Cyber Security Blog - Page 6 of 7

Windows Permission Identifier

This tool enables administrators and penetration testers to review and audit the permissions of users on a Windows machine. System Requirements: Windows 2000 or higher Version: 1.0 Released: 17th January 2006 Windows

PC Extreme Magazine Interviews Nathan House on Penetration Testing

Ed Baldwin talks to a man on the edge of computer security - Nathan House What would you be left with if you took a hacker then removed his personality and his malicious interests? The fact is you'd end up with somebody who not only knew a lot about

Dilbert On Cyber Security

Firewall Test Agent

This simple tool can be used to test and log the rules on a firewall. The Firewall Test Agent is able to open up any number of TCP and UDP ports on a windows machine and log any connection attempts. A port scanner or other such tool can then be used to scan

IP 2 IP Chat v1.0

Very basic IP to IP chat tool. Taken from Borland C++Builder library. I created this when on site with another security consultant and we needed to communicate but couldn't use Internet based messengers due to proxy configuration. Listens on TCP port

Gossamer Threads Links SQL login XSS Vulnerability

This advisory identifies a XSS vulnerability in Gossamer Threads database application "Links SQL" login page. This document covers examples of how to exploit the application and the solution provided by Gossamer Threads. Bugtraq:

Statcounter Script Injection User Session Hijack

This advisory identifies a vulnerability that can disclose the authentication and session information of the all registered users of statcounter. Statcounter.com is one of the best and most well known website monitoring applications on the Internet. More than

Home PC User Security Check List

This simple check-list helps the home user maintain security on their home computer system and home network. Download

Default Password List

A list of the default passwords for standard installations. Used for pen testing and includes 3COM, Cisco, Bay Networks, Compaq, and many others. Default Password List; Download

Windows NULL session access, Remote Procedure Calls and IPC$

A NULL session connection is an unauthenticated connection to an NT/W2000 machine. Gaining NULL session access to an NT\W2000 system is the number one method for hackers to enumerating information about an NT\W2000 machine. From a NULL session hackers can call

Love Letter (ILOVEYOU) Virus Fix – DIVORCE

This is here for nostalgia only. Do you remember the Love Letter virus? Most people do. It was the very first outlook virus that propagated by sending emails to your contacts list. Many copy cat viruses have followed it. We wrote this quick fix to the virus 2

iPlanet Directory Server 4.11 on Solaris Security Baseline

Details the security actions and considerations to be taken and considered when using iPlanet 4.11 on Solaris 2.6. Download

BEA Web Logic 4.5.1 on Solaris – Security

This document details the security actions and considerations for BEA Weblogic 4.5.1 on Solaris 2.6 as applied to the Company X web site within Phase I delivery. Download

The Windows 2000/NT SID explained

SID stands for Security Identifier and is used within NT/2000 as a value to uniquely identify an object such as a user or a group. The SID assigned to a user becomes part of the access token, which is then attached to any action attempted or process executed