Yaptest - Automating Pentesting tasks

I was reading my rss feeds and i stumble across "Yaptest", a tool that aims to make it easy for a pentester to automate parts of testing on the fly. In the tool website the author gives some examples like:

• Run nikto on anything nmap thinks is an HTTP service
  
• Run hydra on every host with TCP port 21 open
  
• Attempt upload a file to any TFTP servers found
  
• Run onesixtyone on all hosts that are up
  
• Try metasploit's solaris_kcms_readfile exploit against any hosts running kcmsd

Im thinking right now in thousand of more uses.  I like this kind of tools oriented in the automation of tedious work,  boosting productivity and cutting time from assessment projects.

Now there is a Yaptest front end, and it look amazing:

The tools is developed in perl and the frontend in Ruby. I'm not too fan of perl, but i will give a try to the tool asap.

Link: Yaptest Overview

CMM

Ecrime - New mafias

This time my partner Vicente gave a great talk about the Cyber Mafias in the FIST Conference. Tha talk was an overview on how they operate, the money they manage, and some techniques they use.

It's a very interesting talk for everybody, because it's not a topic that you can find much information about..

The presentation is more interesting with Vicente's speech and comments, but you can download the presentation from the FIST Conference page, or from here Edge-Security site.

Enjoy

Metagoofil - Metadata Extractor Update

Hi all, long time from the last post. This time is a short post about a new updated version of the Metagoofil

The problem was that Google changed the source code of the results page, so the parser failed to catch the files. I guess that the structure of the HTML is changed often, to render useless the tools that use google in an automated way outside the API (all the tools right now).

Recently Roelof talked about the problems he had in Maltego using google as an input and core part of a tool, i want to confirm what he said, it's really a mess to maintain a tool that uses google as input :(

Enough for today.

Thanks to Chris Gates for pointing out the problem.

VAPWN - Web application Visualization - Crawler

Some time ago, we were working on a web application analyzer tool focused on the structure of the web application. We have a alpha version with a crawler and a proxy working. This is a proof of concept of visualization techniques in the security field:



You can view a video with an example of a crawling, different colors means different kind of files (dinamic, javascript, directory, hmtl, etc):

http://www.edge-security.com/vapwn-edge.mov

Hope you like, we are going the release this alpha version asap.

Enjoy!

Windows Vista - Easy hack

Hi, this time the people from Offensive-Security.com, bring us an example on how Windows Vista could be hacked in a very easy way, forget exploits, ASLR, DEP, etc.

Just boot with a live CD, move utilman.exe to utilman.old, and copy cmd.exe to utilman.exe.

Then in the login window, just press CTRL-U, and a console with administrative rights will pop up.

It's the same as the old Windows XP Sticky-keys trick.

Video here

Enjoy