Author Archives: NJ Ouchn
vFeed is an open source naming scheme concept that provides extra structured detailed 3rd parties references for a CVE entry.While the emergence of the Open ...


Concept introduction
vFeed is an open source naming scheme concept that provides extra structured detailed 3rd parties references for a CVE entry. While the emergence of ...


More than 1 year ago, i have posted an entry about a hardware for doing pentesting. It was the PwnPlug by Pwnie Express folks. Since, ...


(Article by Sumit 'Sid' Siddharth)
Read other Sid's posts at www.notsosecure.com)
So, you found a SQL Injection in Oracle Database. How will you execute OS code ...


Arachni is an Open Source, feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.
It is smart, ...


Kali Linux is the new generation of the industry-leading BackTrack Linux penetration testing and security auditing Linux distribution.
Kali is a complete re-build of BackTrack Linux, ...


Mercury is a security assessment framework for the Android platform. It allows you to dynamically interact with the Inter-Process Communication (IPC) endpoints exported by an ...
(source : nessus blog & data sheet)
Nessus® is the industry’s most widely-deployed vulnerability and configuration assessment product. Nessus features high-speed discovery, configuration auditing, asset profiling, ...


The smartphone penetration testing framework, the result of a DARPA Cyber Fast Track project, aims to provide an open source toolkit that addresses the many ...


Vega is an open source platform to test the security of web applications. Vega can help you find and validate SQL Injections, Cross-Site Scripting (XSS), ...
