Welcome to The Professional Security Testers Warehouse for the CEH V7 GPEN CPTS CREST GCIH GREM OPST
Search
Nickname Password Security Code Security Code Type Security Code  
Become a Cyber Warrior get the CEH V8 now
FITSI the certification program for the federal workforce

We recommend:

Best hacking and penetration testing  magazine in the world

Video Library

Skimming for ID theft
5 / 2
Views: 229
Comments: 16
11-01-2008 05:18

Latest version of ATM skimmer hidden behind a speaker looking device
5 / 3
Views: 245
Comments: 11
11-01-2008 05:11

ATM Scam, do check your ATM machine before using it
5 / 2
Views: 222
Comments: 12
11-01-2008 04:59

Survey

Whic of the following certifications would you like to get?

GPEN
GCIH
CEH
CREST
GREM
GSEC
CISSP
Security+
Other (please leave a comment)



Results
Polls

Votes: 409
Comments: 0

Who's Online

There are currently, 109 guest(s) and 4 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
The CCCure Family of Portals is strictly supported by our Sponsors below and Donations.

Core Impact your compliance best friend

Home of CORE Impact
Click Here to visit.
Best security training in the world -- Forging IT security Experts
SecureNinja Dojo
SecureNinja Classes

FITSP the Federal Government Certification

CLICK HERE
to get more details

Clement, Nathalie, and Alain the Portals administrators wishes you a warm welcome.


Calendar of Upcoming Classes and Events


FBI IC3 2012 Internet Crime Report
Posted by cdupuis on Sunday, 19 May 2013 @ 09:27:58 CEST (248 reads)
Topic In the News

As seen on the excellenthttp://www.stefanomele.it web site:

The FBI Internet Crime Complaint Center (IC3) has released the 2012 Internet Crime Report — a summary of reported fraudulent activity, including data and statistics.

In 2012, the IC3 received and processed 289,874 complaints, averaging more than 24,000 complaints per month. Unverified losses reported to IC3 rose 8.3 percent over the previous year.

A new section in this year’s report includes charts for each of the 50 states detailing demographic, complaint, and dollar-loss data. The section allows for easy comparisons and convenient reference.

Additional content includes frequently reported Internet crimes, case highlights, and graphs that explain the lifecycle of a complaint. The most common complaints received in 2012 included FBI impersonation e-mail scams, various intimidation crimes, and scams that used computer “scareware” to extort money from Internet users.

The report gives detailed information about these and other commonly perpetrated scams in 2012.

Read the report here:
http://www.ic3.gov/media/annualreport/2012_IC3Report.pdf


(Read More... | Score: 0)


The Holistic CISSP Exam Preparation and Overview Tutorial
Posted by cdupuis on Wednesday, 15 May 2013 @ 23:22:07 CEST (330 reads)
Topic ISC2

Good news!

Today I have updated my holistic presentation on How to become a CISSP.

This presentation will tell you ALL that you need to know from step A to Z.

You can find it at:

https://www.cccure.org/flash/intro/player.html

This is a MUST watch for anyone interested in completing the CISSP certification.

Enjoy!

Clement

 

 


(Read More... | Score: 0)


Webinar: CompTIA Advanced Security Professional (CASP)
Posted by cdupuis on Monday, 13 May 2013 @ 15:47:54 CEST (351 reads)
Topic Training

Here is a webcast you don't want to miss.

My friend Eric Conrad will be doing a webcast tomorrow on the new CASP Certification from CompTIA.

Visit the link below to register:


On the exciting side, The CASP was added to DoD 8570 for the following roles:
IAT level III
IAM II, and
IASAE level I and II.

You can see the updated 8570 list of approved certifications at:


Here is the latest list of approved certs on the graphic below:

DoD Approved 8570 Baseline Certifications
DoD Approved 8570 Baseline Certifications

(Read More... | Score: 0)


Wireless Hacking and Wireshark Special Edition Magazine
Posted by cdupuis on Monday, 13 May 2013 @ 08:03:28 CEST (237 reads)
Topic Hakin9

Wireshark Compendium – 180 pages on Wi-fi Hacking

 

HACKING WIRELESS NETWORKS

Hacking Wireless in 2013
By Terrance Stachowski, CISSP, L|PT

This article is a simple how-to guide for hacking wireless networks using BackTrack 5 R3, or Kali – Linux Penetration Testing Distributions offered by Offensive Security. The information provided in this article will aid you in testing the security of your wireless network to determine if your vulnerable to wireless intruders. The following information is for educational purposes only; never use these techniques to access any network which you do not own, unless you have the explicit written permission from the owner of the network.

