<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>SourceSec Security Research &#187; Tools</title>
	<atom:link href="http://www.sourcesec.com/tag/tools/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.sourcesec.com</link>
	<description>Security research and vulnerability assesment</description>
	<lastBuildDate>Tue, 19 Jan 2010 05:15:53 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>WiFinger Passive Wireless Fingerprinting Tool</title>
		<link>http://www.sourcesec.com/2009/05/09/wifinger-passive-wireless-fingerprinting-tool/</link>
		<comments>http://www.sourcesec.com/2009/05/09/wifinger-passive-wireless-fingerprinting-tool/#comments</comments>
		<pubDate>Sat, 09 May 2009 18:07:56 +0000</pubDate>
		<dc:creator>cheffner</dc:creator>
				<category><![CDATA[Code]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[fingerprinting]]></category>
		<category><![CDATA[wifi]]></category>

		<guid isPermaLink="false">http://www.sourcesec.com/?p=81</guid>
		<description><![CDATA[Here is one of the tools we presented at our ChicagoCon talk. It passively identifies wireless access points based on matching the Information Elements in their beacon packets against a fingerprint database. It is written in Python and uses Scapy, and has been tested in Linux.
Currently we only have a handful of signatures, so if [...]]]></description>
			<content:encoded><![CDATA[<p>Here is one of the tools we presented at our ChicagoCon talk. It passively identifies wireless access points based on matching the Information Elements in their beacon packets against a fingerprint database. It is written in Python and uses Scapy, and has been tested in Linux.</p>
<p>Currently we only have a handful of signatures, so if you want to contribute to this tool, here&#8217;s what you can do:</p>
<ol>
<li>Get your access point and enable WPA and WPS (if supported).</li>
<li>Capture the beacon frames that your access point is broadcasting and save them to a pcap file.</li>
<li>Send us the pcap file along with as much information about the access point as you can (make, model, firmware version, hardware revision, ESSID and BSSID).</li>
</ol>
<p>Once we get your submission we&#8217;ll generate a signature for it and update the WiFinger database file. We think this tool has a lot of great potential, so we welcome any and all submissions &#8211; if you&#8217;ve got a router, let&#8217;s put it in there!</p>
<p>WiFinger can be downloaded <a href="http://www.sourcesec.com/Lab/wifinger.tar.gz">here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.sourcesec.com/2009/05/09/wifinger-passive-wireless-fingerprinting-tool/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Miranda UPNP Administration Tool</title>
		<link>http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/</link>
		<comments>http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/#comments</comments>
		<pubDate>Fri, 07 Nov 2008 23:46:22 +0000</pubDate>
		<dc:creator>cheffner</dc:creator>
				<category><![CDATA[Code]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[UPNP]]></category>

		<guid isPermaLink="false">http://www.sourcesec.com/?p=25</guid>
		<description><![CDATA[Miranda is a Python-based Universal Plug-N-Play client application designed to discover, query and interact with UPNP devices, particularly Internet Gateway Devices (aka, routers). It can be used to audit UPNP-enabled devices on a network for possible vulnerabilities. Some of its features include:

Interactive shell with tab completion and command history
Passive and active discovery of UPNP devices
Customizable [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.upnp.org/newsletters/images/image005.gif"><img class="alignright" title="UPNP stack, complements of the UPNP Forum" src="http://www.upnp.org/newsletters/images/image005.gif" alt="" width="142" height="84" /></a><a href="http://code.google.com/p/mirandaupnptool/">Miranda</a> is a Python-based Universal Plug-N-Play client application designed to discover, query and interact with UPNP devices, particularly Internet Gateway Devices (aka, routers). It can be used to audit UPNP-enabled devices on a network for possible vulnerabilities. Some of its features include:</p>
<ul>
<li>Interactive shell with tab completion and command history</li>
<li>Passive and active discovery of UPNP devices</li>
<li>Customizable MSEARCH queries (query for specific devices/services)</li>
<li>Full control over application settings such as IP addresses, ports and headers</li>
<li>Simple enumeration of UPNP devices, services, actions and variables</li>
<li>Correlation of input/output state variables with service actions</li>
<li>Ability to send actions to UPNP services/devices</li>
<li>Ability to save data to file for later analysis and collaboration</li>
<li>Command logging</li>
</ul>
<p>Miranda was built on and for a Linux system and has been tested on a Linux 2.6 kernel with Python 2.5. 	However, since it is written in Python, most functionality <em>should</em> be available for any Python-supported 	platform. Miranda has been tested against IGDs from various vendors, including Linksys, D-Link, Belkin and ActionTec. 	All Python modules came installed by default on a Linux Mint 5 (Ubuntu 8.04) test system.</p>
<p>For more information about UPNP, visit the <a href="http://www.upnp.org/">UPNP Forum</a>. For information regarding UPNP vulnerabilities, see <a href="http://www.upnp-hacks.org/">UPNP Hacks</a> and <a href="http://www.gnucitizen.org/blog/hacking-with-upnp-universal-plug-and-play/">GNUCitizen</a>.</p>
<p><a href="http://code.google.com/p/mirandaupnptool/">Download</a> Miranda!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/feed/</wfw:commentRss>
		<slash:comments>26</slash:comments>
		</item>
	</channel>
</rss>
