Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-04-01 Thread Esteban Cañizal
Come on guys!! I think they are not trying to reinvent the wheel here!

As far as i can remember they never said they created a new product
better than msf (or the other tools you mentioned) they packed a bunch
of really good tools and made it easier to those who dont like using
console, or complicated things...  they also have some own native
exploits

BTW, do you guys always use your time for replying to all the threads
you dont like?? What a waste of time!

I tried it and i think it is really usefull, thumbs up for insect pro!!

Cheers :D

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-04-01 Thread rdsears
Well correct me if I'm wrong, but the whole premise of an un-regulated forum is 
for people to collaborate on opinions, even if they don't necessarily agree. 

You clearly didn't like the comments directed toward the INSECT devs, so aren't 
you 'wasting your time' by replying to them yourself? 

On Apr 1, 2011, at 6:12 AM, Esteban Cañizal este...@canizal.com.ar wrote:

 Come on guys!! I think they are not trying to reinvent the wheel here!
 
 As far as i can remember they never said they created a new product
 better than msf (or the other tools you mentioned) they packed a bunch
 of really good tools and made it easier to those who dont like using
 console, or complicated things...  they also have some own native
 exploits
 
 BTW, do you guys always use your time for replying to all the threads
 you dont like?? What a waste of time!
 
 I tried it and i think it is really usefull, thumbs up for insect pro!!
 
 Cheers :D
 
 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-04-01 Thread Esteban Cañizal
Yes i do agree with you! everybody can comment and disagree as much as
they wish what I am trying to say is that there is a bunch of
people that always complains about the same things that have been
already answered, if you decided you don't like the tool just don't
use it and find a better one, at least that is what i usually do. I
read the same people saying the same things that have been said when
the tool was released (1.0)

-- 
Esteban Cañizal

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-04-01 Thread Mario Vilas
Actually, when the tool was originally released it wasn't free (strings
attached or not), but they tried to charge $500 per license as a closed
source product.

http://seclists.org/fulldisclosure/2010/Sep/283

So at any rate some people have been complaining over and over for the use
of the word free since version 2.0.

http://seclists.org/fulldisclosure/2011/Jan/504

BTW I do not mind people making yet another UI for Metasploit, but this
free but not free thing creates a dishonest image that could have easily
been avoided by following the same practice every other donationware
follows: let users download it freely and decide whether to donate or not
based on their experience with the software.

On Fri, Apr 1, 2011 at 12:36 PM, Esteban Cañizal este...@canizal.com.arwrote:

 Yes i do agree with you! everybody can comment and disagree as much as
 they wish what I am trying to say is that there is a bunch of
 people that always complains about the same things that have been
 already answered, if you decided you don't like the tool just don't
 use it and find a better one, at least that is what i usually do. I
 read the same people saying the same things that have been said when
 the tool was released (1.0)

 --
 Esteban Cañizal

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




-- 
“My daughter was asked by a little old lady in a London hotel restaurant
what her daddy did - she answered, ‘He’s a pirate.’ I was very proud of that
answer.”
- *Johnny Depp*
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-31 Thread Cal Leeming
GROUP HUG!

On Wed, Mar 30, 2011 at 4:02 PM, Benji m...@b3nji.com wrote:

 Neither, I was curious as to what he'd say, and I was pleasantly
 surprised (offered to send me a copy).

 Calm down kid.

 On 3/30/11, n...@myproxylists.com n...@myproxylists.com wrote:
  The amount of the donation is not fixed.
 
 
  Can I make a 0 euro donation?
 
 
 
  Are you bored or stupid, or both?
 
 
 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-31 Thread Cal Leeming
What this really comes down to... Is the product *worth* donating to? If it
is, then donate. If it isn't, then don't. I can't personally comment either
way as I haven't tried it.

On Wed, Mar 30, 2011 at 7:42 PM, ja...@jabea.net wrote:

 Quoting runlvl run...@gmail.com:

  Steve, thanks to the community support we are able to afford a hosting
  for insect pro with unlimited bandwith. Now located in USA which
  allows higher transfer rates.
 
