Wednesday, 30 March 2011

Introduction to Linux Based and Reseller Web Hosting

A web hosting service is a type of Internet hosting service that allows individuals and organizations to make their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own or lease for use by their clients as well as providing Internet connectivity, typically in a data center.

Most people that have any affinity with Internet and Internet websites will have heard of Linux and UNIX Hosting. The true question that you might have is of course, what is it and how can it benefit me?

Continue Reading...

Monday, 21 February 2011

Tool to Detect SQL Injection - SQLInject-Finder

SQL injection is yet another common vulnerability that is the result of lax input validation. Unlike cross-site scripting vulnerabilities that are ultimately directed at your site’s visitors, SQL injection is an attack on the site itself—in particular its database. The goal of SQL injection is to insert arbitrary data, most often a database query, into a string that’s eventually executed by the database. The insidious query may attempt any number of actions, from retrieving alternate data, to modifying or removing information from the database.

Continue Reading...

Sunday, 20 February 2011

Penetration Testing data management and reporting tool - MagicTree

MagicTree is a penetration tester productivity tool. It is designed to allow easy and straightforward data consolidation, querying, external command execution and report generation. In case you wonder, "Tree" is because all the data is stored in a tree structure, and "Magic" is because it is designed to magically do the most cumbersome and boring part of penetration testing - data management and reporting.

MagicTree stores data in a tree structure. This is a natural way for representing the information that is gathered during a network test: a host has ports, which have services, applications, vulnerabilities, etc. The tree like structure is also flexible in terms of adding new information without disturbing the existing data structure: if you at some point decide that you need the MAC address of the host, you just add another child node to the host node.

Continue Reading...

Thursday, 17 February 2011

Transparent Caching ftp proxy server - frox

Frox is a transparent FTP proxy that runs under Linux and *BSD. It should also work on other UNIX OSes that use ipfilter.

Frox Features:
 * active - passive mode conversion for data connections.
 * It supports caching of FTP downloads, either through a local cache, or by redirecting connections through another proxy such as squid.
 * Downloads may be transparently scanned for viruses (through an external scanner).
 * Optional non-transparent proxy support by logging in with user@host:port.
 * Options to bind to a specific interface, chroot, and drop priveleges for security.
 * Written with security in mind, default setup runs as a non-root user in a chroot jail.

Continue Reading...

 
//PART 2