SD Papers

• Security-Database releases FireCAT (Firefox Catalog of Auditing Toolbox)
  16 March 2007, by Security Database Team

  Security-Database.com team is happy to announce its new Firefox Framework Map collection of the most useful security oriented extensions. We called the framework FireCAT. It stands for FireFox Catalog of Auditing Toolbox.
  FireCAT is based upon a paper we wrote some weeks before (Turning firefox to an ethical hacking platform) and downloaded more than 25 000 times. We also thank all folks that encouraged us and sent their suggestions and ideas to make this project a reality.
  This initial (...)

• February 2007 - Alerts Dashboard from Security-Database
  1 March 2007, by Security Database Team

  Security-Database has compiled alerts and security tools changes we have monitored during the month of February 2007.
  The dashboard contains : CVE alerts by severity and by CVSS score. OVAL ID files Microsoft alerts Redhat alerts Mandriva alerts Debian alerts
  The PDF file is now available for download.

• Telnet "froot" attack: back to the future 1994 with AIX
  28 February 2007, by Tools Tracker Team

  Remember the solaris telnet bypass vulnerability, this security flaw allows anyone to bypass the authentication mecanism just by supplying some parameters
  Information and exploit are here
  Exploiting this breach is very simple so that reminds me something i’ve used during my earlier days when i started playing with exploits.
  This vulnerability was about a bug in rlogin that affected AIX 3.1 and AIX 3.2.
  As far as i can remember, this was posted in the great Linux USENET admin group in 1994 (...)

• Turning Firefox to an Ethical Hacking Platform
  12 February 2007, by Tools Tracker Team

  Internet is an amazing virtual world where you can "virtually" do anything : gambling, playing, watching movies, shopping, working, “VoIPying†, spying other people and for sure auditing remote systems.
  This article is copyrighted Security-Database.com
  This article has been updated to a new Framework. The tool is called FireCAT. And it is mind map based tool. Get it here
  The security testers community has a large panel of security tools, methodologies and much more to perform their (...)

• Penetration Tests Framework : MasterMinding your security tests
  10 February 2007, by Tools Tracker Team

  Folks from vulnerabilityassessment.co.uk a good security resource website have released a complete security map called "Penetration Testing Framework"
  This is by far the smartest security map we have ever dealed with. With just a few click, you can list all tools, techniques and methods related to a pentest phase.
  The PTF (pentestration tests framework) enumerates the stages one’s should perform during a test (as described in the OSSTMM manual) Network footprinting Discovery & (...)

• Turning Firefox to an auditing platform.
  7 January 2007, by Tools Tracker Team

  Firefox offers nowadays much more than browsing the web, but auditing the targets. A lot of extensions (and much more to come) exist and lead security auditors to reveal hidden or misc information undetected by traditional application scanners.
  Latest Update: Firefox Framework FireCAT - Catalog of Auditing Toolbox released.
  The fact is that firefox and its extensions act as an in-between layer collecting all traffic sent and received from the targets.
  Here are some useful extensions we (...)

0 10 20 30 40