Results for "software"
Download Bitdefender Safebox 1.0
Bitdefender Safebox 1.0

These days, people work across a variety of different platforms: computers, mobile phones and tablets. Ensuring the latest version of your data travels with you can be tricky if you rely on manually copying it between devices, which is why so many of today’s cloud-based backup tools also work by synchronising data between supported devices.

Online backup solutions are ten-a-penny these days, which is why Bitdefender’s Safebox feels like it’s a little late to the party. It works on Windows and Android, with iPad and iPhone support coming shortly, and offers 2GB free online storage space, with paid-for solutions offering up to 60GB of online storage a year.

It’s simple enough to use: install the free app, sign up for a free account, log in and then start selecting which files you want to back up. Once selected, initial copies are uploaded to your secure online account – encrypted of course – ready for synchronising to other computers and devices (just sign in with the same account details, then choose what to sync), accessing via a web browser (log in at https://my.bitdefender.com/en_us/safebox), or sharing securely with selected others, such as family and friends.

It’s all very efficient – changes to files are immediately uploaded to the server, and you can easily restore previous versions of files simply by right-clicking the file in Windows itself. The user interface is simple and uncluttered and it does what it says on the tin.

Unfortunately, so do so many other online backup services, and there’s nothing here to make Bitdefender Safebox stand out from the crowd. Most other services offer the same sync, share and backup tools, encrypt your data, work across multiple platforms (including Mac) and offer free accounts – in the case of AVG LiveKive and SugarSync, you get 5GB, while the forthcoming Windows 8 will have Windows Live SkyDrive built right into the interface, which currently offers up to 25GB free storage, admittedly most of which is currently only accessible through your web browser.

What Safebox does have going for it is simplicity, but it’s not enough on its own to make it the must-have cloud backup product, particularly if you’re already signed up with someone else. via downloadcrew

antivirus , download , software , tool

takecy 3/17/2012
at 0 comments
Labels: , , ,
Nessus 5.0 Vulnerability Scanner Releases
Nessus 5.0 Vulnerability Scanner
Tenable Network Security announced Nessus 5.0 vulnerability and configuration assessment solution for enterprises and security professionals. Nessus version 5.0 introduces key features and improvements, separated into the four major phases of the vulnerability scanning process: 

Installation and management (for enhanced usability) - Nessus 5.0 simplifies the installation and configuration for non-technical users. Configuration and management: Nessus v5.0 configuration and management is now done 100% through the GUI

Scan policy creation and design (for improved effectiveness) - Users now enjoy improved effectiveness when creating scan policies. Over two dozen new pre-built plugin filters make it easy for security and compliance professionals to simplify policy creation for laser-focused scans on the areas that matter most. Users can quickly select multiple filter criteria, such as, Vulnerability Publication Date, public vulnerability database ID (OSVDB, Bugtraq, CERT Advisory, and Secunia), Plugin type (local or remote), information assurance vulnerability alert (IAVA), and more, to quickly identify easily-exploitable vulnerabilities.Scan for all easily remotely-exploitable vulnerabilities for which there is an exploit published in your favorite exploit framework.

Scan execution (for improved efficiency) - Users can take advantage of real-time scan results, on-the-fly filtering and sorting, and streamlined results navigation. A new vulnerability summary and redesigned host summary make it easy to see risk level without even running a report. As the scan is being run, not only can you see the results as they are being gathered, but navigate and filter on them as well. This allows you to easily act upon the vulnerability data while the scan is happening.

Report customization and creation (for improved communication with all parts of the organization) - New reporting features allow for improved communication of vulnerability results with all parts of the organization:Results filtering and report creation: Results filtering and report creation is more flexible than ever before. Users can apply multiple result filtering criteria, and targeted reports can be generated against the filtered results. Reports can be generated in native Nessus formats, HTML, and now PDF formats, Multiple report templates can be combined into one report.


download , hacking , software , tool

takecy 2/17/2012
at 0 comments
Labels: , , ,
xSQL Scanner, Advanced SQL Audit Tool
xSQL Scanner is a advanced SQL audit tool that allows users to find weak passwords and vulnerabilities on MS-SQL and MySQL database servers.

The objective of xSQLScanner is to assist the Security Analyst or Penetration Tester in auditing the security of MS-SQL and MySQL database servers.

xSQL Scanner, Advanced SQL Audit Tool

Features :
  • Test for weak password fast;
  • Test for wear/user passwords;
  • Wordlist option;
  • Userlist option;
  • Portscanner
  • Range IP Address audit and more.

Windows – xsqlscanner-1.2.zip

Or read more here. via | darknet
download , hacking , software , tool

takecy
at 0 comments
Labels: , , ,
Download Firefox 11 Beta
Firefox 11 Beta

Firefox Beta is the build for those who like a little bit of jeopardy, but who don’t want to risk everything by trying out Firefox Aurora, the early alpha build of Firefox. Firefox Beta gives you a sneak peek at the next version of Firefox six weeks ahead of its final release, offering a relatively stable build that’s not quite ready for primetime, but still pretty solid.

Whereas Firefox Aurora installs as a completely separate application alongside your existing Firefox installation, Firebox Beta will replace the stable build. Should you subsequently wish to go back to the safer version, you’ll need to manually download the stable version and install it over the top of the beta build.

Confirm which build you have by selecting About Firefox from the Firefox menu or button (it’s inside the Help menu if using the Firefox button).

There’s not an awful lot to get excited about with Firefox 11 Beta. Firefox Sync now tentatively supports synchronising add-ons in addition to all your other settings – you’ll see Add-ons appear as an additional option when choosing exactly what to sync from the Firefox Sync Setup menu.

