WebSploit Toolkit 1.6 Released

WebSploit Is An Open Source Project For Scan And Analysis Remote System From Vulnerability 

Description :

• Autopwn - Used From Metasploit For Scan and Exploit Target Service
• wmap - Scan,Crawler Target Used From Metasploit wmap plugin
• format infector - inject reverse & bind payload into file format
• phpmyadmin - Search Target phpmyadmin login page
• lfi - Scan,Bypass local file inclusion Vulnerability & can be bypass some WAF
• apache users - search server username directory (if use from apache webserver)
• Dir Bruter - brute target directory with wordlist
• admin finder - search admin & login page of target
• MLITM Attack - Man Left In The Middle, XSS Phishing Attacks
• MITM - Man In The Middle Attack
• Java Applet Attack - Java Signed Applet Attack
• MFOD Attack Vector - Middle Finger Of Doom Attack Vector
• USB Infection Attack - Create Executable Backdoor For Infect USB For Windows

Download WebSploit Toolkit V.1.6

Read more »

UPDATE Joomscan 4.4.2012 Security Scanner

New update joomscan that in its database reaches the number of 623 vulnerability.

If you already have “installed” joomscan to do the update:./joomscan.pl update

Otherwise:
wget http://web-center.si/joomscan/joomscan.tar.gz

Joomscan has been compiled for windows, here is the download

Download JoomScan for Windows

Official site project: Web-center.si

Read more »

CIntruder: bypass captchas

Introduction

Captcha Intruder is an automatic pentesting tool to bypass captchas.

Installation

Code runs on many platforms. It requires Python and the following libraries:

- python-pycurl - Python bindings to libcurl
- python-libxml2 - Python bindings for the GNOME XML library
- python-imaging - Python Imaging Library

On Debian-based systems (ex: Ubuntu), run:

sudo apt-get install python-pycurl python-libxml2 python-imaging

Read more »

BackBox Linux 2.05 released!

The BackBox team is proud to announce the release 2.05 of BackBox Linux. The new release include features such as Ubuntu 11.04, Linux Kernel 2.6.38 and Xfce 4.8.0. The ISO images (32bit & 64bit) can be downloaded from the following location: http://www.backbox.org/downloads

Read more »

Sqlmap- Automatic SQL Injection Tool

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Read more »