Monday 14 May 2012

Tools (14th May)

Weekly round up of pen test and forensic tools that have come to my attention over the last week, it is not a comprehensive tool list but tools that I found interesting or details of tools I use that have been upgrade.

New Version Of CORE Impact
http://www.coresecurity.com/content/impact-v12-3
With the release of version 12.3, CORE Impact® Pro is the only solution to extend automated penetration testing to endpoints – allowing commercial and government organizations to proactively test desktop images at the OS and application levels without the need to challenge or exploit individual users with social engineering techniques. CORE Impact Pro’s new endpoint testing capabilities are completely revolutionary and are not offered by any other vulnerability assessment or penetration testing platform.

Pwn Plug Software Release 1.1 Now Available
http://www.pwnieexpress.com/downloads.html
Over on the Pwnie Express blog, Dave Porcello has announced the release of Pwn Plug System Software 1.1, a massive update to the companies Pwn Plug product.
This update addresses many of the issues with the existing software, such as the outdated release of Ubuntu it was based on and the lack of latest security tools. It also adds some very unique new features like the ability to wardial via GSM modem and control the Pwn Plug device with nothing more than SMS messages from any cell phone.

Orion Browser Dumper v1.0 released
http://www.darkcomet-rat.com/misctools.dc
This software is an advanced local browser history extractor (dumper), in less than few seconds (like for Browser Forensic Tool) it will extract the whole history content of most web browsers, such asInternet Explorer, Mozilla FireFox, Google Chrome, COMODO Dragon, Rockmelt and Opera.


SSLsplit 0.4.4
http://packetstormsecurity.org/files/112648/SSLsplit-0.4.4.html
SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. Connections are transparently intercepted through a network address translation engine and redirected to SSLsplit. SSLsplit terminates SSL/TLS and initiates a new SSL/TLS connection to the original destination address, while logging all data transmitted. SSLsplit is intended to be useful for network forensics and penetration testing.

No comments:

Post a Comment