Hacking Wi-Fi Networks
By Danny Wong, CISSP, CISA, CEH, PMP, ITIL, MCT, MCSE, MCITP, MCTS

In an Enterprise Infrastructure where your Wi-Fi network is breached, you might imagine a situation where monitoring alerts goes off, SMS alerts are sent to your mobile, Intrusion Detection Systems sounds off and Intrusion Prevention Systems kicks in to lock down the perpetrator. Security team activates their well-defined security framework encompassing Security Incident Response and Handling which define the processes to Identify, Contain, Eradicate and Recover from the incident.

Security Through Obscurity: How To Hack Wireless Access Point
By Bamidele Ajayi, OCP, MCTS, MCITP EA, CISA, CISM

This article is meant for legitimate use by users who have forgotten their Wireless Access Point (WAP) credentials such as recovering a misplaced network key or users who have been called by legitimate owners of WAP to help recover network keys. It will inform readers how to hack their Wireless Access Point to gain access.

Wireshark – Hacking WiFi Tool
By MI1

When placed properly, Wireshark can be a great help for network administrator when it comes to network troubleshooting, such as latency issues, routing errors, buffer overflows, virus and malware infections analysis, slow network applications, broadcast and multicast storms, DNS resolution problems, interface mismatch, or security incidents.

Introduction to Wireless Hacking Methods
By Alexander Heid, Co-founder and President of HackMiami

This article is intended for those who have never forayed into the world of wireless hacking, and will assume the reader has a basic understanding of networking principles and Linux command navigation.

WIRESHARK BASICS

Wireshark – Not Just a Network Administration Tool
By Arun Chauchan, Joint Director CIRT Navy at Indian Navy

Wireshark, a powerful network analysis tool formerly known as Ethereal, captures packets in real time and displays them in human-readable format. Wireshark was developed by Gerald Combs and is free and open-source.

Wireshark – Sharks on The Wire
By Patrick Mark Preuss, Network Engineer

Capturing and analyzing network data is one of the core skills every IT professional should posses. If you have problems with your system or application, suspect a security issue, in almost every case the network is involved today.

The Network Hackeror Analyzer Wireshark
By Anand Singh

Wireshark is an open source tool for capturing and analysing network packets, from standard network protocols such as Ethernet, TCP, UDP, HTTP to GSM Protocols like LAPD. Wireshark works like a network packet X-Ray and can listen to network traffic to help identify problems related to protocols, applications, links, processing time,
latency and more.

Wireshark Overview
By Nitish Mehta, Information Security & Cyber Crime Consultant

Wireshark is a very popular tool mainly used to analyze network protocols. It has many other features as well but if you are new the program and you seek somebody tocover the basics, here is a brief tutorial on how to getstarted.

WIRELESS SECURITY

“You Are Here” A Guide to Network Scanning
By Court Graham, CISSP, CEH, GCIH, GSEC, MCSE

Historically the term network scanning has been defined as a process which primarily takes place shortly after the information gathering phase of a hacking attempt or penetration test. In actuality, you never know when you will have to perform scanning activities.

WiFi Combat Zone: Wireshark Versus the Neighbors
By Bob Bosen, Founder of Secure Computing

If you’re one of the regular readers of Hakin9, then you know that there are several means by which your neighbors could have penetrated your WiFi LAN. Do you ever wonder if it’s already happened? Would you like to learn how to monitor anybody that’s abusing your network?

Wi-Fi Security Testing with Kali Linux on a Raspberry Pi
By Dan Dieterle, Security Researcher at CyberArms Computer Security

Learn how to test the security of Wi-Fi networks using a $35 Raspberry Pi and the new Kali Linux. You will also see how some common wireless network security tactics are very easily bypassed.

Using Wireshark to Analyze a Wireless Protocol
By Hai Li, Associate Professor of Beijing Institute of Technology

Wireshark is the perfect platform to troubleshoot wireless networks. In this tutorial, I will demonstrate how to support a new wireless protocol in Wireshark. A wireless protocol in the real world is very complicated, so I will use ASN.1 technology to generate the source code of a dissector.

