Showing posts with label web. Show all posts
Showing posts with label web. Show all posts

Thursday, 14 November 2013

WebSurgery v1.1 - Web Application Security Testing Tool

WebSurgery:

               is a suite of tools for security testing of web applications. It was designed for security auditors to help them with web application planning and exploitation.





Sunrise Technologies is proudly announces WebSurgery v1.1!

WebSurgery is a suite of tools for security testing of web applications. It is designed to address the ongoing needs of security auditors so to facilitate them with web application planning and exploitation. Suite currently contains a spectrum of efficient, fast and stable web tools
(Crawler, Bruteforcer, Fuzzer, Proxy, Editor) and some extra functionality tools (Scripting Filters, List Generator, External Proxy).


Tools Features
====

- Crawler
                Crawler is designed to be fast, accurate, stable and completely parameterized using advanced techniques to extract links from HTML, CSS, Javascript and AJAX.

- Bruteforcer
                Bruteforcer for files and directories within the web application which helps to identify the hidden structure.

- Fuzzer
                Fuzzer is a highly advanced tool to create a number of requests based on one initial request. Can be used to exploit (Blind) SQL Injections, Cross Site Scripting (XSS), Denial of Service (DOS), Bruteforce for Username / Password Authentication Login Forms and identification of
Improper Input Handling and Firewall / Filtering Rules.

- Proxy
                Proxy is a server running locally and will allow you to analyze, intercept and manipulate HTTP/HTTPS requests coming from your browser or other application which support proxies.

- Editor
                Advanced ASCII/HEX Editor to manipulate individual requests.

Extra
====
- Scripting Filters
                Advanced Scripting Filters to filter specific requests / responses with support of regular expressions and large number of variables.

- List Generator
                List Generator for different list types (File, Charset, Numbers, Dates, IP Addresses, Custom) with additional rules support.

- External Proxy
                External Proxy redirects suite's traffic to another HTTP/SOCKS proxy.
               

Youtube Tutorials :

 

 


               
Download & Documentation
======================
http://sunrisetech.gr/?page=websurgery&tab=download

Saturday, 21 September 2013

Web Application Security Testing Platform - Websecurify

Websecurify :
                  is One of the powerful web application security testing platform designed from the ground up to provide the best combination of automatic and manual vulnerability testing technologies. It is available for all major desktop platforms including mobile devices and web via our online security.







Important Features of Websecurify:
                                             The major features of Websecurify are the following:
  • Nice, user-friendly interface which is simple and easy to use
  • Good testing and scanning technology
  • Strong testing engine to detect URLs automatically
  • Extensible with many available add-ons
  • Available for major desktop and mobile platforms
  • Free version also available on all major platforms
As I said, Websecurify is not a fully automatic tool; it will only generate the possible URLs and parameters where vulnerabilities can exist. You will need to verify all those possible URLs and test them manually to confirm the vulnerability. This may sometimes take a while, but the tool’s performance is good.

Which Vulnerabilities Can It Detect?
                                                These are the main vulnerabilities that Websecurify can detect:
  • Cross site scripting
  • Cross site request forgery
  • Path disclosure
  • Internal errors
  • SQL injection
  • URL redirection
  • HTTP response splitting
  • Local and remote file include
  • Session cookies problem
  • Information disclosure problems
  • And many other vulnerabilities
Almost all popular vulnerabilities can be detected with the help of this security tool. SQLI, XSS and CSRF are among the main vulnerabilities exploited by hackers.


A Complete Suite Of Web Security Tools :
                                        The Suite provides a complete and functional marketplace of highly integrated web application security tools. You will find that different areas are covered by various domain-specific solutions. The Suite consists of automated scanners, fuzzers, utilities and many other tools useful in numerous situations


Consistent And Easy To Use

                                           The look and feel is consistent across all applications, which makes them incredibly easy to work with. You no longer have to look for hidden options, remember commands or even change the way you go about doing your work. It all just makes sense.

Wide Coverage Of Security Vulnerabilities

                                         The Suite scanning technology is able to discover variety of issues from XSS, SQL Injection, Local File Includes to Default Logins, Session Problems and many others. OWASP TOP 10, WASC and variety of other lists are well supported. For the complete list of vulnerabilities we can discover just click here.


