SSH (Secure SHell) is a network protocol which provides a replacement for insecure remote login and command execution facilities, such as telnet, rlogin and rsh. SSH encrypts traffic in both directions, preventing traffic sniffing and password theft. SSH also offers several additional useful features:
• Compression: traffic may be optionally compressed at the stream level.
• Public key authentication: optionally replacing password authentication.
• Authentication of the server: making ”man-in-the-middle” attack more difficult
• Port forwarding: arbitrary TCP sessions can be forwarded over an SSH connection.
• X11 forwarding: SSH can forward your X11 sessions too.
• File transfer: the SSH protocol family includes two file transfer protocols.
Read the rest of this entry »

• 0 Comments

Crawling web applications is one of the key phases of automated web application scanning. The objective of crawling is to collect all possible resources from the server in order to automate vulnerability detection on each of these resources. A resource that is overlooked during this discovery phase can mean a failure to detect some vulnerabilities. The introduction of Ajax throws up new challenges [1] for the crawling engine. New ways of handling the crawling process are required as a result of these challenges. The objective of this paper is to use a practical approach to address this issue using rbNarcissus, Watir and Ruby.
Read the rest of this entry »

• 0 Comments

SQLYog Enterprise Edition Version 6.55 Review
This software is one of the most popular GUI-based tools for MySQL. Most of the features of the software are geared to help the daily work of DBAs and developers. The software is rich in features and therefore this review will only highlight some of the cool capabilities.

Connection to Remote Servers
Most companies require you to use the ssh protocol to access their servers. While it is easy to setup your own ssh tunnel to connect to your remote database, it is quite cumbersome to do that. SQLYog allows you to easily do this and lets you save your secure MySQL connection. I use this all the time and I do not even think about ssh tunneling anymore.

On the downside, when I tried to connect to another database, the software opened a separate window for me. This made it difficult for me to switch from one window to another. This can be annoying if you want to compare two databases but it could also be a security measure so that you do not accidentally apply the wrong SQL statements to the wrong database.

Download pdf MySQL Magazine

• 0 Comments

Secure shell (SSH) can safely be called one of the rare successes in which a more secure technology has largely replaced a less secure but entrenched tool: telnet. We perform a market analysis to determine how and why SSH succeeded despite the existence of an entrenched legacy tool while similar technologies such as secure file transfer protocols have been far less successful. We show that network externalities, usually a first order effect, were not a significant factor impeding the adoption of SSH, and that SSH offered equivalent functionality and greater ease of use. We argue that these factors were the primary consideration in the willingness to change.
Read the rest of this entry »

• 0 Comments

What is SSH SSH (Secure SHell) is a network protocol which provides a replacement for insecure remote login and command execution facilities, such as telnet, rlogin and rsh. SSH encrypts traffic in both directions, preventing traffic sniffing and password theft. SSH also offers several additional useful features: Compression: traffic may be optionally compressed at the stream level. Public key authentication: optionally replacing password authentication. Authentication of the server: making man-in-the-middle attack more difficult Port forwarding: arbitrary TCP sessions can be forwarded over an SSH connection.
Read the rest of this entry »

• 0 Comments