RE: Appsec toolkits

Hi everybody,
Does anyone have documents regarding security vulnerabilities related to applications developed in Lotus Domino? Specially, those types of attacks related to input validation, parameter tampering, SQl injection, etc. I mean those types of errors that are most common when programmers do not follow good security practices.

Best regards,
Manuel

-----Original Message-----
From: PPowenski@oag.com [mailto:PPowenski@oag.com] Sent: Thursday, March 06, 2003 12:47 PM
To: shawnmer@io.com; Craig_Sullivan@Waitrose.co.uk Cc: webappsec@securityfocus.com
Subject: RE: Appsec toolkits

http://biatchux.sourceforge.net/

This toolkit does similar things. Can launch from windows or stand alone boot from CD and can mount NTFS volumes. Have not used it exensively but also has everything you need.

-----Original Message-----
From: shawnmer [mailto:shawnmer@io.com] Sent: 06 March 2003 12:26
To: Craig_Sullivan@Waitrose.co.uk
Cc: webappsec@securityfocus.com
Subject: Re: Appsec toolkits

Hi Craig,

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Are you using any particular platform OS for the tools? One thing that's caught my fancy recently are linux "live" CDs; in particular the Knoppix distibution based on Debian <http://www.knopper.net>. The CD boots and runs in RAM and on a compressed loop filesystem. Lots of apps like X, OpenOffice, along with security apps like nessus, hping, nmap, etc. are already on the CD...the kicker is the CD installs on a HD in about 10 minutes.

Toss on a bunch of tools from packetstorm, owasp, etc. and you've got a nice portable, yet flexible, distro :)

Thanks,

-scm

:Craig_Sullivan@Waitrose.co.uk

>
>Well,
Received on Thu Mar 6 17:58:42 2003