IT-Security >
IT Security Tools

Anzeige

IT Security Tools

Suchen

RSS-News Quellen: 3x
Kategorien unterhalb von IT Security Tools: 0x
RSS Feed dieser IT Security Tools Kategorie:

IT Security Tools

Seitennavigation

Seite 1 von 175 Seiten (Bei Beitrag 1 - 35)
6.107x Beiträge in dieser Kategorie

Nächste 2 Seite |

Letzte Seite
[ 2 ] [ 3 ] [ 4 ] [ 5 ] [ 6 ] [ 7 ] [ 8 ] [ 9 ] [ 10 ] [ 11 ]

Red Hat Security Advisory 2018-3834-01

IT Security Tools vom 18.12.2018 um 03:09 Uhr | Quelle packetstormsecurity.com

Red Hat Security Advisory 2018-3834-01 - The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Issues addressed include a bypass vulnerability.

Newsbewertung

Weiterlesen

Chameleon Mini Smartcard Emulator Iceman Fork Rebooted Yellow GUI 1.2

IT Security Tools vom 17.12.2018 um 19:10 Uhr | Quelle packetstormsecurity.com

Firmware for the ChameleonMini RevE rebooted device. It compiles without errors or warnings and gives you more or less the same functionality as the stock firmware. This version compiles and gives you the same functionality (and more) as the original Chameleon Mini rebooted GUI.

Newsbewertung

Weiterlesen

Suricata IDPE 4.1.1

IT Security Tools vom 17.12.2018 um 18:47 Uhr | Quelle packetstormsecurity.com

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.

Newsbewertung

Weiterlesen

Razer Cortex Debugger Remote Command Execution

IT Security Tools vom 17.12.2018 um 18:39 Uhr | Quelle packetstormsecurity.com

Razer Cortex has a CEF debugger stub enabled by default allowing arbitrary remote command execution.

Newsbewertung

Weiterlesen

Zoho ManageEngine OpManager 12.3 SQL Injection

IT Security Tools vom 17.12.2018 um 18:33 Uhr | Quelle packetstormsecurity.com

Zoho ManageEngine OpManager versions 12.3 before 123238 suffer from a remote SQL injection vulnerability in the getGraphData API.

Newsbewertung

Weiterlesen

Red Hat Security Advisory 2018-3833-01

IT Security Tools vom 17.12.2018 um 18:29 Uhr | Quelle packetstormsecurity.com

Red Hat Security Advisory 2018-3833-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.4.0 ESR. Issues addressed include buffer overflow and use-after-free vulnerabilities.

Newsbewertung

Weiterlesen

Red Hat Security Advisory 2018-3831-01

IT Security Tools vom 17.12.2018 um 18:29 Uhr | Quelle packetstormsecurity.com

Red Hat Security Advisory 2018-3831-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.4.0 ESR. Issues addressed include buffer overflow and use-after-free vulnerabilities.

Newsbewertung

Weiterlesen

Red Hat Security Advisory 2018-3829-01

IT Security Tools vom 17.12.2018 um 18:29 Uhr | Quelle packetstormsecurity.com

Red Hat Security Advisory 2018-3829-01 - Red Hat Gluster Storage Web Administration includes a fully automated setup based on Ansible and provides deep metrics and insights into active Gluster storage pools by using the Grafana platform. Red Hat Gluster Storage Web Administration provides a dashboard view which allows an administrator to get a view of overall gluster health in terms of hosts, volumes, bricks, and other components of GlusterFS. Issues addressed include a bypass vulnerability.

Newsbewertung

Weiterlesen

ITAdvisorsNepal 9Qube Testimonials 1.0 Database Disclosure

IT Security Tools vom 17.12.2018 um 18:28 Uhr | Quelle packetstormsecurity.com

ITAdvisorsNepal 9Qube Testimonials module version 1.0 suffers from a database disclosure vulnerability.

Newsbewertung

Weiterlesen

Simple CMS PHPJabbers Stivasoft 4.0 Database Disclosure

IT Security Tools vom 17.12.2018 um 18:27 Uhr | Quelle packetstormsecurity.com

Simple CMS PHPJabbers Stivasoft version 4.0 suffers from a database disclosure vulnerability.

