HP SWFScan Static Code Analysis Tool for Flash

HP has released SWFScan, a free static code analysis tool for Flash. It does decompiling and static code analysis for a pretty huge list of vulnerabilities in Flash. Supports up to ActionScript 3.

Using it is easy: point it to the flash file, click on "Get" to retrieve and decompile, then click on "Analyse" to well...Analyse the source code :)

Decompiled source codes can be saved, and a HTML vulnerability report can be generated too after analysis.

FAQ
http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2009/03/20/hp-swfscan-faq.aspx

Blog post
http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2009/03/20/exposing-flash-application-vulnerabilities-with-swfscan.aspx

Download

http://www.hp.com/go/swfscan

ProxyStrike!

Another tool to try out!

From the site:

ProxyStrike is an active Web Application Proxy, is a tool designed to find vulnerabilities while browsing an application. It was created because the problems we faced in the pentests of web applications that depends heavily on Javascript, not many web scanners did it good in this stage, so we came with this proxy.

Right now it has available Sql injection and XSS modules. Both modules are designed to catch as many vulnerabilities as we can, it's that why the SQL Injection module is a Python port of the great DarkRaver "Sqlibf". The XSS module is made by us, using our library Gazpacho (soon will be released as standalone tool).

The process is very simple, ProxyStrike runs like a passive proxy listening in port 8008 by default, so you have to browse the desired web site setting your browser to use ProxyStrike as a proxy, and ProxyStrike will analyze all the paremeters in background mode. For the user is a passive proxy because you won't see any different in the behaviour of the application, but in the background is very active. :)

Features:

• Plugin engine (Create your own plugins!)
• Request interceptor
• Request diffing
• Request repeater
• Automatic crawl process
• Save/restore session
• Http request/response history
• Request parameter stats
• Request parameter values stats
• Request url parameter signing and header field signing
• Use of an alternate proxy (tor for example ;D )
• Sql attacks (plugin)
• Server Side Includes (plugin)
• Xss attacks (plugin)
• Attack logs
• Export results to HTML or XML

Wireshark 1.0.6 is out

• Downloads page
  
• Release notes

JkDefrag is good

After running CCleaner and clearing what I could from my C:, was still left with only 500MB of space there...

Then after running JkDefrag, the free space consolidated...and registered as 5GB =D

Windows Vista's defrag probably isn't working as it should...

You can get JkDefrag from here:

http://www.kessels.com/Jkdefrag/

PortableApps junkies can get it as a portable format:

http://portableapps.com/apps/utilities/jkdefrag_portable

Fiddler HTTP Debugger - A free web debugging tool

For those who want a transparent proxy extensible using .NET (rather than Java or BeanShell for WebScarab), here's Fiddler.

Web Security: ratproxy tool

Interesting reporting done by this tool. May be worth checking out when this goes out of beta.

Google Code page
Screenshot
Source Code

Edit: Seems that Google uses it themselves

BackTrack 3 Final

BackTrack 3 final version is out, get it at remote-exploit! More security tools to play with in a nice package! =D

NetBeans 6.1 does JavaScript editing

Wow...

http://www.netbeans.org/download/flash/js/javascript_demo.html

WireShark 1.0.0 is out

Get it here!

[Link to PortableApps WireShark package]

Chickenfoot for Firefox

Chickenfoot is a Firefox extension that puts a programming environment in the browser's sidebar so you can write scripts to manipulate web pages and automate web browsing. In Chickenfoot, scripts are written in a superset of Javascript that includes special functions specific to web tasks.

Send e-mail with your Cisco router

A helpful tool network admins could use for alerting: configuring your Cisco router to send emails.

Physical attacks using Firewire

It seems that Firewire's specs allow for direct memory access, which is really really bad for security...given the right tools...

Well, it seems that one such tool has been released some time ago, along with the presentation slides on it ;) This one bypasses the Windows XP password lock screen to give you access...

Project page

Presentation slides

Code

Bootable USB RAM capture

Remember the research done by Princeton on breaking hard drive encryption by reading the keys off the memory?

Hackaday has links to someone's site who has made his version of the USB RAM dumper utility, complete with instructions on creating your own. =D

The Raw Feed: New Hacker Tool Hijacks Google to Find Passwords

From the Raw Feed

I'm going to check out this tool's innards man. Goolag Scan was made by the same guys (Cult of the Dead Cow) who made Back Orifice sometime back.

[Update] The scanner makes use of Johnny Long's Google Hacking Database to create search queries in Google using google dorks. Very nice tool, sort of like CAL9000 using RSnake's XSS cheat sheet XML file.

TrueCrypt 5.0 available for downloads

For those who use TrueCrypt ;)

Portable Wireshark

Wireshark is now available in PortableApps format!

Download links page

Enso is free

For the uninitiated, Enso has two products: Enso Launcher (similar to Launchy) and Enso Words (universal spellchecker)

I use Launchy a lot now, but have yet to compare this with Enso Launcher. Another time perhaps =P

VMware Server

For those who use VMware player for any reason, VMware Server is available for free. I don't know how long it is going to remain free, but it's certainly better to use (more configuration options available, though making it more complicated) if you are trying out a few virtual machines.

Windows SteadyState

Windows SteadyState is a tool to help manage shared computers, where there's a need to control the state of the OS and what programs can users run/install easily. Those who have administration roles for multiple computers may want to consider using this tool. ;)

The description from the site:

Share computers, not headaches What state is your shared computer in at the end of the day? Hard disk filled with downloaded files? Strange options configured? Programs installed that you don't want? System infected with viruses and spyware? Computer bogged down for unknown reasons? Windows SteadyState, successor to the Shared Computer Toolkit, is designed to make life easier for people who set up and maintain shared computers. An easy way to manage multiple users You can manage whole groups of users as single user accounts. The new Windows SteadyState console makes it easier than ever to create and modify user profiles. A locked-down platform for stable shared computing Not every computer user should have access to every software capability. Your system can be more stable and consistent when you limit user access to control panel functions, network resources, and other sensitive areas. Set it and forget it Once you have everything set up the way you want it, you can share the computer and rest easy. Any changes a user might make to the configuration or hard disk can be undone by simply restarting the machine.

FeedBurner

Am trying out FeedBurner to syndicate my feeds. You can access my feed by clicking on the link on the right side bar [http://feeds.feedburner.com/TheGunblad3]

For those who wish to use email to subscribe to my feed instead, you can do so under that section too. =) It would be interesting to get some stats from the thing, see what it can actually show.

Subscribe in a reader

Enter your email address:

Delivered by FeedBurner