The Revolving Door of Wi-Fi Security
By Jonathan Wigg, Data Architect at NetMotion Wireless

This isn’t a how-to guide for breaching wireless networks; there are more than enough of those floating around on the Internet. Instead, I wanted to provide some context and an overview of the Wi-Fi security space. Back to the revolving door that is Wi-Fi security and why broadly diverse security measures in random quantities make a poor barrier for entry.

Capturing WiFi Traffic with Wireshark
By Steve Williams, CISSP, GCIH, ACMA

For many years, Wireshark has been used to capture and decode data packets on wired networks. Wireshark can also capture IEEE 802.11 wireless traffic while running on a variety of operating systems.

An Introduction to the Rise (and Fall) of Wi-Fi Networks
By Alessio Garofalo, System Engineer at Green Man Gaming, IT Security Analyst at Hacktive Security

Wireshark is an open source network packet analyzer that offer similar functions of tcpdump and allows you to make the packet sniffing a less stressing task.

Decoding and Decrypting Network Packets with Wireshark
By Andrei Emeltchenko, Linux SW Engineer at Intel Corporation

The main idea is that well known Bluetooth protocols, profiles and security mechanisms to be used with secondary radio are already present in many devices.

State of Security in the App Economy: Mobile Apps Under Attack
By Jukka Alanen, vice president, Arxan Technologies

The proliferation of mobile devices has created an appcentric global marketplace, ushering in the App Economy that is driving innovation, new business models, and revenue streams across all industries. The app industry is growing at a staggering rate, with revenues approaching $60 billion worldwide.

WIRESHARK ADVANCED

Network Analysis On Storage Area Network Using Wireshark
By Massimiliano Sembiante, IT Security and Risk Specialist at UBS Bank

Wireshark can be used during a proactive analysis to identify potential network bottleneck, to monitor “live” what is happening to data flow, and to decode packets in transit, displaying information in readable format. The tool can be installed on any computer connected to the network and equipped with a NIC card. Using specific API or libraries, such as WinPcap under Windows or libpcap for Unix, it enables data capture and allow to analyze packets travelling over the carrier.

Deep Packet Inspection with Wireshark
By David J. Dodd, GIAC, IAM & IEM, Security +

This article attempts to provide some detail into how to search through packet dump files or pcap files using Wireshark. I’ll give some useful information on using wireshark & tshark to do deep packet analysis.Intrusion etection devices such as Snort use the libpcap C/C++ library for network traffic capture.

Listening to a Voice over IP (VoIP) Conversation Using Wireshark
By Luciano Ferrari, Information Security at Kimberly-Clark

Wireshark is a very powerful tool but did you know you can extract an RTP stream traffic from your VoIP packets, listen to, and even save an audio file of the conversation?In this article, you’ll find an overview and introduction to using Wireshark to analyze VoIP packets and also a step-by-step tutorial on how to extract and listen to a capturedaudio file.

Wireshark – LUA
By Jörg Kalsbach, Senior Consultant at JPrise GmbH and Information Technology and Services Consultant

This article explores an extension mechanisms offered by Wireshark. After a brief description of Wireshark itself, it shows how Wireshark can be extended using Lua as an embedded language. It shows the benefits to be gained from using the combination of Wireshark and Lua.

Tracing ContikiOs Based IoT Communications over Cooja Simulations with Wireshark
By Pedro Moreno-Sanchez, M.Sc. student at the University of Murcia, Spain
Rogelio Martinez-Perez, B.Cs. in Computer Science at the University of Murcia, Spain

Internet of Things is getting real. Billions of devices interconnected between each other retrieving data and sharing information using wireless communication protocols everywhere.

CYBERSECURITY

Integration of Cyberwarfare and Cyberdeterrence Strategies into the U.S. CONOPS Plan to Maximize Responsible Control and Effectiveness by the U. S. National Command Authorities
By William F. Slater, III, CISSP, SSCP, CISA, MSCE 2000: Security, ITIL Foundation v3, MCTIP, Certified Data Center Professional

This paper deals with issues related to the present situation of lack of a clearly defined national policy on the use of cyberweapons and cyberdeterrence, as well as the urgent present need to include strategies and tactics for cyberwarfare and cyberdeterrence into the national CONOPS Plan, which is the national strategic war plan for the United States.

Open Networks- Stealing the Connection
By Michael Christensen CISSP, CSSLP, CRISC, CCM ISO:22301, CPSA, ISTQB, PRINCE2

Most of you are quite aware of the fact, that using open WiFi networks processes a threat to the security of your device (Laptop, smartphone, tablet etc.). But did you know, that if you associate your device with an open network, the threat even goes beyond being actively online on the open access point?

