Menu

Oct 2, 2009

Pwning using OpenVAS and Metasploit




OpenVAS stands for Open Vulnerability Assessment System and is a network security scanner with associated tools like a graphical user front-end. The core component is a server with a set of network vulnerability tests (NVTs) to detect security problems in remote systems and applications.

# ITS ©
# 2008 - 2009

Oct 1, 2009

Finding Subdomains using Goorecon



In the Information Gathering stage of a pentest, we are interested in finding out the various sub-domains of our target domain. As we have seen in previous videos, querying DNS servers using zone transfer requests or trying to retrieve entries using a dictionary / brute-forcing attack, is a good start, but fails in most cases. Another alternate technique to figure out sub-domains is to query google and check if it has found any sub-domains during it's web mining exercise on the target. Goorecon is just the tool we need in order to do this.
Download Goorecon :
http://www.darkoperator.com/tools-and-scripts/

# ITS ©
# 2008 - 2009

Remote Keylogger Firefox Addon

This video shows how easy is to make a remote keylogger as a firefox addon. With little knowlege on how to make a firefox addons and coding in javascript you can make a potentialy dangerous addon. You can read on how to make a firefox addon on:

https://developer.mozilla.org/En/Developing_add-ons

Video :
http://securitytube.net/Remote-Keylogger-Firefox-Addon-video.aspx

# ITS ©
# 2008 - 2009