<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security Aegis &#187; Tool Talk</title>
	<atom:link href="http://www.securityaegis.com/category/tool-talk/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.securityaegis.com</link>
	<description>Life, Liberty, and the pursuit of root...</description>
	<lastBuildDate>Thu, 22 Jul 2010 23:50:17 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Exploit the User with SET &#8211; The Social Engineering Toolkit</title>
		<link>http://www.securityaegis.com/exploit-the-user-with-set-the-social-engineering-toolkit/</link>
		<comments>http://www.securityaegis.com/exploit-the-user-with-set-the-social-engineering-toolkit/#comments</comments>
		<pubDate>Sun, 21 Feb 2010 22:22:01 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[Backtrack]]></category>
		<category><![CDATA[Irongeek]]></category>
		<category><![CDATA[metasploit]]></category>
		<category><![CDATA[Metasploit Unleashed]]></category>
		<category><![CDATA[Pentoo]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[SET]]></category>
		<category><![CDATA[Shmoocon]]></category>
		<category><![CDATA[Social Engineering Toolkit]]></category>
		<category><![CDATA[Social-Engineer.org]]></category>
		<category><![CDATA[Vids]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=979</guid>
		<description><![CDATA[I have to say&#8230; SET is just plain awesome. The Social Engineering Toolkit (SET) is a set of python scripts created by David Kennedy (aka rel1k) to automate many client side penetration testing vectors. In conjunction with Social-Engineer.org, which is also a top-notch resource, it provides for some of best extensibility in this type testing. [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/exploit-the-user-with-set-the-social-engineering-toolkit/feed/</wfw:commentRss>
		<slash:comments>8</slash:comments>
		</item>
		<item>
		<title>Nsploit: Nmap grows some teeth</title>
		<link>http://www.securityaegis.com/nsploit-nmap-gets-grows-some-teeth/</link>
		<comments>http://www.securityaegis.com/nsploit-nmap-gets-grows-some-teeth/#comments</comments>
		<pubDate>Fri, 12 Feb 2010 20:14:11 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[fasttrack]]></category>
		<category><![CDATA[metasploit]]></category>
		<category><![CDATA[nmap]]></category>
		<category><![CDATA[nsploit]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=940</guid>
		<description><![CDATA[Ryan Linn has started a project to bridge Nmap Scans all the way to exploitation using Metasploit. Similar to the db_autopwn via fasttrack script (available in Backtrack 4), Nsploit does even more granular service level Nmap scanning to identify versions and exploits. Then passes of these to Metasploit and launches the pain at your target [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/nsploit-nmap-gets-grows-some-teeth/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>More and More Webapp Labs!</title>
		<link>http://www.securityaegis.com/more-and-more-webapp-labs/</link>
		<comments>http://www.securityaegis.com/more-and-more-webapp-labs/#comments</comments>
		<pubDate>Fri, 12 Feb 2010 07:47:09 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[Training]]></category>
		<category><![CDATA[labs]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=900</guid>
		<description><![CDATA[So&#8230; Since the writing of our webapp lab article a lot of people have gotten together similar projects. We like ours but we wouldn&#8217;t be objective if we didn&#8217;t report on some other options. The big news is the OWASP Broken Web Applications Project. This Project is a nice *tidy* little VM you can spin [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/more-and-more-webapp-labs/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>For whom the Shell tolls&#8230;</title>
		<link>http://www.securityaegis.com/for-whom-the-shell-tolls/</link>
		<comments>http://www.securityaegis.com/for-whom-the-shell-tolls/#comments</comments>
		<pubDate>Sun, 07 Feb 2010 04:47:03 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[c99]]></category>
		<category><![CDATA[laudanum]]></category>
		<category><![CDATA[netcat]]></category>
		<category><![CDATA[r57]]></category>
		<category><![CDATA[websells]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=879</guid>
		<description><![CDATA[Catchy title don&#8217;t you think? Web shells provide an excellent way to exploit misconfigured web servers. SQL injection, upload scripts, webdav, PUT methods, etc. We can all appreciate command line administration through the web browser! Even better, web shells often allow us to access parts of web servers that normally are quarantined off if we [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/for-whom-the-shell-tolls/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ClickJacking, on the cheap&#8230;</title>
		<link>http://www.securityaegis.com/clickjacking-on-the-cheap/</link>
		<comments>http://www.securityaegis.com/clickjacking-on-the-cheap/#comments</comments>
		<pubDate>Thu, 04 Feb 2010 11:09:18 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[clickjacking]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=848</guid>
