Bookmarks for September 4th through November 3rd
These are my links for September 4th through November 3rd:
- [Positive Technologies] Research Lab: Another fine method to exploit SQL Injection and bypass WAF – A method that I discovered today in MySQL documentation struck me with its simplicity and the fact that I haven’t noticed it before. Let me describe this method of bypassing WAF.
- Cyber Security Awareness Month 2009 – Summary and Links – As requested by many readers, below are links to all 31 of the diaries that we wrote for Cyber Security Awareness Month 2009. In 2007 we covered a large range of subjects based on what our readers submitted as ideas. In 2008 we took a closer look at the six steps of incident handling. This year we examined 31 different ports/services/protocols/applications and discussed some of the major security issues. Many readers submitted comments, tips, and tricks for securing them. If you have additional comments on any of these diaries feel free to add them directly to the bottom of the diary (you have to log in first) or if you want to remain anonymous you can send them to us via our contact form.
- Psychology and Security Resource Page –
- Syn: Bobs Double Penetration Adventure – Part 1 – A couple of days ago a mate at work asked about the security issues surrounding computers that are connected to the company network and also to the Internet via a wifi connection. This question was perfect fodder for a Bob story I thought. So the story goes…….
- 500 Internal Server Error – 500 Internal Server Error
- VRT: How does malware know the difference between the virtual world and the real world? –
- Grep auth log and print ip of attackers | commandlinefu.com –
- DNSpenTest – The DNSpenTest will be a suite of pentest about DNS system. In a near future you will found a set of tool like: a fake DNS server, a DNS packet forger, etc…
- Automating Nessus Scans with AutoNessus Tutorial – AutoNessus automates regular vulnerability scans with Nessus or OpenVAS and provides delta reporting. AutoNessus effectively reduces the analysis time for subsequent scans of the same infrastructure by only reporting delta findings. AutoNessus runs Nessus scans at regular intervals and compares the findings of the last scan with the findings of the previous scan. The delta of this scan is presented in a web GUI when findingscan be easily marked as either real findings or non-issues. Non issues get ignored until they change. This causes a dramatic reduction of the analysis time.
- MalTrap – MalTrap is a research utility that monitors malware behavior by intercepting API calls and logging results. MalTrap can also be used in other reversing contexts.
Related posts:
Categories: del.icio.us