[SpiderFoot v2.0] The Open Source Footprinting tool

SpiderFoot is a free, open-source footprinting tool, enabling you to perform various scans against a given domain name in order to obtain information such as sub-domains, e-mail addresses, owned netblocks, web server versions and so on. The main objective of SpiderFoot is to automate the...

[Snort 2.9.4.1] Network Intrusion Detection System

Snort is a free and open source network intrusion prevention system NIPS and network intrusion detection system NIDS . Snort having the ability to perform real-time traffic analysis and packet logging on Internet Protocol IP networks. Snort performs protocol analysis, content searching, and conte...

SuSE 11.1 Security Update : PostgreSQL (SAT Patch Number 6697)

This update provides PostgreSQL 8.3.20. As part of this update, the packaging scheme has been changed to accomodate an optional parallel installation of newer PostgreSQL versions. The changes in 8.3.20 are : - Prevent access to external files/URLs via XML entity references. xmlparse would attempt...

5 Checks You Must Run To Ensure Your Network Is Secure

Twenty-four hours a day, seven days a week, 365 days each year – it's happening. Whether you are awake or asleep, in a meeting or on vacation, they are out there probing your network, looking for a way in. A way to exploit you; a way to steal your data, a place to store illegal content, a website...

5 Checks You Must Run To Ensure Your Network Is Secure

Twenty-four hours a day, seven days a week, 365 days each year – it’s happening. Whether you are awake or asleep, in a meeting or on vacation, they are out there probing your network, looking for a way in. A way to exploit you; a way to steal your data, a place to store illegal content, a website...

Squiz CMS - Multiple Cross-Site Scripting XML External Entity Injection Vulnerabilities

Squiz CMS - Multiple Cross-Site Scripting XML External Entity Injection Vulnerabilities source: https://www.securityfocus.com/bid/54049/info Squiz CMS is prone to multiple cross-site scripting vulnerabilities and an XML external entity injection vulnerability because it fails to properly sanitize...

Open Source Vulnerability Scanner: OpenVAS

OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.The powerful and comprehensive OpenVAS solution is available as Free Software and maintained on a daily basis. Open Source Vulnerability Scanner:...

Distributed nmap Framework: dnmap

dnmap is a framework to distribute nmap scans among several clients. It reads an already created file with nmap commands and send those commands to each client connected to it. The framework use a client/server architecture. The server knows what to do and the clients do it. All the logic and...

9 Top Patch Management Practices for Businesses Security

9 Top Patch Management Practices for Businesses Security I've spent most of the past decade in information security, with a pretty big focus on incident response. It never ceases to amaze me how many security incidents pronounced hacks customers suffer as a result of unpatched systems. Patch...

Fake Antivirus Scams Targeting Android Users

Fake antivirus software, or “scareware” scams have been one of the tried and true methods that crooks have used to make illegal profits online in recent years. The scams often offer convincing replicas of legitimate anti malware software to trick users into installing malicious programs that can...

Ultimate Encoder - PHP Encoder with multiple compression by lionaneesh

Ultimate Encoder - PHP Encoder with multiple compression by lionaneesh "Ultimate Encoder" - Another Online tool by lionaneesh, an Indian developer and Hacker. Its a PHP Encoder with multiple compression. A Piece of code can be encoded multiple times making it impossible for any Anti Virus to...

Nexpose HTTP Server Detection

The remote host is running a Nexpose server, which is used for performing security scans. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56821; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Nexpose HTTP Server Detection";...

BNAT Scanner

This module is a scanner which can detect Broken NAT network address translation implementations, which could result in an inability to reach ports on remote machines. Typically, these ports will appear in nmap scans as 'filtered'/'closed'. This module requires Metasploit:...

SEC Consult SA-20110810-0 :: Client-side remote file upload & command execution in Check Point SSL VPN On-Demand applications - CVE-2011-1827

SEC Consult Vulnerability Lab Security Advisory 20110810-0 ======================================================================= title: Client-side remote file upload & command execution product: Check Point SSL VPN On-Demand applications signed Java applet and ActiveX control SSL Network...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...

PacketFence v2.0.0 - Latest Version !

"PacketFencePacketFence is an open-source network access control NAC system which provides the following features: registration, detection of abnormal network activities, proactive vulnerability scans, isolation of problematic devices, remediation through a captive portal, 802.1X, wireless...

Seccubus v1.5.3 - latest version download

"Tool to automatically fire regular security scans with Nessus. Compare results of the current scan with the previous scan and report on the delta in a web interface. Main objective of the tool is to make repeated scans more efficient." This is mostly a bugfix release. Download Seccubus v1.5.3...

BS Player 2.56 DLL Hijacking Exploit

/ Description: BS Player 2.56 vulnerable for another DLL Preloading on ehtrace.dll while loading .mp3 content. Date: August 29, 2010 Author: Classity Security Scans PoC: Displaying message box, but can be replaced by DLL with arbitrary payload. / include define DllExport declspec dllexport BOOL...

Fedora 11 : squirrelmail-1.4.20-2.fc11 (2010-10264)

Tue Jun 22 2010 Michal Hlavinka - 1.4.20-2 - fix CVE-2010-1637 : mail fetch plugin's port-scans via non-standard POP3 server ports - Mon Mar 8 2010 Michal Hlavinka - 1.4.20-1 - updated to 1.4.20 - translations updated - Thu Sep 17 2009 Michal Hlavinka - 1.4.20-0.rc2.20100104 - updated to...

AV Scans Slowing Down Your Machine? Think Again

By Roel Schouwenberg As a technology enthusiast — or geek — I always enjoy looking into new technologies. Although it’s no longer directly cutting edge, I recently started exploring the wonderful world of Solid State Disks SSDs. SSDs may, to some extent, influence how anti-virus AV programs use...