Access Log Analysis

A while ago I wrote an article entitled Logging the HTTP requests! where I mentioned why you should implement a logging system (especially when you haven’t got access to the access log, like in shared hosting environment) and how to implement a simple (or not) logging system. Today we will go a step further.

(continue)


DirBuster

DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within. DirBuster attempts to find these.

(continue)


DVL 1.5 (Infectious Disease)

Today DamnVulnerableLinux version 1.5 was released, linux distribution that offers a learning environment directly out of the box.

(continue)


Malware: a common threat

Malware represents a common threat for all users out there surfing the web. It doesn’t have ethics or a message to spread, like viruses used to have (not all had dangerous payloads).

(continue)


Angry IP Scanner

Angry IP scanner is fast and friendly network scanner for Windows, Linux, and Mac. It is very extensible, allowing it to be used for very wide range of purposes, with the primary goal of being useful to network administrators.

(continue)


Web Application Pen-testing Toolbox (Firefox)

A long time ago (if you could say so for a couple of months) I posted a small article about Firefox being a good web application pen-testers platform. At that time I would have happily made a compilation of my preferred add-ons, but such similar projects were already available, and so didn’t afford to waste time on maintaining something like that.
(continue)