The Internet is the New Sweatshop

Sunday, June 29th, 2008

When an executive wants to sound humane during a public address to the staff, he or she will trot out the well-worn phrase, "Our most valuable assets leave the building at the end of the day." Clichés are generally true, but this one may not be, thanks to the growth ...

New tools to block and eradicate SQL injection

Tuesday, June 24th, 2008

The MSRC released an advisory today that discusses the recent SQL injection attacks and announces three new tools to help identify and block these types of vulnerabilities. The advisory discusses the new tools, the purpose of each, and the way each complements the others. The goal of this blog post is ...

Best Security Tools: Free online Web utilities

Monday, June 23rd, 2008

Have you ever needed to PING a host, run trace a Web route, or see what information you're exposing to Internet without having to reconfigure the security on your perimeter devices? Have you tired of having to call your managed security services provider to let them know it's you creating ...

BackTrack: A penetration testers toolset

Tuesday, June 17th, 2008

There are few job titles as misleading as that of the "Penetration Tester." Sure, saying professional computer hacker would be more direct, but have you ever noticed how hackers seem to have a dirty mind? Why else would they want to go phreaking through backdoors?Anyway, in order for hackers to ...

SIPVicious v0.2.3 – VoIP/SIP Auditing Toolkit

Wednesday, June 11th, 2008

SIPVicious suite is a set of tools that can be used to audit SIP based VoIP systems. It currently consists of four tools:svmap - this is a sip scanner. Lists SIP devices found on an IP range svwar - identifies active extensions on a PBX svcrack - an online password cracker for ...