyip.com, Bing.com, Whois.WebHosting.info, Robtex.com, Tools.web-max.ca, Sameip.org. |
|
CeWL, the Custom Word List generator Thu, 17 May 2012 09:08:00 +0200 CeWL (pronounce "cool"), the Custom Word List generator is a ruby app which spiders a given url to a specified depth, optionally following external links, and returns a list of words which can then be used for password crackers such as John the Ripper. It has been written by DigiNinja. |
|
From command injection vulnerability to meterpreter Sun, 06 May 2012 13:40:00 +0200 This tutorial shows how to take over a server (we will get a meterpreter) that hosts a web application vulnerable to command injection. |
|
dns2tcp Sat, 14 Apr 2012 22:00:00 +0100 Dns2tcp is a tool for relaying TCP connections over DNS. Among other things, it can be used to bypass captive portals (e.g. hotels, airports, ...) when only port 53/udp is allowed by the firewall. |
|
Hackademic RTB2 (Root This Box, Second Challenge) Sun, 08 Apr 2012 23:39:00 +0100 This is the second challenge of Root This Box, Hackademic RTB2. Like the first challenge, Hackademic RTB2 is a vulnerable virtual machine and the objective is to become root by exploiting the vulnerabilities. |
|
Hackademic RTB1 (Root This Box, First Challenge) Sun, 08 Apr 2012 23:39:00 +0100 This is the first challenge of Root This Box, Hackademic RTB1. Hackademic RTB1 is a vulnerable virtual machine and the objective is to become root by exploiting the vulnerabilities and read the key in the /root directory. |
|
Kioptrix 4 Sat, 10 Dec 2012 08:23:00 +0100 Kioptrix4 is a deliberately vulnerable virtual machine which objective is to teach security. The entry point is a web based form and the objective is to get root. |
|
Sqlmap Sat, 10 Mar 2012 08:17:00 +0100 sqlmap is a very powerful tool that automates the process of detecting and exploiting SQL injections and taking over of database servers. It automatically detects forms and fields, and can, among other features, reverse the schema and read files on the server. |
