waf00f is another nice fingerprinting tool.
It is a good complement to a tool like httprint. It is able to detect Web Application Firewalls.
Its output can help you to determine the trust you can have in what httprint or any other web server fingerprinting tool found out.
Check it there.
Category Archives: Pentesting
Nessus 4.2
Nessus 4.2 is out.
I tried it out and I must say that the new UI is great. I am not a big fan of Flash and I regret this choice. However, the design is excellent, all options are accessible in a logical way. Instead of spreading over the options like it used to be, they come to you in the right order.
I also appreciate that the server and the client set-up are now unified thanks to the web interface (you can access it from localhost or from the network indifferently).
The report section has also been greatly improved.
So, if you were already an Nessus user, it is worth upgrading.
Talking about the set-up, there is an up-to-date package for openSUSE (of course, there are a lot less dependencies than before).
No Nessus gui client and limited support of the server for openSUSE
As I work on security, I used to use Nessus on my openSUSE system.
But it seems that Tenable Network Security dropped support for the client on our favorite distribution.
At least, for some reason, they stopped making an universal statically linked binary (though they keep doing it for the server part) and it hasn’t changed since april.
Even the server has a rather limited and obsolete support of openSUSE 10, whereas Debian, Ubuntu and Fedora have support for various versions and architectures. Check there.
This is rather a shame, as openSUSE is one of the major distribution.
I tried some workarounds like converting the deb packages, but, as expected, there are some dependancies issues.
So far, it seems that not many people are affected, because there are not many voices on the forum. I can live without it, but however, this is often a nice and useful tool.
Does anyone use it here ? Or did you get it to work somehow ? If you feel concerned, please let it know to Tenable !
Nmap 5.0 is out
Yersinia : patch to compile under openSUSE (11.1)
Yet another post in the series of compilation failures due to unexpected libraries paths.
This time, it is about Yersinia and the ncurses library. I made the following yersinia-opensuse11.1 patch which should work for openSUSE 11.1 and maybe other versions or distros.
Compilation of PackETH on openSUSE
PackETH is a nice gkt tool to play with Ethernet packet.
I encountered some path issues with the Makefile and openSUSE 11.1 64 bits to compile it, so here is the packETH-opensuse patch to compile correctly.
If you are on a 32 bits system, all you will have to do is editing the CPPFLAGS line and replace all lib64 occurences with lib.
I hope one will find it useful.