Book: Hacking Exposed Windows

Hacking Exposed Windows: Microsoft Windows Security Secrets and Solutions, Third Edition (Hacking Exposed)





http://www.amazon.com/exec/obidos/tg.../-/007149426X/

• Publisher: McGraw-Hill Osborne Media
• Publication Date: December 4, 2007
• Author: Joel Scambray
• Language: English
• Number of pages: 451
• ISBN-10: 007149426X
• ISBN-13: 978-0071494267

FireCat: Turning Firefox to an Ethical Hacking Platform

source: http://www.security-database.com/toolswatch/+-FireCAT-+.html

current version: 1.5 (January 9, 2009)
downloads: FreeMind MindMap | Browsable HTML | PDF

FireCAT (Firefox Catalog of Auditing exTension) is a mindmap collection of the most efficient and useful firefox extensions oriented application security auditing and assessment

FireCAT 1.5 will be the last release of this 1.x branch. In fact, we are working on a new improved version 2.0 (management of plugins, instant download from security-database, ability to add new extension, extension version checker, Firefox 3.X compatible extensions..)

FireCAT 1.5 : Firefox Catalog of Auditing exTensions

• Information Gathering
  • Whois
    • Shazou
    • Active Whois
    • DomainFinder
  • Location Info
    • HostIP.info
    • ShowIP
    • ASnumber
    • Router Status
  • Enumeration and Fingerprint
    • Header Spy
    • Header Monitor
    • Passive Recon
  • Data Mining
    • People Search
    • Gnosis
    • Who is this person
    • FaceBook ToolBar
  • Googling and Spidering
    • Advanced dork
    • SpiderZilla
    • View Dependencies
    • GSI Google Site Indexer
  • All in one
    • Bibirmer toolbar
• Proxying / Web Utilities
  • FoxyProxy
  • SwitchProxy
  • Pow (Plain Old WebServer)
• Editors
  • Jsview
  • Cert Viewer Plus
  • FireBug
  • XML developer Toolbar
• Security auditing
  • HackBar
  • RESTTest
  • Selenium IDE
  • Acunetix Application Scan
  • FireWATIR
    • Scripts 1 Ruby
    • Scripts 2 Ruby
  • ChickenFoot
    • Commands
  • Tamper Data
  • HeaderMonitor
  • LiveHTTPHeaders
  • RefControl
  • User Agent Switcher
  • Add n Edit Cookies
  • Cookies Swap
  • HttpOnly
  • Web Developer
  • AllCookies
  • DOM Inspector
    • Could be used with InspectThis
  • FormFox
  • Poster
  • Exploit-Me Suite
    • XSS-Me
    • SQL Inject-Me
    • Access-Me
• Network tools
  • Intrusion Detection System
    • FireKeeper
  • Sniffers
    • ffsniff
  • Wi-Fi
    • Hotspots
      • JiWire
  • Passwords
    • Unhide Passwords
  • Protocols / Application
    • FTP
      • Client and Server
        • CrossFTP
      • Client
        • FireFTP
    • DNS
      • DNS Unpinning
    • ORACLE
      • Oracle DBA ToolBar
      • Oracle OraDB Error Code Look-up
    • SQL
      • SQL Connection
    • SQLite
      • SQLite Manager
    • MySQL
      • MySQL Client
• Misc
  • Hacks for fun
    • Greasemonkey
      • Scripts
    • Technika
  • Encryption / Hashing
    • FileEncrypter
    • Net-force tools
    • FireGPG
    • MDHashTool
  • Malware Scanner
    • QArchive.org web files checker
    • Dr.Web anti-virus link checker
    • ClamWin Antivirus Glue for Firefox
  • Anti Spoof
    • Refspoof
  • Anti-phishing / Pharming / Jacking
    • TraceAssure
    • Surf Jacking Cookie Security Inspector
  • Automation
    • iMacros
  • Logs / History
    • Enhanced History Manager
    • Slogger
• IT Security Related
  • Open Source Vulnerability Database Search
  • US Homeland Security Threat
  • milw0rm Exploits Search
  • Best Security Tips

OSWA: Wireless Auditing LiveCD/LiveUSB

[Auditing of WiFi (802.11), Bluetooth and RFID]

source: http://oswa-assistant.securitystartshere.org/

Description

The OSWA-Assistant™ is a self-contained, freely downloadable, wireless-auditing toolkit for both IT-security professionals and End-users alike.