Pick The Tools You Need The Most

You don't have to pay for things you don't need. The Suite is customizable, which means that you can cherry-pick the tools, which provide most value to you and your team. The Suite Marketplace is proudly the first in the world app store for web application security tools and utilities.



Scalable Across Teams of Any Size

                                   All applications in the Suite run in standard browsers like as Google Chrome and Mozilla Firefox. They are available in online and offline modes. This characteristic makes the Suite extremely scalable. Software updates, installs and other nuisances are just problems of the past. This is perfect for large development, quality assurance and penetration testing teams.



Download and Installation :
                                            First of all, you need to download Websecurify from its Official Website. Although it is a commercial product, you can use the open source version of Websecurify to test your application for free. You can download the open source version from Google Code. This tool is available for all major desktop and mobile platforms, including:
  • Windows
  • Mac
  • Linux
  • iOS
  • Android
  • Web App
This nice penetration testing tool is also available for Google Chrome and Mozilla Firefox. One thing worth mentioning here is that WebSecurify is the first and only web application penetration testing tool that is also designed to run direct from the browser with support for both Google Chrome and Mozilla Firefox.
I personally recommend using the desktop app for better performance but using the web browser extension also works well.


Download Link : https://code.google.com/p/websecurify/downloads/list




Friday, 26 July 2013

ASP.NET - Web Server Controls

Processing of Server Controls on a Web Page

The processing of a server control depends on two situations, whether the page is requested for the first time by the client or it is posted back to the Web server when the user interacts with the Web page.
When a page is requested for the first time, the server controls are processed in the following sequence:-
  1. Initializing
  2. Loading
  3. PreRendering
  4. Saving
  5. Rendering
  6. Disposing
  7. Unloading
                                          LEARN MORE >>>>

Sunday, 15 April 2012

12 Alternate Looks To Your Google Search Homepage


Customize Google Serach
It’s the most popular homepage on the entire planet. It’s the biggest (and to some, the only) search engine online. It’s the portal to the entire internet, really. Surprisingly enough, over the past ten years the appearance of it hasn’t really changed a bit. Google is Google, and we know it by that all-white search page and multicolored logo.
Isn’t it a little bit bright and harsh on the eyes, though? You might even call it boring, one could grow pretty tired of launching their browser and seeing that exact same color scheme for years and years. In this post, I’m going to try to fix that for you. I’m here to put you on to a list of Google Search pages that change the color scheme and design of your Google homepage.
Here’s a screenshot of Google from 1999:

google homepage
Here’s Google today:
customize google homepage
Catch my drift? Let’s take a look at our other options.

Blackle

customize google homepage
Blackle, or “Black Google”, sets out to relieve your eyes of all that stress. More than that, Blackle promises that it saves energy.
Blackle saves energy because the screen is predominantly black. “Image displayed is primarily a function of the user’s color settings and desktop graphics, as well as the color and size of open application windows; a given monitor requires more power to display a white (or light) screen than a black (or dark) screen.” Roberson et al, 2002

Give Me Back My Google

customize google homepage
GMBMG strives to do something that Google has taken more of an initiative towards recently in removing affiliate links and other spammy material from their search engine result pages. Using GMBMG will automatically append operands to your query that eliminate common spam results.

Purpoogle

customize google homepage
Purpoogle follows the same path as Blackle. Except it’s purple, not black. And it has zero intention of being energy efficient. At least it sounds fun when it comes off the tongue.

Boogle

customize google homepage
Though it may look dull and plain like the original Google, Boogle keeps it nice and fresh by offering you a unique quotation every time you pull up the page. Here are a few examples:
“It is good to have an end to journey towards; but it is the journey that matters in the end.” – Ursula K. LeGuin
“When buying and selling are controlled by legislation, the first things to be bought and sold are legislators.” – P. J. O’Rourke
“To find something you can enjoy is far better than finding something you can possess.” – Glenn Holm

Cali Orange

customize google homepage
This one is Google with a fruity California twist.

