Software Testing Tools Blog – Testertools

GUI Tool Reveals SQL Injection Vulnerabilities

A free utility that you can use to demonstrate SQL injection vulnerabilities in web apps has been released by web security specialists, NT OBJECTives.
NTO SQL Invader is interesting because it isn’t designed to find the vulnerability; instead, the aim is to give you a way to show how the vulnerability could be

Euro countries announce plans to ban hacking and pen testing tools

According to a report in techworld.com European countries have announced plans to ban hacking and penetration testing tools
Justice Ministers across Europe want to make the creation of “hacking tools” a criminal offence, but critics have hit back at the plans, saying that they are unworkable.
Ministers from all 27 countries of the European Union

Amazon EC2 Used to Crack Password Encryption on Wireless Networks

According to a report in eweek – A security researcher will reveal at Black Hat DC how he deployed password-testing software on Amazon EC2 to break into a secured wireless network using WPA-PSK.
Titled ‘Amazon EC2 Used to Crack Password Encryption on Wireless Networks’  the hack took only 20 Minutes to complete:
Specialized

SearchSecurity.com have featured an article on a new Penetration Testing Software Release.
Written by Robert Westervelt, Core Security launches CISO-level pen testing software the article dicusses the release of a new tool and its features.
Core Security Technologies is introducing new pen testing software that, according to the company, has robust reporting capabilities, enabling CIOs, CISOs

Veracode offers channel “zero touch” SaaS

Veracode is actively recruiting channel partners for a new cloud-based platform that allows partners and users to verify application security independently in both internally developed and third-party software without requiring source code or expensive in-house tools.
The launch of its Global Partner Programme will certify partners to sell its SecurityReview security verification solution delivered as software-as-a-service.

Cyber Warfare Communications Effects Solution for Training Environments Announced

Scalable Network Technologies, Inc. (SNT), the leader in wireless network modeling and simulation, announced that the company has developed a software capability that enables integration of realistic cyber warfare communication effects into a Live Virtual Constructive (LVC) environment. The result is an advanced system that provides more realistic training and

Dyaptive Systems Wins Major Deal From World’s Largest Network Equipment Manufacturer

The world’s largest network equipment manufacturer has awarded a major supply contract to Dyaptive Systems for additional 3G/4G subscriber simulation systems over a multi-year period. Dyaptive’s end-to-end solution was selected, after extensive trials and evaluations, to upgrade the primary test beds used to ensure robustness, performance, scale and quality of

Help Net Security features Seven Deadliest Network Attacks Book Review

Help Net Security have featured a book review on network attacks.
Seven Deadliest Network Attacks written by Stacy Prowell, Rob Kraus and Mike Borkin and published by Syngress, book introduces the reader to the anatomy of attacks aimed at networks: DoS, MiTM, war dialing, penetration testing, protocol tunneling, password replay and spanning tree

Rapid7 Introduces Metasploit Pro

Rapid7®, the leading provider of unified vulnerability management and penetration testing solutions, today announced the availability of Metasploit Pro™, the new software for security professionals in enterprises, government agencies and consulting firms who need to make network security testing more efficient to reduce costs. Unlike alternative products, Metasploit Pro improves the efficiency of penetration

Athena Security Offers Free Configuration Debugger for Limited Time

Athena Security, the makers of Athena FirePAC, a comprehensive enterprise firewall audit and operations tool, today announced that it will make the company’s Configuration Debugger, the first and only software solution that network engineers can use for offline troubleshooting of service availability issues on Cisco, Check Point and Netscreen firewalls,