PentesterLab.com – Excercises To Learn Penetration Testing

PentesterLab is an easy and straight forwards way to learn the basics of penetration testing. It provides vulnerable systems in a virtual image, and accompanying exercises that can be used to test and understand vulnerabilities.
Just decide what course you want to follow, download the course and start learning. You can easily run the course using VMware, no Internet access is required.

 What will you learn?

• Basics of Web
• Basics of HTTP
• Detection of common web vulnerabilities:
• Cross-Site Scripting
• SQL injections
• Directory traversal
• Command injection
• Code injection
• XML attacks
• LDAP attacks
• File upload
• Basics of fingerprinting

Requirements

• A computer with a virtualisation software
• A basic understanding of HTTP
• A basic understanding of PHP
• Yes, that’s it!

You can download the materials and ISO images here:

web_for_pentester.pdf (2.4M)
web_for_pentester.iso (64-bit, 175M, MD5: f6e0df10de6d410293ba7a838d31f917)
web_for_pentester_i386.iso (32-bit, 172M, MD5: 5e6cdf5fa3356a4c08b34ccd076a63ae)

 
Or read more here.

 From Darknet

happy hunting!!

BackTrack 5 R3 now transform to Kali Linux

Maybe not to late that i post this news to all BackTrack fan out there that the production of BT 5 will end then will be replace by Kali Linux here the news and try it you will be feel the BT inside Kali.

Offensive Security has announced the release of Kali Linux 1.0, a Debian-based distribution with a collection of security tools for forensic analysis and penetration testing. This is a major new update of the project's flagship distribution formerly known as BackTrack (based on Ubuntu). From the release announcement: "After a year of silent development, Offensive Security is proud to announce the release and public availability of 'Kali Linux', the most advanced, robust, and stable penetration-testing distribution to date. Kali is a more mature, secure, and enterprise-ready version of BackTrack. Trying to list all the new features and possibilities that are now available in Kali would be an impossible task on this single page. We therefore invite you to visit our new Kali Linux website and Kali Linux documentation site to experience the goodness of Kali for yourself."

Quick download link:

 kali-linux-1.0-amd64.iso (2,088MB, SHA1, torrent).

happy hunting!!!!

Evil Foca (Alpha Version) is a tool for Pentesters and Security Auditors to perform security testing in IPv4/ IPv6 data networks.

Evil Foca (Alpha Version) is a tool for Pentesters and Security Auditors to perform security testing in IPv4/ IPv6 data networks. The tool is capable to do different attacks such as:

• MITM on IPv4 networks using ARP Spoofing and DHCP ACK injection.
• MITM on IPv6 networks using Neighbor Advertisement Spoofing, SLAAC Attack, fake DHCPv6.
• DoS (Denial of Service) on IPv4 networks using ARP Spoofing.
• DoS (Denial of Service) on IPv6 networks using SLAAC Attack.
• DNS Hijacking.

Automatically takes care of network scan and identify all the devices and their respective network interfaces, specifying their IPv4 and IPv6 addresses and physical addresses.

Evil Foca is divided into 4 panels, the left panel shows the devices found on the network, where you can add them, and filter the result The second panel, arranged in the center with all the possible attacks to perform with the tool, and on the right a short description of each one.Under the previous panel, shows the attacks being made, its configuration and status, allowing on or off. Finally, the bottom panel where shows the event log of Evil Foca.

Download and test here: - Evil Foca

Happy Hunting!!!