The Revolving Internet

customize google homepage
This is one of the coolest ones, in my opinion. It’s constantly updated with the default design of Google Search, but it spins and rotates. You can type actively as the animation continues. The music is really nice, too.

Big Blue Search

customize google homepage
It’s big, it’s blue, and it’s Google Search.

Dinoogle

customize google homepage
I loved dinosaurs when I was a kid. I was a huge stegosaurus fan. Dinoogle is Google Search with a clean tyrannosaurus rex theme.

AnNOyIng gOOgLe

customize google homepage
Doesn’t it get on your nerves when people TyPe LiKe ThIs? Now you can experience that same feeling every time you bring up your browser!

Epic Google

customize google homepage
Epic Google is enough to make the average searcher a little bit anxious. It’ll really grow on you, though.

SearchEmo.com

customize google homepage
Is emo out of style yet? If not, feel free to enjoy this more graphical homepage. Skulls, stars, and blackness.

I Search Pink

customize google homepage
On the girlie side, a pink version of Google does exist.
Have you come across any other alternate look for the Google Search page? Does the look matter to you in a small way? Let us know.

source:Here

Friday, 13 April 2012

Adobe Releases Mobile PDF Reader Update For iOS


Adobe Releases
Nearly six months after Adobe released its PDF reader app for iOS devices, it posted this week a much needed features update that includes sticky notes, a highlighter, and other annotation tools found in nearly all competing iOS apps in this genre. The recent version of Adobe Reader also includes a nifty feature for writing and placing signatures in PDF documents.
The universal cross-platform desktop version of Adobe Reader has been an industry standard for quite some time, but with the mobile version Adobe has basically been playing catch-up until now. Much of the user interface is pretty intuitive, allowing you three different ways to “turn pages,” and making most of the annotation tools available by pressing down and dragging over selected text, as well as accessing them in menu bar of the app. The Reader also includes a document search feature.

Adobe Releases
In addition to the highlighting tool, Adobe Reader contains strikethrough, underlining, freehand drawing, and sticky note tools. Documents, including your annotations, can be shared via email and printed wirelessly with AirPrint. You can also send PDF files to other apps like Apple’s iBooks, Kindle, DropCopy. Surprisingly, although you can import PDFs from Dropbox into the Reader, you can’t export them to the cloud service.
Adobe Releases
The signature feature is functional, providing a large window for writing, and saving, your signature with your finger or stylus pen, and then moving it around on a page anywhere you like.
Adobe Releases
Adobe Reader is a free app and is compatible with iPhone 3GS and above, the 4th generation iPod touch, and the iPad.

Credit:Bakari Chavanu 
source:Here

Thursday, 12 April 2012

9 Types Of Facebook Status Updates That Your Friends Will Like

Facebook has, without a doubt, become the most popular social network in the world. While I’m cheering on Google + just like lots of you are, I don’t think I’ll ever quit checking on the Facebook status updates of my family and friends – at least, not unless they leave Facebook in droves. That’s not likely to happen anytime soon.
One thing that I’ve noticed when I talk to friends that initially start using Facebook is that “nobody comments on my wall.”  Sometimes, I’ll even try to help them out by letting them show me their Facebook wall and trying to help them understand what they’re doing wrong, and why people may not feel encouraged to comment on their status updates.
Facebook Status Updates
Sometimes, it’s just a matter of reciprocating. People expect that friends and family will flock to their wall after every status update.
The truth is that most people only check out your wall when you’ve commented in theirs – so if you never comment on anyone’s wall, how can you expect them to remember to comment on yours?
Beyond that though, I have noticed through the years that there really are certain types of Facebook status updates that do particularly well in gathering comments. These are the polar opposite of the sort of things Craig listed as annoying Facebook updates. I think these really boil down to human nature – people are inspired to respond to certain types of comments, and these status updates seem to encourage that


9 Facebook Status Updates That Encourage Conversation

In this article, I’m going to review 9 updates that almost always spark conversation on my Facebook wall.
I don’t always want to encourage a conversation. Sometimes I’m just posting an update so that my family knows what’s up in my life. Other times, I really am seeking out input or a lively conversation. In those situations, I’ll usually turn to one of these.

