How to retrieve user’s passwords from a Windows memory dump using Volatility

About Volatility i have written a lot of tutorials, now let’s try to use this information in a real context extracting the password hashes from a windows memory dump, in 4 simple steps. 1. Identify the memory profile First, we need to identify the correct profile of the system: [email protected]:~# …

SQLiv: a massive SQL injection scanner

SQLiv is a Python-based scanning tool that uses Google, Bing or Yahoo for targetted scanning, focused on reveal pages with SQL Injection vulnerabilities. It uses known dorks in order to find vulnerable URLs. Features multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo targetted scanning by providing …

What is Canvas Fingerprinting and how the companies use it to track you online

Recently Mozilla planned to display permission prompts if a website attempt to use HTML5 Canvas Image Data in the Firefox web browser: in fact, this HTML5 element is often used to tracking users with a technique called “Canvas Fingerprinting” What is “Canvas Fingerprinting”? Canvas fingerprinting is a type of “browser …

GoCrack: managed password cracking tool by FireEye

FireEye released GoCrack, a tool designed to password cracking tasks across multiple servers. GoCrack is open source and provides an easy-to-use, web-based real-time UI to create, view, and manage password cracking tasks.   The tool was developed by FireEye’s Innovation and Custom Engineering (ICE) team, a small, highly trained, team of …