| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <6dc88c3c1003020817g92ba993l3426a04aad6ebe54@mail.gmail.com> Date: Tue, 2 Mar 2010 16:17:35 +0000 From: Ferruh Mavituna <ferruh@...ituna.com> To: Full Disclosure <full-disclosure@...ts.grok.org.uk> Subject: WebRaider [TOOL] I did a demo of WebRaider in AppSec DC 2009 and finally managed to release it. WebRaider is a PoC quality tool to get a reverse shell out of SQL Injections (MSSQL) by using One Click Ownage ( http://www.mavitunasecurity.com/s/research/OneClickOwnage.pdf ). Slides: http://www.slideshare.net/fmavituna/one-click-ownage-ferruh-mavituna-3 It's licensed under GPLv3 and all the source code is in the Google Code SVN. Source code includes all the required files to create your own payload for manually using One Click Ownage attack as well. More information about the tool, source code and download: http://www.mavitunasecurity.com/blog/webraider/ -- .fm _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists