May 2018 - DigitalMunition

Prowler – Distributed Network Vulnerability Scanner

May 31st, 2018 📅

Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon – HackSmith v1.0. Capabilities Scan

The robots.txt

May 31st, 2018 📅

What is a robots.txt file? Search engine through a program robot (also known as spider), automatically access the Internet page

Seccubus: automated vulnerability scanning, reporting and analysis

May 31st, 2018 📅

Seccubus Image: avleonov Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its

[Tips] Using mimikataz on penetration testing

May 31st, 2018 📅

mimikatz is a tool I’ve made to learn C and make somes experiments with Windows security. It’s now well known to extract plaintexts

Attackintel – Tool To Query The MITRE ATT&CK API For Tactics, Techniques, Mitigations, & Detection Methods For Specific Threat Groups

May 31st, 2018 📅

A simple python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat

Russian government officially requested Apple to block Telegram

May 30th, 2018 📅

Russia’s Federal Communications Ministry of Communications, Information Technology and Mass Media Supervision Agency Roskomnadzor of Russia’s communications regulator said on

Diskover – File System Crawler, Storage Search Engine And Analytics Powered By Elasticsearch

May 30th, 2018 📅

diskover is an open source file system crawler and disk usage software that uses Elasticsearch to index and manage data across heterogeneous storage systems.

BackSwap Bank Trojan uses three new technologies to empty bank accounts

May 30th, 2018 📅

ESET’s security experts recently discovered a new type of banking Trojan, BackSwap Bank Trojan, which uses three new technologies to steal funds from

Lama – Tool To Obtain A Custom Password Dictionary To A Particular Target

May 30th, 2018 📅

Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is

pwnedOrNot – Tool To Find Passwords For Compromised Email Accounts Using HaveIBeenPwned API

May 29th, 2018 📅

pwnedOrNot is a python script which checks if the email account has been compromised in a data breach, if

Blockchain Platform EOS exposed High-Risk Security Vulnerabilities

May 29th, 2018 📅

360 companies announced that Vulcan team discovered a series of the high-risk security flaw1832 in blockchain platform EOS. It has been verified that

GyoiThon – A Growing Penetration Test Tool Using Machine Learning

May 29th, 2018 📅

GyoiThon is a growing penetration test tool using Machine Learning. GyoiThon identifies the software installed on web server (OS, Middleware, Framework, CMS, etc…)

FBI Remind User to Restart Router to Remove VPNFILTER malware

May 29th, 2018 📅

Previously, Cisco’s security labs discovered that malware named VPNFILTER has infected more than 500,000 routers worldwide. The malware is believed to be completed

Terminator – Metasploit Payload Generator

May 28th, 2018 📅

Terminator Metasploit Payload Generator. Payload List : Binaries Payloads 1) Android 2) Windows 3) Linux 4) Mac OS Scripting Payloads

Domain Name WHOIS Information Will No Longer Show Contact Information

May 28th, 2018 📅

Recently, the European Union has officially started implementing a new privacy protection act, the “General Data Protection Regulations,” which is

plasma: an interactive disassembler for x86/ARM/MIPS

May 28th, 2018 📅

PLASMA is an interactive disassembler. It can generate a more readable assembly (pseudo code) with colored syntax. You can write scripts

AgentRun data leak reveals personal sensitive information of customers

May 28th, 2018 📅

The US software company AgentRun has accidentally exposed the thousands personal sensitive information of policyholders recently. The reason is actually that of an

iOSRestrictionBruteForce v2.1.0 – Crack iOS Restriction Passcodes With Python

May 28th, 2018 📅

This version of the application is written in Python, which is used to crack the restriction passcode of an iPhone/iPad

Bitcoin Gold Hacked: Lose $18 Million

May 28th, 2018 📅

Bitcoin Gold’s development team recently announced details of the attacks last week. At that time, the attacker stole money from the cryptocurrency exchange

Microsoft develops new tools that prevent AI algorithms from being biased

May 27th, 2018 📅

Microsoft has developed a new set of tools to determine if AI algorithms are biased. The AI algorithm may discriminate against certain groups of

Burpa – A Burp Suite Automation Tool

May 27th, 2018 📅

A Burp Suite Automation Tool With Slack Integration. Requirements burp-rest-api Burp Suite Professional slackclient Usage $ python burpa.py -h ################################################### __ / /_

Pentest Tools

AutoNSE: Massive NSE AutoSploit and AutoScanner

May 27th, 2018 📅

AutoNSE Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner. The Nmap Scripting Engine (NSE) is one of Nmap’s most powerful and flexible

Papers

Deserialization vulnerabilities

May 26th, 2018 📅

Table of Contents Serialization (marshaling) Deserialization (unmarshaling) Programming language support serialization Risk for using serialization Serialization in Java Deserialization vulnerability

Pentest Tools

Salt-Scanner – Linux Vulnerability Scanner Based On Salt Open And Vulners Audit API

May 26th, 2018 📅

A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration. Features Slack notification and report upload JIRA