A list of tools for getting ahead of data breaches and data leaks, through dark web monitoring tools and scan for personally identifiable information and attack response.
Read MoreSecurity
As written a while ago already, password-protected Excel worksheets can be unlocked through a VBA script:
Even simpler is the approach through editing the XML source of the Excel file, as described by paracon.ca/…:
- Rename your file by adding *.zip to its extension.
- Open the zip file.
- Browse to the path ‘xl > worksheets’ folder.
- Extract the protected sheet xml file to local drive.
- Open the xml and delete the markup text <sheetProtection …>.
- Save and close the xml file.
- Overwrite the original xml in the zip folder with the file from local drive.
- Close the zip file and rename the file by removing the .zip extension.
When security risks in web services are discovered by independent security researchers who understand the severity of the risk, they often lack the channels to disclose them properly. As a result, security issues may be left unreported. security.txt defines a standard to help organizations define the process for security researchers to disclose security vulnerabilities securely: securitytxt.org.
Read MoreThe magazine computerwoche.de published a list of handy Open Source Intelligence Tools, incl.:
- Maltego – comprehensive tool for graphical link analyses that offers real-time data mining and information gathering, as well as the representation of this information on a node-based graph, making patterns and multiple order connections between said information easily identifiable
- Recon-ng – gathering tool aimed at reducing the time spent harvesting information from open sources
- theHarvester – emails, subdomains and names Harvester
- Shodan – world’s first search engine for Internet-connected devices
- Metagoofil – metadata harvester
- searchcode – search 75 billion lines of code from 40 million projects
- SpiderFoot – automates OSINT so one can find what matters, faster
- Babel X – discover and decipher geographically diverse, multilingual data into actionable insights in real time, babel street’s platform helps interpret real-time data, so one can make clear, decisive decisions that impact any mission
- Mitaka – browser extension for OSINT search
- BuiltWith – search tech stack of specific websites
- Wappalyzer – find the technology stack of any website
- DarkSearch.io – self-declared “first real” “dark web” “search engine” (yet, no longer publicly available)
- Grep.app – tool for searches across git repos
The list seems compiled from pcwdld.com, where more detailed descriptions of each tool can be found.
Furthermore, the OSINT Framework helps gathering information from free tools or resources by providing a very good overview of available applications, platforms, methods etc.
Read MoreOpen-Source Winforms application for uploading files to VirusTotal (virustotal.com): github.com/SamuelTulach/VirusTotalUploader.
Read MoreRemove the document protection from Word files without knowing the actual password (doesn’t work for files with password protection to open):
- Open the Word file in question (doc, docx)
- Choose “File”, “Save File As”, and make sure the file format is set to “Rich-Text-Format (*.rtf)”. Close the file in Word (important!)
- Open the new Rich-Text file with a text editor (e.g. Notepad or Notepad++). You can do so by dragging and dropping it into the editor window, or choose “File”, “Open File”, and set the file format to “All files (*.*)”.
- Find (ctrl-f) “passwordhash” and replace the string that follows with something else (e.g. “nopassword”). Save and close the file in your text editor.
- Re-open the modified Rich-Text file in Word, go to “Review”, “Restrict Editing” and click on “Stop Protection” (german version: “Überprüfen” – “Bearbeitung Einschränken” – “Schutz aufheben”). Uncheck all tick-boxes.
- Done. You’ve unprotected your Word file without ever knowing the password.
- Optional: Convert your file back to its original file format by selecting “File”, “Save As”, and choosing the original file format.
from: http://www.thinkoholic.com/2015/02/16/remove-unknown-password-protected-word-files.
Read MoreForget about spam, advertising mailings, hacking and attacking robots. Keep your real mailbox clean and secure. Temp Mail provides temporary, secure, anonymous, free, disposable email address: https://temp-mail.org.
Read More