Online reverse lookup sites

Ripped from kuza55 blog, I thought this may come in handy.


" http://kuza55.blogspot.com/2006/10/online-reverse-lookup-tables-for.html

md5:
http://www.tmto.org/ (formerly md5lookup.com)
http://md5.rednoize.com (good with words)
http://nz.md5.crysm.net (English dictionary, nearly all one to four character alphanumeric. 27.8m records.) - seems to be down atm
http://us.md5.crysm.net (British, Jargon and American worldlist, IP addresses 16.0m records)
http://www.xmd5.org (good with numbers)
http://gdataonline.com (wordlist based, I think)
http://www.hashchecker.com (It seems to say its good, but I've never gotten many hits form here)
http://passcracking.ru
http://www.milw0rm.com/md5
http://plain-text.info (this one is quite good and generally returns results, but you have to submit things to be cracked, its not just an online database)
http://www.securitystats.com/tools/hashcrack.php (does various, including LM NTLM and SHA-1, but seems to return no results on anything than the most basic, so rather useless)
http://www.schwett.com/md5/ - Does Norwegian words too
http://passcrack.spb.ru/
http://shm.pl/md5/
http://www.und0it.com/
http://www.neeao.com/md5/
http://md5.benramsey.com/
http://www.md5decrypt.com/
http://md5.khrone.pl/
http://www.csthis.com/md5/index.php
http://www.md5decrypter.com/
http://www.md5encryption.com/
http://www.md5database.net/
http://md5.xpzone.de/
http://md5.geeks.li/
http://www.hashreverse.com/
http://www.cmd5.com/english.aspx
http://www.md5.altervista.org/
http://md5.overclock.ch/biz/index.php?p=md5crack&l=en
http://alimamed.pp.ru/md5/ (for those who can't read russian: put your md5 in the second box)
http://md5crack.it-helpnet.de/index.php?op=add (German, I have no idea....)
http://cijfer.hua.fi/ (Projects->md5 reverse lookup)
http://shm.hard-core.pl/md5/
http://www.mmkey.com/md5/HOME.ASP
http://www.thepanicroom.org/index.php?view=cracker
http://rainbowtables.net/services/results.php (I'm not sure i'd trust this site to give more than a tiny amount of results)
http://rainbowcrack.com/ (requires people to contribute rainbowtables to be able to query them, and continue contributing them constantly)
http://www.securitydb.org/cracker/
http://passwordsecuritycenter.com/index.php?main_page=product_info&cPath=3&products_id=7 (This is meant to be used as proof that they can actually reverse passwords to convince you to buy their stuff, but as long as they decrypt it it doesn't matter why, right?)
http://0ptix.co.nr/md5
https://www.astalavista.net/?cmd=rainbowtables
http://ice.breaker.free.fr/
http://www.md5this.com
http://www.pldsecurity.de/forum/md5.php
http://www.xeons.net/genesis/
http://hackerscity.free.fr/
http://bisix.cogia.net/
http://md5.allfact.info/
http://bokehman.com/cracker/
http://www.tydal.nu/article/md5-crack/
http://ivdb.org/search/md5/
http://md5.netsons.org/
http://md5.c.la/ (The form at the bottom left of the page)
http://www.jock-security.com/md5_database/?page=crack
http://c4p-sl0ck.dyndns.org/cracker.php
http://www.blackfiresecurity.com/tools/md5lib.php (Queries the MD5 Library AIM Bot)
http://www.md5-db.com/index.php

lm Only:
http://lasecwww.epfl.ch/~oechslin/projects/ophcrack/ (Currently Offline)
http://www.milw0rm.com/lm (Currently Offline)

lm + ntlm:
http://plain-text.info
http://www.securitystats.com/tools/hashcrack.php
http://rainbowtables.net/services/results.php
http://rainbowcrack.com/
http://passwordsecuritycenter.com/index.php?main_page=product_info&cPath=3&products_id=7
https://www.astalavista.net/?cmd=rainbowtables

md4:
http://www.securitystats.com/tools/hashcrack.php
http://rainbowtables.net/services/results.php
http://rainbowcrack.com/

sha1:
http://passcrack.spb.ru/
http://www.hashreverse.com/
http://rainbowcrack.com/
http://www.md5encryption.com/
http://www.shalookup.com/
http://md5.rednoize.com/
http://c4p-sl0ck.dyndns.org/cracker.php
http://www.tmto.org/

"

"Interview ith Rain Forest Puppy" - From www.ush.it

If you don't know who RFP is, you are still a dumb boy.
"Interview with Rain Forest Puppy"
http://www.ush.it/2007/05/01/interview-with-rain-forest-puppy/

XSS on abc

Oops, found xss on abc search Engine
http://app.abc.go.com/keyword/searchResults?search=%3Cscript%3Ealert%28%22xss%22%29%3C%2Fscript%3E&searchType=0

XSS is elsewhere!

