WebSploit Toolkit 1.6 Released

WebSploit Is An Open Source Project For Scan And Analysis Remote System From Vulnerability  Description : Autopwn - Used From Metasploit For Scan and Exploit Target Service wmap - Scan,Crawler Target Used From Metasploit wmap plugin format infector - inject reverse & bind payload into file format phpmyadmin - Search Target phpmyadmin login page lfi - Scan,Bypass local file inclusion Vulnerability & can be bypass some WAF apache users - search server username directory (if use from apache webserver) Dir Bruter - brute target directory with wordlist admin finder - search admin & login page of target MLITM Attack - Man Left In The Middle, XSS Phishing Attacks MITM - Man In The Middle Attack Java Applet Attack - Java Signed...

Read more »

UPDATE Joomscan 4.4.2012 Security Scanner

New update joomscan that in its database reaches the number of 623 vulnerability.If you already have “installed” joomscan to do the update:./joomscan.pl update Otherwise:wget http://web-center.si/joomscan/joomscan.tar.gzJoomscan has been compiled for windows, here is the downloadDownload JoomScan for Windows Official site project: Web-center...

Read more »

CIntruder: bypass captchas

IntroductionCaptcha Intruder is an automatic pentesting tool to bypass captchas. InstallationCode runs on many platforms. It requires Python and the following libraries:- python-pycurl - Python bindings to libcurl- python-libxml2 - Python bindings for the GNOME XML library- python-imaging - Python Imaging LibraryOn Debian-based systems (ex: Ubuntu), run: sudo apt-get install python-pycurl python-libxml2 python-imagin...

Read more »

BackBox Linux 2.05 released!

The BackBox team is proud to announce the release 2.05 of BackBox Linux. The new release include features such as Ubuntu 11.04, Linux Kernel 2.6.38 and Xfce 4.8.0. The ISO images (32bit & 64bit) can be downloaded from the following location: http://www.backbox.org/downlo...

Read more »

Sqlmap- Automatic SQL Injection Tool

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections...

Read more »