Browsing the "Weaknesses" Tag

Aircrack-ng 1.2 Beta 1 released

May 27th, 2013 | by NJ Ouchn

Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been [&hellip

The Art of Exploiting Injection Flaws at Black Hat Vegas 2013

May 2nd, 2013 | by NJ Ouchn

(Article by Sumit “Sid” Siddharth) Read other Sid’s posts at www.notsosecure.com) So, you found a SQL Injection in Oracle Database. [&hellip

Using X5S with Fiddler to find XSS Vulnerabilities

February 22nd, 2013 | by NJ Ouchn

 [Cross-Posted by mutual agreement with InfoSec Institute]   Cross Site Scripting is one of the top 10 OWASP security threats. [&hellip

LittleBlackBox v0.1.3 : Breaking SSL on Embedded Devices

August 9th, 2012 | by NJ Ouchn

LittleBlackBox is a collection of thousands of private SSL and SSH keys extracted from various embedded devices. These private keys [&hellip

Blackhat Arsenal 2012 Releases: AWS Scout Amazon Web Security Configuration

August 7th, 2012 | by NJ Ouchn

The scale and variety of Amazon Web Servers (AWS) has created a constantly changing landscape. What was previously managed by [&hellip

Blackhat Arsenal 2012 Releases: Peepdf (Blackhat Release) v0.2

August 7th, 2012 | by NJ Ouchn

peepdf is a Python tool to explore PDF files in order to find out if the file can be harmful [&hellip

Blackhat Arsenal 2012 Releases: Oyedata v0.1 for OData Protocol Assessments

August 4th, 2012 | by NJ Ouchn

OData is a new data access protocol that is being adopted by many major software manufacturers such as Microsoft, IBM, [&hellip

Blackhat Arsenal 2012 Releases: zCore IPS & zAnti- Modern Smartphone Security

August 4th, 2012 | by NJ Ouchn

zCore IPS™ is our comprehensive Mobile Intrusion Prevention System designed specifically for smartphones.Modern smartphones are not as safe as you [&hellip

Blackhat Arsenal 2012 Releases : HTExploit (HiperText access Exploit) htaccess bypass v0.7 codename Fernet

August 2nd, 2012 | by NJ Ouchn

HTExploit (HiperText access Exploit) is an open-source tool written in Python that exploits a weakness in the way that .htaccess [&hellip

Blackhat Arsenal 2012 Releases : Smartphone Pentesting Framework v0.1 in the wild

August 2nd, 2012 | by NJ Ouchn

The smartphone penetration testing framework, the result of a DARPA Cyber Fast Track project, aims to provide an open source [&hellip