Nmap 6 Released For Download – Free Network Discovery & Security Auditing Tool
Tue, 22 May 2012 10:10:03 +0000

It’s been a while since the last major release of Nmap, the last time we reported on it was when Nmap v5.20 was Released (February 2010). The latest major version has just been released, version 6 – and is now available for download! For the two people on the planet who don’t know – Nmap [...]

Read the full post at darknet.org.uk

Hackers Break Into Bitcoin Exchange Site Bitcoinica
Thu, 17 May 2012 11:44:16 +0000

Bitcoin hasn’t been having a great time lately, there have been a few high profile, large dollar amount hacks of Bitcoin Exchange sites (basically the Bitcoin banks). The latest involved $90,000USD and a high likelihood that the user database was compromised too. It seems like Bitcoin, despite all the hype, might die a slow death [...]

Read the full post at darknet.org.uk

CODENAME: Samurai Skills – Real World Penetration Testing Training
Mon, 14 May 2012 08:30:25 +0000

Introduction Yes, there’s another new kid on the block when it comes to penetration testing training, this course is known as CODENAME: Samurai Skills by Ninja-Sec. I’m not going to go and compare this to any other course out there as I think there’s a place for all of them, and they all have pros [...]

Read the full post at darknet.org.uk

Basic Fuzzing Framework (BFF) From CERT – Linux & Mac OSX Fuzzer Tool
Tue, 08 May 2012 10:36:23 +0000

The CERT Basic Fuzzing Framework (BFF) is a software testing tool that finds defects in applications that run on the Linux and Mac OS X platforms. BFF performs mutational fuzzing on software that consumes file input. (Mutational fuzzing is the act of taking well-formed input data and corrupting it in various ways, looking for cases [...]

Read the full post at darknet.org.uk

Russian Cyber-Crime Market Doubled In 2011
Mon, 30 Apr 2012 12:18:24 +0000

It’s been quite a while since we’ve posted any news about Russia, so here’s an article which in some ways is quite scary. The global cybercrime market is being dominated by Russian-speaking nations and their activity doubled in 2011. It’s certainly a disproportionate amount of crime when you look at their population size....

Read the full post at darknet.org.uk

creepy – A Geolocation Information Aggregator AKA OSINT Tool
Wed, 25 Apr 2012 08:14:23 +0000

creepy is an application that allows you to gather geolocation related information about users from social networking platforms and image hosting services. The information is presented in a map inside the application where all the retrieved data is shown accompanied with relevant information (i.e. what was posted from that specific location) to...

Read the full post at darknet.org.uk

Anonymous Take Down Official F1 Site As Bahrain Protest
Mon, 23 Apr 2012 11:34:10 +0000

It seems like the latest target for Anonymous is the F1 due to the race that took place in Bahrain and the human rights issues in the country. They DDoSed the official F1 site (formula1.com), which was up and down on Saturday and defaced another related site (f1-racers.net) which also contains some details from ticket [...]

Read the full post at darknet.org.uk

NfSpy – ID-spoofing NFS Client Tool – Mount NFS Shares Without Account
Wed, 18 Apr 2012 10:44:38 +0000

We wrote about this tool originally last year – NfSpy – ID-spoofing NFS Client – Falsify NFS Credentials – and a new version just came out! NfSpy has just been updated to support NFSv3, a more efficient and widespread protocol than the previous NFSv2. NfSpy is a FUSE filesystem written in Python that automatically changes [...]

Read the full post at darknet.org.uk

Android Trojan Targets Japanese Market – Steals Personal Data
Mon, 16 Apr 2012 10:38:22 +0000

Early last year we wrote about China Facing Problems With Android Handsets & Pre-installed Trojans, then later last year there was a possibility Cybercrooks May Be Able To Force Mobile Phones To Send Premium-Rate SMS Messages. The latest news about Android malware is malicious apps that are in the official Google marketplace (called Play)...

Read the full post at darknet.org.uk

web-sorrow – Remote Web Security Scanner (Enumeration/Version Detection etc)
Thu, 12 Apr 2012 18:32:58 +0000

web-sorrow is a PERL based tool used for checking a Web server for misconfiguration, version detection, enumeration, and server information. It is NOT a vulnerability scanner, inspection proxy, DDoS tool or an exploitation framework. Current Functionality -S – stands for standard. a set of Standard tests and includes: indexing of directories...

Read the full post at darknet.org.uk