Tumblelog by Soup.io
Newer posts are loading.
You are at the newest post.
Click here to check if anything new just came in.

July 25 2011

finkregh

Penetration Testing Framework 0.58

Tags: security pentest reference links
Reposted byreturn13 return13

July 14 2010

finkregh

Yersinia is a network tool designed to take advantage of some weakeness in different network protocols

Yersinia is a network tool designed to take advantage of some weakeness in different network protocols. It pretends to be a solid framework for analyzing and testing the deployed networks and systems.
Tags: security tools network pentest networking

June 15 2010

finkregh

Fierce - Trac

Fierce domain scan was born out of a frustration after performing a web application security audit. It is traditionally very difficult to discover large swaths of a corporate network that is non-contiguous. It's terribly easy to run a scanner against an IP range, but if the IP ranges are nowhere near one another you can miss huge chunks of networks.

Fierce is designed to locate likely targets both inside and outside a corporate network. Only those targets are listed. Fierce is a reconnaissance tool written in Perl, that quickly scans domains (usually in just a few minutes, assuming no network lag) using several tactics.
Tags: security dns pentest scanner enumeration

April 23 2009

finkregh

IPv6 neighbor spoofing - PacketLife.net

IPv4 over Ethernet, by far the most widely deployed LAN technology, has long been plagued by its vulnerability to a simple layer two attack known as ARP spoofing. To oversimplify, ARP spoofing is achieved when a malicious attacker crafts a gratuitous ARP advertisement purporting to be from another host on the LAN, typically the default gateway. By pretending to be the default gateway for a subnet, the attacker can intercept all traffic from the victim host(s) in a man-in-the-middle (MITM) attack. However, with the (eventual) migration to IPv6, ARP is being phased out, so ARP spoofing should no longer be a problem, right? Wrong. Sort of. While it's true ARP does not exist in the IPv6 protocol stack, IPv6 instead relies on ICMPv6 for many of the same operations carried out via ARP under IPv4. Collectively, these functions make up IPv6's Neighbor Discovery (ND) protocol, described in RFC 4861.
Tags: security pentest ipv6 sniffing arp spoofing
Older posts are this way If this message doesn't go away, click anywhere on the page to continue loading posts.
Could not load more posts
Maybe Soup is currently being updated? I'll try again automatically in a few seconds...
Just a second, loading more posts...
You've reached the end.