  We apologize if you got the wrong picture, but right now we don't need
  unofficial hosting... I don't care if you want to share it with
  whoever you want. I do appreciate your offer but we are going to pass
  this time. We have official releases almost every weeks.
 

 Thats funny, you seemed to be happy when he offered the mirror when he
 did in the past.


 Quoting Benji m...@b3nji.com
  The amount of the donation is not fixed.
  Can I make a 0 euro donation?


 I love that quote !, as the tool is supposed to be free, but with a
 forced donation. Honnestly, using FD to advertising a tool that is not
 free should not be autorized.



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-31 Thread Cal Leeming
+1 for licensing.

On Wed, Mar 30, 2011 at 8:42 PM, ja...@jabea.net wrote:

 Quoting Cal Leeming c...@foxwhisper.co.uk:

  What this really comes down to... Is the product *worth* donating to? If
 it
 is, then donate. If it isn't, then don't. I can't personally comment
 either
 way as I haven't tried it.


 I agree with you, but in order to test it you *must* donate. First time I
 see that.

 Unless you email the authors, or are a FD's subcriber and have used
 Steven's mirror. (pre 2.5 was tagged free, now it's tagged There is no
 fixed price to get a copy).

 I just mean, make a real licensing behind the tool if you want to sell it,
 or use a open licensing, but don't play with word in between.

 Playing the donation way can be complex, if a user want a receipt for their
 donation, can they produce it ? (I don't know USA law, but where I live only
 a official non-profit organisation can receive a 'donation'. Else it's
 simply considered a money gift). Their site advertise donation as 10, 50 and
 100$, again, where I live you have the obligation to produce receipt for
 donation over 10$.

 But my point is simply they just don't look professionnal, and I judge them
 that way because they try to sell the product, not like a GPL source code or
 a freeware.




 -phil


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-31 Thread John Belushae
If you could stop ripping everyone's tool that could be a good start.
What's inside your tool ?
-Metasploit
-Sub7
-Skipfish
-Other ripped stuff

How about you develop something original for once ?
I admit you guys have some top-notch youtube skillz, but isn't your tool
about pentesting ?




On Thu, Mar 31, 2011 at 1:44 AM, runlvl run...@gmail.com wrote:

 The INSECT Pro version hosted on that site is really old, from what I
 see is the version 1.1 and is not an official version, on the other
 side. INSECT Pro 2.5 is free and we only ask for a donation to show
 interest. The amount of the donation is not fixed.

 We want to say thanks to the community that allows us to further
 develop and thank to you we can afford a decent hosting so you can
 download updates directly from our site.

 Just as there are trolls on this list going around and insulting
 everyone, too many people are worthwhile and that is why we continue
 learning and developing for this project.

 Greetings!
 Juan Sacco

  --
 _
 Insecurity Research - Security auditing and testing software
 Web: http://www.insecurityresearch.com
 Insect Pro 2.5 was released stay tunned

 2011/3/30 Quentin Ducas quentin@gmail.com:
  It is still available at http://insectpro.highprofilesite.com/
  Free, no donation required.
 
  Quentin
 
 
  2011/3/30 runlvl run...@gmail.com:
  Insecurity Research is happy to announce the release of version 2.5,
  get it now while is still hot !
 
  Insect Pro 2.5 is a penetration security auditing and testing software
  solution designed to allow organizations of all sizes mitigate,
  monitor and manage the latest security threats vulnerabilities.
 
  We’re always working to improve Insect Pro and now the users obtain
  a new feature: A fully automated active web application security
  reconnaissance tool.
 
  Check it out: http://www.youtube.com/watch?v=ifiyHem7fMA
 
  We invite you to take a visual tour where you can find screenshots and
  videos, visit us now at http://www.insecurityresearch.com
 
  There is no fixed price to get a copy, you can obtain the full version
  by making a minimum donation to keep us coding.
 
  We are really thankful with the community!
 
  Get it now from: http://www.insecurityresearch.com
 
  Juan Sacco
 
  --
  _
  Insecurity Research - Security auditing and testing software
  Web: http://www.insecurityresearch.com
  Insect Pro 2.5 was released stay tunned
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-31 Thread root
On 03/29/2011 10:12 PM, runlvl wrote:
 Insecurity Research is happy to announce the release of version 2.5,
 get it now while is still hot !
 
