iSniff GPS – Where has your iPhone been?

Link : http://www.serverfault.sk/2013/06/isniff-gps-where-has-your-iphone-been/

Incognito v2.0 Released

Mimikatz extension for Metasploit

Recover Cleartext Passwords From Lsass Using mimikatz

I meant to blog about this a while ago, but never got round to it.

Here’s a brief post about very cool feature of a tool called mimikatz.

I’m very grateful to the tool’s author for bringing it to my attention. Until that point, I didn’t realise it was possible to recover the cleartext passwords of logged on windows users. Something that I’m sure most pentesters would find very useful

The Social-Engineer Toolkit (SET) v4.7 released

The Social-Engineer Toolkit (SET) version 4.7 codename “Headshot” has been released. This version of SET introduces the ability to specify multi-powershell injection which allows you to specify as many ports as you want and SET will automatically inject PowerShell onto the system on all of the reverse ports outbound. What’s nice with this technique is it never touches disk and also uses already white listed processes. So it should never trigger anything like anti-virus or whitelisting/blacklisting tools. In addition to multi-powershell injector, there are a total of 30 new features and a large rewrite of how SET handles passing information within different modules.

Download Kali Linux, from the creators of BackTrack

Great news for Hackers and Backtrack Linux fans! The most awaited penetration testing Linux distribution has been released called 'Kali Linux' or 'Backrack 6', from the creators of BackTrack itself. From last 7 years we have seen five awesome versions of Backtrack Linux. But this time to achieve some higher goals, team decided to leave the 4 years old development architecture and 'Kali Linux' born today.

Presentation “How To Hack VMware VCenter Server In 60 Seconds” From DEFCON 2012

Acunetix WVS version 8 – build 20121213 – cracked

We’ve just released a new version of Acunetix WVS version 8 – build 20121213 – which includes several new security checks such as the new module that tests Slow HTTP Denial of Service attacks like Slowloris. We’ve also added a good number of improvements and bug fixes, making this the most stable WVS 8 version to date.

This latest build of Acunetix WVS also includes the compliance report template for ISO 27001, allowing companies to check if their web applications are ISO 27001 compliant. After scanning your website with Acunetix Web Vulnerability Scanner, you can now generate an ISO 27001 compliance report quickly and easily.