Suid /proc/PID/mem Write (CVE-2012-0056) & multiple vulnerabilities in Wordpress >3.3.1

this should speak for itself

http://blog.zx2c4.com/749

here is the fix commit: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=e268337dfe26dfc7efd422a804dbb27977a3cccc

also, Wordpress setup-config.php (install page). There are a couple of different ways to utilize this not mentioned in the following post.

http://threatpost.com/en_us/blogs/multiple-bugs-haunt-wordpress-setup-012512

+++

Travis Goodspeed's presentation on 802.11 Wifi Packet-in-Packet attacks.

http://events.ccc.de/congress/2011/Fahrplan/events/4766.en.html

Sudo 1.8.0 - 1.8.3p1 Format String Vuln

Critical PHP remote vulnerability introduced in fix for php hashtable collision dos  with PoC here: https://gist.github.com/1725489

Memgrep 0.8.1b Release! (skape's code updated)

Here is the updated tarball!
http://priv.efnet.pe/~builder/memgrep-0.8.1b.tar.gz

Skape describes his program as this:
A dynamic memory analysis utility for Linux and FreeBSD. 
on the original site http://hick.org/code/skape/memgrep/ 
which also has all the documentation and older packages.

 * UPDATED by builder #priv@efnet. where you at skape?
 * couple of minor adjustments to make this compile on newer linux. was changed to and we added
 * an #include to in the #else linux section. next we just commented out the extern declaration at what is now
 * line 101. Added a NULL check on fgets() at line 652 to eliminate a warning. Also simple.c needs #include to stop
 * another minor warning. anyway, I really love this code and i hope skape will make it compatible with amd64 arch soon!
 
I take no credit for developing this code, but I really love it and skape hasn't updated it in forever so I made some minor changes to make it compile neatly on newer 32 bit linux systems. I have only tried on Ubuntu and Gentoo so if anything, this post will hopefully get some feedback and we can work together to make this tool popular again. My ultimate dream is to have this work on 64 bit architectures.

here is the usage, enjoi!

memgrep -- Run-time/core-time memory searching, dumping and modifying utility.
Usage: ./memgrep [-p pid] [-o core] [-T] [-d] [-r] [-s] [-e] [-a addr1,addr2,bss,addr3] [-l length]
                 [-f fmt,search data] [-t fmt,replace data] [-b pad] [-m minimum size]
                 [-F fmt] [-L] [-v] [-h]

   -p [pid]   The process id to operate on.
   -o [core]  The core file to operate on.
   -T         Build a referential tree for the given address(es).
   -d         Dump memory from the specified address(es) for the given length (-l).
   -r         Replace memory at the specified address(es).  If -s is also specified.
              only memory that matches the search criteria will be replaced.
   -s         Search memory at the specified address(es).
   -e         Enumerate the heap.
   -a [addr]  The address(es) to operate on seperated by commas.  Addresses can be
              in the following format:
                 0x821c4ac
                 821c4ac
              Also, the following keywords can be used:
                 bss       -> Uses the VMA associated with the .bss section (uninit global vars, heap data).
                 rodata    -> Uses the VMA associated with the .rodata section (read-only data, ie, static text).
                 data      -> Uses the VMA associated with the .data section (data, ie, global variables).
                 text      -> Uses the VMA associated with the .text section (text, ie, executable code).
                 stack     -> Dynamically determines the current stack pointer.
                 all       -> Uses bss, stack, rodata, data, text.  This is the only keyword that can be used
                              when operating on core files.
   -l [len]   The length to use when searching or dumping.  A length of 0 means search
              till end-of-memory.
   -f [data]  This specifies the search criteria.  Multiple formats are accepted for ease
              of use.  Below are accepted formats and their examples:
                 s -> String format  (Ex: 's,Testing')
                 x -> Hex format     (Ex: 'x,00414100AB')
                 i -> Integer format (Ex: 'i,4724')
   -t [data]  This specifies the replace data.  The same formats used with the -f parameter
              are valid for the -t parameter.
   -m [minsz] The minimum size of a heap allocation for use when enumerating.
   -b [pad]   Number of bytes of padding to use around dump addresses (default is 0).
   -F [fmt]   The format to use when dumping memory, can be one of the following:
                 hexint    -> Four byte hexi-decimal integers.
                 hexshort  -> Two byte hexi-decimal shorts.
                 hexbyte   -> One byte hexi-decimal characters.
                 decint    -> Four byte decimal integers.
                 decshort  -> Two byte decimal shorts.
                 decbyte   -> One byte decimal characters.
                 printable -> Printable characters.
   -L         List memory segments of a process or core file.
   -v         Version information.
   -h         Help.