 Insect Pro 2.5 is a penetration security auditing and testing software
 solution designed to allow organizations of all sizes mitigate,
 monitor and manage the latest security threats vulnerabilities.
 
 We’re always working to improve Insect Pro and now the users obtain
 a new feature: A fully automated active web application security
 reconnaissance tool.
 
 Check it out: http://www.youtube.com/watch?v=ifiyHem7fMA
 
 We invite you to take a visual tour where you can find screenshots and
 videos, visit us now at http://www.insecurityresearch.com
 
 There is no fixed price to get a copy, you can obtain the full version
 by making a minimum donation to keep us coding.
 
 We are really thankful with the community!
 
 Get it now from: http://www.insecurityresearch.com
 
 Juan Sacco
 

Hi Juan.

Cool soft. I love how it makes good use of BSD software and put a nice
interface around it so people can use without having to face a horrible
black console.

Last week, I was trying to write an exploit, you know, it's so hard. And
I was thinking on how INSECT PRO can help me do it. Sadly it can't right
now, but if it only came with a binary differ, then it would be so much
easier! then, it came to me: there is a differ with BSD license and
would be great to include in INSECT! the differ is called TurboDiff,
you can download it from here:
http://corelabs.coresecurity.com/index.php?module=Wikiaction=attachmenttype=toolpage=turbodifffile=turbodiff_v1.0.1b2.zip

I tried to use without INSECT with it's somewhat difficult.
I hope to see Turbodiff in future versions of INSECT. In fact maybe you
can change the name to TURBOINSECT or maybe TURBOINSECTPLOIT. That would
be so awesome.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread John Belushae
Seriously, what the fuck you are thinking, it's a newsletter or something
here ?
Choke on your ripped dumpshit product and die.

And please, keep your release update notification bullshit for your mum, OK.
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread Quentin Ducas
It is still available at http://insectpro.highprofilesite.com/
Free, no donation required.

Quentin


2011/3/30 runlvl run...@gmail.com:
 Insecurity Research is happy to announce the release of version 2.5,
 get it now while is still hot !

 Insect Pro 2.5 is a penetration security auditing and testing software
 solution designed to allow organizations of all sizes mitigate,
 monitor and manage the latest security threats vulnerabilities.

 We’re always working to improve Insect Pro and now the users obtain
 a new feature: A fully automated active web application security
 reconnaissance tool.

 Check it out: http://www.youtube.com/watch?v=ifiyHem7fMA

 We invite you to take a visual tour where you can find screenshots and
 videos, visit us now at http://www.insecurityresearch.com

 There is no fixed price to get a copy, you can obtain the full version
 by making a minimum donation to keep us coding.

 We are really thankful with the community!

 Get it now from: http://www.insecurityresearch.com

 Juan Sacco

 --
 _
 Insecurity Research - Security auditing and testing software
 Web: http://www.insecurityresearch.com
 Insect Pro 2.5 was released stay tunned

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread runlvl
The INSECT Pro version hosted on that site is really old, from what I
see is the version 1.1 and is not an official version, on the other
side. INSECT Pro 2.5 is free and we only ask for a donation to show
interest. The amount of the donation is not fixed.

We want to say thanks to the community that allows us to further
develop and thank to you we can afford a decent hosting so you can
download updates directly from our site.

Just as there are trolls on this list going around and insulting
everyone, too many people are worthwhile and that is why we continue
learning and developing for this project.

Greetings!
Juan Sacco

 --
_
Insecurity Research - Security auditing and testing software
Web: http://www.insecurityresearch.com
Insect Pro 2.5 was released stay tunned

2011/3/30 Quentin Ducas quentin@gmail.com:
 It is still available at http://insectpro.highprofilesite.com/
 Free, no donation required.

 Quentin


 2011/3/30 runlvl run...@gmail.com:
 Insecurity Research is happy to announce the release of version 2.5,
 get it now while is still hot !

 Insect Pro 2.5 is a penetration security auditing and testing software
 solution designed to allow organizations of all sizes mitigate,
 monitor and manage the latest security threats vulnerabilities.

