본문 바로가기

모의해킹 (WAPT)175

MySql.Com Hacked with Blind SQL Injection by Jackh4xor The Mysql website offers database software, services and support for your business, including the Enterprise server, the Network monitoring and advisory services and the production support. The wide range of products include: Mysql clusters, embedded database, drivers for JDBC, ODBC and Net, visual database tools (query browser, migration toolkit) and last but not least the MaxDB- the open sourc.. 2011. 9. 27.
wavsep: Web Application Vulnerability Scanner Evaluation Project A vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners. This evaluation platform contains a collection of unique vulnerable web pages that can be used to test the various properties of web application scanners. Additional information can be found in the developer's blog: http://sectooladdict.blogspot.com/ Project WAVSE.. 2011. 9. 20.
POST EXPLOITATION COMMAND LISTS I've had a private list of commands that I run on Windows or Linux when I pop a shell, as I'm sure most pentesters do. It isn't so much a thing of hoarding as much it is just jumbled notes that are 'not worth posting' Well, I made two (now 3) public google docs (anyone can edit) *don't be a dick clause Linux/Unix/BSD Post Exploitation: https://docs.google.com/document/d/1ObQB6hmVvRPCgPTRZM5NMH03.. 2011. 9. 9.
XSSS: Cross Site Scripting Scanning XSSS Software is a brute force cross site scripting scanner. developed by Sven. We hope soon the new and improved version is released with more features. Features Crawl website Detect forms and URLs with parameters Fill in forms, alter parameters to include control characters Scan web server response for our input What does it look for Code in web pages JavaScript aka JScript, ECMAScript VBScrip.. 2011. 9. 8.
OWASP Broken Web Applications Project 0.94 released Our first post regarding OWASPBWA or the OWASP Broken Web Applications Project can be found here. About two months ago, an updated version – OWASPBWA version 0.94 was released! “Open Web Application Security Project (OWASP) Broken Web Applications Project, a collection of vulnerable web applications that is distributed on a Virtual Machine in VMware format compatible with their no-cost VMware Pl.. 2011. 9. 7.