[Full-disclosure] Inguma 0.0.3 - A Free Penetration Testing and Vulnerability Research Toolkit

Joxean Koret joxeankoret at yahoo.es
Thu Sep 6 17:51:21 BST 2007


Hi to all,

The new version of Inguma, Inguma 0.0.3-ALPHA, have been released and a
lot of work have been done. In that version you will found a
disassembler (with special support for x86 and AVR) that makes easier
the life of a security researcher when doing an static analysis of a
commercial closed source product. Only command line version (no GUI,
itsn't IDA Pro, but is cheaper ;]), redirect the output to a file a look
to the generated pseudo-assembler. It will be more readable than
"standard raw" disassembled asm code.

Also, in the krash directory, you will found a general purpose automatic
"token based" fuzzer among with various sample packets. 

New in the toolkit are many new simple libraries that will make easier
the task of writting new exploits and fuzzers for various protocols. 

Needs to say that the Oracle PL/SQL fuzzer have been updated. Take a
look ;)

A bunch of brute forcers, such as one for SMB/CIFS compatibles servers
(such as Samba), have been added to the toolkit. 

Read the README, [INGUMA_DIR]/dis/README and [INGUMA_DIR]/krash/README
files for more information.

Download it from the Sourceforge.Net project page available at:
http://sourceforge.net/projects/inguma.

Thanks & Regards,
Joxean Koret


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070906/792fb0b1/attachment.bin 


Full-Disclosure is hosted and sponsored by Secunia.