Labs



SMBv2Harvest
SMBv2Harvest is a python script for detecting Web servers vulnerable to the SMBv2 exploit. The tool is designed to show python scripting techniques. The script generates testable domains via Google Scrapping and then has a multi-threaded detection module. You can download the tool in the
MonkeyFist
MonkeyFist is a dynamic request forgery attack tool released at Black Hat USA 09. It allows you to easily pull of dynamic request forgeries using different scenarios such as redirects, pages, POST based attacks, and even fixation type attacks. More information coming soon. You can download MonkeyFist and find out more information in MonkeyFist folder.
CSRFblocker
CSRFblocker is a Firefox extension that helps defend against Cross-Site Request Forgery (CSRF) attacks. These attacks can be extremely devastating and hard to defend against from the client perspective. This tool has features that lower the surface and in some cases mitigate attacks from CSRF. This tool has other features as well, allowing you to block entire sites which can make your web browsing experience safer. More info is coming soon.