   Example search (search for 'Jane' in .bss):

      ./memgrep -p 1335 -s -a bss -f s,Jane

   Example replace (replace memory at 0x8423143 and 0x8443147 with 0x00ff0041):

      ./memgrep -p 1335 -r -a 0x8423143,0x8443147 -t x,00ff0041

   Example search/replace (Replace 'Test' with 'Rest' in .bss and .rodata):

      ./memgrep -p 1335 -s -r -a bss,rodata -f s,Test -t s,Rest

   Example dump (Dump memory starting at 0x8422113 for 16 bytes):

      ./memgrep -p 1335 -d -a 0x8422113 -l 16

HowTo Install Arduino on BackTrack 5

I didn't want to make a second post for today, but i have a real treat for you!
http://jon.oberheide.org/files/half-nelson.c
the always cutting edge Jon Oberheide released his stack based overflow for econet_sendmsg function. affecting kernels < 2.6.36.2.
also a LKM rickroller: https://github.com/fpletz/kernelroll


+++

This is made to be a quick tutorial for x86 architecture and you should have root permissions. If this does not work please refer to http://www.arduino.cc/playground/Linux/Ubuntu for more detailed instructions for Arduino on Ubuntu(which is what BackTrack is based on).

First thing you should do is plug in your Arduino board to the BackTrack5 machine(assuming via USB) and type:

#modprobe ftdi_sio
#dmesg

in a console. You should see something like this in the dmesg output.
  
[91296.051432] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0

If not it is likely you need to recompile your kernel to include this support. Most likely it is installed as a module so the modprobe command would have enabled it. Next we will go ahead and grab the debian packages needed:

#mkdir /tmp/arduino
#cd /tmp/arduino
#wget http://mirror.pnl.gov/ubuntu//pool/universe/r/rxtx/librxtx-java_2.2pre2-3~maverick1_i386.deb
#wget http://mirror.pnl.gov/ubuntu//pool/universe/a/arduino/arduino-core_0022+dfsg-1~maverick1_all.deb
#wget http://mirror.pnl.gov/ubuntu//pool/universe/a/arduino/arduino_0022+dfsg-1~maverick1_all.deb

Now we are ready to install everything to the system! First use apt to install avrdude, which is the microcontroller programmer. Then just use dpkg -i to install the .deb's

#apt-get install avrdude
#apt-get install gcc-avr
#apt-get binutils-avr
#apt-get install avr-libc
#dpkg -i *.deb

If it complains about dependency problems, then just run:

#apt-get -f install

And dpkg one more time

#dpkg -i *.dep

If you didn't get any errors you should be able to run "arduino" in a terminal, which will bring up the IDE. I suggest opening up the example blink program and changing the delay() values to something fast(200 will work) and uploading it to the board. Pin 13 gives warning blinks so this will verify everything is working. Remember to press the reset button while uploading and change the settings in the sketch program to match what board you have. If anyone does any network or hacking related arduino projects I would love to hear from you. Check us out on efnet IRC@ #priv.  

  

 

PMCMA Released & DigiNotar Damage Disclosed

Pcmca is software that will attempt to automatically write an exploit for memory corruption bugs in software. Can greatly save time in reverse engineering.

