WireShark 1.0 Released !

WireShark , a network protocol analysis tool has turned into its newest version , WireShark 1.0 ! it also includes an experimental Mac OS X package .
The excerpt from linuxhaxor.net :
Wireshark, the most popular network protocol analysis tool has finally turned to version 1.0. This released version is not much different than the previous [...]

Posted on April 4th, 2008 by admin in Sectools, Security

kses-based HTML filters Multiple Vulnerabilities

This following security advisory was posted to Web App Sec ’s mailing list . It’s about the weaknesses discovered in kses - PHP HTML/XHTML filter , which affects some public cms such as Wordpress, Moodle , Drupal , DokeOS , GeekLog , etc

Here’s the short excerpt about it : (taken from webappsec.org mailing list)
During internal [...]

Posted on April 3rd, 2008 by admin in Security, Web Hacking, secInfo

HosProxy - Converting SMTP Server Into HTTP Proxy

If you are Stuck in a LAN without Internet Connection , but with access to an Email System Only , you can use HosProxy to create  Http proxy over the SMTP Proxy which will allow you to browse to the internet ! In a simpler way , we are going to use the email system [...]

Posted on April 2nd, 2008 by admin in Sectools, Security

ProxyStrike - Proxy to Find Vulnerabilities in Web Application

This tool was released in April 1st (hope it’s not an April Fool :p ) , it’s called ProxyStrike . If you’re familiar enough with WebScarab , then you must try ProxyStrike too ! ProxyStrike is designed to scan vulnerabilities while you browse a web application . What’s more about this tool is , it’s [...]

Posted on April 2nd, 2008 by admin in Sectools, Security

Advertisement