 We’re always working to improve Insect Pro and now the users obtain
 a new feature: A fully automated active web application security
 reconnaissance tool.

 Check it out: http://www.youtube.com/watch?v=ifiyHem7fMA

 We invite you to take a visual tour where you can find screenshots and
 videos, visit us now at http://www.insecurityresearch.com

 There is no fixed price to get a copy, you can obtain the full version
 by making a minimum donation to keep us coding.

 We are really thankful with the community!

 Get it now from: http://www.insecurityresearch.com

 Juan Sacco

 --
 _
 Insecurity Research - Security auditing and testing software
 Web: http://www.insecurityresearch.com
 Insect Pro 2.5 was released stay tunned

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread Benji
The amount of the donation is not fixed.


Can I make a 0 euro donation?

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread nix
 The amount of the donation is not fixed.


 Can I make a 0 euro donation?



Are you bored or stupid, or both?


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread Benji
Neither, I was curious as to what he'd say, and I was pleasantly
surprised (offered to send me a copy).

Calm down kid.

On 3/30/11, n...@myproxylists.com n...@myproxylists.com wrote:
 The amount of the donation is not fixed.


 Can I make a 0 euro donation?



 Are you bored or stupid, or both?




___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread Steven Pinkham
runlvl wrote:
  The INSECT Pro version hosted on that site is really old, from what I
  see is the version 1.1 and is not an official version, on the other
  side.

The version made available is older (2.0 version, not 1.1 as you claim), 
but it is an official version, or at least what you gave me as an 
official download.  There is also a recompressed version with the same 
content for a smaller download size for people that want that.
As I said before, I'll happily update the version hosted there to the 
newest version if you allow it.  My download password stopped working at 
the time of the next release, and emails about it have been ignored.

  INSECT Pro 2.5 is free and we only ask for a donation to show
  interest. The amount of the donation is not fixed.

Please, let's not start this up again.  Your page clearly says you are 
buying a license, and has removed all comments about it being free.  The 
licenses of the software you include (Metasploit and Skipfish) allow 
this, and there's no benefit to you making the claim of the software 
being free.  You may or may not offer some licenses gratis, but that's 
different from the software being free in the sense that most people 
understand.  If it's free, I'll happily host newer versions for free 
download for everyone.  Otherwise, stick with the license language you 
have on your website.

To be clear, I have no problem with you offering licenses for sale, 
offering licenses for donations, or making software freely available. 
Just do the one you are claiming to do please.
-- 
  | Steven Pinkham, Security Consultant|
  | http://www.mavensecurity.com   |
  | GPG public key ID CD31CAFB |


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread Chris M
Maybe you can fix my login/password for insecurityresearch.com as per my
earlier mail.

Customer Service  Marketing, right? :p

On Wed, Mar 30, 2011 at 3:44 PM, runlvl run...@gmail.com wrote:

 The INSECT Pro version hosted on that site is really old, from what I
 see is the version 1.1 and is not an official version, on the other
 side. INSECT Pro 2.5 is free and we only ask for a donation to show
 interest. The amount of the donation is not fixed.

 We want to say thanks to the community that allows us to further
 develop and thank to you we can afford a decent hosting so you can
 download updates directly from our site.

 Just as there are trolls on this list going around and insulting
 everyone, too many people are worthwhile and that is why we continue
 learning and developing for this project.

 Greetings!
 Juan Sacco

  --
 _
 Insecurity Research - Security auditing and testing software
 Web: http://www.insecurityresearch.com
 Insect Pro 2.5 was released stay tunned

 2011/3/30 Quentin Ducas quentin@gmail.com:
  It is still available at http://insectpro.highprofilesite.com/
  Free, no donation required.
 
  Quentin
 
 
  2011/3/30 runlvl run...@gmail.com:
  Insecurity Research is happy to announce the release of version 2.5,
  get it now while is still hot !
 
  Insect Pro 2.5 is a penetration security auditing and testing software
  solution designed to allow organizations of all sizes mitigate,
  monitor and manage the latest security threats vulnerabilities.
 
  We’re always working to improve Insect Pro and now the users obtain
  a new feature: A fully automated active web application security
  reconnaissance tool.
 