The code is available at:
https://github.com/toucan-system/pmcma

while the main site is simply http://www.pmcma.org

It was presented at the blackhat conference in Vegas this year. Here are the slides and whitepaper!
http://www.pmcma.org/wp-content/uploads/2011/09/bhus_2011_brossard.pdf
http://www.pmcma.org/wp-content/uploads/2011/09/BHUS-2011_Brossard.pdf

+++

Okay, I am sure everyone has heard of the recent DigiNotar "Debacle" but if not here is a good link to tell you what is up.
https://blog.torproject.org/blog/diginotar-debacle-and-what-you-should-do-about-it

This next link is the raw spreadsheet data of the compromised certs!
https://svn.torproject.org/svn/projects/misc/diginotar/rogue-certs-2011-09-04.csv

and here is the tor projects latest blog post:

This is the list of CA roots that should probably never be trusted again:
DigiNotar Cyber CA
DigiNotar Extended Validation CA
DigiNotar Public CA 2025
DigiNotar Public CA - G2
Koninklijke Notariele Beroepsorganisatie CA
Stichting TTP Infos CA
The most egregious certs issued were for *.*.com and *.*.org while certificates for Windows Update and certificates for other hosts are of limited harm by comparison. The attackers also issued certificates in the names of other certificate authorities such as "VeriSign Root CA" and "Thawte Root CA" as we witnessed with ComodoGate, although we cannot determine whether they succeeded in creating any intermediate CA certs. That's really saying something about the amount of damage a single compromised CA might inflict with poor security practices and regular internet luck.
Of particular note is this certificate:
CN=*.RamzShekaneBozorg.com,SN=PK000229200006593,OU=Sare Toro Ham Mishkanam,L=Tehran,O=Hameye Ramzaro Mishkanam,C=IR
The text here appears to be be an entry like any other but it is infact a calling card from a Farsi speaker. RamzShekaneBozorg.com is not a valid domain as of this writing.
Thanks to an anonymous Farsi speaker, I now understand that the above certificate is actually a comment to anyone who bothers to read between the lines:
"RamzShekaneBozorg" is "great cracker"
"Hameyeh Ramzaro Mishkanam" translates to "I will crack all encryption"
"Sare Toro Ham Mishkanam" translates to "i hate/break your head"

Kernel.org Box Hacked and Using Googles Bandwidth to DDOS

first off, here is some pretty clever usage of the newly popular G+
---
The vulnerable pages are “/_/sharebox/linkpreview/“ and “gadgets/proxy?“
Is possible to request any file type, and G+ will download and show all the content. So, if you parallelize so many requests, is possible to DDoS any site with Google bandwidth. Is also possible to start the attack without be logged in G+.

http://www.ihteam.net/advisory/make-requests-through-google-servers-ddos/

small shell script to do the dirty work:
http://www.ihteam.net/advisories/_154785695367_+ddos.sh
 
before we get to the kernel.org hack, here is a couple of other recent articles of interest.

MAC address spoofing attacks against port security:
http://www.usenix.org/events/woot11/tech/final_files/Buhr.pdf

Understanding the LFH:
http://www.illmatics.com/Understanding_the_LFH.pdf

Remotely Exploiting the PHY layer. Inject RAW frames into wireless networks.
http://travisgoodspeed.blogspot.com/2011/09/remotely-exploiting-phy-layer.html

IE JavaScript Heap Spray stage 1 exploit explained
http://picturoku.blogspot.com/2011/09/diaries-of-vulnerability-take-2.html

http://threatpost.com/en_us/blogs/hackers-pushing-voip-audit-tools-malicious-attacks-083111

http://www.symantec.com/connect/blogs/morto-worm-sets-dns-record

http://www.itproportal.com/2011/08/09/android-based-hacking-toolkit-anti-unveiled-defcon/

and although Apache just released a patch today(which OS X will not have available yet) here is a PHP IP range scanner for the DoS.
http://apache-range-exploit.com/

i have to admit, i lol'ed at this. here is the pastebin!

---------- Forwarded message ----------
From: J.H.
Date: 2011/8/29
Subject: [kernel.org users] [KORG] Master back-end break-in
To: users@kernel.org


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Afternoon Everyone,

As you can guess from the subject line, I've not had what many would
consider a "good" day.  Earlier today discovered a trojan existing on
HPA's personal colo machine, as well as hera.  Upon some investigation
there are a couple of kernel.org boxes, specifically hera and odin1,
with potential pre-cursors on demeter2, zeus1 and zeus2, that have been
hit by this.

As it stands right now, HPA is working on cleaning his box, and
I'm working on hera (odin1 and zeus1 are out of rotation still for other
reasons), mainly so that if one of us finds something of interest, we
can deal with it and compare notes on the other box.

