HackBlog

One of the most used SQL injection tool for Microsoft SQL server has released its latest update with some bug fixes and new features.
It has following features:

• Fingerprint of the remote SQL Server (version, user performing the queries, user privileges, xp_cmdshell availability, DB Server authentication mode)
• Bruteforce of the ‘sa’ password
• Privilege escalation to ‘sa’
• Creation of a custom xp_cmdshell if the original one has been disabled
• Upload of executables
• Reverse scan in order to look for a port that can be used for a reverse shell
• Direct and reverse shell, both TCP and UDP
• DNS tunneled pseudoshell, when no ports are available for a bindshell
• ICMP tunneled shell, if the target DBMS can communicate via ICMP Echo with the attacking machine
• Metasploit wrapping, when you want to use Meterpreter or even want to get GUI access on the remote DB server
• OS privilege escalation on the remote DB server using token kidnapping or through CVE-2010-0232
• All of the above can be done with obfuscated SQL code, in order to confuse IDS/IPS systems

Download here:
http://sqlninja.sourceforge.net/download.html

Burp Suit Pro v.1.4.0.3 has been released and available for download. This is a nice too for penetration testing of web applications. It has various tools included to test a website from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities. This tool include a new CSRF generator , which produces proof-of-concept HTML for generating virtually any HTTP request.




Main Feature:

• Support for all form encoding types: standard URL encoding, multipart encoding, and plain text encoding.
• Auto-detection of the optimal encoding type, with manual override.
• Ability to edit both the request and response in-place, to fine tune attacks.
• In-browser testing, by pasting a URL into your browser that will cause Burp Proxy to serve up the CSRF PoC in its response.
• An intercepting proxy, which lets you inspect and modify traffic between your browser and the target application.
• An application-aware spider, for crawling content and functionality.
• An advanced web application scanner, for automating the detection of numerous types of vulnerability.
• An intruder tool, for performing powerful customized attacks to find and exploit unusual vulnerabilities.
• A repeater tool, for manipulating and resending individual requests.
• A sequencer tool, for testing the randomness of session tokens.
• The ability to save your work and resume working later.
• Extensibility, allowing you to easily write your own plugins, to perform complex and highly customized tasks within Burp.

Download Here:
http://portswigger.net/burp/download.html

Acunetix is a popular web vulnerability scanner and now the version 8 beta is available for download. This application is one of the most used penetration testing tool and so its a good news for all penetration testers to move a step ahead with this new beta version.
Version 8 of Web Vulnerability Scanner has been optimized to make life easier at every stage of a security scan. WVS is easier to use for web admins and security analysts alike: enhanced automation, ability to save scan settings as a template to avoid reconfiguration, and multiple instance support for simultaneous scans of several websites. WVS 8 also ushers in a new exciting co-operation between Acunetix and Imperva: developers of the industry’s leading Web Application Firewall.


Download here:
http://www.acunetix.com/vulnerability-scanner/vulnerabilityscanner8.exe

GoLISMERO help you to map an web application, displaying as confortable format for security auditor and preparing them for intergrate with other web hacking tools as w3af, wfuzz, netcat, nikto, etc

Features:

• Map a web application.
• Show all links and forms params as confortable format.
• Save results with some formats: text, cvs, html, raw (for parsing with bash script) and wfuzz script.
• Detect common vulnerabilities of web application.
• Filter web information retaining only what is important.
• Many other features you can find very useful.

Download here:
https://code.google.com/p/golismero/downloads/list

Joomscan is a nice vulnerability scanner for the popular content management platform Joomla. It detects more than 550 vulnerabilities in the website based on the Joomla which includes file inclusion, sql injection, command execution.

This was last updated more than 2 years ago in august 2009 with 466 vulnerabilities. Now it has updated with 550 vulnerabilities.

It also works with backtrack 5.

Joomscan tutorials http://security.web-center.si/?p=41

Download here:

http://web-center.si/joomscan/joomscan.tar.gz

This post is about a nice network penetration testing tool. C-Scan is a penetration testing tool which scans the IP address range or a specific IP to find out network vulnerabilities. This tool is not new and no new updates have been released for years. But you can still find it useful.

By using this tool, following items can be scanned:

• NT server NETBIOS information, Remote Register informa
• Remote OS type and version detection,
• Standard port status and banner information,
• SNMP information,
• CGI vulnerability detection,
• IIS vulnerability detection,
• RPC vulnerability detection,
• SSL vulnerability detection,
• SQL-server,
• FTP-server,
• SMTP-server,
• POP3-server,
• NT-server weak user/password pairs authentication module,
• Remote Register information, etc.

The results of the scan are saved in /log directory, and are title index_ip_address.htm (if you used the GUI) or ip_address if you used the command line option. These can be directly browsed by any normal Web Browser.

Basic user and password lists are supplied to carry out a basic attack on certain services, (above), if found enabled on the host.

You can download XScan v3.3 here:

http://xfocus.org/programs/200507/X-Scan-v3.3-en.rar

PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool which detects almost ll of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range of exploitable faults in PHP web applications. Minimal configuration is necessary to begin a scan; PHP Vulnerability Hunter doesn’t even need a user specified starting URI.

PHP Vulnerability Hunter scan algorithm is dynamic program analysis. Unlike many vulnerability scanners and fuzz tools that rely on static analysis, PHP Vulnerability Hunter analyzes the program as it’s running to get a clear view of all input vectors. That means better code coverage and as a result greater confidence in code security.

Added features

• Added code coverage report
• Updated GUI validation
• Several instrumentation fixes
• Fixed lingering connection issue
• Fixed GUI and report viewer crashes related to working directory