OWASP LiveCD

The OWASP Live CD is out! It is based on Morphix, runs completely in Memory. It ships with the following tools and docs:
Tools: WebGoat v4 WebScarab Paros JBroFuZZ Cal9000 Nmap TcpDump WireShark

Docs: OWASP Guide 2.0 OWASP Testing Guide,

The CD is 802mb, and still in beta version, which does not include any specialty tools such as VOIP, RFID, and Wireless. Thus, the pentest directory is almost empty. My first feeling is: lame and nonprofessional. Well, maybe that is why it is still in beta, I hope. If you compare to other hot pentesting live CDs, such as backtrack, I really can't see its point of releasing this CD, except they include all the OWASP guides. In addition, file permissions are not set properly, lots of useless stuff are included. I really don't see the point they released this CD, I love their guides and few applications, but I highly recommended you not to waste time on this crap, grab your desire documentation and application would definitely a better choice. Anyway, it is beta, I hope next I could see a decent release next time.

Google blacklist database

I got pointed to a couple interesting posts in the mailing list, about google blacklist database,

http://sb.google.com/safebrowsing/update?version=goog-black-url:1:1
http://sb.google.com/safebrowsing/update?version=goog-black-url:1:7998
http://sb.google.com/safebrowsing/update?version=goog-white-domain:1:19,goog-white-url:1:371,goog-black-url:1:7693,goog-black-enchash:1:15282
http://sb.google.com/safebrowsing/update?version=goog-black-url:1:7753
http://sb.google.com/safebrowsing/update?versio=goog-black-url:1:0000

Obviously google uses these data for "safebrowsing", and it is interesting that Google even log credential and some other sensitive info. I picked some blacklisted url randomly, and they are really phishy. It is good for security folk to figure out how phisher set up fake sites, also great for vendor to compile these lists to enhance its product's anti-phishing.

Oops...PDF, keep an eye on it!

From pdp
"You must understand that the attacker doesn’t need to have write access to the specified PDF document. In order to get an XSS vector working you need to have a PDF file hosted on the target and that’s all about it. The rest is just a matter of your abilities and desires.

This finding was originally mentioned by Sven Vetsch, on his blog. The attack vector was discovered by Stefano Di Paola and Giorgio Fedon. This is a very good and quite interesting finding. Good work."

A Poc:
http://some.random.site.com/foo.pdf#something=javascript:alert(123);

Couple variants:
1. Universal CSRF / session riding;
(Mozilla Firefox, Internet Explorer, Opera + Acrobat Reader plugin)

2. UXSS in #FDF, #XML e #XFDF;
(Mozilla Firefox + Acrobat Reader plugin)

3. Possible Remote Code Execution;
(Mozilla Firefox + Acrobat Reader plugin)

4. Denial of Service;
(Internet Explorer + Acrobat Reader plugin)

Details @ http://www.wisec.it/vulns.php?page=9

Very interesting and dangerous bug, don't simply click pdf from now on. If you really need to download pdf, keep an eye on the url, strip extra parameters if there is any. Dangerous, Dangerous, Dangerous! Web is getting really crazy, sigh

Back Track 2.0 Beta released!

Wow...back track new version, hella new stuff been added in, cant wait to give it a try

BackTrack Home
* Updated Kernel-Running 2.6.18-rc5, with several patches.
* Updated Tools-Old versions updated, new tools added.
* BackTrack Network Boot-Boot additional BackTrack images over PXE
* John MPI instant Cluster-Boot BackTrack cracking cluster clients over PXE
* Save2CD-Save changes to CD (assuming CD is multi-session, and a CDR).
* Japanese Input Support-Reading and writing in Hiragana / Katakana / Kanji.
* Unionfs replaced-by aufs with zlib compression.
* Kernel Sources-Included in base image.

Special Features:

* Instant Snort Setup-Sets up snort, mysql, apache, base.
* Instant Ninja (db_autopwn) - Deploys Metasploit db_autopwn on the local subnet.
* Instant Unicornscan pgsqldb Setup-Sets up Apache, Pgsql for scan info.
* Kismet auto configuration-Sets up monitor mode and kismet.conf.
* ipw3945/2200/2100 support-no injection patches.
* Prism54 / MadWifi-ng / Wlan-ng / HostAP / rt2570-With injection patches.
* Quick Installation-Using GUI installer, 100% MySlax compatible.

Google Code Search

Google's new code searhc engine rocks! This is gonna be super awesome to dudes like me....
http://www.google.com/codesearch
It not only supports basic search operators, and have added some nifty advanced searching keywords, such as regexp, file:regexp, lang, package:regexp, license...

We can find common web vulnerability very easily (xss, sql injection, remote command execution, remote file inclusion...you name the rest) It must be cool that some one developed a set of signatures like gdhb to match common web application vulnerabilities......Can I do it!

Excite with honeypot project

Get really excited when seeing the honeypot project, I was planning to read TCP/IP protocol vol 1 by the beginning of the quarter, but turned out spent so much time on scripting (perl, python, php, pentesting, database...4P -.-) Well, it is the best time to grab a bsd or dig more slackware due to my desktop xp crashed. It must be so much fun to setup Honeypot and host a site over desktop, to
see how people do stuff over my machine and let them hack. And I really need to study C, C++ and ASM, esp how to debug application, reverse engine them....Oops, and I need to get my web fingerprinting paper done asap.


http://www.honeynet.org/scans/scan34/