Social Engineering: The Art of Data Mining
By Terrance J. Stachowski, CISSP, L|PT

This article explores the art of data mining, a technique utilized build a dossier and profile of a targeted individual, network, or organization.

Attempting to Solve the “Attribution Problem” – Using Wireshark and Other Tools to as an Aid in Cyberwarfare and Cybercrime for Analyzing the Nature and Characteristics of a Tactical or Strategic Offensive Cyberweapon and Hacking Attacks
By William Favre Slater III, PMP, CISSP, SSCP, CISA, MSCE 2000: Security, ITIL Foundation v3, MCTIP, Certified Data Center Professional

One of the main disadvantages of the hyper-connected world of the 21st century is the very real danger that countries, organizations, and people who use networks computer resources connected to the Internet face because they are at risk of cyber attacks that could result in anything ranging from denial service, to espionage, theft of confidential data, destruction of data, and/or destruction of systems and services.

Spyware Your Business Cannot Afford It
By Louis Corra, Owner of NEPA Computer Consulting, Net Solution Specialist at Network Solutions

Certainly, your business is important to you, your employees, your stock holders and your customers. Your computer systems, servers, and netwo,rk storage devices contain tons of vital information such as inventory, tax records, payroll and, most importantly, your customers’ credit card information.

EXTRA

An Interview with Cristian Critelli, L3 Escalation TAC Engineer at Riverbed Technology Ltd.
Level 3 Escalation Engineer at Riverbed Technology Inc., and part of the EMEA TAC Support Team
By Ewelina Nazarczuk

 

 


(Read More... | Score: 0)


New OWASP projects
Posted by cdupuis on Saturday, 11 May 2013 @ 20:23:07 CEST (200 reads)
Topic OWASP

NEW OWASP PROJECTS 

OWASP Web Application Security Quick Reference Guide Project - Project Leader:  Marek Zmyslowski - This will be a simple checklist for Web Application.  The unique feature of this project is that all checks will be simple and can be checked by particular testcase.  It is simple but can be very informative and useful for testers and coders.​

OWASP Application Fuzzing Framework Project - Project Leader:  Marek Zmyslowski.  The framework will be used to fuzz applications in the Windows environment.  It will have a couple of modules.  Two main modules will be for ile fuzzing and dll fuzzing.  A very wide configuration will allow for many fuzzing possibilities. 

OWASP Security JDIs Project - Project Leader:  Edwin Aldridge.  This project aims to build a library of concise, actionable, technology specific instructions detailing good practice on avoiding or closing specific vulnerabilities.  This will be a Security HOWTOs for people who may not have time to study a problem in depth but need to secure their application.  

OWASP Top 10 Fuer Entwickler 
- Project Leader:  Torsten Gigler  The Top 10 Fuer Entwickler (Top 10 Developer Edition in German) The objectives of the project is to add Good Practices (like the Cheat Sheets) to the OWASP Top 10.  Its aim is to bridge the gap between awareness and theoretical knowledge, to effective know-how for the purpose of building good programs.  It is written in German to amke it easier for German developers to use it.  We will take care to make a migration to other languages easy. 

OWASP Rails Goat Project - Project Leader:  Ken Johnson  This is a Rails application which is vulnerable to the OWASP Top 10.  It is intended to show how each of these categories of vulnerabilities can manifest themselves in a Rails-specific way as well as provide the subsequent mitigations for each. 

PROJECT ANNOUNCEMENTS

OWASP Code Review Table of Contents is now live!
We are currently still recruiting authors that can assist with section development, writing, and editing of the Code Review Guide.  This is an excellent opportunity to work on a high profile OWASP Flagship project.  Applicants are encouraged to choose to contribute to either a section or the entire chapter.  Authors should be knowledgeable about the sections they choose.  For more information on the OWASP Code Review Guide, please visit the Project Webpage


(Read More... | Score: 0)


Arachni v0.4.2 has been released
Posted by cdupuis on Saturday, 11 May 2013 @ 20:16:38 CEST (191 reads)
Topic Web Applications Stress Test

From: Tasos Laskos

Subject: Arachni v0.4.2 has been released (Open Source Web Application Security Scanner Framework)

Hey folks,

This is just to let you know that there's a new version of Arachni.

