Vista, Word and Google Desktop circumvent TrueCrypt function

Thursday, July 17th, 2008

Cryptography expert Bruce Schneier, in conjunction with a research group, has studied the security of TrueCrypt, to see whether it meets the specifications for a 'Deniable File System' (DFS) – implemented in TrueCrypt as hidden volumes – and is really able to conceal the existence of a volume within a ...

How to break into registry to explore HKLM\SAM and HKLM\SECURITY keys

Wednesday, July 16th, 2008

The Registry Editor will not allow you to navigate through HKEY_LOCAL_MACHINE\SAM and HKEY_LOCAL_MACHINE\SECURITY hives. These hives are protected by the System Account and currently logged on user or member of Administrators Group do not have permissions to view them.To view the the registry entries under SAM or SECURITY hive, you ...

DNSenum – Domain Information Gathering Tool

Thursday, July 10th, 2008

The first stage of penetration testing is usually passive information gathering and enumeration (active information gathering). This is where tools like dnsenum come in, the purpose of DNSenum is to gather as much information as possible about a domain.The program currently performs the following operations:1. Get the host’s addresse (A ...

Ratproxy – Passive Web Application Security Assessment Tool

Wednesday, July 2nd, 2008

Ratproxy is a semi-automated, largely passive web application security audit tool. It is meant to complement active crawlers and manual proxies more commonly used for this task, and is optimized specifically for an accurate and sensitive detection, and automatic annotation, of potential problems and security-relevant design patterns based on the ...

PAWS – Python Advanced Wardialing System

Tuesday, July 1st, 2008

Now this is an oldskool topic, wardialling! Some people still ask me about wardialling tools though, so here’s one I found recently written in Python.PAW / PAWS is a wardialing software in python. It is designed to scan for ISDN (PAWS only) and “modern” analog modems (running at 9.6kbit/s or ...