Week 18 in Review – 2009

Tools:

• Dranzer ActiveX Fuzzer
• Watcher – Passive web security analysis tool (fiddler plugin)
• Pangolin – Very nice SQL injection tool
• Network Monitor 3.3 – Microsoft’s wireshark equivalent
• CAIN 4.9.30 – Now with SSL MITM support

Vulnerabilities:

• Oracle TNS listener 10.2.0.3 and 11.1.0

Other News:

• F-Secure malware course – noppa.tkk.fi
• Hijacking US military satellites for communication – gizmodo.com
• Torpig botnet hacked by educators
  • Torpig Botnet Hijacked and Dissected – slashdot.org
  • Researchers spend 10 days in control of Torpig botnet – thetechherald.com