Arachni is a modular and high-performance (Open Source) Web Application Security Scanner Framework written in Ruby.

The change-log is quite sizeable but the gist is:

  * Brand new web interface -- allowing for team collaboration.
  * Significant decreases in memory usage.
  * Issue remarks –  Providing extra context to logged issues.
  * Improved payloads for Windows machines for path traversal and OS command injection.
  * RPC API updates allowing for much easier remote scan management.
  * Much improved profiling and detection of custom 404 responses.
  * The ability to exclude pages from the scan based on content.

For more details about the new release please visit:

http://www.arachni-scanner.com/blog/new-release-v0-4-2-new-interface-new-website/

Homepage       - http://www.arachni-scanner.com
Blog               - http://www.arachni-scanner.com/blog
Support          - http://support.arachni-scanner.com
GitHub page    - http://github.com/Arachni/arachni
Author           - Tasos "Zapotek" Laskos (http://twitter.com/Zap0tek)
Twitter          - http://twitter.com/ArachniScanner
Copyright       - 2010-2013 Tasos Laskos
License          - Apache License v2

Cheers,

Tasos Laskos.


(Read More... | Score: 0)


Hack The Planet Magazine - Latest edition released
Posted by cdupuis on Saturday, 11 May 2013 @ 20:16:02 CEST (323 reads)
Topic In the News

HTP5 has been released, featuring:

MIT/EDUCAUSE
Linode
Nmap
Sucuri
NIST/NVD
Wireshark
and two zerodays.

Enjoy - http://straylig.ht/zines/HTP5/


(Read More... | Score: 0)


New version of SpiderFoot has been released
Posted by cdupuis on Friday, 10 May 2013 @ 18:03:02 CEST (380 reads)
Topic In the News

From: Steve Micallef
Date: Fri, May 10, 2013 at 2:28 PM
Subject: SpiderFoot 2.0 released
To: pen-test@securityfocus.com

Hi everyone,

SpiderFoot is a free, open-source footprinting tool, enabling you to perform various scans against a given domain name in order to obtain information such as sub-domains, e-mail addresses, owned netblocks, web server versions and so on. The main objective of SpiderFoot is to automate the footprinting process to the greatest extent possible, freeing up a penetration tester's time to focus their efforts on the security testing itself.

Grab it from: http://www.spiderfoot.net/

New in this release, which is actually a complete re-write of the version from 2005(!):
    - Now runs on Windows as well as Linux, Solaris, *BSD (basically anything with Python should be fine)
    - Scans are even more configurable than before
    - All scan data stored locally in an SQLite database for querying, reporting and analysis
    - Many more scans/tests included (GeoIP, URL linkage, web technology, port scans...)
    - You can now easily extend functionality by writing your own modules in Python
    - Completely new user interface, which is now entirely web-based
    - Configuration state is stored between runs
    - Scanning can be remotely controlled

I hope you find it useful, and if you have any suggestions/complaints, feel free to contact me.

Thanks,

Steve


(Read More... | Score: 0)


TOPERA is a new security tool for IPv6
Posted by cdupuis on Thursday, 09 May 2013 @ 19:30:34 CEST (36 reads)
Topic

On Tue, May 7, 2013 at 5:18 PM, cr0hn <cr0hn@cr0hn.com> wrote:

Hi everybody,

        We just released TOPERA v2:

        TOPERA is a new security tool for IPv6, with the particularity that their attacks can't be detected by Snort.

        This new version of TOPERA include these improvements:

        1 - Slow HTTP attacks (Slowloris over IPv6).
        2 - Improved TCP port scanner.

        New project page:

        http://toperaproject.github.io/topera/

Regards!


(Read More... | Score: 0)


Trustwave Global Security Report
Posted by cdupuis on Saturday, 13 April 2013 @ 15:15:38 CEST (1071 reads)
Topic Books for testers

Wednesday, April 03, 2013 3:00 AM

2013 Trustwave Global Security Report

Trustwave Global Security Report - Click HERE to download

This year, Trustwave analyzed millions of passwords, hundreds of businesses and billions of emails, all in an effort to expose the most critical and emerging security threats to organizations around the world.

The results--along with real-world scenarios and actionable advice--will help you prepare your business and your teams for what's ahead in 2013 and beyond.

Did you know?

The average time from breach to detection is 210 days.
Mobile malware samples increased by 400%.
E-commerce applications account for 48% of breach investigations.