Points of interest:

- - Break-in seems to have initially occurred no later than August 12th

- - Files belonging to ssh (openssh, openssh-server and openssh-clients)
were modified and running live.  These have been uninstalled and
removed, all processes were killed and known good copies were
reinstalled.  That said all users may wish to consider taking this
opportunity to change their passwords and update ssh keys (particularly
if you had an ssh private key on hera).  This seems to have occurred on
or around August 19th.

- - A trojan startup file was added to rc3.d

- - User interactions were logged, as well as some exploit code.  We have
retained this for now.

- - Trojan initially discovered due to the Xnest /dev/mem error message
w/o Xnest installed; have been seen on other systems.  It is unclear if
systems that exhibit this message are susceptible, compromised or not.
If you see this, and you don't have Xnest installed, please investigate.

- - It *appears* that 3.1-rc2 might have blocked the exploit injector, we
don't know if this is intentional or a side affect of another bugfix or
change.

- - System is being verified from backups, signatures, etc.  As of right
now things look correct, however we may take the system down soon to do
a full reinstall and for more invasive checking.

- - As a precaution a number of packages have been removed from the
system, if something was removed that you were using please let us know
so we can put it back.

- - At this time we do not know the vector that was used to get into the
systems, but the attackers had gained root access level privileges.

That's what we know right now, some of the recent instabilities may have
been caused by these intrusions, and we are looking into everything.

If you are on the box, keep an eye out, and if you see something please
let us know immediately.

Beyond that, verify your git trees and make sure things are correct.

- - John 'Warthog9' Hawley
Chief Kernel.org Administrator
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk5a5U0ACgkQ/E3kyWU9dif+1ACfYPlgq/keFrFO77AmQVduKGwx
TAcAnRAu6nHt74+5aC+fPeb8aT0hcy2K
=Semd
-----END PGP SIGNATURE-----

Anonymous targetting facebook in November?

real? fake?
http://pastebin.com/nzaNLWfF

heres some speculation from a third party
http://venturebeat.com/2011/08/10/anonymous-fights-with-itself-over-killing-facebook/

operation infitada

hmm

happily married!

posts to this blog have been temporarily discontinued to due to my recent marriage. thanks for all the support!










NOT






page of links is forever, dont mind my ancient posts...

debian samba vulns

Two local vulnerabilities have been discovered in samba, a SMB/CIFS file,
print, and login server for Unix. The Common  Vulnerabilities and
Exposures project identifies the following problems:

CVE-2009-3297

   Ronald Volgers discovered that a race condition in mount.cifs
   allows local users to mount remote filesystems over arbitrary
   mount points.

CVE-2010-0547

   Jeff Layton discovered that missing input sanitising in mount.cifs
   allows denial of service by corrupting /etc/mtab.

For the stable distribution (lenny), these problems have been fixed in
version 2:3.2.5-4lenny9.

For the unstable distribution (sid), these problems have been fixed in
version 2:3.4.5~dfsg-2.

Chinese Hacker in Google hax identified.

http://gizmodo.com/5477367/chinese-hacker-responsible-for-google-attack-code-identified

im starting a new blog similar to this one as far as it is mostly just reference and links to external articles. This one will be just about anything non IT/security related and id be glad to allow some peeps to be authors.

It is based on a counter-culture magazine me and some friends have tinkered around with and the addy is
http://liftmag.blogspot.com

The Singularity is Near & APT briefing

I really should do a full-fledged post about Advanced Persistent Threats(and the hype around the term), because that is all it is. This term has been around for a couple of years, but the concept itself has obviously been around much longer. It just so happens it is getting a lot of media attention recently. regardless, here is 3 articles on the subject.

Excellent article on Advanced Persistent Threats vs. Web-Based Systems by Jeremiah Grossman.

What is an APT and what does it want?

Anatomy of an APT. (from August 2009)


Ray Kurzweil is a prized author and one of the best futurist of our time. This book goes into the future of Artificial Intelligence and the social impact of technology. I am not finished with it yet, but i can hardly put it down(close Reader). There is now a movie and you can check out information and buy the book at http://singularity.com/

More by Kurzweil:

The Impact of Accelerating Information Technology on War and Peace

Kurzweil AI

Book TV 3hr in-depth video on Ray

Here is a couple of images i found interesting while writing this post.



and this one is from Daily Signs of the Apocolypse blog.

click image to enlarge.

