Priveon Labs Security Blog

A pair of recent SANS Diaries on Layer2 network hardening reminded me of one of my favorite tools for network auditing. Yersinia is an excellent tool for auditing multiple network protocols including STP, CDP, DTP, DHCP, HSRP, 802.1Q, 802.1x, ISL, and V… more »

WPACracker.Com s a cloud-based WPA cracker that will perform a dictionary-based attack on PCAP files that include the WPA-PSK handshake. Use of the service is a mere $17 and it utilizes a 400 node cluster to crack a WPA-PSK what would normally take days… more »

In a previous blog entry I briefly discussed pentesterscripting.com - an up and coming repository for pentesters and auditors to share useful scripts. The site is worth revisiting now that the community has started adding useful pentest/audit related sc… more »

MetaSploit 3.3 was recently released. Some of the summarized 3.3 enhancements include:- New SQL and Oracle support enhancements (brute force and new drivers/support for both)- OSVDB references added to exploits- automated client-side exploitation… more »

An interesting project pertaining to XSS is the Yokoso project. The Yokso project utilizes basic fingerprints to detect common web-enabled IT Management systems and web based applications. The Yokoso scripts work by checking for the existence of known… more »