[Parsero] Robots.txt audit tool

.PNG Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries are the URL path of directories or files hosted on a web server which the administrators don't want to be indexed by the crawlers. For example,...

Microsoft Bing for Android 任意代码执行漏洞

BUGTRAQ ID: 65128 CVECAN ID: CVE-2014-1670 Microsoft Bing for Android是移动设备上的搜索引擎服务。 Microsoft Bing 4.2.1之前版本在不安全网络内处理DNS响应时会触发安全漏洞，这可使上下文独立的攻击者在设备上安装任意APK文件并执行任意代码。 0 Microsoft Bing for Android 4.2.1 厂商补丁： Microsoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Bing Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: ssl.bing.com - Cross-site Scripting vulnerability Advisory ID: SSCHADV2013-012 Author: Stefan Schurtz Affected Software: Successfully tested on ssl.bing.com Vendor URL: http://www.microsoft.com Vendor Status: fixed ==========================...

CVE-2014-1670

The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response...

Code injection

The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response...

CVE-2014-1670

The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response...

CVE-2014-1670

The CVE affects Microsoft Bing for Android prior to version 4.2.1. A crafted DNS response can be exploited by a remote attacker to cause the app to install arbitrary APK files and execute code, i.e., remote code execution via DNS handling in insecure network conditions. Affected component: Bing f...

[SpiderFoot v2.1.0] The Open Source Footprinting tool

SpiderFoot is a free, open-source footprinting tool, enabling you to perform various scans against a given domain name in order to obtain information such as sub-domains, e-mail addresses, owned netblocks, web server versions and so on. The main objective of SpiderFoot is to automate the...

[Hasere v0.2] Discover vHosts using Google and Bing

Hasere is a tool that can discovery the virtual hosts and related filetype using google and bing search engines. Optionally, it uses the nmap to determine the ip addresses which have 80 or 443 opened port. After that it uses the bing search engine to determine which domains were hosted or have be...

shared_hosting

This plugin tries to find out if the web application under test is stored in a shared hosting. The procedure is pretty simple, using bing search engine, the plugin searches for "ip:1.2.3.4" where 1.2.3.4 is the IP address of the webserver. One configurable option exists: resultlimit Fetch the fir...

user_dir

This plugin will try to find user home directories based on the knowledge gained by other plugins, and an internal knowledge base. For example, if the target URL is: http://test/ And other plugins found this valid email accounts: email protected email protected This plugin will request:...

finger_bing

This plugin finds mail addresses in Bing search engine. One configurable parameter exist: resultlimit This plugin searches Bing for : "@domain.com", requests all search results and parses them in order to find new mail addresses. Plugin type Infrastructure Options Name | Type | Default Value |...

bing_spider

This plugin finds new URLs in Bing search engine. One configurable parameters exist: resultlimit This plugin searches Bing for : "site:domain.com", requests all search results and parses them in order to find new URLs. Plugin type Crawl Options Name | Type | Default Value | Description | Help...

Bing search string

Binary data 6770.prm...

Study Shows Google Better than Bing at Filtering Malicious Web Sites

A German security company spent 18 months analyzing malware among millions of Web sites ranked by the world’s most popular search engines and concluded Google was safer than Bing. More than half of the 40 million Web sites analyzed by the AV-Test Institute in Magdeburg, Germany were provided...

Google запустил собственный сервис слежения за Санта-Клаусом!

Google запустила сервис, который позволит следить за перемещениями саней Санта-Клауса в католический сочельник 24 декабря. Об этом компания сообщила в своем блоге. С помощью сервиса, который получил название Santa Tracker, можно будет узнать, в каком городе находится Санта-Клаус, куда он поедет...

Microsoft Bing Flash Editor Cross Site Scripting

Title: ====== Microsoft Bing - Editor Flash Component Vulnerability Date: ===== 2012-03-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=449 MSRC ID1: 12173 MSRC ID2: 12227 Credits: http://technet.microsoft.com/en-us/security/cc308589 VL-ID: ===== 449 Introduction:...

Microsoft Bing - Persistent Web Service Vulnerability

Document Title: =============== Microsoft Bing - Persistent Web Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=449 MSRC ID1: 12173 MSRC ID2: 12227 Release Date: ============= 2012-03-14 Vulnerability Laboratory ID VL-ID:...

Microsoft Bing - Persistent Web Service Vulnerability

Document Title: =============== Microsoft Bing - Persistent Web Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=449 MSRC ID1: 12173 MSRC ID2: 12227 Release Date: ============= 2012-03-14 Vulnerability Laboratory ID VL-ID:...

Malicious Ads on Bing Lead to ZeroAccess Trojan

Search-engine poisoning has been the bane of many Internet users’ existence for a long time, and it’s one of many security problems that seems to not be getting any better. In some ways, it may be getting worse, actually. One of the main problems these days is the use of legitimate-looking ads th...