|
malware.com
|
A group that develops as well as discloses software exploits on many of the security mailing lists. Mainly specializing with Microsoft Office and Internet Explorer Vulnerabilitys.
|
|
Metasploit Project
|
The Metasploit Project is an open source computer security project which provides information about security vulnerabilities and aids in penetration testing and IDS signature development. Its most well-known sub-project is the Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive, and security research.
|
|
Basics of Win32 Shatter Attacks
|
Step by step guide to privilege escalation using shatter attacks. Shatter Attacks use flaws within the Windows API call SetWindowLong() as well as others.
|
|
Security Tracker
|
Archive of exploits and security advisories
|
|
The Hacker's Choice
|
Website for various exploits and hacking tools (such as hydra)
|
|
Phenoelit
|
Custom built network tools designed to take advantage of the exploits within many network hardware systems. Also the home of the k0ld LDAP brute force utility. A must have for many professional penetration testers.
|
|
Ethical Hacking Course
|
Commercial hacker training course on how to write and use exploits.
|
|
NGS Research
|
Series of papers on how to write exploits and discover vulnerabilities
|
|
milw0rm.com
|
Exploit database separated by exploit type (local, remote, DoS, etc.)
|
|
Core Impact
|
Commercial exploit software package with GUI. Core impact is similar to such exploit automation packages as Canvas, and the Open Source Metasploit project. One of the primary reasons it differs is the use of memory resident only Trojan horse applications. This allows you as a penetration tester to escalate your privileges but when the system is rebooted you can be sure that the malicious software is removed.
|
|
FrSIRT Exploits Archive
|
Archive of current 0day exploits from European and Asian sources. French and English language content provided.
|
|
Exploiting Caller ID
|
The Software Orange Box is a free proof-of-concept tool which can spoof most forms of North American Caller ID.
|
|
Canvas Exploit Platform
|
A commercial exploit platform similar to metasploit. Has built in memory resident shells that are cleared when the machine is rebooted. Perfect for cleaning up after a penetration test.
|
|
Ill Mob
|
Home of a number of 0-day exploit authors. Many creative Trojan droppers and methods are released here.
|
|
Deny.de
|
A large exploit forum, with customized exploit tools and 0-day downloads. An active community where help is just a post away.
|
|
Security-Protocols Exploit News
|
A up to date security and exploit portal, provides commentary on many popular exploits as they develop in the wild.
|
|
Trivia Security Exploits Archive
|
Latest Security Exploits and codes. Updated daily.
|
|
Security Focus
|
SecurityFocus is the most comprehensive and trusted source of security information on the Internet. SecurityFocus is a vendor-neutral site that provides objective, timely and comprehensive security information to all members of the security community, from end users, security hobbyists and network administrators to security consultants, IT Managers, CIOs and CSOs.
|
|
Rosiello Security
|
Advisories, exploits, shellcodes, whitepapers, free software.
|
|
David Eade
|
Exploit developer who in November 2004 David Eade exposed a security loophole that allowed cahoot customers to access other peoples' accounts without a password.
|
|
UnderGroundBG's official web
|
Security related materials, exploits, etc, also the official web of UnderGroundBG
|
|
Hack a Day
|
A website with exploits, many pertaining to physical components. It keep the tradition alive by applying exploits to more then just software. Expanding quickly and in this editor's opinion they completely deserve it.
|
|
Phrack.org Archives
|
Phrack is an underground ezine made by and for hackers that has been around since November 17, 1985. The magazine is open for contributions by anyone. Topics of interest are security, hacking, phreaking, anarchism, cryptography, spying, radio broadcasting, coding, conspiracy, and world news.
|
|
Addict3d.org Exploit and Vulnerability Source
|
Addict3d.org started its activity back at 1999, only used a different domain name; our goal was to provide our reader's a stable and reliable place to get their technology and World Wide Web related news in one centralized place, instead being bothered checking a lot of various sources , and yet, not get fully updated and satisfied.
|
|
SecuriTeam.com
|
Beyond Security® will help you expose your security holes and will show you what the bad guys already know about your hosts and network. Use our Automated Scanning service to perform a full security audit of your site, and find the latest security news and tools on Beyond Security®'s SecuriTeam™ web site.
|
|
SecWatch - Keeping An Eye On Security
|
SecWatch - A site dedicated to the latest in security - all the latest and archived exploits and vulnerabilities.
|
|
Hack A Day
|
A hardware hack every day.
|