		<description><![CDATA[So, Clickjacking&#8230; &#8220;The basic idea is that an attacker loads the content of an external site into the site you’re visiting, sets the external content to be invisible and then overlays the page you’re looking at. When you click any link you see on the current page, you are in fact clicking on the externally [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/clickjacking-on-the-cheap/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Your Nikto&#8217;s on Fire&#8230;</title>
		<link>http://www.securityaegis.com/your-niktos-on-fire/</link>
		<comments>http://www.securityaegis.com/your-niktos-on-fire/#comments</comments>
		<pubDate>Wed, 03 Feb 2010 08:12:19 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[nikto]]></category>
		<category><![CDATA[RFI]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=843</guid>
		<description><![CDATA[Earlier this week (or rather end of last week) Robert Hansen aka RSnake released a huge, compiled list of Remote File Include Vulnerable parameters. To sweeten the deal Rob Fuller (mubix) and a few others parsed out the OSVDB&#8217;s CSV database and the compiled milw0rm site for all RFI&#8217;s listed there. What we&#8217;re left with [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/your-niktos-on-fire/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>UDP Payload Scanning</title>
		<link>http://www.securityaegis.com/udp-payload-scanning/</link>
		<comments>http://www.securityaegis.com/udp-payload-scanning/#comments</comments>
		<pubDate>Mon, 01 Feb 2010 08:16:25 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[nmap]]></category>
		<category><![CDATA[tools]]></category>
		<category><![CDATA[UDP]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=821</guid>
		<description><![CDATA[** Note: We all love the Internet Storm Center. By far it&#8217;s one of the largest conglomerations of brilliant engineers i know. So it doesn&#8217;t really surprise me that when i was going to write a blog on Nmap&#8217;s new UDP payload scanning yesterday, contributor Rob VandenBrink beat me to it. Here is mine anyways [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/udp-payload-scanning/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ncrack &#8211; Network Password Cracker</title>
		<link>http://www.securityaegis.com/ncrack-network-password-cracker/</link>
		<comments>http://www.securityaegis.com/ncrack-network-password-cracker/#comments</comments>
		<pubDate>Sun, 24 Jan 2010 09:09:43 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[Ncrack]]></category>
		<category><![CDATA[nmap]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=775</guid>
		<description><![CDATA[The 2009 Summer of code has a special present for us pentesters. Normally, we use hydra or medusa to crack network service passwords (telnet, ftp, SSH, etc). Ncrack changes the game a bit. By bringing the nmap dev team/community to the table it shows promise to fix some current issues in bruteforcing network service passwords. [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/ncrack-network-password-cracker/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Hostmap &#8211; shared/virtual host enumeration</title>
		<link>http://www.securityaegis.com/hostmap-sharedvirtual-host-enumeration/</link>
		<comments>http://www.securityaegis.com/hostmap-sharedvirtual-host-enumeration/#comments</comments>
		<pubDate>Wed, 20 Jan 2010 18:51:28 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[hostmap]]></category>
		<category><![CDATA[shared hosting]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=760</guid>
		<description><![CDATA[You either love or hate Sun Tzu Quotes but, when they apply i'm inclined to use them ;)
<blockquote>"It is said that if you know your enemies and know yourself, you will not be imperiled in a hundred battles; if you do not know your enemies but do know yourself, you will win one and lose one; if you do not know your enemies nor yourself, you will be imperiled in every single battle"</blockquote>
And so it is also with some web servers! Do you manage your own hosting? Or, like the million others out there, do you share one mega-server hosting hundreds of other sites as well?]]></description>
		<wfw:commentRss>http://www.securityaegis.com/hostmap-sharedvirtual-host-enumeration/feed/</wfw:commentRss>
		<slash:comments>20</slash:comments>
		</item>
		<item>
		<title>Interview: Ferruh Mavituna on Netsparker the New Web 2.0 Applicliaction Scanner</title>
		<link>http://www.securityaegis.com/interview-ferruh-mavituna-on-netsparker-the-new-web-2-0-applicliaction-scanner/</link>
		<comments>http://www.securityaegis.com/interview-ferruh-mavituna-on-netsparker-the-new-web-2-0-applicliaction-scanner/#comments</comments>
		<pubDate>Thu, 07 Jan 2010 21:34:40 +0000</pubDate>
		<dc:creator>Jhaddix</dc:creator>
				<category><![CDATA[Tool Talk]]></category>
		<category><![CDATA[interview]]></category>
		<category><![CDATA[Netsparker]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.securityaegis.com/?p=753</guid>
		<description><![CDATA[Also featured on Ethicalhacker.net Feel free to respond to this article or ask any/all questions to Ferruh at Ethicalhacker.net&#8217;s Forums Today we showcase a new web application scanner called Netsparker, and believe us when we say that we put this app through the ringer. There&#8217;s a big distinction between testing a tool against dummy apps [...]]]></description>
		<wfw:commentRss>http://www.securityaegis.com/interview-ferruh-mavituna-on-netsparker-the-new-web-2-0-applicliaction-scanner/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>
