Section: .. / web /
| /// File Name: |
decss.tar.gz |
Description:
|
DeCSS is a handy Perl script which removes CSS tags from HTML pages.
| | Homepage: | http://www.pigdog.org/decss/ | | File Size: | 4090 | | Last Modified: | Feb 18 14:16:48 2000 |
| MD5 Checksum: | 1dd7fe2c77e0c4d3ceafbbd9caa61356 |
|
| /// File Name: |
deluge-0.9.11.tar.gz |
Description:
|
Deluge is a Web site stress testing tool designed to mimic different types of users/customers. Simulated users can be robotic (various wandering types), or script-based. Scripts are recorded using an included proxy server, and support variables for variation during multiple attacks. An evaluation program is also included to turn the large resulting log files into useful, readable data.
| | Homepage: | http://sourceforge.net/projects/deluge | | File Size: | 222051 | | Last Modified: | Feb 4 22:11:15 2001 |
| MD5 Checksum: | 12ee7d3268d92ca21a35946446cd17e4 |
|
| /// File Name: |
dom-checker-1.00.tgz |
Description:
|
A simple utility to thoroughly validate DOM, XMLHttpRequest, and cookie security restriction handling in modern web browsers. Notable features include exhaustive hierarchy crawling, cross-domain IPC system for blind write verification, page transition checks, and more.
| | Author: | Filipe Almeida,Michal Zalewski | | Homepage: | http://code.google.com/p/dom-checker/ | | File Size: | 11631 | | Last Modified: | Jan 25 19:20:06 2008 |
| MD5 Checksum: | e28d130fba312da6a933f088e0ea34e2 |
|
| /// File Name: |
dradis-v1.2.tar.gz |
Description:
|
dradis is a tool for sharing information during security testing. While plenty of tools exist to help in the different stages of the test, not so many exist to share interesting information captured. When a team of testers is working on the same set of targets, having a common repository of information is essential to avoid duplication of efforts.
| | Author: | etd | | Homepage: | http://dradis.nomejortu.com/ | | File Size: | 2011899 | | Last Modified: | May 7 13:42:52 2008 |
| MD5 Checksum: | 481beae4f13e322aad1066ba943aafd4 |
|
| /// File Name: |
elza-1.3.1.zip |
Description:
|
The ELZA is a scripting language written in PERL aimed at automating HTTP requests, while maintaining fill browser-like behavoir, which enables it to go to places within web sites unaccessible to netcat, telnet, or similar tools. Features: Extraction of _dynamic_ URLs from from HTML;Handling of forms, passing custom form fields and field values, collecting hidden form fields; Following redirects and refreshes; Handling of cookies, honoring their Path and Domain attributes; HTTP Referer, User-Agent, and other HTTP headers for perfect mimicry; HTTP basic authorization including dictionary attacks; Looping for repeated requesting or dictionary attacks; Conditional execution; HTTPS communication via a SSL tunnel; Forms hijacking. Scripts written in ELZA can be executed remotely via POST or forked for load generation.
| | Author: | Philip Stoev | | Homepage: | http://phiphi.hypermart.net | | File Size: | 28873 | | Last Modified: | Nov 26 16:40:19 1999 |
| MD5 Checksum: | 029eb167341c19143de29397c18857f1 |
|
| /// File Name: |
elza-1.4.3.zip |
Description:
|
The ELZA is a scripting language aimed at automating requests on web pages. Scripts written in ELZA are capable of mimicring browser behavoir almost perfectly, making it extremely difficult for remote servers to distinguish their activity from the activity generated by ordinary users and browsers. This gives those scripts the opportunity to act upon servers that will not respond to requests generated using netcat, rebol, telnet or similar tool. As a result, one can hijack heavily protected HTML forms, perform dictionary attacks on login forms, and do sophisticated CGI scanning.
| | Author: | Philip Stoev | | Homepage: | http://phiphi.hypermart.net/elza-entry.html | | File Size: | 41330 | | Last Modified: | Jan 4 03:48:35 2000 |
| MD5 Checksum: | b6e8d6a733c07a4081837b70f88c6c08 |
|
| /// File Name: |
elza-1.4.7-beta.zip |
Description:
|
The ELZA is a scripting language aimed at automating requests on web pages. Scripts written in ELZA are capable of mimicking browser behavior almost perfectly, making it extremely difficult for remote servers to distinguish their activity from the activity generated by ordinary users and browsers. This gives those scripts the opportunity to act upon servers that will not respond to requests generated using netcat, rebol, telnet or similar tool. As a result, one can hijack heavily protected HTML forms, perform dictionary attacks on login forms, and do sophisticated CGI scanning.