IE Aurora src c0de + China Google Attacks & damn rucas!

first things first, here is the exploit c0de PoC.

# Author : Ahmed Obied (ahmed.obied@gmail.com)

#

# This program acts as a web server that generates an exploit to

# target a vulnerability (CVE-2010-0249) in Internet Explorer.

# The exploit was tested using Internet Explorer 6 on Windows XP SP2.

# The exploit’s payload spawns the calculator.

#

# Usage : python ie_aurora.py [port number]

-->http://www.pastebin.ca/1758112<-- Aurora Exploit python source!

thanks http://vul.kr

here is the McAfee page about "Operation Aurora", the IE Vulnerability that was used to attack some of google's servers + other companies

http://www.mcafee.com/us/threat_center/operation_aurora.html
___
Microsofts advisory.

http://www.microsoft.com/technet/security/advisory/979352.mspx
___
oh lawd its CyBeRwAr!!!

http://www.computerweekly.com/Articles/2010/01/13/239935/google-declares-cyber-war-on-china-after-security-attack.htm
___
code or PoC released to pub. trying to find it now.. will update soon.

http://www.computerweekly.com/Articles/2010/01/18/239991/google-china-hack-code-published.htm
___
Android, yahoo takes hits over "slugfest"

http://www.technewsworld.com/story/Android-Yahoo-Take-Hits-in-Google-China-Slugfest-69141.html
___
Ditch IE? Germany thinks so.

http://blogs.computerworld.com/15416/ditch_ie_over_google_china_hack_bug?source=rss_blogs

or uhm upgrade?

http://news.softpedia.com/news/Upgrade-to-IE8-to-Fend-Off-Attacks-Targeting-IE-0-Day-132527.shtml
___
Google postpones cell phone releases in China over these disputes.

http://news.yahoo.com/s/ap/20100119/ap_on_hi_te/as_china_google

+++
Sprint giving GPS locations to law enforcement. more to come on these issues.
+++

and damn Rucas, pissing off freenode opers and shit. lawl.
http://pastebin.ca/1756688
http://blog.freenode.net/2010/01/javascript-spam/

weekend life!

More analysis' on DDoS/Bot Nets. just bumping the old post.


if it had a couple of faces that portrayed the hilarity of last nite, this would be dead on ;)

Commit Internet Suicide Now! + Nexus One price drops & Higher prices outside USA

It is time to turn over a new leaf folks. Put social networking behind you. Go meet a real person. Have a beer and get some strange. Commit internet suicide!

http://suicidemachine.org/

Only 20,000 Nexus One handsets sold in the first week forcing a substantial price drop including a rebate for people who already purchased one. People are calling the nexus One and Android phones in general the "iPhone killer". As a droid enthusiast and developer I love this new slogan, but the insanely high price of the Nexus One was almost a "droid killer". I am just glad they noticed their folly quickly and started dropping prices. It looks like the drop is around 100$ for most carriers.

On a similar topic check out these stats on the price difference of the N1 in other countries!

http://www.androidcentral.com/outside-us-nexus-one-really-gonna-cost-you

CVE-2009-4324 PDF shit , dpc-shodanscan.py by 5ynl0rd + Trojan Pr0n SMS'ers and Haiti earthquake related domains being parked.

The widespread exploitation of the CVE-2009-4324 is no news at this point. Malicious PDF's taking advantage of the Acrobat Reader are still running rampit. This post will pose as a resource for research and study of this and other Acrobat Reader vulnerabilities. I will continue to add on to this instead of creating any new posts.

Official Adobe Bulletin

http://isc.sans.org/diary.html?storyid=7867 <-- excellent analysis http://isc.sans.org/diary.html?storyid=7903 <-- more++

http://vrt-sourcefire.blogspot.com/2009/12/adobe-reader-medianewplayer-analysis.html

PDF toolz including pdf-parser. This guy's site has a lot of great information about PDF in general. A must visit on this subject!
***http://blog.didierstevens.com/programs/pdf-tools/***

Mitigation and prevention of CVE-2009-4324 Adobe Acrobat reader Vuln

ttp://feliam.wordpress.com/2010/01/13/generic-pdf-exploit-hider-embedpdf-py-and-goodbye-av-detection-012010/ <-- good shit
Old news about the payload

Brad Arkin on Adobe Reader 0day and the Response from Adobe's security team.

