April 2017 - DigitalMunition

Vulnerabilties

Network management vulnerability exposes cable modems to hacking

April 30th, 2017 📅

Hundreds of thousands of internet gateway devices around the world, primarily residential cable modems, are vulnerable to hacking because of

Pentest Tools

Manticore A Dynamic Binary Analysis Tool

April 29th, 2017 📅

Manticore is a prototyping tool for dynamic binary analysis, with support for symbolic execution, taint analysis, and binary instrumentation. Features

security

The security awaress cascade

April 28th, 2017 📅

Awareness and training in general are successful if they change people's attitudes and decisions sufficiently to change their behaviors. Getting them

Pentest Tools

Monitor AWS & GCP Configurations: Security Monkey

April 28th, 2017 📅

Security Monkey is an OpenSource application from Netflix ( NetflixOSS) which monitors/alerts/reports one or multiple AWS/GCP accounts for anomalies. Security

Pentest Tools

InfectPE – Inject Custom Code into PE File

April 27th, 2017 📅

Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need

Hacking News

8 Highest-Paying Markets for Cyber Security Engineers

April 27th, 2017 📅

For job seekers hunting for higher pay, job security and the opportunity to work in any sector and in any

Security-Distro

Kali Linux 2017.1 Release

April 26th, 2017 📅

As with all new releases, you have the common denominator of updated packages, an updated kernel that provides more and

security

COLDFUSION HOTFIX RESOLVES XSS, JAVA DESERIALIZATION BUGS

April 26th, 2017 📅

Adobe today released an important security hotfix for several versions of its ColdFusion rapid web application development platform. The company

Pentest Tools

Dockerize IDA Pro: Docker IDA

April 25th, 2017 📅

Docker IDA is an open source project that allows you to dockerize IDA Pro to make reverse engineering on a

Pentest Tools

PowerMeta – PowerShell Script to Search Publicly Files for a Particular Domain and Get the Associated MetaData

April 25th, 2017 📅

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and

security

MIT selling 8 million coveted IPv4 addresses; Amazon a buyer

April 24th, 2017 📅

MIT is selling half of its 16 million valuable IPv4 addresses – an increasingly scarce stash it has held since

Pentest Tools

Blindy – Simple Script for running BruteForce Blind MySql Injection

April 24th, 2017 📅

Simple script for running bruteforce blind MySql injection The script will run through queries listed in sets in provided file

Pentest Tools

XSSYA Cross Site Scripting And Vulnerability Confirmation Scanner

April 24th, 2017 📅

XSSYA Cross Site Scripting Scanner & Vulnerability Confirmation written in python scripting language confirm the XSS Vulnerability in two method

security

DBShield – Database Firewall Written In Go

April 23rd, 2017 📅

Protects your data by inspecting incoming queries from your application server and rejecting abnormal ones. How it works? For

Pentest Tools

BEURK – Linux Userland Preload Rootkit

April 23rd, 2017 📅

BEURK is an userland preload rootkit for GNU/Linux, heavily focused around anti-debugging and anti-detection. Being a userland rootkit it gives

Privacy

The Rise of Wireless Security Cameras and the Risks They Pose

April 22nd, 2017 📅

While there’s a lot of conversation about cyber security and physical premises security, the two rarely overlap. But when you

Pentest Tools

PyT- Python Taint: Static Analysis of Python Web Applications Security Software

April 22nd, 2017 📅

For Static analysis of Python web applications based on theoretical foundations (Control flow graphs, fixed point, dataflow analysis) Features: Detect

Pentest Tools

Truehunter – Tool to detect TrueCrypt containers

April 22nd, 2017 📅

The goal of Truehunter is to detect TrueCrypt containers using a fast and memory efficient approach. It was designed as

Pentest Tools

Ad-LDAP-Enum – Active Directory LDAP Enumerator

April 21st, 2017 📅

ad-ldap-enum is a Python script that was developed to discover users and their group memberships from Active Directory. In large

Pentest Tools

Mozilla InvestiGator: MIG

April 21st, 2017 📅

MIG is a platform to perform investigative surgery on remote endpoints. It enables investigators to obtain information from large numbers

Malware

The History of Fileless Malware – Looking Beyond the Buzzword

April 21st, 2017 📅

What’s the deal with “fileless malware”? Though many security professionals cringe when they hear this term, lots of articles and product brochures mention fileless