10 September 2007 | 7,931 views

PIRANA – Exploitation Framework for Email Content Filters

Want to Learn Penetration Testing

PIRANA is an exploitation framework that tests the security of a email content filter. By means of a vulnerability database, the content filter to be tested will be bombarded by various emails containing a malicious payload intended to compromise the computing platform.

PIRANA’s goal is to test whether or not any vulnerability exists on the content filtering platform.

This tool uses the excellent shellcode generator from the Metasploit framework!

You can download PIRANA here:

pirana-0.3.3.tar.gz

Or can read more here.

There is also an accompanying paper that explains what are the vulnerabilities of a SMTP content filter. It also presents what techniques were used in PIRANA to improve reliability and stealthiness.

You can download the paper here:

SMTP content filters.pdf

Post to Twitter Post to Facebook Post to Google Buzz Post to Delicious Post to Digg Post to Reddit Post to StumbleUpon






Recent in Exploits/Vulnerabilities:
- No BEAST Fix From Microsoft In December Patch Tuesday – But They Fixed Duqu Bug
- Apple Bans Security Researcher Charlie Miller For Exposing iOS Exploit
- Rec Studio 4 – Reverse Engineering Compiler & Decompiler

Related Posts:
- The Mole – Automatic SQL Injection SQLi Exploitation Tool
- BeEF – Browser Exploitation Framework
- Samurai Web Testing Framework 0.6 Released – Web Application Security LiveCD

Most Read in Exploits/Vulnerabilities:
- Learn to use Metasploit – Tutorials, Docs & Videos - 190,285 views
- AJAX: Is your application secure enough? - 115,494 views
- eEye Launches 0-Day Exploit Tracker - 80,652 views

Advertise on Darknet


Comments are closed.