Some of the most serious security flaws on the Internet today are application-layer flaws in custom web applications. Such vulnerabilities undermine all other system hardening efforts. While techniques to exploit application-layer flaws are common among hackers, most security professionals have little experience with ...

Introduction

Part I: Application Security Foundations

Chapter 1: Networks

Chapter 2: Web Applications

Chapter 3: Assessment Methodology

Chapter 4: Web Hacker's Toolbox

Part II: Poison Data

Chapter 5: Lab Setup

Chapter 6: SQL Injection

Chapter 7: Session Hijacking

Chapter 8: Parameter Tampering

Chapter 9: Cross-Site Scripting

Chapter 10: OS Command Injection

Chapter 11: Attack Variations

Chapter 12: Cryptography 101

Chapter ...

StealthVNC is a slightly modified version of the popular VNC tool. It is far from a bona-fide root kit, and it really does need some work, but it is a handy tool for pentesters. But beware I used an older version of the source and at least one of the mods introduces some vulnerabilities; so use it with caution.

I originally wrote MasterBugs as a proof-of-concept program. For a few years, it was buried deep on my hard drive until one day I needed a program whereby I could demonstrate various application-layer security flaws. After some updating to add flaws to MasterBugs, it served the purpose. I continue to add flaws to the program.

This software is composed of ...

Hacker's often penetrate poorly protected systems and turn them into zombies. These zombie computers can then be utilized as relay or proxy systems to aid the hacker in obfuscating his or her tracks. Or they might be used in distributed denial of service attacks.

ZombieVM is a Virtual Machine for VMWare. It works with the recently released VMPlayer, VMWare Server ...