http://labs.portcullis.co.uk Labs Portcullis updates. en Labs portcullis Fri, 13 Apr 2012 12:13:01 GMT http://backend.userland.com/rss 60 hhttp://labs.portcullis.co.uk/mg/logo.gif http://labs.portcullis.co.uk Thu, 30 Oct 2008 11:51:42 GMT http://labs.portcullis.co.uk/application/vessl/ <p>vessl is a simple wrapper script that connects, extracts and then verifies the ssl certificate of an encrypted service. It was originally written in order to script up the ability to verify ssl certificates across a large network. </p> <h2>features</h2> <ul> <li>vessl will connect to any service that openssl can</li> <li>it will extract and verify against a given CA Pem file</li> <li>it will check that certificate matches the host it is on</li> <li>it produce a map going from ip's to hostname</li> <li>checks to see if certificate is based on a blacklisted debian key</li> </ul> <h2>dependencies</h2> <ul> <li>openssl</li> <li>ping</li> <li><a href="https://launchpad.net/ubuntu/+source/openssl-blacklist/">openssl-vulnkey</a></li> <li>mktemp</li> <li><a href="/content/vessl/generating-a-ca-pem-file/">CA Pem File</a></li> </ul> <h2>download</h2> <p><a href="/download/vessl-0.3.1.tar.bz2"> download vessl</a></p> <p>&nbsp;</p> Wed, 02 Apr 2008 10:50:25 GMT http://labs.portcullis.co.uk/application/viewstate/ <p>Viewstate is an ASP.Net viewstate decoder, checker, parser and encoder. It supports both old and new types of viewstate and the data can be extracted directly from the web.</p> <h2>Requirements</h2> <p>Viewstate is platform independent and can be downloaded in source code or Windows binary formats. If you are building viewstate from source you will need the GNU C compiler (under Windows you can use MinGW).</p> <h2><b>Downloads</b></h2> <p>Viewstate can be downloaded from the Source Forge project page <a href="http://sourceforge.net/projects/viewstate">sourceforge.net/projects/viewstate</a>.</p> <h2>Compiling</h2> <p>A Makefile is provided to provide the usual compilation process of:</p> <ul> <li>make</li> <li>make install (as root)</li> </ul> <p>However, you can compile it manually with the following:</p> <ul> <li>gcc -o viewstate viewstate.c</li> </ul> <h2><b>Running</b></h2> <p>If viewstate is run with no options, the online help is displayed. But a simple decode of the viewstate data held by the Acme company web site would be:</p> <p><code>viewstate --decode --url=http://www.acme.fake/main.asp</code></p> <h2>License</h2> <p>Viewstate is covered by the GPL v3 license.</p>