Practical Cryptography for Developers - Free Book

https://cryptobook.nakov.com/

(Read More..)

How-to Guide: Defeating an Android Packer with FRIDA

https://www.fortinet.com/blog/threat-research/defeating-an-android-packer-with-frida.html

https://crackinglandia.wordpress.com/2015/11/10/anti-instrumentation-techniques-i-know-youre-there-frida/

(Read More..)

multitor

A tool that lets you create multiple TOR instances with a load-balancing traffic between them by HAProxy. It's provides one single endpoint for clients. In addition, you can view previously running TOR processes and create a new identity for all or selected processes.

(Read More..)

PRET - Printer Exploitation Toolkit

http://hacking-printers.net/wiki/index.php/Main_Page
https://github.com/RUB-NDS/PRET

(Read More..)

websocket security

http://www.theseus.fi/bitstream/handle/10024/113390/Harri+Kuosmanen+-+Masters+thesis+-+Security+Testing+of+WebSockets+-+Final.pdf;jsessionid=6199D8ADAA4F3A2270912A3002D5E1FE?sequence=1

(Read More..)

Malboxes

https://gosecure.net/2017/02/16/introducing-malboxes-a-tool-to-build-malware-analysis-virtual-machines/

Introducing Malboxes: a Tool to Build Malware Analysis Virtual Machines

(Read More..)

OSINT : Belati

https://github.com/aancw/Belati

(Read More..)

PentestBox : Portable Penetration Testing Environment for the Windows Operating System

https://pentestbox.org/

(Read More..)

SQL Server – Link... Link... Link... and Shell: How to Hack Database Links in SQL Server!

https://www.netspi.com/blog/entryid/197/how-to-hack-database-links-in-sql-server

(Read More..)

Abusing Oracle’s CREATE DATABASE LINK privilege for fun and profit!

http://www.notsosecure.com/blog/2014/07/08/abusing-oracles-create-database-link-privilege-for-fun-and-profit/

(Read More..)

peepdf

peepdf is a Python tool to explore PDF files in order to find out if the file can be harmful or not. The aim of this tool is to provide all the necessary components that a security researcher could need in a PDF analysis without using 3 or 4 tools to make all the tasks. With peepdf it's possible to see all the objects in the document showing the suspicious elements, supports all the most used filters and encodings, it can parse different versions of a file, object streams and encrypted files. With the installation of PyV8 and Pylibemu it provides Javascript and shellcode analysis wrappers too. Apart of this it's able to create new PDF files and to modify/obfuscate existent ones.

The main functionalities of peepdf are the following:

https://code.google.com/p/peepdf/

(Read More..)

Bypassing web application firewalls using HTTP headers

http://h30499.www3.hp.com/t5/Fortify-Application-Security/Bypassing-web-application-firewalls-using-HTTP-headers/ba-p/6418366#.U4dluNKSz3R

(Read More..)

Buffer Overflow Explained

http://learning.criticalwatch.com/buffer-overflow/

(Read More..)

Registry hack enables continued updates for Windows XP

http://www.zdnet.com/registry-hack-enables-continued-updates-for-windows-xp-7000029851/

(Read More..)

DNSCrypt - A tool for securing communications between a client and a DNS resolver

DNSCrypt

A tool for securing communications between a client and a DNS resolver.

Description

dnscrypt-proxy provides local service which can be used directly as your local resolver or as a DNS forwarder, encrypting and authenticating requests using the DNSCrypt protocol and passing them to an upstream server.

The DNSCrypt protocol uses high-speed high-security elliptic-curve cryptography and is very similar to DNSCurve, but focuses on securing communications between a client and its first-level resolver.

While not providing end-to-end security, it protects the local network, which is often the weakest point of the chain, against man-in-the-middle attacks. It also provides some confidentiality to DNS queries.

List of free, DNSCrypt-enabled resolvers

To get started, you can use any of the public DNS resolvers supporting DNSCrypt .

http://dnscrypt.org/

(Read More..)

Still Passing the Hash 15 Years Later

http://passing-the-hash.blogspot.com/2014/02/pre-rsa-conference-demo-win-81-attack.html

(Read More..)

NIST-cybersecurity-framework

http://packetstormsecurity.com/files/download/125216/NIST-cybersecurity-framework.pdf

(Read More..)

Reverse Engineering A Bank’s Security Token

http://hackaday.com/2014/02/07/reverse-engineering-a-banks-security-token/

http://blog.valverde.me/2014/01/03/reverse-engineering-my-bank%27s-security-token/#.UveNa86GrMQ

https://github.com/Cathedrow/Cryptosuite

https://github.com/adafruit/RTClib

(Read More..)

Tor exitmap

https://github.com/NullHypothesis/exitmap

(Read More..)

Damn Vulnerable iOS Application (DVIA)

http://damnvulnerableiosapp.com/

http://thehackernews.com/2014/02/test-your-mobile-hacking-and-pskills.html#

http://highaltitudehacks.com/

https://github.com/prateek147/DVIA

(Read More..)