Offer Juicy Inside News

I would say one of the most popular status updates where you’ll usually get instant reactions are those where you offer “breaking news” that people won’t find anywhere else. This may be something that you personally experienced that has hit the mainstream news, or just something really unique or surprising that happened to you that would shock people.
facebook status updates
I’ve seen people post, “Great, just got in a car accident” – which is sort of a backwards thing to do in the case of an accident. You would think a person would want to first call a tow-truck or their family. Then again, I once had a near-miss where a car behind me collided into an oncoming truck during a snowstorm, and the first thing I did after pulling over to the side of the road (after calling 9-11 of course), was to post on Facebook about it. So who am I to throw stones?

Make Fun of Weird People

Another type of post that I’ve noticed almost always draws sarcastic comments or witty little replies is whenever I make fun of silly people. This could be a response to a news story or even a response to some weirdo that has emailed me to ask me whether I want to write a story about space aliens landing in their back yard.
facebook updates
I know that it’s not nice to make fun of people, but my Facebook profile is private – and it’s all in jest. Sometimes, when you observe something utterly stupid that someone has done or said in a news story, it’s nearly impossible not to point out that stupidity in a Facebook update.  What I’ve noticed is that people find such posts nearly irresistible to respond to.

Ask for Advice

Another way to draw in the comments is to ask for advice. Even people who wouldn’t normally post much on Facebook in response to wall posts find it nearly impossible not to offer their own advice if someone is asking for it. I’ve asked for some pretty simple tips, like what sorts of food help to stop hunger longer or how people are able to get themselves out of bed early in the morning.
facebook updates
You may actually be surprised at some of the interesting insight that you’ll get from people too. You can look at Facebook as a resource of people that are just going through the same trials and tribulations of life as you. If you’re having difficulties, there’s a pretty good possibility that someone out there has gone through what you’re going through. So, ask for advice! Trust me, you’ll get it.

Ask People What They Think of Movies, Shows or Books

I’ve been in a situation where I’m sitting at a lunch table with a group of people and no one is talking. You ask the group what they thought about a certain movie, and suddenly everyone is bursting to share their opinion. The same happens on Facebook. If you ask your family and friends whether they’ve seen a certain TV show or movie and what they thought about it, you’re nearly guaranteed to get some responses.
facebook updates
Not to mention, you may get some pretty good tips on what to see at the movies this weekend!

Discuss a Cause People Feel Strongly About

People love a cause. I think most people like to feel like they are on the side of the “good guy” – on the side of justice and ethics. This is especially true when there’s a major news event that has people talking about morality – maybe a news article about child abuse, domestic violence or bullying. These are emotionally charged topics that are going to trigger some of the most amazing posts to your wall from people you know.
best facebook status updates
They can also lead to debate – so tread carefully and be diplomatic.

Make Fun of Your Shortcomings

Every one of my Facebook friends knows that I’m a game addict, I can be absent-minded when I’m extremely busy, and I am easily distracted from my work.
These are the things that I struggle with, and everyone has such struggles. When you make fun of your own struggles in a comical way – it gets people talking. Often they’ll share how they’ve failed in much the same way.
best facebook status updates
Not only does it make for really funny conversation, but it’s a nice way to get support from friends and family with the areas in your life where you find that you stumble often.

People Love Quotes

Quotes can go either way. Sometimes I see someone posting a really cheesy quote, and I just roll my eyes and move on. On the other hand, some people have a knack for finding some really cool, really unique and inspiring quotes.
I like to think I’m one of those people – but really, you know you’ve found a good quote if it’s one that you’ve never seen before and really moves you. Or, better yet, come up with a really inspiring quote on your own.
best facebook status updates
There’s nothing to say that you have to quote someone else – why not show everyone just how filled with wisdom you really are and put together your own quote?

