Re: [Full-disclosure] Vulnerability/Penetration Testing Tools [AutoScan]

2006-01-19 Thread Vincent van Scherpenseel
Ha! Funny to see a video demo of some code I've written. My alias is 
'rastakid' and I wrote the metasploit plugin for AutoScan. It's basicly 
just a perlscript using the GTK2 libraries. AutoScan is a tool which 
makes it incredibly easy to call external applications with its 
scanresults as arguments (like IP addresses).

Please note: AutoScan is not developed by me, only the Metasploit plugin.

I was forced to stop development a couple of months ago because I got 
really busy with school and left my parent's house so I had no time to 
work on it anymore. I'm thinking about continuing development if I get 
more time and there's interest in it.


 - Vincent 'rastakid' van Scherpenseel

[EMAIL PROTECTED] wrote:

Dre,
  Awesome! Thank you!!

-Adriel

-Original Message-
From: Andre Ludwig [EMAIL PROTECTED]
To: [EMAIL PROTECTED] [EMAIL PROTECTED]
Cc: full-disclosure@lists.grok.org.uk
Sent: Wed, 18 Jan 2006 13:26:54 -0500
Subject: Re: [Full-disclosure] Vulnerability/Penetration Testing Tools

 http://autoscan.free.fr/index.html

Used to do nessus, nmap, and metasploit via the scripting menu..
Havent toyed with it in a long while so you may want to check it out
and verify it still does all of that.

video of it in action here

http://eks0.free.fr/whax-demos/?f=autoscan-metasploit_config.xml


Dre


On 1/18/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:


On Wed, 18 Jan 2006 11:36:04 CST, Madison, Marc said:

 Developer $60K/year divided by the adopted 2080 man hours year 


(this is

 the average hours work, 40 hour week, 5 days, etc...) = 


$28.85/hourly,



That's the *unencumbered* cost.

Now add in the employer cost of health insurance (probably close to 


$400

or more a month), FICA Medicare, Social Security, workman's comp, 


pension

plan - right there that's another 25% in addition to that $28.85.  


Now he's


costing you $35/hour.  And we're not done yet

Then add in the cost of his office - if he has a 10x10 cubicle, and 


commercial

space rents for $10/square foot/mo, that's another $12,000/year.  Now 


add in

electricity, the cost of administrative assistants and HR people to 


support it

(unless it's a *small* shop and doesn't have assistants and HR), and 


so on.

Oh, and if you buy him a new $3,000 workstation every third year, 


that's
another


$1K/year.  This shit adds up.

That's why the rule of thumb is the real cost of a technical hire is 


twice the


salary...

 Like you said, many people make that comparison, and don't 


calculate


 the *TOTAL* cost.

That's what I said..;)


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Check Out the new free AIM(R) Mail -- 2 GB of storage and 
industry-leading spam and email virus protection.


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Vulnerability/Penetration Testing Tools [AutoScan]

2006-01-19 Thread greybrimstone

Lots of interest!

-Adriel

-Original Message-
From: Vincent van Scherpenseel [EMAIL PROTECTED]
To: full-disclosure@lists.grok.org.uk
Sent: Thu, 19 Jan 2006 21:33:50 +0100
 Subject: Re: [Full-disclosure] Vulnerability/Penetration Testing Tools 
[AutoScan]


 Ha! Funny to see a video demo of some code I've written. My alias is 
'rastakid' and I wrote the metasploit plugin for AutoScan. It's basicly 
just a perlscript using the GTK2 libraries. AutoScan is a tool which 
makes it incredibly easy to call external applications with its 
scanresults as arguments (like IP addresses).
 Please note: AutoScan is not developed by me, only the Metasploit 
plugin.


 I was forced to stop development a couple of months ago because I got 
really busy with school and left my parent's house so I had no time to 
work on it anymore. I'm thinking about continuing development if I get 
more time and there's interest in it.


- Vincent 'rastakid' van Scherpenseel

[EMAIL PROTECTED] wrote:
 Dre,
 Awesome! Thank you!!
  -Adriel
  -Original Message-
 From: Andre Ludwig [EMAIL PROTECTED]
 To: [EMAIL PROTECTED] [EMAIL PROTECTED]
 Cc: full-disclosure@lists.grok.org.uk
 Sent: Wed, 18 Jan 2006 13:26:54 -0500
  Subject: Re: [Full-disclosure] Vulnerability/Penetration Testing 
Tools

  http://autoscan.free.fr/index.html
  Used to do nessus, nmap, and metasploit via the scripting menu..
 Havent toyed with it in a long while so you may want to check it out
 and verify it still does all of that.
  video of it in action here
  http://eks0.free.fr/whax-demos/?f=autoscan-metasploit_config.xml
   Dre
On 1/18/06, [EMAIL PROTECTED] [EMAIL PROTECTED] 
wrote:

  On Wed, 18 Jan 2006 11:36:04 CST, Madison, Marc said:

   Developer $60K/year divided by the adopted 2080 man hours year  

(this is
the average hours work, 40 hour week, 5 days, etc...) =   
$28.85/hourly,

 
 That's the *unencumbered* cost.

  Now add in the employer cost of health insurance (probably close to 

 $400
   or more a month), FICA Medicare, Social Security, workman's comp, 

 pension
   plan - right there that's another 25% in addition to that $28.85. 

 Now he's

  costing you $35/hour. And we're not done yet

  Then add in the cost of his office - if he has a 10x10 cubicle, and 

 commercial
   space rents for $10/square foot/mo, that's another $12,000/year. 
Now   add in
   electricity, the cost of administrative assistants and HR people 
to   support it
   (unless it's a *small* shop and doesn't have assistants and HR), 
and   so on.
   Oh, and if you buy him a new $3,000 workstation every third year, 

 that's

 another
  $1K/year. This shit adds up.

  That's why the rule of thumb is the real cost of a technical hire 
is   twice the

  salary...

   Like you said, many people make that comparison, and don't   
calculate

   the *TOTAL* cost.

 That's what I said..;)


 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

 

  Check Out the new free AIM(R) Mail -- 2 GB of storage and  
industry-leading spam and email virus protection.

  ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/
  ___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Check Out the new free AIM(R) Mail -- 2 GB of storage and 
industry-leading spam and email virus protection.


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/