Newsbewertung

Weiterlesen

WordPress Dev-Custom-Management VerzDesign 1.0 Database Disclosure / Shell Upload

IT Security Tools vom 17.12.2018 um 18:26 Uhr | Quelle packetstormsecurity.com

WordPress Dev-Custom-Management VerzDesign plugin version 1.0 suffers from database disclosure and remote shell upload vulnerabilities.

Newsbewertung

Weiterlesen

WordPress Mirrorwp-Backups 4.8 Database Disclosure

IT Security Tools vom 17.12.2018 um 18:26 Uhr | Quelle packetstormsecurity.com

WordPress Mirrorwp-Backups plugin version 4.8 suffers from a database disclosure vulnerability.

Newsbewertung

Weiterlesen

WordPress Ithemes-BackupBuddy Amazon WP-S3 2.9 Database Disclosure

IT Security Tools vom 17.12.2018 um 18:26 Uhr | Quelle packetstormsecurity.com

WordPress Ithemes-BackupBuddy Amazon WP-S3 plugin version 2.9 suffers from a database disclosure vulnerability.

Newsbewertung

Weiterlesen

WordPress Lumise 4.9 Database Disclosure

IT Security Tools vom 17.12.2018 um 18:25 Uhr | Quelle packetstormsecurity.com

WordPress Lumise plugin version 4.9 suffers from a database disclosure vulnerability.

Newsbewertung

Weiterlesen

Windows Persistent Service Installer

IT Security Tools vom 17.12.2018 um 11:33 Uhr | Quelle packetstormsecurity.com

This Module will generate and upload an executable to a remote host and then makes it a persistent service. It will create a new service which will start the payload whenever the service is running. Admin or system privilege is required.

Newsbewertung

Weiterlesen

KARMA 6.0.0 SQL Injection

IT Security Tools vom 17.12.2018 um 05:44 Uhr | Quelle packetstormsecurity.com

KARMA version 6.0.0 suffers from a remote SQL injection vulnerability.

Newsbewertung

Weiterlesen

Gentoo Linux Security Advisory 201812-08

IT Security Tools vom 16.12.2018 um 19:18 Uhr | Quelle packetstormsecurity.com

Gentoo Linux Security Advisory 201812-8 - A vulnerability in Scala could result in privilege escalation. Versions less than 2.12.4 are affected.

Newsbewertung

Weiterlesen

Everus.org Mobile Wallet 1.0.9 Information Disclosure

IT Security Tools vom 16.12.2018 um 11:32 Uhr | Quelle packetstormsecurity.com

Everus.org Mobile Wallet version 1.0.9 suffers from an information disclosure vulnerability.

Newsbewertung

Weiterlesen

Transcend Wi-Fi SD Card Cross Site Request Forgery / Traversal

IT Security Tools vom 16.12.2018 um 10:22 Uhr | Quelle packetstormsecurity.com

Transcend Wi-Fi SD Card 16GB with firmware 1.8 suffers from cross site request forgery and directory traversal vulnerabilities.

Newsbewertung

Weiterlesen

Gentoo Linux Security Advisory 201812-07

IT Security Tools vom 15.12.2018 um 13:13 Uhr | Quelle packetstormsecurity.com

Gentoo Linux Security Advisory 201812-7 - Multiple vulnerabilities have been found in SpamAssassin, the worst of which may lead to remote code execution. Versions prior to 3.4.2-r2 are affected.

Newsbewertung

Weiterlesen

Gentoo Linux Security Advisory 201812-06

IT Security Tools vom 15.12.2018 um 13:12 Uhr | Quelle packetstormsecurity.com

Gentoo Linux Security Advisory 201812-6 - Multiple vulnerabilities have been found in CouchDB, the worst of which could lead to the remote execution of code. Versions less than or equal to 2.1.2 are affected.

Newsbewertung

Weiterlesen

Facebook And Google Reviews System For Businesses 1.1 Code Execution

IT Security Tools vom 15.12.2018 um 00:29 Uhr | Quelle packetstormsecurity.com

Facebook And Google Reviews System For Businesses version 1.1 suffers from a code execution vulnerability.