| | Author: | Philip Stoev | | Homepage: | http://phiphi.hypermart.net/pub/ | | Changes: | Beta release - Includes some new features. | | File Size: | 85719 | | Last Modified: | Dec 21 18:11:51 2000 |
| MD5 Checksum: | 69e706ec55eae97e6246d661df5e5d59 |
|
| /// File Name: |
FG-Injector-0.9a.tar.bz2 |
Description:
|
FG-Injector is a tool that leverages the pentester's work by facilitating the exploitation of SQL Injection vulnerabilities. It includes a a powerful proxy feature for intercepting and modifying HTTP requests, a network spy module to allow the analyst view HTTP requests and their corresponding responses and an inference engine for automating SQL injection exploitation. The Inference Engine Module of the FG-Injector Framework automates the generation and injection of SQL statements needed for exploitation of a Blind SQL Injection. This module will work also for regular injections using the same method. It can produce blind injections on web/app servers using MS SQL Server, MySQL, and PostgresSql DBMSs.
| | Homepage: | http://www.flowgate.net/ | | File Size: | 2107215 | | Last Modified: | Apr 20 22:57:47 2007 |
| MD5 Checksum: | bf8954ef2c77f16f70b919e7f9d813a6 |
|
| /// File Name: |
FireCat.tgz |
Description:
|
FireCat is a new Firefox Framework Map collection of the most useful security oriented extensions. It stands for FireFox Catalog of Auditing Toolbox. Included is a zip file of the extensions and a pdf that provides a diagram of everything included.
| | Author: | Security Database Team | | Homepage: | http://www.security-database.com/ | | File Size: | 83395 | | Last Modified: | Mar 20 11:14:17 2007 |
| MD5 Checksum: | f42fa4fa01b5c59bc6e75f452b057fa3 |
|
| /// File Name: |
FormScalpelv1.0.11BETA.zip |
Description:
|
Form Scalpel v1.0.11 for Windows is designed to aid security professionals to assess the resilience of a web sites forms to various forms of attack. Given the growing sophistication and variety of sites and development techniques utilized, a generic tool specifically aimed at making this job easier was required. Thus "Form Scalpel" was born. The tool automatically extracts form/s from a given web page and automatically splits out all fields for editing and manipulation - making it a simple task to formulate detailed GET and POST requests. The application supports HTTP and HTTPS connections and will function over proxy servers.
| | Author: | Curryman | | Homepage: | http://ugc.org.uk/~curryman | | File Size: | 2740611 | | Last Modified: | Sep 20 00:40:47 2001 |
| MD5 Checksum: | cc2ae1b4a6b71dd864d1bab764dc9e8c |
|
| /// File Name: |
Fortify-1.4.6-unix-alpha.tar.gz |
Description:
|
Fortify provides full strength, 128-bit encryption facilities to the export editions of Netscape Navigator and Communicator. These facilites are used when connecting to an encrypting web server (with the SSL protocol). Fortify also adds the ability to generate 1024-bit RSA keys internally (these are typically used for client certificates), plus the ability to send and receive e-mail messages using strong 128-bit encryption (with the S/MIME protocol).
| | Author: | Farrell McKay | | Homepage: | http://www.fortify.net | | Changes: | This is a transitionary release to support Communicator 4.72. | | File Size: | 361153 | | Last Modified: | Mar 7 03:50:02 2000 |
| MD5 Checksum: | 0569aee45038ff534791ac042064ab82 |
|
| /// File Name: |
fscan-both.tgz |
Description:
|
Fast HTTP Auth Scanner is a new web security scanner for Windows that allows brute-force attacks against web based devices that require HTTP authentication. Source and binary included.
| | Author: | Andres Tarasco | | Homepage: | http://www.514.es/ | | File Size: | 323885 | | Last Modified: | Jul 25 00:28:45 2007 |
| MD5 Checksum: | adf7b4531948a7db469cf130dfd3ecf9 |
|
| /// File Name: |
gatekeeper32.zip |
Description:
|
GateKeeper 3.2 s a little bit of JavaScript code that you can use to restrict access to some or all of your web pages without the need for CGI scripting or server based authentication methods. Access is via password.
| | Author: | Jbarta | | Homepage: | http://junior.apk.net/~jbarta/tutor/keeper/index.html | | File Size: | 8156 | | Last Modified: | Nov 30 22:27:51 1999 |
| MD5 Checksum: | 4c690231a98acc2ffd62f74c51f6109c |
|
| /// File Name: |
genraid3r.c |
Description:
|
CGI exploit generator that enables an engineer to test standard known CGI exploits with a utility that is customizable which will print to STDOUT and without the need for a browser.