  Check it out: http://www.youtube.com/watch?v=ifiyHem7fMA
 
  We invite you to take a visual tour where you can find screenshots and
  videos, visit us now at http://www.insecurityresearch.com
 
  There is no fixed price to get a copy, you can obtain the full version
  by making a minimum donation to keep us coding.
 
  We are really thankful with the community!
 
  Get it now from: http://www.insecurityresearch.com
 
  Juan Sacco
 
  --
  _
  Insecurity Research - Security auditing and testing software
  Web: http://www.insecurityresearch.com
  Insect Pro 2.5 was released stay tunned
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




-- 
 I’m a hot-wired, heat seeking, warm-hearted cool customer, voice activated
and bio-degradable. I interface with my database, my database is in
cyberspace, so I’m interactive, I’m hyperactive and from time to time I’m
radioactive.
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread runlvl
Steve, thanks to the community support we are able to afford a hosting
for insect pro with unlimited bandwith. Now located in USA which
allows higher transfer rates.

We apologize if you got the wrong picture, but right now we don't need
unofficial hosting... I don't care if you want to share it with
whoever you want. I do appreciate your offer but we are going to pass
this time. We have official releases almost every weeks.

The latest version is on our own site and we started to share every
new version with all our supporters, thus there is no need to include
mirrors so far. If something comes up I'll let you know.

I'm sending you the latest version of Insect Pro 2.5 to your personal
email in a couple of minutes.

If you have any questions, comments, or concerns, feel free to email
me at jsa...@insecurityresearch.com

Juan Sacco

2011/3/30 Steven Pinkham steve.pink...@gmail.com:
 runlvl wrote:
 The INSECT Pro version hosted on that site is really old, from what I
 see is the version 1.1 and is not an official version, on the other
 side.

 The version made available is older (2.0 version, not 1.1 as you claim), but
 it is an official version, or at least what you gave me as an official
 download.  There is also a recompressed version with the same content for a
 smaller download size for people that want that.
 As I said before, I'll happily update the version hosted there to the newest
 version if you allow it.  My download password stopped working at the time
 of the next release, and emails about it have been ignored.

 INSECT Pro 2.5 is free and we only ask for a donation to show
 interest. The amount of the donation is not fixed.

 Please, let's not start this up again.  Your page clearly says you are
 buying a license, and has removed all comments about it being free.  The
 licenses of the software you include (Metasploit and Skipfish) allow this,
 and there's no benefit to you making the claim of the software being free.
  You may or may not offer some licenses gratis, but that's different from
 the software being free in the sense that most people understand.  If it's
 free, I'll happily host newer versions for free download for everyone.
  Otherwise, stick with the license language you have on your website.

 To be clear, I have no problem with you offering licenses for sale, offering
 licenses for donations, or making software freely available. Just do the one
 you are claiming to do please.
 --
  | Steven Pinkham, Security Consultant    |
  | http://www.mavensecurity.com           |
  | GPG public key ID CD31CAFB             |




___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread jabea
Quoting runlvl run...@gmail.com:

 Steve, thanks to the community support we are able to afford a hosting
 for insect pro with unlimited bandwith. Now located in USA which
 allows higher transfer rates.

 We apologize if you got the wrong picture, but right now we don't need
 unofficial hosting... I don't care if you want to share it with
 whoever you want. I do appreciate your offer but we are going to pass
 this time. We have official releases almost every weeks.


Thats funny, you seemed to be happy when he offered the mirror when he  
did in the past.


Quoting Benji m...@b3nji.com
 The amount of the donation is not fixed.
 Can I make a 0 euro donation?


I love that quote !, as the tool is supposed to be free, but with a  
forced donation. Honnestly, using FD to advertising a tool that is not  
free should not be autorized.



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread jabea
Quoting Cal Leeming c...@foxwhisper.co.uk:

 What this really comes down to... Is the product *worth* donating to? If it
 is, then donate. If it isn't, then don't. I can't personally comment either
 way as I haven't tried it.


I agree with you, but in order to test it you *must* donate. First  
time I see that.