This toolkit is our contribution to the wireless security/auditing community and, as the "Assistant" moniker implies, and is designed for the following groups of people:

• IT-security auditors and professionals who need to execute technical wireless security testing against wireless infrastructure and clients;
• IT professionals who have responsibility for ensuring the secure operation and administration of their organization's wireless networks;
• SME (Small & Medium Enterprise) and SOHO (SmallOffice-HomeOffice) businesses who do not have either the technical expertise or the resources to employ such expertise to audit their wireless networks;
• Non-technical-users who run wireless networks at home and who would like to audit the security of their wireless home networks and laptops but don't know how.

Features

The OSWA™-Assistant is a no-Operating-System-required standalone toolkit which is solely focused on wireless auditing. As a result, in addition to the usual WiFi (802.11) auditing tools, it also covers Bluetooth and RFID auditing. Using the toolkit is as easy as popping it into your computer's CDROM and making your computer boot from it!

Technical professionals will easily be able to use the traditional menu-driven approach right off the bat as the arrangement of the menus is much more organized and logical than many other LiveCDs, as well as the presence of tools which don't just help with 802.11 (WiFi) auditing but also Bluetooth and RFID auditing as well.

Non-technical Home-owners and SOHO users are also catered to via the ActivityMap™ help system. Via a web interface, the ActivityMap™ helps non-technical or non-IT-security professionals to conduct basic security testing of their own wireless networks in a methodical and consistent manner. Using ThinkSECURE's 5E Methodology as a framework, the ActivityMap™ guides the user through the process of determining and proving if his/her network is secure or not.

By providing the ActivityMap, we hope to help end-users by providing them with a means to audit and prove if their networks are vulnerable and thus take the appropriate countermeasures to reduce their vulnerability exposure. By empowering the man-on-the-street to secure his/her own wireless network, our intention is that there will be less vulnerable networks around for evil-intentioned people to take advantage of, thus raising the overall national wireless security defence posture.

Tools

802.11 Tools

• Aircrack-ng 1.0-beta2 suite
• Airfart
• Airsnort
• Airsnarf
• AP-Hopper
• AP-Radar
• AP-Utils
• Asleap
• ChopChop
• CoWPAtty
• HostAPD
• Hotspotter
• Karma
• Kismet
• Leapcracker
• MDK3-v4
• MoocherHunter™
• Probemapper™
• SSIDsniff
• Wardrive
• Wavemon
• WEPlab
• Wi-Find
• Wi-Spy Tools
• WifiTap
• WifiZoo
• WPA-attack (Attacker)
• WPA Supplicant
• Wireless Extensions & Wireless Tools package (iwconfig/iwpriv, etc)

Bluetooth Tools

• Bluebugger
• Bluediving
• Blueprint
• Bluescanner
• Bluesnarfer
• BT-Audit
• Btfs
• Btscanner
• Carwhisperer
• Ghettotooth
• Obexpush-dos
• HIDattack
• Redfang
• T-Bear
• Ussp-push
• Bluez Bluetooth package with hcitool/hciconfig

RFID Tools

• Rfdump
• Rfidtool

Current Version: 0.9.0.5e (August 8, 2008)
Download: http://securitystartshere.org/page-t...t-download.htm

Warung Plus Hacking Videos Collection

This is a collection of hacking tutorials using backtrack to the max a grate collection in one place it even includes some of the hacking techniques which are not on the Offensive security video training......