| | Author: | J0hny_Lightning | | File Size: | 3464 | | Last Modified: | Mar 4 00:31:54 2003 |
| MD5 Checksum: | 80b74700aefdebdec85ccd622519430f |
|
| /// File Name: |
GetRAW.tar.gz |
Description:
|
GetRAW for Windows will query any web server on any given port for banner, date, server, content modification, ETag, Accept-Range, Content Length, current connection and content. Uses the perl IO::Socket::INET module. Includes source and win32 executable.
| | Author: | x1b | | File Size: | 567068 | | Last Modified: | Jan 9 03:45:42 2004 |
| MD5 Checksum: | 63e1c04929b85905dce3097e3e49225a |
|
| /// File Name: |
GoogleCall.zip |
Description:
|
GoogleCall uses Google's Click-to-Call service to send a number with a forged Caller ID. It automates the process of sending multiple calls to someone with multiple forged Caller IDs.
| | Author: | Jeffball55 | | File Size: | 97490 | | Last Modified: | Nov 21 21:45:29 2006 |
| MD5 Checksum: | ecc5f5cdd45cdbf9167e4bdba6c87bd4 |
|
| /// File Name: |
googlegath.txt |
Description:
|
googlegath is a free open source utility to obtain informations through Google searches. It could be useful for penetration testing, security scanning, etc. googlegath has been tested on GNU/Linux, *BSD systems.
| | Author: | Matteo Cantoni | | Homepage: | http://www.nothink.org/perl/googlegath/ | | File Size: | 3900 | | Last Modified: | Dec 8 16:53:07 2006 |
| MD5 Checksum: | 7258710bb9b915f89b5a84dcbc1c06ae |
|
| /// File Name: |
GoogleRower.zip |
Description:
|
Google Rower was created to automate google searches and retrieve the links. It can brute force searches to get more results by adding a letter or number to the end of each search. It then combines all the results found into one html file and removes the duplicates. It can be used to search an ip range using google's site operator, thus looking for backup/old http servers.
| | Author: | Jeffball55 | | File Size: | 13095 | | Last Modified: | Oct 27 16:51:53 2006 |
| MD5 Checksum: | 8ee131d92b371022c11a9cada4409072 |
|
| /// File Name: |
GSI.zip |
Description:
|
Google Site Indexer (GSI) is a program designed to create a directory listing when a site has turned directory listing off. It sends requests to google using the site operator. Also it gets the sites robots.txt file.
| | Author: | Jeffball55 | | File Size: | 96906 | | Last Modified: | Nov 26 21:22:58 2006 |
| MD5 Checksum: | 66d7f970fce9ebc6ef0044f3f8e8f290 |
|
| /// File Name: |
guileproxy.tar.gz |
Description:
|
Guilecool proxy scanner and checker C source. In Italian.
| | File Size: | 23375 | | Last Modified: | Jan 5 03:20:22 2003 |
| MD5 Checksum: | 332797d09ee2a0d06de04ef90edc66e9 |
|
| /// File Name: |
haxlinx.htm |
Description:
|
Links to local files can be used to subvert restricted access Windows machines which have access to a web browser. Executable program loggers and restrictions are defeated by using .CPLs. Large problems for network administrators could arise if students and employees, whose access was restricted, start to use the links provided on the document. This one can be used for Windows NT as well.
| | Author: | Rev | | File Size: | 1992 | | Last Modified: | Feb 23 16:16:05 2000 |
| MD5 Checksum: | 9fae71d04c9b880a9d5d9f832c3977ce |
|
| /// File Name: |
hhp-webinfo.pl |
Description:
|
This little utility will use a public service (netcraft) to check the web server version and operating system of a remote host.
| | Author: | Loophole | | Homepage: | http://www.hhp-programming.net | | File Size: | 1262 | | Last Modified: | Dec 30 22:22:56 2000 |
| MD5 Checksum: | a5cdbc365ef4c4de7316495a0af1d224 |
|
| /// File Name: |
hnn.pl |
Description:
|
hnn.pl grabs current or archived news from hackernews.com.
| | Author: | MerXorcist | | File Size: | 957 | | Last Modified: | Apr 9 22:33:07 2000 |
| MD5 Checksum: | de8835194ce0fece69cc5d3e7d5b5d64 |
|
| /// File Name: |
hns.pl |
Description:
|
hns.pl grabs current news only from www.net-security.org.
| | Author: | MerXorcist | | File Size: | 710 | | Last Modified: | Apr 10 19:36:15 2000 |
| MD5 Checksum: | e3750e4d90d3e60a128155560f536c03 |
|
|
|
|
|