Archive for May, 2007

PWDumpX: Windows encrypted password retrieveal

PWDumpX is a free open-source utility that provides system administrators the ability to retrieve the domain password cache, password hashes and LSA secrets from either local or remote Windows systems.
If you provide an input list of remote systems, PWDumpX will attempt to obtain the domain password cache, the password hashes and the LSA secrets from [...]

mod_auth_openpgp is an Apache module that adds support for OpenPGP signed HTTP requests. It allows web site owners to add an extra access authorization level to servers, virtual hosts and directors based on valid and known signatures.

VoIPong - VoIP calls sniffer

VoIPong is a free VoIP sniffer that detects all Voice-over-IP (VoIP) calls and gateways on a pipeline and produces audio files. It supports several types of VoIP protocols: SIP, H.323, Skinny Client Protocol, G711, RTP and RTCP.
A liveCD version, based on the FreeSBIE project, is also available. It has a pre-installed VoIPong release along with [...]

Vista: Disable driver signing verification in 64-bit

As part of Microsoft’s commitment to help mitigate the spread of malicious software, Windows Vista and later versions require kernel-mode software to have a digital signature before Windows will load it on a 64-bit computer system.
In order to disable Vista’s driver signing verification, you need to restart your computer and enter the Advanced Boot Options [...]

The KeyScrambler Personal Firefox extension, scrambles your keystrokes at the kernel level to protect your login credentials from keyboard sniffers.
For users, that means your keystrokes will be encrypted at the keyboard driver, deep within the operating system. When the encrypted keystrokes reach the browser, KeyScrambler will decrypt them on-the-fly and let you see the keys [...]

EndPointScan: Online scanner for portable devices

GFI offers a free web utility - EndPointScan - to check within minutes what devices are or have been connected to computers in your network. All you need to do is to install an ActiveX control (0.7MB) on your computer. Once installed, GFI EndPointScan will then prompt you to select which computers on your network [...]

Wipe data with Cipher security tool

When you delete data files, the information is not really removed from the hard disk. Instead, the space that was occupied by the deleted data is deallocated and is available for use when new data is written to the disk. Until the space is overwritten, it is possible to recover delete data with raw disk [...]

Plash: Sandbox Linux programs

Plash is an open source system utility for sandboxing Linux applications. Plash aims to downgrade the threats posed by executing untrusted programs by running them in a secure, restricted execution environment with the minimum authority and privileges they need to do their job.
Plash virtualizes the file name-space and provides per-sandboxed-process name-spaces. It locks the sandboxed [...]

Mozilla Firefox web browser provides a built-in password manager, which stores access credentials for visited web sites. The credentials are encrypted and stored in Firefox special database files: key3.db and signons.txt.
The key3.db file contains the master password and the key to encrypt and decrypt the passwords. The signons.txt file stores saved user names and passwords [...]

Vista: Make an application run elevated

User Account Control enables users to perform common tasks as non-administrators and as administrators without having to switch users, log off etc. User Account Control was developed to help prevent malicious programs silent installation and computer-wide infection.
By default, when you try to run an executable that has an administrative token (privilege), you’re prompted to consent [...]




Security-Hacks is a web site that covers tips and tricks for security. Updated several times daily, Security-Hacks points out tools downloads, how-to's and tutorials.

Contact


Have a hot hack? want to request a hack? let us know - editor [at] security-hacks.com

subscribe

Enter your Email

Archives

Add to Technorati Favorites

Categories