OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Tool: PorkBind v1.3 Nameserver Security Scanner (New Version)

From: Derek Callaway (superinnu.org)
Date: Fri Aug 15 2008 - 16:58:04 CDT

This program retrieves version information for the nameservers of a domain
and produces a report that describes possible vulnerabilities of each.
Vulnerability information is configurable through a configuration
file; the default is porkbind.conf. Each nameserver is tested for recursive
queries and zone transfers. The code is parallelized with libpthread.

http://www.innu.org/~super/tools/porkbind-1.3.tar.gz

ChangeLog for this version:

porkbind-1.3
------------
Wrote in-a-bind shell script that scans random domain names from DMOZ
Implemented recursive query testing
Changed porkbind.conf to use CVE numbers in addition to CERT alerts
Modified text displayed on stdout to make it more parsable
Licensed with GNU Lesser General Public License
Fixed timeout/concurrency/memory corruption bugs
Fixed improper comparison of alpha/beta version numbering bug
Added typecasts to silence compiler warnings

- Derek

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------