penetration testing projects for 2006

I have been working on several pen testing projects over the last few months. Almost done.

The most recent is mr_rodgers. It's a citrix program neighborhood enumerator. Nothing big, but removes the need for installation of the entire citrix suite of programs to perform some simple recon. Additionally changes in exposed services over time can be tracked through the use of this tool and potentially sensitive information can be obtained.

Next was a tool created to fill some gaps in the functionality of the excellent sql ninja program. things like session management and support for proxies.

And finally...or rather a long time ago I created a python version of site digger that does not need use the google api.

I'll post the source to all these very soon.