Download:
http://rapidshare.com/files/176174300/WarungPlus.Hacking.Videos.part01.rar
http://rapidshare.com/files/176182629/WarungPlus.Hacking.Videos.part02.rar
http://rapidshare.com/files/176190850/WarungPlus.Hacking.Videos.part03.rar
http://rapidshare.com/files/176197762/WarungPlus.Hacking.Videos.part04.rar
http://rapidshare.com/files/176205035/WarungPlus.Hacking.Videos.part05.rar
http://rapidshare.com/files/176211908/WarungPlus.Hacking.Videos.part06.rar
http://rapidshare.com/files/176083240/WarungPlus.Hacking.Videos.part07.rar

Password: http://sumptuousworld.blogspot.com


the package contains the following video-tutorials:

Part1
-128 Bit Wep Cracking With Injection!.swf
-Adding Modules to a Slax or Backtrack Live CD from Windows.swf
-Basic Nmap Usage!.swf
-BufferOverflowPart2-Shellcoding ByIDEspinner.avi
-BufferOverflowPart3ExploitsByIDEspinner.avi
-How to decrypt SSL encrypted traffic using a man in the middle attack (Auditor).swf
-Sniffing Remote Router Traffic via GRE Tunnels (Hi-Res).avi

Part2
-A Quick and Dirty Intro to Nessus using the Auditor Boot CD!.swf
-Airplay replay attack - no wireless client required.swf
-Breaking WEP in 10 minutes.avi
-Complete Hacking Video using Metasploit - Meterpreter.swf
-Cracking a 128 bit WEP key (Auditor).swf
-Cracking a 128 Bit Wep key + entering the cridentials.swf
-Cracking Syskey and the SAM on Windows Using Samdump2 and John!.swf
-Cracking Windows Passwords with BackTrack and the Online Rainbow Tables at Plain-Text!.swf
-Cracking WPA Networks (Auditor).swf
-DoS attack against Windows FTP Server - DoS.avi
-Droop s Box Simple Pen-test Using Nmap, Nikto, Bugtraq, Nslookup and Other Tools!.swf
-Exploiting some bugs of tools used in Windows.swf.swf
-Exploiting weaknesses of PPTP VPN (Auditor).swf
-Finding Rogue SMB File Shares On Your Network!.swf
-Fun with Ettercap Filters!.swf
-How to crack the local windows passwords in the SAM database .swf
-How to sniff around switches using Arpspoof and Ngrep!.avi

Part3
-Anonym.OS LiveCD with build in Tor Onion routing and Privoxy.swf
-BackTrack LiveCD to HD Installation Instruction Video .swf
-Basic Tools for Wardriving!.swf
-Bluesnarfer attack tool demonstration.swf
-IDEspinner Buffer Overflows pt1.avi
-IDEspinner Feature Addition pt1.avi
-IDEspinner Feature Addition pt2.avi
-IDEspinnerDNS-PoisonRouting.avi
-Install VNC Remotely!.avi
-Internet Explorer Remote Command Execution Exploit (CMDExe) Client Side Attack (Hi-Res).avi
-Internet Explorer Remote Command Execution Exploit (CMDExe) Client Side Attack (Lo-Res).avi
-John The Ripper 1.7 password cracker Installation Instruction Video .swf
-Local Password Cracking Presentation for the Indiana Higher Education Cybersecurity Summit 2005!.swf
-MAC Bridging with Windows XP and Sniffing!.swf
-Mass De-Authentication using void11 (Auditor).swf
-Metasploit Flash Tutorial!.swf
-MITM Hijacking.wmv
-Nmap Video Tutorial 2 Port Scan Boogaloo!.swf
-Sniffing logins and passwords.avi

Part4
-A Penetration Attack Reconstructed.avi
-Bluesnarfing a Nokia 6310i hand set.avi
-Cain to ARP poison and sniff passwords!.avi
-Sniffing Remote Router Traffic via GRE Tunnels (Lo-Res).avi
-Sniffing VoIP Using Cain!.swf
-Snort Instruction video - howto install into backtrack.swf
-SSH Dynamic Port Forwarding!.swf
-Start a session and get interactive commandline access to a remote Windows box!.avi
-Telnet Bruteforce.avi
-Tunneling Exploits through SSH.avi
-Use Brutus to crack a box running telnet!.avi
-Using NetworkActiv to sniff webpages on a Wi-Fi network!.swf
-WEP Cracking using Aireplay v2.2 Beta 7 (Whax 3.0).swf
-WMF File Code Execution Vulnerability With Metasploit!.swf
-WPA Cracking using Aireplay v2.2 Beta 7 (Whax 3.0).swf