Patator is a multi-purpose brute-forcer, written in pyton language, with a modular design and a flexible usage. Can be modified and rewritten as per our environment requirement. Patator is licensed GPLv2.
Modules supported buy patator
ftp_login : Brute-force FTP
ssh_login : Brute-force SSH
telnet_login : Brute-force Telnet
smtp_login : Brute-force SMTP
smtp_vrfy : Enumerate valid users using the SMTP VRFY command
smtp_rcpt [...]
Our old post about Dranzer introduced you with tools such as COMRaider and AxMan. Dranzer could help you fuzz ActiveX objects.
But some times, you would also need to know the Interface Definition Language (IDL) of the component that is not registered on the computer. In such case of reverse engineering or malware analysis or fuzzing, [...]
We blogged about fimap here. Now, an updated version 08 is available for download.
“fimap is a little python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap should be something like sqlmap just for LFI/RFI bugs instead of sql injection.”
This is the change [...]
You must be aware of our post regarding WFuzz. Consider WEBreak as the better version of WFuzz. Infact, it comes from the same author.
WEBreak performs security audits on web applications. It has been programmed in Python. Infact, you can consider it to be a web interface to WFuzz. It has a RIA (Rich internet [...]
We blogged about fimap here. Now, an updated fimap version 07 is available for download.
“fimap is a little python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap should be something like sqlmap just for LFI/RFI bugs instead of sql injection.”
This is [...]
Remote File Inclusion is a type of attack; which primarily affects PHP, that allows a user to run his/her own PHP code on a vulnerable website.
With Local File Inclusion, you have the ability to execute an arbitrary file on the server.
So, you see both these types of attacks are very dangerous, yet easy to scan! [...]