Results for "tool"
Download Bitdefender Safebox 1.0
Bitdefender Safebox 1.0

These days, people work across a variety of different platforms: computers, mobile phones and tablets. Ensuring the latest version of your data travels with you can be tricky if you rely on manually copying it between devices, which is why so many of today’s cloud-based backup tools also work by synchronising data between supported devices.

Online backup solutions are ten-a-penny these days, which is why Bitdefender’s Safebox feels like it’s a little late to the party. It works on Windows and Android, with iPad and iPhone support coming shortly, and offers 2GB free online storage space, with paid-for solutions offering up to 60GB of online storage a year.

It’s simple enough to use: install the free app, sign up for a free account, log in and then start selecting which files you want to back up. Once selected, initial copies are uploaded to your secure online account – encrypted of course – ready for synchronising to other computers and devices (just sign in with the same account details, then choose what to sync), accessing via a web browser (log in at https://my.bitdefender.com/en_us/safebox), or sharing securely with selected others, such as family and friends.

It’s all very efficient – changes to files are immediately uploaded to the server, and you can easily restore previous versions of files simply by right-clicking the file in Windows itself. The user interface is simple and uncluttered and it does what it says on the tin.

Unfortunately, so do so many other online backup services, and there’s nothing here to make Bitdefender Safebox stand out from the crowd. Most other services offer the same sync, share and backup tools, encrypt your data, work across multiple platforms (including Mac) and offer free accounts – in the case of AVG LiveKive and SugarSync, you get 5GB, while the forthcoming Windows 8 will have Windows Live SkyDrive built right into the interface, which currently offers up to 25GB free storage, admittedly most of which is currently only accessible through your web browser.

What Safebox does have going for it is simplicity, but it’s not enough on its own to make it the must-have cloud backup product, particularly if you’re already signed up with someone else. via downloadcrew

antivirus , download , software , tool

takecy 3/17/2012
at 0 comments
Labels: , , ,
Nessus 5.0 Vulnerability Scanner Releases
Nessus 5.0 Vulnerability Scanner
Tenable Network Security announced Nessus 5.0 vulnerability and configuration assessment solution for enterprises and security professionals. Nessus version 5.0 introduces key features and improvements, separated into the four major phases of the vulnerability scanning process: 

Installation and management (for enhanced usability) - Nessus 5.0 simplifies the installation and configuration for non-technical users. Configuration and management: Nessus v5.0 configuration and management is now done 100% through the GUI

Scan policy creation and design (for improved effectiveness) - Users now enjoy improved effectiveness when creating scan policies. Over two dozen new pre-built plugin filters make it easy for security and compliance professionals to simplify policy creation for laser-focused scans on the areas that matter most. Users can quickly select multiple filter criteria, such as, Vulnerability Publication Date, public vulnerability database ID (OSVDB, Bugtraq, CERT Advisory, and Secunia), Plugin type (local or remote), information assurance vulnerability alert (IAVA), and more, to quickly identify easily-exploitable vulnerabilities.Scan for all easily remotely-exploitable vulnerabilities for which there is an exploit published in your favorite exploit framework.

Scan execution (for improved efficiency) - Users can take advantage of real-time scan results, on-the-fly filtering and sorting, and streamlined results navigation. A new vulnerability summary and redesigned host summary make it easy to see risk level without even running a report. As the scan is being run, not only can you see the results as they are being gathered, but navigate and filter on them as well. This allows you to easily act upon the vulnerability data while the scan is happening.

Report customization and creation (for improved communication with all parts of the organization) - New reporting features allow for improved communication of vulnerability results with all parts of the organization:Results filtering and report creation: Results filtering and report creation is more flexible than ever before. Users can apply multiple result filtering criteria, and targeted reports can be generated against the filtered results. Reports can be generated in native Nessus formats, HTML, and now PDF formats, Multiple report templates can be combined into one report.


download , hacking , software , tool

takecy 2/17/2012
at 0 comments
Labels: , , ,
xSQL Scanner, Advanced SQL Audit Tool
xSQL Scanner is a advanced SQL audit tool that allows users to find weak passwords and vulnerabilities on MS-SQL and MySQL database servers.

The objective of xSQLScanner is to assist the Security Analyst or Penetration Tester in auditing the security of MS-SQL and MySQL database servers.

xSQL Scanner, Advanced SQL Audit Tool

Features :
  • Test for weak password fast;
  • Test for wear/user passwords;
  • Wordlist option;
  • Userlist option;
  • Portscanner
  • Range IP Address audit and more.

Windows – xsqlscanner-1.2.zip

Or read more here. via | darknet
download , hacking , software , tool

takecy
at 0 comments
Labels: , , ,
Download THC SSL DoS/DDoS Tool
THC-SSL-DOS is a tool to verify the performance of SSL. Establishing a secure SSLconnection requires 15x more processing power on the server than on the client. THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it off theInternet. This problem affects all SSL implementations today. The vendors are aware of this problem since 2003 and the topic has been widely discussed.

This attack further exploits the SSL secure Renegotiation feature to trigger thousands of renegotiations via single TCP connection.

Usage
./thc-ssl-dos 127.3.133.7 443 
Handshakes 0 [0.00 h/s], 0 Conn, 0 Err 
Secure Renegotiation support: yes 
Handshakes 0 [0.00 h/s], 97 Conn, 0 Err 
Handshakes 68 [67.39 h/s], 97 Conn, 0 Err 
Handshakes 148 [79.91 h/s], 97 Conn, 0 Err 
Handshakes 228 [80.32 h/s], 100 Conn, 0 Err 
Handshakes 308 [80.62 h/s], 100 Conn, 0 Err 
Handshakes 390 [81.10 h/s], 100 Conn, 0 Err 
Handshakes 470 [80.24 h/s], 100 Conn, 0 Err

Comparing flood DDoS vs. SSL-Exhaustion attack

A traditional flood DDoS attack cannot be mounted from a single DSL connection. This is because the bandwidth of a server is far superior to the bandwidth of a DSL connection: A DSL connection is not an equal opponent to challenge the bandwidth of a server.


This is turned upside down for THC-SSL-DOS: The processing capacity for SSL handshakes is far superior at the client side: A laptop on a DSL connection can challenge a server on a 30Gbit link. Traditional DDoS attacks based on flooding are sub optimal: Servers are prepared to handle large amount of traffic and clients are constantly sending requests to the server even when not under attack.

The SSL-handshake is only done at the beginning of a secure session and only if security is required. Servers are _not_ prepared to handle large amount of SSL Handshakes. The worst attack scenario is an SSL-Exhaustion attack mounted from thousands of clients (SSL-DDoS).

Tips & Tricks for Whitehats
The average server can do 300 handshakes per second. This would require 10-25% of your laptops CPU.
Use multiple hosts (SSL-DOS) if an SSL Accelerator is used.
Be smart in target acquisition: The HTTPS Port (443) is not always the best choice. Other SSL enabled ports are more unlikely to use an SSL Accelerator (like the POP3S, SMTPS, … or the secure database port).

Counter measurements

No real solutions exists. The following steps can mitigate (but not solve) the problem:
  • Disable SSL-Renegotiation
  • Invest into SSL Accelerator
Either of these countermeasures can be circumventing by modifying THC-SSL-DOS. A better solution is desireable. Somebody should fix this.

You can download THC-SSL-DOS here:


Or read more here. (via)
download , hacking , software , tool

takecy 10/25/2011
at 0 comments
Labels: , , ,
Subscribe to: Posts ( Atom )