Hakin9 OPEN - Open Source Tools

Dear Readers!

Welcome to the new (and free!) edition of Hakin9. Please accept our warmest thoughts and best wishes for a wonderful Holiday and a Happy New Year. May peace, love, and prosperity always follow you!

Last year when we published an OPEN edition of Hakin9 we invited specialists from the cybersecurity field so they could present their opinions and experience. This time we decided to do something different. Having a good, reliable software toolset  is one of the most important parts of being a hacker or a pentester. This edition is focused on various Open Source tools, created by some of the most amazing people in the cybersecurity field. Each and every one of them prepared a tutorial that explains how their tool works and what it can do. We hope that you will learn a lot of new things and improve your skills - and most importantly, expand your toolbox!

We would also want to thank all authors, developers, and creators for participating in this project. We appreciate it a lot. If you like this publication you can share it and tell your friends about it! Every comment means a lot to us. Thank you, and Happy New Year!

Enjoy the issue,

Hakin9 Team

---

This magazine is free to download, just register as a  free user and enjoy your reading! 

---

TABLE OF CONTENTS

(s)AINT Spyware

by Tiago Rodrigo Lampert de Oliveira

---

kernelpop

by coastal

---

Spy-Bot: A Cloud Pentesting Approach

by Aamer Shareef

---

Fake Sandbox Processes (FSP) - Beating malware with fake sandbox processes

by Matthias Rosezky

---

arp-validator: Security tool to detect ARP poisoning attacks

by Ravinder Nehra

---

SigPloit: Your Way through the “Telecom Backyard”

by Loay Abdelrazek

---

SpiderFoot: Open Source Intelligence Automation

by Steve Micallef 

---

BOVSTT: Buffer Overflow Vulnerability Services Tester Tool

by Ivan Ricart Borges

---

InSpy: A LinkedIn enumeration tool

by Jonathan Broche

---

Advanced SQL Injection - IIS & DBO - Scanner & Exploit

by Ivan Ricart Borges

---

CyberScan: Hackers' Favorite ToolKit

by Mohamed BEN ALI

---

SQLMate: A friend of SQLmap which will do what you always expected from SQLmap

by Somdev Sangwan

---

Universal Radio Hacker: Investigate Wireless Protocols like a Boss

by Johannes Pohl and Andreas Noack

---

An Overview On Deserialization Vulnerabilities In Java Virtual Machine (JVM)

by João Filho Matos Figueiredo

---

ASLRay: Stack-Spraying Linux ASLR/DEP bypass

by Maksym Zaitsev

---

P4wnP1: Advanced USB attacks with a low cost Raspberry Pi Zero

by Marcus Mengs