DocumentsDate added

detectwall.sh (Mac/BSD version!!!)hot!

03.06.2005

This script search for a packet with certain flags, and generates a temporary firewall rulle (ipfw) to block further packets of that type. The firewall rule will stay in place for a certain period of time, and all of this can be configured via command-line parameters. Relies on tcpdump and ipfw. Mac/BSD version!!!

Hits: 2661

• Details
• Download

DNS Predict - PERL Versionhot!

09.02.2005

This PERL script, by Jimmy Neutron, is great for determining DNS names with Google. This tool, which is essential for network mapping, accepts two somewhat related words, and a domain name as arguments. The two words are sent through Google sets which expands the words into a list of related words. For example, "earth" and "mars" would expand to Venus, Mercury, Jupiter, Saturn, Neptune, Uranus, Pluto. If fed domain foo.com, dnspredict would then attempt to DNS resolve venus.foo.com, mercury.foo.com, etc. This Perl script should run on Windows, Linux, Mac, requires NET::Dns.

Hits: 6332

• Details
• Download

DNS Predict - Windows versionhot!

17.02.2005

This PERL script, by Jimmy Neutron, is great for determining DNS names with Google. This tool, which is essential for network mapping, accepts two somewhat related words, and a domain name as arguments. The two words are sent through Google sets which expands the words into a list of related words. For example, "earth" and "mars" would expand to Venus, Mercury, Jupiter, Saturn, Neptune, Uranus, Pluto. If fed domain foo.com, dnspredict would then attempt to DNS resolve venus.foo.com, mercury.foo.com, etc. This Windows version is standalone, and requires nothing other than this executable.

Hits: 10737

• Details
• Download

Gooscan (Linux)hot!

01.11.2006

Gooscan is a tool that automates queries against Google search appliances, but with a twist. These particular queries are designed to find potential vulnerabilities on web pages. Think "cgi scanner" that never communicates directly with the target web server, since all queries are sent to Google, not to the target. This is the latest version (v1.0) with many security fixes and updates by Mike Schiraldi. Thanks, Mike!

Hits: 63764

• Details
• Download

rs_iis2.c - webdav exploithot!

10.04.2003

This is a modified version of romansoft's IIS WEBDAV exploit. This gives remote SYSTEM privs on Windows 2000 boxes running IIS 5. I added a recursive function to troll through RET values to find the magic number. I also added a magic number of my own. Read the source for more details, especially if you are concerned about knocking down your target. (YOU SHOULD be concerned about this, as this is bad!) My included magic number works against Windows 2000 w/service pack 3 & IIS 5.

Hits: 6088

• Details
• Download
• View