본문 바로가기

모의해킹 (WAPT)171

Exploit Pack - Web Security Edition [New tool] This tool allows you to take control of remote browsers, steal social network credentials, obtain persistence on it, DDoS and more. Demo: Main features: - Hacking of Gmail, Yahoo, Facebook, Live, Linkedin - Session persistence - 0day exploits included - Remote browser control - DDoS by creating botnets - Launch remote exploits - Steal credentials Questions? support () exploitpack com Official si.. 2012. 4. 24.
sqlifuzzer: Command Line SQL Injection Web Scanner Features of Sqlifuzzer: Payloads/tests for numeric, string, error and time-based SQL injection Support for MSSQL, MYSQL and Oracle DBMS’s Automated testing of ‘tricky’ parameters like POST URL query and mulipart form parameters A range of filter evasion options: case variation, nesting, double URL encoding, comments for spaces, ‘like’ for ‘equals’ operator, intermediary characters, null and CRLF.. 2012. 4. 17.
Dmitry + gooscan + Maltego 설명 출처 : http://www.youtube.com/user/zer0c0oI/videos 2012. 4. 9.
Nmap – Techniques for Avoiding Firewalls As a penetration tester you will come across with systems that are behind firewalls and they are blocking you from getting the information that you want.So you will need to know how to avoid the firewall rules that are in place and to discover information about a host.This step in a penetration testing called Firewall Evasion Rules.Nmap is offering a lot of options about Firewall evasion so in t.. 2012. 4. 3.
Analysis on mma.php Backdoor Shell All right guys, today let’s have a look on a very common backdoor shell today that allows an attacker to upload arbitrary files on the web server. The name of this shell is mma.php and is commonly named or uploaded in the websites I’ve been inspecting for possible backdoor uploads by using the power of Google dorks.My first encounter with this backdoor shell was like two years ago and I was stil.. 2012. 4. 2.