full-disclosure - SPIKE 2.7 Released: There's a party at my house, so bring the beer and follow me....

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1033996859.13606.55.camel@www.immunitysec.com>
From: dave at immunitysec.com (Dave Aitel)
Subject: SPIKE 2.7 Released: There's a party at my house, so bring the beer
 and follow me....

Get SPIKE 2.7 at http://www.immunitysec.com/SPIKE2.7.tar.gz 
Homepage: http://www.immunitysec.com/spike.html

Remotes in the package:
  pptp kernel bug on Windows 2000 and XP (not originally found by SPIKE
    but there is no other repro available)
  Many fun IIS DoS's
  Many fun MSRPC bugs
  Many fun SunRPC bugs on Solaris (ttdb, cmsd, rpcbind, etc) 

(I consider any bug found by the default run of SPIKE to be public)

Additionally an upgraded SPIKE Proxy 1.3.2 is included.

The biggest new feature is the addition of size fuzzers, which attempt
to locate integer overflows. In at least one case, they succeed.

You can verify all Immunity packages with hashdb 
( http://www.immunitysec.com/hashdb.html ). A full changelog
is available at http://www.immunitysec.com/CHANGELOG.txt .

Dave Aitel
Immunity, Inc.