Slides for my DeepSec 2010 talk Malware Goes to The Movies. In this talk, I discuss how viewing a seemingly innocuous video may allow an attacker to take over your computer. Here is a useful list of security tools that you can use to protect yourself. Free online multi-AV virus scanner. OWASP top 10 application security risks. List of latest security vulnerabilities by CERT.

When running Nikto, you have the ability to save all findings in plaintext files by using the -Save option. This option takes one argument, a directory name, which will be used or created to save all findings, one per text file.

Dns recon and research, find and lookup dns records. com is a FREE domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process. Open Source Intelligence for Networks. The ability to quickly identify the attack surface is essential. Whether you are penetration testing or chasing bug bounties.

We saw about online Nmap port scanner. There is one more interesting site called Hacker Target. They offer online Nmap port scanning and also few more vulnerability scanners. Here is the list of scanners available. SQL Injection Scan using SQLiX and sqlmap. I was busy with my work and also I have joined coll.

Test ping, traceroute and check for open ports. Ping Test any IP Address, Trace IP AND Check for open ports. A system that does not respond could be in a few different states, the computer may be fine with the problem lying somewhere in the network path between the two systems. Another reason for a no response is if a firewall along the way is dropping ICMP packets. This will also result in no response, with the system still being up and running.