İsimsiz

Cyberprobe open source real time monitoring SIEM

The Cyberprobe project is an open-source distributed architecture for real-time monitoring of networks against attack. The software consists of two components:

a probe, which collects data packets and forwards it over a network in standard streaming protocols. a monitor, which receives the streamed packets, decodes the protocols, and interprets the information. These components can be…

ThreatPinchLookup, threat intelligence extension for Chrome

ThreatPinchLookup supplies threat intelligence information on hover tool tips.

Creates on hover tooltips for every website for IPv4, MD5, SHA2, CVE or any custom IOC you define. Designed to work with any API, customization encouraged. Its the infosec threat and OSINT swiss army knife for your browser. Investigate less by taking your context with you.

Documentation here: https://github.com/clou…

Inspector.py privilege escalation utility

The Inspector is a handy privilege escalation utility.

Features; -can find processes with root privilege -find exploits for your kernel version with builtin exploit database. -The Inspector also analyses history files to find login information.

Download: wget https://raw.githubusercontent.com/graniet/Inspector/master/inspector.py

usage: python inspector.py

i think inspector is a handy…

torcrack: ssh brute force over TOR

torcrack is a penetration testing utility which tries to crack SSH passwords multi-threaded and over TOR network.

argparse, PyFiglet, PySocks, Paramiko, tor installation

git clone https://github.com/norksec/torcrack.git

pip3 install pyfiglet pysocks paramiko argparse

apt-get install -y tor

usage

Make sure the tor service is running:

service tor restart

python3 torcrack.py -h for commands

LINK

rapid7/ metasploitable3 – a VM for metasploit.

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit.

Metasploitable3 is released under a BSD-style license. See COPYING for more details. Building Metasploitable 3

System Requirements:

OS capable of running all of the required applications listed below VT-x/AMD-V…

MitmAP is a python program which creates a fake (Rogue AP) Access Point and sniff data

MitmAP is a python program which creates a fake (Rogue AP) Access Point and sniff data.

features:

SSLstrip2 for HSTS bypass Image capture with Driftnet TShark for command line .pcap capture Full featured access point, with configurable speed limit mitmproxy Wireshark DNS Spoofing Saving results to file

requirements:

Kali Linux / Raspbian with root privileges A…

PenQ Pentesting Browser Bundle

PenQ is an open source, Linux-based penetration testing browser bundle we built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.

PenQ is configured to run on Debian based distributions including Ubuntu and its derivative distros, and penetration…

Using Vuls Vulnerability Scanner For Linux

Vuls is a vulnerability scanner for Linux, agentless and written in golang.

Vuls downloads NVD(National Vulnerability Database) and inserts into a sqlite database. Vuls has built in CVE dictionary for this sqlite file.

Second step you should prepare ssh key based authorization between server and scan target. Because vuls is an insider scanner. Logic behind the vuls system is searching for…

Libgcrypt is a general purpose cryptographic library based on the code from GnuPG. It provides functions for all cryptographic building blocks: symmetric ciphers, hash algorithms, MACs, public key algorithms, large integer functions, random numbers and a lot of supporting functions.

Version 1.7. has new algorithms and modes listed below:

– SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash…

Debian Jessie compiling PHP with OCI8 & PDO OCI

First we need to grab instant client from oracle.. Basic and Devel RPM packages is enough.

Before we install PHP we need to install prerequisites.

sudo apt-get install gcc libbz2-dev libpng12-dev libc-client2007e-dev libmcrypt-dev libxml2-dev libcurl4-openssl-dev libxslt1-dev libaio1 apache2-dev alien

Turn rpm packages to debian packages with alien.

sudo alien -d…

Microsoft Encryption Library for Healthcare Databases released.

Microsoft Encryption Library for Health Databases released.

“SEAL” (Simple Encrypted Arithmetic Library) is a homomorphic encryption algorithm and allows querying medical data without decryption.

The code contains a few basic examples, and more detailed documentation will be available soon.

Download

World’s fastest and most advanced GPGPU-based password recovery utility oclHashcat is now open-source

World’s fastest and most advanced GPGPU-based password recovery utility oclHashcat is now open-source.

Hashcat and oclHashcat sources released at github

Encrypted Database provider zeroDB goes open source

ZeroDB is an end-to-end encrypted database. Data can be stored on untrusted database servers without ever exposing the encryption key. Clients can execute remote queries against the encrypted data without downloading all of it or suffering an excessive performance hit.

  ZeroDB sources published at github.

ZeroDB-server sources

information about zerodb technology

ORACLE has a new site for SQL beginners – LiveSQL

Oracles new website aimed for Oracle SQL users.  LiveSQL site has snippets and tutorials for Oracle Database Systems.

Microsoft producing new encryption algorithm for healthcare data

Microsoft is working on a new encryption algorithm for healthcare sector.  Algortihm which called “SEAL” is a homomorphic encryption algorithm and allows querying medical data without decryption.

  Release address (not yet published)

Research Article (pdf)

sslip.io, free wildcard SSL certificate for everyone

while we are waiting for free and open Certificate Authority “Lets Encrypt”, we got a new option.

sslip.io gives a subdomain based upon your ip and you just need to set up SSL key which released at GitHub to your server.

Finally you will have a ip based SSL subdomain address e.g.  https://52-0-56-137.sslip.io/

Detail of SSLip.

Amazon introduces alternate TLS implementation s2n

Amazon Web Services introduced s2n; an Open Source implementation of the TLS protocol.  s2n is a library that has been designed to be small, fast, with simplicity as a priority. s2n avoids implementing rarely used options and extensions, and today is just more than 6,000 lines of code. As a result of this, Amazon developers expected  that it is easier to review s2n; they have already completed…