Tools

The following are recent tools published by MWR InfoSecurity.

Tool

SAP Metasploit Modules

We have recently developed several Metasploit auxiliary and exploitation modules to assist consultants in assessing SAP systems.

+ read more

Tool

Incognito

A new version of Incognito is available.

+ read more

Tool

WebContentResolver

When assessing Android devices and applications we regularly come across vulnerabilities in Android Content-Providers. 

+ read more

Tool

Rulestats.pm - A SpamAssassin Rule Statistics Plugin

This is a SpamAssassin plugin which stores, on a rule by rule basis, the number of spam emails that each SpamAssassin rule fired on.

+ read more

Tool

DLSw Query Tool

This tool is intended for the purpose of evaluating security controls applied to the DLSw service running on a Cisco routing device.

+ read more

Tool

TCP-over-File Tunnel

As of Windows 2003, Terminal Services supports the sharing of local folders with clients by default; this tool can be used to tunnel multiple simultaneous TCP connections through shared files.

+ read more

Tool

RDP Cipher Checker

This Python script will enumerate the encryption protocols supported by the server and the cipher strengths supported using native RDP encryption (assuming this is supported).

+ read more

Tool

VMWare authd brute forcer

This is a multithreaded tool to bruteforce the VMware console. This acts as a wrapper around VMware-cmd, which must be installed for this to function.

+ read more

Tool

VMware VI Toolkit

This toolkit allows you to use the VMware VI API from within ruby to communicate with an ESX host.

+ read more

Tool

DHCP Script Injection

To assist the testing of DHCP script injection a Python based tool was developed, which uses the Scapy packet generation library and allows users to send specially crafted DHCPREQUEST packets to the target DHCP server. 

+ read more

Tool

SSID Script Injection

To assist the testing of SSID script injection a Python based tool for Atheros chipsets was developed.

+ read more

Tool

VMware VIX toolkit

This toolkit allows you to use the VMware VIX API within ruby scripts. This is essentially a shared object which provides methods that ruby scripts can call in order to interact with virtual machines or VMware servers.

+ read more