As highlighted over on the backtrack site. It appears the NSA are one of the users of the excellent security testing Linux Distribution that is Back Track.
That is almost as cool as Nmap being used in the Matrix.
The National Security Agency and the Central Security Service tested the five U.S. service academies during the 2009 [...]
Archive | Tools RSS feed for this section
BackTrack used by the NSA
CMS Explorer
When it comes to security vulnerability assessments against content management systems, it becomes necessary to discover which plugins are being used within the system. For the most popular open source systems (wordpress, drupal, joomla) there are literally thousands of plugins available and many have lets admit it not the best record when it comes to [...]
New Web Application Security Tool from Google. Skipfish.
Having done some initial testing this new tool is powerful and comprehensive. It blends a number of other tool features into a neat little package. I did some testing on my local LAN and the web server was getting pounded with thousands of requests per second. Your access and error.log is really going to fill [...]
Sqlmap 0.8 Released and Rolled out to HackerTarget.com servers
After discovering the new release of the excellent SQL Injection tool sqlmap I have done some testing and rolled it out to the HackerTarget.com scanning servers.
If you are not familiar with the power of sqlmap head over to the sourceforge site for demo videos and some top notch documentation. Our scanning tools are configured to [...]
MD5 to Search or Crack?
MD5 – while not really crackable, it should be realised that it is just too easy to find simple passwords from the raw hash using Rainbow Tables.
Rainbow tables are massive collections of hashes derived from possible passwords. The rainbow table method simply compares the computed hases against your hash and if you are (un)lucky you [...]
Web Scanner Comparison
An interesting report has been released that takes a sample of web application security testing applications and puts them up against each other.
The most notably thing is how much the results vary, and how many vulnerabilities most scanners miss. Clearly using more than one scanner is necessary to be able to compare the results, and [...]