MetaSploit database.
http://downloads.securityfocus.com/vulnerabilities/exploits/adobe_media_newplayer.rb

and... Google hax0rz target src code of more than 30 companies
Adobes Post about the subject

Reader Update ship schedule.

Old post about exploiting PDFs without being opened.

And without further adu, here is some Python code that uses shodan tosearch for specific network services. Great idea and work 5ynl0rd.

!!! dpc-shodanscan.py !!!

in other news, many domains are already being parked in relation to the Haiti earthquake. but why? Most likely malware related.

Trojan Pr0n dialers make a "cumback" h0h0h0. built on Java 2 micro edition language, these malicious apps will send premium SMS messages to high-rate adult numbers without the users knowledge. Old concept, new warez.

Malicious app in Googles android market

How the software that supposedly steals bank infoz made it onto the market blows my mind. I guess I had an idea in my head that a human from google actually went though every bit of code that was submitted and either denied or accepted depending on an array of rules/regulations. Unless this was a one-time human mistake I would say their system is vulnerable. Hollar at us if you read this Mr. Droid09.

http://mobile.slashdot.org/story/10/01/10/2036222/Malicious-App-In-Android-Market

768 bit crypto cracked.

We are a bit late on this, but 768 Bit crypto was factored in early December. So you can say 1024 is still "secure" for now, but it *is* only a matter of time.

http://arstechnica.com/security/news/2010/01/768-bit-rsa-cracked-1024-bit-safe-for-now.ars



Take notes "Joey".
and yes this in fact *was* a lame 'Hackers' movie reference.









Take notes "Joey"

FBI's Secret Spyware Tracks Down Teen Who Made Bomb Threats

http://www.wired.com/politics/law/news/2007/07/fbi_spyware

i just found it interesting the FBI has taken to hacker tactics and infecting people....

Build-from-Skratch botnet software being sold. top 10 bots being used.

Botnets these days are extremely sophisticated and the groups/inidividuals responsible are pretty fucking intelligent. We bring you this information as research to feed our own curiosity.

List of Top 10 botnets and their impacts:
http://www.net-security.org/secworld.php?id=8599

HoneyNet's papers on bots!

http://www.cert.org/reports/dsit_workshop.pdf

Pushdo/Cutwail botnet Case study:
http://us.trendmicro.com/imperia/md/content/us/pdf/threats/securitylibrary/study_of_pushdo.pdf

Zeus:
http://www.securityfocus.com/brief/1055
http://www.readwriteweb.com/archives/zeus-botnet-amazon-cloud-ec2.php

Rustock rootkit and spam bot (case study):
http://www.usenix.org/event/hotbots07/tech/full_papers/chiang/chiang_html/

Torpig:
http://arstechnica.com/security/news/2009/05/researchers-hijack-botnet-score-56000-passwords-in-an-hour.ars
research on torpig:
http://www.cs.ucsb.edu/%7Eseclab/projects/torpig/torpig.pdf

___early ddos tools___

Trinoo::
http://staff.washington.edu/dittrich/misc/trinoo.analysis

Stacheldraht:
http://staff.washington.edu/dittrich/misc/stacheldraht.analysis
http://old.honeynet.org/papers/enemy/ddos.txt
http://www.sans.org/security-resources/malwarefaq/stacheldraht.php

TFN:

http://staff.washington.edu/dittrich/misc/tfn.analysis

Shadow Server's stats on hack-Off and other ddos groups/nets

more to come, still trying to find where to "buy" this stuff
thx rex.

Sun web server, and MYSQL 0day exploit demos

first of all, roll tide... although we played a terrible game, Alabama is now national champions. FJEAR!

here are some exploit demos in flash format. The first
for Sun Web Server.

SJWS exploit - http://intevydis.com/sjws_demo.html
MySQL exploit - http://intevydis.com/mysql_demo.html

Brought to you by http://www.intevydis.com/blog/ writers
of the fine DBJIT toolkit.

"DBJIT Professional is a toolset of more than 50 tools
and exploits which are designed to test the security
of Databases and related software products. The toolset
is written in purePython and designed to be used with
Immunity CANVAS.