xSQL Scanner, Advanced SQL Audit Tool
xSQL Scanner is a advanced SQL audit tool that allows users to find weak passwords and vulnerabilities on MS-SQL and MySQL database servers.

The objective of xSQLScanner is to assist the Security Analyst or Penetration Tester in auditing the security of MS-SQL and MySQL database servers.

xSQL Scanner, Advanced SQL Audit Tool

Features :
  • Test for weak password fast;
  • Test for wear/user passwords;
  • Wordlist option;
  • Userlist option;
  • Portscanner
  • Range IP Address audit and more.

Windows – xsqlscanner-1.2.zip

Or read more here. via | darknet

takecy 2/17/2012
Download Firefox 11 Beta
Firefox 11 Beta

Firefox Beta is the build for those who like a little bit of jeopardy, but who don’t want to risk everything by trying out Firefox Aurora, the early alpha build of Firefox. Firefox Beta gives you a sneak peek at the next version of Firefox six weeks ahead of its final release, offering a relatively stable build that’s not quite ready for primetime, but still pretty solid.

Whereas Firefox Aurora installs as a completely separate application alongside your existing Firefox installation, Firebox Beta will replace the stable build. Should you subsequently wish to go back to the safer version, you’ll need to manually download the stable version and install it over the top of the beta build.

Confirm which build you have by selecting About Firefox from the Firefox menu or button (it’s inside the Help menu if using the Firefox button).

There’s not an awful lot to get excited about with Firefox 11 Beta. Firefox Sync now tentatively supports synchronising add-ons in addition to all your other settings – you’ll see Add-ons appear as an additional option when choosing exactly what to sync from the Firefox Sync Setup menu.

Support for importing data from Chrome has also been partially implemented in the form of cookies, history and bookmarks – you’ll see the option appear when you open the Bookmarks Library and choose Import and Backup > Import Data from another Browser.

Developers will also welcome the addition of two new tools in addition to the raft of extras first introduced in Firefox 9 – these are a Style Editor for tweaking CSS settings on the fly, and a new 3D view (Tilt) for Page Inspector. via downloadcrew

takecy 2/04/2012
Wordpress Plugin Easy Comment Uploads Vulnerability
Wordpress as you might know is one of the most widely used blogging platforms, As a reason of which it has became the favorite target of hackers. Wordpress itself is quite secure, however the plugins make it unsecure resulting in hack attacks, data loss etc, when they are created the developers do not think of the security or do not know how to write the secure code, hence skipping lots of necessary checks making the plugins vulnerable to attacks like SQLInjetion, Remote File inclusion etc.

One of those popular vulnerable plugin is Easy Comment Upload plugin, The version 0.61 and prior versions are affected with Arbitrary File Upload Vulnerability. The plugin fails to check the upload file type as a reason of which it can be exploited by uploading a Phtml file.


Easy Comment Upload plugin

Wordpress Plugin Easy Comment Uploads Vulnerability

There are thousands of wordpress blogs still vulnerable to this attack. The vulnerability can be fixed by updating the wordpress easy comments plugin to version 0.71.

If you want to know more about Protecting your wordpress blog from hackers you can refer the following posts, If you still think your blog is vulnerable drop me an email and I will perform a security assessment on your blog. via | rafayhackingarticles

takecy 1/20/2012
Mozilla Seeks Designers
Badges for Learning competition

Design digital badges for NASA, Intel, Disney-Pixar, the U.S. Department of Education and other leading organizations in the “Badges for Learning” competition. Deadline for entries is January 17.

Help the world level up with NASA, the MacArthur Foundation and Mozilla.

Mozilla is seeking designers and developers to participate in the $2 million “Badges for Learning” competition. Participants will have the chance to design digital badges for more than 60 different leading organizations, all aimed at providing recognition for learning that happens on the web or outside of school.

Winners will receive funding from the MacArthur Foundation to make their designs a reality, plus the opportunity to collaborate with Mozilla and other leading organizations in education, industry and government.

The goal: supercharge 21st century learning by building a free, open source badge system that helps people around the world use the Web to gain new skills and level up in their life and work.

Learn more or get involved here.

takecy 1/07/2012
Predictions for Google 2012
Predictions for Google 2012

Last year's predictions weren't that great (the predictions for 2010 were better), but predicting the future is an addictive game, so I'll try again. Here are my predictions for 2012:

1. Oflline Google stores that will sell Chromebooks, Android phones, Google TV boxes, Google-branded shirts and more.

2. Google Music will become a subscription service.

3. Google will focus on improving the quality of Android apps. It will offer better tools for creating consistent user interfaces, it will review some of the new apps and applications will be able to request additional permissions after they've been installed.

4. Google Games - a new service for multiplayer games that will combine the best games for Chrome, Android and Google+, while syncing your data, ranking users and allowing you to challenge your friends.

5. A new music editing online service that will only work in Chrome (and probably other Chrome-only services).

6. ARM Chromebooks (notebooks and tablets) and ARM Google TV boxes will be cheaper and more successful.

7. Google+ will have at least 300 million users at the end of 2012 and will incorporate many existing Google apps. Google will aggressively promote the service and will even integrate it with Chrome.

8. Google Instant Answers - an improved OneBox that will offer some of the detailed answers that are available in Wolfram Alpha.

9. A virtual assistant for Android that will be more powerful than Siri and it will also be available in the desktop Google interface as an upgrade for voice search. Google will get better at supporting natural language queries.

10. Google's navigation menu will be customizable and the notification box will support new services.

11. The first Google-branded Motorola phones and tablets.

12. Google search results personalized based on information from your calendar, Google+ posts, the apps you install etc.

13. Google Doodle Creator - a service that lets you create a doodle and share it with your friends.

14. Image Search will be able to analyze images and recognize multiple objects and people.

15. Chrome Web Store apps and extensions for Android.

16. YouTube's HTML5 player will become the default player.

17. YouTube's new TV-like channels will combine some of the best videos that are available.

18. The largest fine in Google's history.

19. Blog commenting service powered by Google+.

20. Google+ Answers service replaces Aardvark.

21. An online Chrome dashboard will let you access your data (bookmarks, passwords, apps) even when you don't use Chrome.

22. Better Google Docs for tablets, Google Drive - a new name for the Google Docs list, apps for syncing files and more free storage.

source : googlesystem

takecy 12/31/2011