来源：Tr4c3’s blog
There are many tools out in market for security analysis of PHP codes.
Some of them are mentioned below:
1. PHP Security Scanner:
Desc: PHP Security Scanner is a tool written in PHP intended to search
PHP code for vulnarabilities. MySQL DB stores patterns to search for
as well as the results from the search. The tool can scan any
directory on the file system.
License: GPL
More Information: http://securityscanner.lostfiles.de/
阅读全文 »
一个用perl写的php源码审计工具
注释by：Neeao
from：http://iron.randombase.com/2008/05/13/php-source-auditor-4-released/
All packed up & ready for your enjoyment: PHP Source Auditor 4! So, if you have (most likely) never heard of it, this is the deal:
PSA4 is a Perl script that connects to your local webhost and scans all files (recursively) in the www root, for vulnerabilities. It scans for:
阅读全文 »
来源：Tr4c3’s blog
/================================================================================\
———————————[ PLAYHACK.net ]———————————
\================================================================================/
-[ INFOS ]———————————————————————–
Title: “PHP Undergroud Security”
Author: Omnipresent
E-Mail: [email protected] – [email protected]
Website: http://omni.playhack.net – http://www.playhack.net
Date: 2007-04-12
———————————————————————————
-[ SUMMARY ]———————————————————————
0x00: Let’s start..
0x01: Global Variables, look it carefully
[*] Patching
0x02: File Inclusion
[*] Patching
0x03: XSS
0x04: SQL Injection
\_ 0x04a: Login Bypass
\_ 0x04b: 1 Query? No.. 2 one!
[*] Patching
0x05: File Traverse
[*] Patching
0x05: Conclusion
阅读全文 »
来源：Tr4c3’s blog
Packet Shaper:
Nemesis: a command line packet shaper
Packit: The Packet Toolkit – A network packet shaper.
Hping by Antirez: a command line TCP/IP packet shaper
Sing: stands for ‘Send ICMP Nasty Garbage’; sends fully customizeable ICMP packets
Scapy: a new python-based packet generator
阅读全文 »
来源：Sowhat的blog
前两天提到Aviv搞得这个“找”0day活动(http://hi.baidu.com/secway/blog/item/f21ad28b6bd86c7a9e2fb454.html)，今天他公布细节了。
阅读全文 »
/*————————————-
Author:旋木木[[email protected]]
Date:2008/05/12
Website:www.bugshower.org
————————————–*/
一：什么是shellcode
话说某天某爱国黑客编译了一个Nday溢出利用程序来攻击CNN，输入IP并且enter之后发现目标服务器没有反应，于是拿出sniffer抓包分析…“Oh ,my dog!居然没有带shellcode！”为什么 shellcode对于一个exploit来说这么重要呢？Shellcode到底是什么东西呢？
阅读全文 »
