|
USB Dumper
hot!
|
|
Hits: 88 |
|
Date added: 11/01/2006 |
|
USB Dumper is an application up that when installed on on a system will run a background process that will copy files from any USB flash drive installed to it silently. The simplicity of this application is what makes it quite dangerous, as all it requires a user to do is double click the exectuable, once this is done the application runs in the background and any USB drive that is connected will automatically have its contents downloaded to the system. Alone this application can be a security risk, however it is being integrated with other tools USB Hacksaw and scripts so that the contents are not just kept on a local system, but are emailed or FTP’d to a remote location via encrypted channels. |
|
|
|
|
|
Cisco torch
|
|
Hits: 6 |
|
Date added: 11/01/2006 |
|
Cisco Torch mass scanning, fingerprinting, and exploitation tool was written while working on the next edition of the Hacking Exposed Cisco Networks , since the tools availalbe on the market could not meet our needs. The main feature that makes Cisco-torch different from similar tools is the extensive use of forking to launch multiple scanning processes on the background for maximum scanning efficiency. Also, it uses several methods of application layer fingerprinting simultaneously, if needed. We wanted something fast to discover remote Cisco hosts running Telnet, SSH, Web, NTP and SNMP services and launch dictionary attacks against the services discovered. |
|
|
|
|
|
|
IRPAS
|
|
Hits: 13 |
|
Date added: 10/31/2006 |
|
Routing protocols are by definition protocols, which are used by routers to communicate with each other about ways to deliver routed protocols, such as IP. While many improvements have been done to the host security since the early days of the Internet, the core of this network still uses unauthenticated services for critical communication. Because most of the routers you will see in todays environments are Cisco products, we focus our work on these, which does not mean that it dosn't apply to other router vendors. The idea is to implement small tools which can be scripted for larger tests while using the protocols describd in standards or white papers. IRPAS is not a collection of exploits. While several circumstances can lead to a denail of service attack, the tools try to implement routing protocol functionality as described by the papers, therefore enabling the user of these tools (probably you) to design it's own customized attack. Another nice side effect is that people used to point-and-click attack tools should have some difficulties to use a raw IGRP sender tool.
Supported protocols
1. CDP
2. IRDP
3. IGRP
4. EIGRP (discovery)
5. RIPv1 (discovery)
6. RIPv2 (discovery)
7. OSPF (discovery)
8. HSRP
9. DHCP DORA
10. ICMP redirects
|
|
|
|
|
|
|
NTP fingerprinting utility
|
|
Hits: 2 |
|
Date added: 10/21/2006 |
|
ntp-fingerptint is an active fingerprinting utility specifically designed to identify the OS the NTP server is running on. |
|
|
|
|
|
|
USB Hacksaw
hot!
|
|
Hits: 309 |
|
Date added: 10/17/2006 |
|
USB Hacksaw is an application created as a proof of concept developed by Hak5 and as an extension to the USB Switchblade. The USB Hacksaw uses a modified version of USB Dumper that once installed on a system will run a process in the background whenever that computer starts, waiting for a USB thumb drive to be installed. Once a USB thumb drive is inserted into a system its contents is automatically sent via an encypted SMTP connection to a remote email account configured by the author. The tool has been quickly modified to include other malicious purposes, including the running of a special version of Nmap and other vulnerability scans and sending the data to remote locations. A more dangerous version has also been recently release that includes the ability to install the payload onto any drive installed, thus enabling it to infect other systems. This is the first reported case of an actual USB flash drive driven worm. |
|
|
|
