Shmoocon 2008 videos are now online

Sunday, June 1st, 2008

The videos from ShmooCon 2008 have hit the shelves. Go download them at: http://www.shmoocon.org/2008/videos/ EDIT: As of the time of this post, some of the videos are incorrectly named. Here is the 1-> 1: Correctly Named: 21st Century Shellcode for Solaris Advanced Protocol Fuzzing - What We Learned when Bringing Layer2 Logic to SPIKE land Backtrack ...

sqlninja 0.2.3 released - Advanced Automated SQL Injection Tool for MS-SQL

Friday, May 30th, 2008

We’ve been folowing the development of sqlninja since the early days, it’s growing into a well matured and more polished tool with advanced features. Sqlninja is a tool written in PERL to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal ...

Xprobe2 - Active OS Fingerprinting Tool

Friday, May 16th, 2008

Sometimes I wonder to myself have I mentioned a certain tool on the site, usually one of my favourites…often I search the site to find I have never posted about it. It just goes to show how we often overlook some of the more ‘obvious’ choices, and to many people they ...

browserrecon - Passive Browser Fingerprinting

Wednesday, May 14th, 2008

Most of todays tools for fingerprinting are focusing on server-side services. Well-known and widely-accepted implementations of such utilities are available for http web services, smtp mail server, ftp servers and even telnet daemons. Of course, many attack scenarios are focusing on server-side attacks. Client-based attacks, especially targeting web clients, are becoming ...