Unless you email the authors, or are a FD's subcriber and have used  
Steven's mirror. (pre 2.5 was tagged free, now it's tagged There is  
no fixed price to get a copy).

I just mean, make a real licensing behind the tool if you want to sell  
it, or use a open licensing, but don't play with word in between.

Playing the donation way can be complex, if a user want a receipt for  
their donation, can they produce it ? (I don't know USA law, but where  
I live only a official non-profit organisation can receive a  
'donation'. Else it's simply considered a money gift). Their site  
advertise donation as 10, 50 and 100$, again, where I live you have  
the obligation to produce receipt for donation over 10$.

But my point is simply they just don't look professionnal, and I judge  
them that way because they try to sell the product, not like a GPL  
source code or a freeware.




-phil

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread Randal T. Rioux
On 3/29/2011 9:13 PM, runlvl wrote:
 Insecurity Research is happy to announce the release of version 2.5,
 get it now while is still hot !
 
 Insect Pro 2.5 is a penetration security auditing and testing software
 solution designed to allow organizations of all sizes mitigate,
 monitor and manage the latest security threats vulnerabilities.
 
 We’re always working to improve Insect Pro and now the users obtain
 a new feature: A fully automated active web application security
 reconnaissance tool.
 
 Check it out: http://www.youtube.com/watch?v=ifiyHem7fMA
 
 We invite you to take a visual tour where you can find screenshots and
 videos, visit us now at http://www.insecurityresearch.com
 
 There is no fixed price to get a copy, you can obtain the full version
 by making a minimum donation to keep us coding.
 
 We are really thankful with the community!

I keep getting this error when trying to download:

Please enter an amount greater than zero.

Can you fix that so I can test out the software. I'm really curious
about how much code was lifted from other projects. Nice logo though!

Thanks,
Randy

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-30 Thread Randal T. Rioux
On 3/29/2011 9:13 PM, runlvl wrote:
 Insecurity Research is happy to announce the release of version 2.5,
 get it now while is still hot !
snip

Oh! And you list the Dept. of Energy as a customer. I used to work
there, and still talk to a lot of the security offices for various
locations. They've never heard of it.

Also, did you get clearance from the DoE's Office of Public Affairs to
list them as a customer? They get touchy about that sort of stuff.

Randy

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


[Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-29 Thread runlvl
Insecurity Research is happy to announce the release of version 2.5,
get it now while is still hot !

Insect Pro 2.5 is a penetration security auditing and testing software
solution designed to allow organizations of all sizes mitigate,
monitor and manage the latest security threats vulnerabilities.

We’re always working to improve Insect Pro and now the users obtain
a new feature: A fully automated active web application security
reconnaissance tool.

Check it out: http://www.youtube.com/watch?v=ifiyHem7fMA

We invite you to take a visual tour where you can find screenshots and
videos, visit us now at http://www.insecurityresearch.com

There is no fixed price to get a copy, you can obtain the full version
by making a minimum donation to keep us coding.

We are really thankful with the community!

Get it now from: http://www.insecurityresearch.com

Juan Sacco

-- 
_
Insecurity Research - Security auditing and testing software
Web: http://www.insecurityresearch.com
Insect Pro 2.5 was released stay tunned

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[Full-disclosure] INSECT Pro 2.5 Release - Web scanner tool

2011-03-29 Thread runlvl
Insecurity Research is happy to announce the release of version 2.5,
get it now while is still hot !

Insect Pro 2.5 is a penetration security auditing and testing software
solution designed to allow organizations of all sizes mitigate,
monitor and manage the latest security threats vulnerabilities.

We’re always working to improve Insect Pro and now the users obtain
a new feature: A fully automated active web application security
reconnaissance tool.

Check it out: http://www.youtube.com/watch?v=ifiyHem7fMA

We invite you to take a visual tour where you can find screenshots and
videos, visit us now at http://www.insecurityresearch.com

There is no fixed price to get a copy, you can obtain the full version
by making a minimum donation to keep us coding.

We are really thankful with the community!

Get it now from: http://www.insecurityresearch.com

Juan Sacco

--
_
Insecurity Research - Security auditing and testing software
Web: http://www.insecurityresearch.com
Insect Pro 2.5 was released stay tunned

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/