Tools: nmap 4.85BETA9 – nmap.org Vulnerabilities: IIS 6.0 webdav authentication bypass Microsoft Security Advisory 971492 – microsoft.com Bypassing Remote WebDav Auth IIS 6.0 – g0thacked.wordpress.com Other News: Secret questions are too easily guessed Are Your "Secret Questions" Too Easily Answered? – technologyreview.com Study Shows "Secret Questions" Are Too Easily Guessed – slashdot.org Gumblar malware Gumblar [...]

Fyodor’s Nmap presentation during DEFCON 16 is now available in video form on insecure.org. Fyodor waited to release the video until Nmap version 4.75 was released, since the presentation goes over many of the new features in Nmap. Two cool new features are the open port frequency options, and integration of the Zenmap GUI. Zenmap [...]

Here is a list of new security tools that were released in the past week. SQL Ninja 0.2.3 – SQL server injection and takeover tool fgdump 2.1.0 – Tool for mass password auditing of windows systems AxBan 1.0.0.4 – ActiveX killbit program Nmap 4.65 – Network port scanner Nessus 3.2.1 – Vulnerability assessment tool Immunity [...]