Support for importing data from Chrome has also been partially implemented in the form of cookies, history and bookmarks – you’ll see the option appear when you open the Bookmarks Library and choose Import and Backup > Import Data from another Browser.

Developers will also welcome the addition of two new tools in addition to the raft of extras first introduced in Firefox 9 – these are a Style Editor for tweaking CSS settings on the fly, and a new 3D view (Tilt) for Page Inspector. via downloadcrew

download , firefox , software

takecy 2/04/2012
at 0 comments
Labels: , ,
Bitdefender Carrier IQ Detector

The deeply integrated Carrier IQ software on mobile devices has made the rounds lately. Check out this introductory post for detailed information about Carrier IQ. The technology has recently been discovered on Android and Apple smartphones in a way that the discoverer called rootkit-like. Users have a hard time finding out if Carrier IQ is running on their phone, and virtually no possibility of finding out which data it collects or transfers. To top it all off, there is no native option to disable Carrier IQ from running on the phone.

If you are like me, you’d probably want to know if a program that can virtually access all data on the phone is running on it and with which server and companies it communicates.

Bitdefender Carrier IQ Finder is a new program for Android mobile phones by Bitdefender that can be used to find out if the technology is running on a phone.

Android users need to download the application from Android Market where it is available for free. The app has been designed to detect Carrier IQ on Android phones. It cannot remove the technology nor detect or remove malicious software from the phone.

Android users can point their browsers to the Bitdefender carrier IQ Finder market place listing to install the program directly from there. It is necessary to be logged in a Google account to install the app.

The app will search for traces of Carrier IQ on the phone on start up.

Bitdefender Carrier IQ Detector

A red screen after the scan indicates that Carrier IQ has been found running on the system, a green screen that the technology has not been found on the smartphone.

What can you do if Carrier IQ has been found on your phone? It may be virtually impossible to remove the technology completely from the phone. You could contact your carrier for additional information about the technology. (via)
android , cyber news , download , smartphones , software

takecy 12/05/2011
at 0 comments
Labels: , , , ,
Download DEFT Linux v.6.1.1
DEFT Linux 6 is based on the new Kernel 2.6.35 (Linux side) and the DEFT Extra 3.0 (Computer Forensic GUI) with the best freeware Windows Computer Forensic tools. DEFT it’s a new concept of Computer Forensic live system that use LXDE as desktop environment and WINE for execute Windows tools under Linux and mount manager as tool for device management. It is a very easy to use system that includes an excellent hardware detection and the best free and open source applications dedicated to incident response and computer forensics. 

DEFT Linux 6

DEFT is meant to be used by: police ,investigators ,system administrator, individuals and all the people who need to use forensic tool but don’t know the open source operative systems and the Forensic techniques.

Download DEFT Linux v.6.1.1 : http://www.deftlinux.net
download , linux , software

takecy 11/01/2011
at 0 comments
Labels: , ,
Download THC SSL DoS/DDoS Tool
THC-SSL-DOS is a tool to verify the performance of SSL. Establishing a secure SSLconnection requires 15x more processing power on the server than on the client. THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it off theInternet. This problem affects all SSL implementations today. The vendors are aware of this problem since 2003 and the topic has been widely discussed.

This attack further exploits the SSL secure Renegotiation feature to trigger thousands of renegotiations via single TCP connection.

Usage
./thc-ssl-dos 127.3.133.7 443 
Handshakes 0 [0.00 h/s], 0 Conn, 0 Err 
Secure Renegotiation support: yes 
Handshakes 0 [0.00 h/s], 97 Conn, 0 Err 
Handshakes 68 [67.39 h/s], 97 Conn, 0 Err 
Handshakes 148 [79.91 h/s], 97 Conn, 0 Err 
Handshakes 228 [80.32 h/s], 100 Conn, 0 Err 
Handshakes 308 [80.62 h/s], 100 Conn, 0 Err 
Handshakes 390 [81.10 h/s], 100 Conn, 0 Err 
Handshakes 470 [80.24 h/s], 100 Conn, 0 Err

Comparing flood DDoS vs. SSL-Exhaustion attack

A traditional flood DDoS attack cannot be mounted from a single DSL connection. This is because the bandwidth of a server is far superior to the bandwidth of a DSL connection: A DSL connection is not an equal opponent to challenge the bandwidth of a server.


This is turned upside down for THC-SSL-DOS: The processing capacity for SSL handshakes is far superior at the client side: A laptop on a DSL connection can challenge a server on a 30Gbit link. Traditional DDoS attacks based on flooding are sub optimal: Servers are prepared to handle large amount of traffic and clients are constantly sending requests to the server even when not under attack.

The SSL-handshake is only done at the beginning of a secure session and only if security is required. Servers are _not_ prepared to handle large amount of SSL Handshakes. The worst attack scenario is an SSL-Exhaustion attack mounted from thousands of clients (SSL-DDoS).

Tips & Tricks for Whitehats
The average server can do 300 handshakes per second. This would require 10-25% of your laptops CPU.
Use multiple hosts (SSL-DOS) if an SSL Accelerator is used.
Be smart in target acquisition: The HTTPS Port (443) is not always the best choice. Other SSL enabled ports are more unlikely to use an SSL Accelerator (like the POP3S, SMTPS, … or the secure database port).

Counter measurements

No real solutions exists. The following steps can mitigate (but not solve) the problem:
  • Disable SSL-Renegotiation
  • Invest into SSL Accelerator
Either of these countermeasures can be circumventing by modifying THC-SSL-DOS. A better solution is desireable. Somebody should fix this.

You can download THC-SSL-DOS here:


Or read more here. (via)
download , hacking , software , tool

takecy 10/25/2011
at 0 comments
Labels: , , ,
Subscribe to: Posts ( Atom )