tools
BackTrack, a new Pen-Test LiveCD
Posted 2006-02-23 23:31 by Christopher
 |
I just happened to notice that BackTrack 3.0 Beta has been released. BackTrack is an amalgamation of two previous projects; WHAX and Auditor. This CD is full of useful tools for conducting penetration tests. New features include a python development environment, updatable exploit archives for milw0rm and Securityfocus, one-click setup for Nessus and Snort, and the inclusion of the free VMWare Player. I havn't had a lot of time to experiment with it, but I did find that the current beta seems to have poor WiFi support. They do mention WiFi scripts and drivers on their to-do list. |
Exploring httptunnel
Posted 2006-02-23 21:31 by Christopher
httptunnel is a GPL application for encapsulating network traffic within valid HTTP requests and responses. This tunnel can be used to bypass firewalls, including many application proxies. It is comprised of a server and client daemon written in C.
Installation couldn't be simpler. It resides in the Debian package repository, so on Debian Sarge I was able to use apt to fetch and install the binaries and man pages:
~$ sudo apt-get install httptunnel
If you prefer to use the source, compilation uses the *nix "standard" ./configure; make; make install process:
Free VMWare server in beta
Posted 2006-02-06 08:52 by Christopher
VMware has announced the release of a free beta version of their server product, now renamed from GSX to VMWare server. The final product is expected to be released in Q2, and will also be free (as in beer).
Now we just need to wait for their server to finish melting down so that we can download a copy.
Nmap Version 4.00 Released
Posted 2006-01-31 14:24 by Christopher
Fyodor has announced a new major release of Nmap, what might just be the most popular security tool around. There is also a good interview with Fyodor at SecurityFocus which details many of the changes.
From Insecure.Org:
"Changes since version 3.50 include a rewritten (for speed and memory efficiency) port scanning engine, ARP scanning, a brand new man page and install guide, 'l33t ASCII art, runtime interaction, massive version detection improvements, MAC address spoofing, increased Windows performance, 500 new OS detection fingerprints, and completion time estimates."
Forgotten Security Tools
Posted 2005-12-21 19:00 by Christopher
One of the most forgotten security tools is one most of us already have on our networks: Microsoft Windows
Most people are not using a fraction of Window's security features in companies. Small and medium businesses can especially benefit from using the full functionality of the products they already have in place.
The following are a just a few of the many free features your company may not already be using.
