full-disclosure - ASP Auditor Beta 2 Released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 15 Sep 2006 04:20:10 +0000
From: "David Kierznowski" <david.kierznowski@...il.com>
To: full-disclosure@...ts.grok.org.uk, security-basics@...urityfocus.com, 
	"packet@...ketstormsecurity.org" <packet@...ketstormsecurity.org>
Subject: ASP Auditor Beta 2 Released

ASP Auditor v2 BETA
Author david.kierznowski_at_gmail.com
http://michaeldaw.org

Purpose: Look for common misconfigurations and information leaks in
ASP.NET applications.

This tool is based on H D Moore's Dot Net Application Scanner
Author: H D Moore
URL: http://www.digitaloffense.net/index.html?section=TOOLS

HDM thanks for the feedback.

Changelog:
* Combined code from Asp Auditor v1 BETA and HDM's DNAScanner.
* Version plugin allowing specific ASP.NET versioning.
* Version brute force capabilities using JavaScript validate
directories.
* Check if global ASP.NET validate is being used.
* Added brute force as option in usage()

More information can be found at:
http://michaeldaw.org/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/