Articles

Introduction to Skipfish
Skipfish is an active web application security reconnaissance tool written and maintained by Michal Zalewski (@lcamtuf). Skipfish is one of the fastest webscanners available which spiders using the wordlists, a very powerful web scanning tool with a simple implementation. In Matriux Skipfish can be found in the arsenal under Arsenal ->Framework -> Skipfish


Setting up and Getting started with Matriux Krypton
Wish you a very happy and prosperous new year from team Matriux. 2011 has been a great year for us where we along with CHmag have made it possible to reach you better. A special thanks to CHmag team for making it with us. It has been noticed that due to a custom and special installer MID used in Matriux Krypton, many users are confused on how to get Matriux setup on their Hard disk or VirtualBox, so this month we bring you with how to setup and get started with Matriux Krypton, a better way to start 2012.


Forensics – Part III
In the previous forensics issues we have seen how to use Vinetto to analyse thumbs.db files from a machine or from an image. As a continuation to the early analysis tools, we have another in this issue.


OWASP Mantra’s MoC Crawler
Hope all of you enjoyed Diwali. This time we will be discussing about MoC Chrome Crawler, a crawler extension written in HaXe for Google Chrome platform. Like any other crawler program it can be used to crawl web pages to find interesting resources and links including,


WEBSECURIFY
Website security is a major concern of developers and businesses today, because of growing attack vectors and easiness of exploitation, businesses spend thousands of dollars to find and patch vulnerabilities in their website. Websecurify can help you find OWASP top 10 vulnerabilities before hackers (read as crackers) do. Websecurify is a free and open source web application scanner from the good folks of GNUcitizen.org. Its very easy to use and its simple interface makes it stand out of the crowd.


Ostinato - Wireshark in Reverse
It's been a great time for Matriux in the last month - Matriux Krypton is released on August 15th 2011 and available for public download. And we had an overwhelming downloads and feedback on the project. We thank all the users out there for downloading and testing Matriux.


SOCIAL ENGINEERING TOOLKIT
Hi readers, we have yet another interesting toolkit this month – The Social Engineering Toolkit. Specifically designed to perform advanced attacks against the human element, SET leverages the concepts of exploiting using the social engineering and human influential ideas. SET also combines the attacks of Metasploit Framework to enhance the success of attacks augmenting the social engineering attacks.


The Exploitation Ka Baap MSF
After a series of Forensic articles we would like to go with the theme of this month which is Metasploit Framework.


Forensics with Matriux - Part 2
In the Part I of the article on Forensics with Matriux, we had highlighted the forensic acquisitiontechniques using Matriux distribution. In this second part, we will cover the tools that focus on analysis techniques. Forensic Analysis techniques can be used to discover Deleted Files, Cloaked files, Encrypted files, Fragmented files,PDF,Browser,Virtualisation,Memory and etc.


Forensics With Matriux - Part 1
Forensics is the best part of digital devices which even a basic user does in his day to day life but doing it in some technical way and including some cyber laws makes it more powerful. While forensic examination of electronic data storage devices has been in use for quite some time now, digital forensics gained greater significance with the arrival and wide-spread use of mobile electronic devices capable of storing and manipulating digital data. Apart from analysing data to arrive at conclusion that support an investigation, digital forensics also gives guidelines for data collection, preservation and imaging. One of the uses of the Matriux distribution is that it is extremely useful for a digital forensic examiner.


Introduction Part 2
This edition let’s talk about the one in action, The Matriux Distribution. Matriux though to come as the Asia’s first Security Distribution now being used worldwide with many government organizations in India and other countries using it as their “tool”.


Introduction Part 1
Everybody wants to do something innovative and unique in life. This was the zeal behind Matriux. Matriux is a phenomenon that was waiting to happen. Team Matriux is extremely honoured to be associated with CHMag for starting an exclusive section for Project Matriux. Various articles and tutorials will be published through...