Want the inside track on the threats you'll be facing this year?

Then download and read the 2013 Trustwave Global Security Report.

Request the report for Free!


(Read More... | Score: 0)


BACKTRACK is now called KALI LINUX -- Do not expect Backtrack 6
Posted by cdupuis on Wednesday, 13 March 2013 @ 10:20:30 CET (1396 reads)
Topic BackTrack

The free security auditing toolkit launched today at Black Hat Europe in Amsterdam.

Click on the graphic below to visit the new Kali Linux website and learn more about this new OS based on Backtrack:

Kali Linux Operating System and testing environment

 

 

The Birth of Kali Linux

Kali Linux, The Rising

It’s been 7 years since we released our first version of BackTrack Linux, and the ride so far has been exhilarating. When the dev team started talking about BackTrack 6 (almost a year ago), each of us put on paper a few “wish list goals” that we each wanted implemented in our “next version”.

Scrapping it All and Starting Afresh

It soon became evident to us that with our 4 year old development architecture, we would not be able to achieve all these new goals without a massive restructure, so, we massively restructured. We realized it would be easier to start afresh, using new technologies and processes than to try to patch up our existing environment to conform to Debian policies and standards. This realization brought upon the next question…

Ubuntu vs. Debian

Once we realized we were free from the bonds of our old environment, we started musing about the base platform we want to build our next penetration testing distribution – the main players on our table were Debian and Ubuntu. With both options heavily weighed and gently avoiding philosophical rants about the pros and cons of each, Debian was our final choice.

What About the Offensive Security Courses?

Surprisingly enough, with all the new changes we have made in Kali, the user experience remains pretty much the same. Apart from a couple of path changes due to our new FHS compliance, our students should feel little difference between Kali and BackTrack.

Where’s my /pentest Directory?

Gone. Kaput. Kwisha. Dissipated. FHS compliance has removed the /pentest structure from our distribution. Although the /pentest directory tree was a signature of our previous distributions for many years, it always brought with it policy questions which could never be satisfactorily answered. For example, when does a tool go in /pentest, and when should it be placed in the $PATH ? Where should a tool like “sqlmap” be placed? Should it be in /pentest/web, or /pentest/database? With our new FHS compliant packages, there’s no guesswork left. Everything is in the path and accessible directly, as it should be.

Kali Linux – What’s in a Name?

Hindu Goddess of time and change? Philippine martial art? Cool word in Swahili? None of the above. “Kali” is simply the name we came up with for our new distribution. Why change the name in the first place? With all these significant changes in our distribution, we felt that we needed to convey this in the project name. “BackTrack 6″ didn’t do justice to our efforts in the past year, and wouldn’t convey our new message to our users. What’s the new message? We’ll let you find out for yourself.

 


(Read More... | Score: 0)


(IN)Secure Magazine Latest Edition for FREE
Posted by cdupuis on Saturday, 16 February 2013 @ 21:11:10 CET (1104 reads)
Topic In the News

 ISSUE 36 on Security awareness

DOWNLOAD HERE

  • What makes security awareness training successful?
  • Review - Incapsula: Enterprise-grade website security
  • Five questions for Microsoft's Worldwide Chief Security Advisor
  • Computer forensic examiners are from Mars, attorneys are from Venus
  • In the field: RSA Conference 2012 Europe
  • A mobile environment security assessment
  • Hack In The Box CEO on the information security landscape
  • In the field: IRISSCERT Cybercrime Conference 2012
  • Comply or die: The importance of a business-centric approach to compliance
  • Hackers can get in when systems are off: The risks of lights out management
  • It's just the guest wireless network... right?

     ISSUE 36 on Security awareness

    DOWNLOAD HERE



  • (Read More... | Score: 0)


    SI6 Networks IPv6 Scanning Toolkit v1.3
    Posted by cdupuis on Saturday, 16 February 2013 @ 21:07:30 CET (1026 reads)
    Topic In the News

    Folks,

    We are pleased to release the SI6 Networks' IPv6 Toolkit v1.3: a security assessment and trouble-shooting toolkit for the IPv6 protocol suite.

    The toolkit is available at: <http://www.si6networks.com/tools/ipv6toolkit>, where you can find the usual tarball, a PGP-signed version of it, a link to the toolkit's GIT repository, etc.