Strange, Random Questions

I’ve seen people get carried away with trying to be cool and edgy by constantly posting really strange updates where very few people have any idea what they’re talking about. Guess what – if you have an inside joke with a few select friends, you’re only going to get a response from those few friends. Want to include everyone? Post a random question that implies there’s more of a story to come if they reply.
For example, we recently heard news that there were robbers in the neighborhood, so I immediately posted a single line asking where you can buy pepper spray.
facebook status updates
After a few people responded almost immediately, I explained why I needed it. Don’t do this too often because after a while your friends will just find it annoying and will stop answering. However, dished out every now and again to spice up your wall with random weirdness is a good thing.

Religion & Politics

Are you a glutton for punishment? If you are, then I dare you to post anything on your wall about religion or politics. I made the mistake of doing it once and my Facebook wall immediately became the platform for a very fiery religious debate between an avid atheist and an avid religious person.
So, why am I suggesting it? Because, it is without a doubt one of the fool-proof ways to instigate posts on your Facebook wall. If you’re the type of person that loves debates, then go for it. If you would rather everyone play nice and stay happy, then you’ll want to stick to one of my other suggestions above.
facebook status updates
No matter how many or how few friends you have on Facebook, you shouldn’t have any problem getting them to post something on your wall if you try a few of the tips I’ve suggested above – and don’t forget, if you want people posting on your wall, you really need to spend some time posting on theirs. That’s just what makes social networks work.
Do you have any other tips for how to inspire conversation and discussion on your FB wall? Share your own advice and insight in the comments section below.

Credit:Ryan Dube 
source:Here

Wednesday, 11 April 2012

Airtel 4G Now In India

airtel 4g

While telecom operators are striving hard to popularise their 3G services in India, Bharti Airtel has gone one step further by launching the latest 4G services in the country. The telecom giant today announced the launch of wireless broadband services based on fourth generation wirless technology in Kolkata circle. Airtel now plans to bring 4G in Bengaluru as well.


With the latest 4G services, users can now access the Internet, video conference and download online content at a rate several times faster than 3G services, which is still in its nascent stage in the country. Interestingly, Airtel has priced its 4G data plans competitively as compared to its 3G services in the Kolkata circle. We bring you a detailed comparison between Airtel's 3G and 4G tariff plans (Kolkata circle). Read on.
Airtel 3G
Airtel is providing 3G services through a roaming arrangement with Vodafone Cellular in Kolkata. The minimum 3G data plan start at Rs. 9 for 10MB (validity 1day). The highest data plan goes up to Rs. 1,250 for 12.5GB (post-paid). Airtel offers a range of 3G data plans, categorised as Sachet, Standard, FlexiShield and High Value. Airtel also provides volume based charging packs. Moreover, the company gives video calling service at 5p/sec , which is valid on local, STD & roaming. Airtel's 3G services are available for both prepaid and postpaid customers.
airtel 4g
airtel 4g
details taken from Airtel's website.

Airtel 4G
For 4G, Chinese telecom equipment maker ZTE will be facilitating the roll-out of the fourth generation telecom services. Airtel has 20 MHz of BWA spectrum in 2.3 GHz frequency band, which is supposed to be suitable for 4G. Speaking of data plans, unlike its 3G plans, Airtel 4G plans aren't very diverse. The minimum 4G plans start at Rs. 999 for 6GB, while the maximum one goes up to Rs. 1,999 for 18GB. Airtel is offering 4G data plans under three categories namely breakfree, breakfree max, breakfree ultra.
To provide 4G services, the carrier is offering services initially through the dongle and Wi-Fi gateway. According to Light Reading India, Airtel's dongle costs around Rs. 7,999 and the Wi-Fi gateway comes for Rs. 7,750. It's notable Airtel's 4G dongle costs four times higher as compared to the average 3G dongle that costs around Rs. 2,500.

Airtel's 3G plans look better as the cost of the 4G dongle (Rs. 7,999) may turn off many users. Airtel has more flexible 3G data plans than 4G. Hopefully, Airtel will come up with new 4G data plans, which are affordable for common users. To push 4G popularity, Airtel should bundle its 4G plans with the forthcoming smartphones/tablets that support the fourth generation mobile technology.
What do you think of Airtel's 4G services? Let us know in the comments section below:

Credit:kul bhushan 
source:Here