Newsbewertung

Weiterlesen

Facebook And Google Reviews System For Businesses 1.1 SQL Injection

IT Security Tools vom 15.12.2018 um 00:28 Uhr | Quelle packetstormsecurity.com

Facebook And Google Reviews System For Businesses version 1.1 suffers from a remote SQL injection vulnerability.

Newsbewertung

Weiterlesen

GNU inetutils 1.9.4 telnet.c Overflows

IT Security Tools vom 15.12.2018 um 00:22 Uhr | Quelle packetstormsecurity.com

GNU inetutils versions 1.9.4 and below are vulnerable to a stack overflow vulnerability in the client-side environment variable handling which can be exploited to escape restricted shells on embedded devices. Most modern browsers no longer support telnet:// handlers, but in instances where URI handlers are enabled to the inetutils telnet client this issue maybe remotely triggerable. A stack-based overflow is present in the handling of environment variables when connecting telnet.c to remote telnet servers through oversized DISPLAY arguments. A heap-overflow is also present which can be triggered in a different code path due to supplying oversized environment variables during client connection code.

Newsbewertung

Weiterlesen

Mikrotik RouterOS Telnet Arbitrary Root File Creation

IT Security Tools vom 15.12.2018 um 00:21 Uhr | Quelle packetstormsecurity.com

An exploitable arbitrary file creation weakness has been identified in Mikrotik RouterOS that can be leveraged by a malicious attacker to exploit all known versions of Mikrotik RouterOS. The RouterOS contains a telnet client based on GNU inetutils with modifications to remove shell subsystem. However an attacker can leverage the "set tracefile" option to write an arbitrary file into any "rw" area of the filesystem, escaping the restricted shell to gain access to a "ash" busybox shell on some versions. The file is created with root privileges regardless of the RouterOS defined group.

Newsbewertung

Weiterlesen

YSTS 2019 Call For Papers

IT Security Tools vom 15.12.2018 um 00:18 Uhr | Quelle packetstormsecurity.com

The 2019 edition of YSTS (You Shot The Sheriff) has announced its call for papers. It will be held in Sao Paulo, Brazil on May 27th, 2019.

Newsbewertung

Weiterlesen

Huawei Router HG532e Command Execution

IT Security Tools vom 14.12.2018 um 21:22 Uhr | Quelle packetstormsecurity.com

Huawei Router HG532e command execution exploit.

Newsbewertung

Weiterlesen

Angry IP Scanner 3.5.3 Denial Of Service

IT Security Tools vom 14.12.2018 um 20:32 Uhr | Quelle packetstormsecurity.com

Angry IP Scanner version 3.5.3 denial of service proof of concept exploit.

Newsbewertung

Weiterlesen

Facebook And Google Reviews System For Business 1.0 CSRF

IT Security Tools vom 14.12.2018 um 19:22 Uhr | Quelle packetstormsecurity.com

Facebook And Google Reviews System For Business version 1.0 suffers from a cross site request forgery vulnerability.

Newsbewertung

Weiterlesen

GNU Privacy Guard 2.2.12

IT Security Tools vom 14.12.2018 um 19:06 Uhr | Quelle packetstormsecurity.com

GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.

Newsbewertung

Weiterlesen

Zortam MP3 Media Studio 24.15 Local Buffer Overflow

IT Security Tools vom 14.12.2018 um 19:03 Uhr | Quelle packetstormsecurity.com

Zortam MP3 Media Studio version 24.15 SEH local buffer overflow exploit.

Newsbewertung

Weiterlesen

Responsive FileManager 9.13.4 XSS / File Manipulation / Traversal

IT Security Tools vom 14.12.2018 um 19:02 Uhr | Quelle packetstormsecurity.com

Responsive FileManager version 9.13.4 suffers from bypass, cross site scripting, remote file read, remote file write, and traversal vulnerabilities.

Newsbewertung

Weiterlesen

Cisco RV110W Password Disclosure / Command Execution

IT Security Tools vom 14.12.2018 um 19:00 Uhr | Quelle packetstormsecurity.com

Cisco RV110W suffers from password disclosure and command execution vulnerabilities.