    This release has a number of features:

       * It includes a full-fledged IPv6 address scanning tool (scan6)
         -- probably the only comprehensive IPv6 address scanning tool out there. Check out all the newly incorporated  features!

       * It includes support for tunnels (in most of the tools). So if you are currently employing e.g. a free IPv6 tunnel to connect to the IPv6 Internet, you'll now be able t play with the tools using your tunnel.

       * Adds features that have been in our "todo list" for a while:

           + It includes manual pages in troff format for all the tools.

           + It includes a makefile, to easily build and install the tools, configuration file, manuals, etc., on your local
             system.

    The toolkit runs on (at least) the latest versions of Linux, FreeBSD, NetBSD, OpenBSD, and Mac OS X.

    Please send any bug reports and/or feature requests to <fgont@si6networks.com>.

    As always, you can get the latest news on IPv6 security research and tools by following us on Twitter: @SI6Networks.

    Thanks!

    Best regards,
    - --
    Fernando Gont
    SI6 Networks
    e-mail: fgont@si6networks.com


    (Read More... | Score: 0)


    IETF Internet-Draft about IPv6 Network Reconnaissance
    Posted by cdupuis on Saturday, 16 February 2013 @ 20:59:39 CET (875 reads)
    Topic In the News

    Folks,

    A while ago we had published an IETF Internet-Draft about IPv6 Network Reconnaissance ("Network Reconnaissance in IPv6 Networks", available at:
    <http://tools.ietf.org/html/draft-ietf-opsec-ipv6-host-scanning-00>).

    Our scan6 tool (part of the SI6 Networks' IPv6 toolkit <http://www.si6networks.com/tools/ipv6toolkit>) allows you to play with the different IPv6 address scanning techniques.

    It's simple to play/try: Find an IPv6 node (e.g., "dig DOMAIN aaaa", and figure out the pattern... or simply scan for the predefined scan patterns that scan6 implements). "traceroute6 DOMAIN" will give you the IPv6 addresses of the intervening routers (which generally follow very easy or  straightforward patterns).

    We're really eager to get feedback from the community... there's still lots to research on this subject, so... the more input we get form the community (whether on-list or off-list), the better the next releases of scan6 will be. (Have we missed any patterns? How about other
    virtualization technologies that scan6 does not yet support? etc.)

    As you probably know, we typically discuss IPv6 security issues on the IPv6 hackers mailing-list <http://www.si6networks.com/community/mailing-lists.html> -- feel free to join -- it's a low-noise and very focused list.

    P.S.: Please do read the scan6 manual page before using the tool .. you might cause trouble to the target network and/or to your own network.

    Thanks!

    Best regards,
    --
    Fernando Gont
    SI6 Networks
    e-mail: fgont@si6networks.com


    (Read More... | Score: 0)


    Wounded Warrior Cyber Combat Academy
    Posted by cdupuis on Tuesday, 05 February 2013 @ 22:08:37 CET (837 reads)
    Topic In the News

    Dear Colleague,

    We’ve been promoting the Wounded Warrior Cyber Combat Academy and our planning our first classes at the end of this month. (yeah!!!)  We’ve been accepting applications from Wounded Warriors in December and January.

    To help build awareness of the program, I’m hosting a one hour webinar next week using Adobe Connect.  If you know any wounded warriors who would be interested would you please forward this email link to them so they can sign up to learn about the program?  Here’s the link…

    http://cybersecurity.adobeconnect.com/w2cca-signup/event/event_info.html

    I will forward you a recording of the webinar once it’s been captured…

    Thanks and Best Wishes,

    Jim Wiggins
    Executive Director
    FITSI - Federal IT Security Institute
    3213 Duke St #190
    Alexandria, VA  22314
    Phone:  703-828-1196  x701
    Cell:  571-277-4661
    http://www.fitsi.org


    (Read More... | Score: 0)


    Our Sponsors

    Become a Cyber Warrior get the CEH V8 now

    Login

    Nickname

    Password

    Security Code:
    Security Code
    Type Security Code

    Don't have an account yet? You can create one. As a registered user you have some advantages like theme manager, comments configuration and post comments with your name.

    Reverse Engineering

    Big Story of Today

    There isn't a Biggest Story for Today, yet.

    Wi-Fi Security


    You can syndicate our news using the file backend.php or ultramode.txt


    All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest © 2003-2008 by Clement Dupuis and Nathalie Lambert (Site Maintainers).

     


     

     


    Page Generation: 0.64 Seconds