Archive for the ‘Pentesting’ Category

New Release for the WiFi Pineapple Hotspot

Hakshop online store have upgraded their release for the WiFi Pineapple with new important features for penetratiton testing and hacking different wireless network,  the device is now coasting about 89.99 USD and all you need to do is just to place it in an open area hotspot to start recording users keystrokes , online accounts [...]

Share

IronWASP Security Testing Platform

Web applications are one of the most targeted systems on internet as they need to interact and be available to any user, we have on a daily bases new vulnerabilities discovered on these critical applications. Some hackers enjoy using Google search engine to identify some vulnerable website versions for attacking them or testing their knowledge [...]

Share
Foto

InSSider new release

New update has been released for Inssider a free wardriving application that help penetration tester to check different wireless network available. The program is very useful as it provides information about the encryption used, vendor of the access point, SSID and the performance of the Wifi network coverage. Update release note include the following: ” [...]

Share

WPA/WPA2 Vulnerable to Brute-Force Attacks

Wireless network access points are everywhere so if you travel a lot you will find more than one AP at airports coffee shop or at the beach, I often try to scan different wireless network to check what type of encryption used by the AP owner (you can use InSSider) and as a result I [...]

Share

Metasploit Pro 4.0 New Release

New version of Metasploit professional edition has been released by Rapid7, Metasploit is a complete solution for penetration testing that gives pentester a complete visibility on different threat with over 10 vulnerability scanners. Metasploit Pro 4.0 helps you improve your enterprise vulnerability management program and test how well your perimeter holds up against real world [...]

Share

WebSurgery- Web Security Testing Tool

WebSurgery is another suite of tools for security testing of web applications. It was designed for security auditors to help them with the web application planning and exploitation. Currently, it uses an efficient, fast and stable Web Crawler, File/Dir Bruteforcer and Fuzzer for advanced exploitation of known and unusual vulnerabilities such as SQL Injections, Cross [...]

Share

theHarvester Retrieve Desired Information Online

theHarvester is a Computer-based social engineering tool for gathering e-mail accounts, user names and hostnames/subdomains from different public sources like search engines and PGP key servers. This tools is intended to help Penetration testers in the early stages of the project It’s a really simple tool, but very effective. The sources supported are: Google – [...]

Share