Newsbewertung

Weiterlesen

UltraISO 9.7.1.3519 Output FileName Denial Of Service

IT Security Tools vom 14.12.2018 um 18:22 Uhr | Quelle packetstormsecurity.com

UltraISO version 9.7.1.3519 Output FileName denial of service proof of concept exploit.

Newsbewertung

Weiterlesen

Ethr- A Network Performance Measurement Tool For TCP, UDP And HTTP

IT Security Tools vom 14.12.2018 um 14:17 Uhr | Quelle blog.hackersonlineclub.com

Ethr- A Network Performance Measurement Tool For TCP, UDP And HTTP

Ethr is a cross platform network performance measurement tool written in golang.

The goal of this project is to provide a native tool for network performance measurements of bandwidth, connections/s, packets/s, latency, loss & jitter, across multiple protocols such as TCP, UDP, HTTP, HTTPS, and across multiple platforms such as Windows, Linux and other Unix systems.

Ethr is a cross platform network performance measurement tool written in golang. The goal of this project is to provide a native tool for network performance measurements of bandwidth, connections/s, packets/s, latency, loss and jitter, across multiple protocols such as TCP, UDP, HTTP, HTTPS, and across multiple platforms such as Windows, Linux and other Unix systems.

Download

For Windows 10: https://github.com/Microsoft/Ethr/files/2640289/ethr.zip
For Ubuntu: https://github.com/Microsoft/Ethr/files/2640288/ethr.gz
For ArchLinux: https://aur.archlinux.org/packages/ethr

Installation

Note: go version 1.10 or higher is required building it from the source.

Building from Source

git clone https://github.com/Microsoft/ethr.git
cd ethr
dep ensure -v
go build

Using go get

go get github.com/Microsoft/ethr

Using ArchLinux AUR

Assuming you are using yay (https://github.com/Jguer/yay):

yay -S ethr

Usage

Simple Usage

Help:
ethr -h

Server:
ethr -s

Server with Text UI:
ethr -s -ui

Client:
ethr -c <server ip>

Example:

// Start server
ethr -s

// Start client for default (bandwidth) test measurement using 1 thread
ethr -c localhost

// Start connections/s test using 64 threads
ethr -c localhost -t c -n 64

Complete Command Line

Common Parameters
-h Help
-no Disable logging to a file
-o <filename> Log to the file specified by filename.
By default Ethr logs to ./ethrs.log for server & ./ethrc.log for client mode
-debug Log debug output

Server Parameters
-s Server mode
-ui Display text UI

Client Parameters
-c <server> Client mode, connect to name or IP specified by server
-t <b|c|p|l> Test to be done, b: bandwidth, c: connections/s, p: packets/s, l: latency
Default is bandwidth test
-p <tcp|udp|http|https|icmp> Protocol to use, default is TCP
-n <number> Number of sessions/threads to use
-l <number> Buffer size to use for each request
-i <number> Number of iterations for latency test

Status

Protocol Bandwidth Connections/s Packets/s Latency
TCP Yes Yes No Yes
UDP Yes NA Yes No
HTTP Yes No No No
HTTPS No No No No
ICMP No NA No No

Platform Support

Windows

Tested: Windows 10, Windows 7 SP1

Untested: Other Windows versions

Linux

Tested: Ubuntu Linux 18.04.1 LTS, OpenSuse Leap 15

Untested: Other Linux versions

Other

No other platforms are tested at this time

Todo List

Todo list work items are shown below. Contributions are most welcome for these work items or any other features and bugfixes.

Test Ethr on other Windows versions, other Linux versions, FreeBSD and other OS
Support for UDP bandwidth & latency testing
Support for HTTPS bandwidth, latency, requests/s
Support for HTTP latency and requests/s
Support for ICMP bandwidth, latency and packets/s

Newsbewertung

Weiterlesen

Seitennavigation

Seite 1 von 175 Seiten (Bei Beitrag 1 - 35)
6.107x Beiträge in dieser Kategorie

Nächste 2 Seite |

Letzte Seite
[ 2 ] [ 3 ] [ 4 ] [ 5 ] [ 6 ] [ 7 ] [ 8 ] [ 9 ] [ 10 ] [ 11 ]