Home
Thursday, 21 August 2008, 01:24:32

WaterKarKits.com - Run your car on water

Web Hack Control Center PDF Print
Written by Administrator   
Monday, 08 January 2007

Web Hack Control Center
WHCC Version 0.6.71

 

Check back often for Updates

Email Comments and Suggestions to: J. Barber
Participate in the forums to discuss your experiences with WHCC
Web Hack Control Center - WHCC Forum

Program Size Description Requirements Date
whcc-current.exe 7,710 KB Web Hack Control Center
Beta Release 0.6.71
Required February 26, 2005
whcc.exe ONLY 692 KB WHCC 0.6.71 Update   February 26, 2005
MDAC_TYP.EXE 7,673 KB Microsoft Data Access Components (MDAC)  Might Need October 16, 2002
dcom95.exe 1,201KB The Distributed Component Object Model (DCOM) for Windows 95 Might Need October 16, 2002
dcom98.exe 1,201 KB The Distributed Component Object Model (DCOM) for Windows 98 Might Need October 16, 2002

Release Notes:

 WHCC 0.6.71 February 26, 2005 Fixed Version checking
    Had some problems with Duplicate records during a scan. Fixed
    Scan would delete hosts from the Vulnhost table by hostname OR by IP. This caused deletions of unwanted sites that were being co hosted. Changed to only delete the hostname.
    Added the use of system32\drivers\etc\hosts if it exists
    Updated some COM components
       mscomctl.ocx
       tabctl32.ocx
       comdlg32.ocx
       msflxgrd.ocx
       msadodc.ocx
       comct332.ocx
    Fixed Server Type Plus Generic scan. Wasn't doing both at the same time. This will heavily increase the number of scans if selected.
    Host address on the address bar was not in sync with selections on the host and exploits grids. Fixed
    More tuning on the SQL Injection module. Still needs a lot of work
 WHCC 0.6.70 February 24, 2005 SSH Scanning was broke in .69 now fixed
    Some cosmetic changes
 WHCC 0.6.69 December 29, 2004 Version 0.6.68 was not released
    Fixed error "Field 'vulnhosts.Host' cannot be a zero-length string"
    On the options dialog, fixed problem getting some site names when username and password is included in the url
    Changed browser search engine to use google.com
    Added menu option to update exploits table from Nikto .db file
    Added wordwrap to vulnerability information box
    Added Server Type override when performing scans
    Fixed problem when clicking on last scanned host switched to https by default.
WHCC 0.6.67 February 21, 2003 Skipping 6.66 I'm not an evil person
    Added DateAdded field to exploits table
    Added "Modify Exploits" form to the database
    Background whcc.htm file is now created in the directory where the whcc.exe application is run from.
    Fixed orphaned whcc process when exiting program, I think.
    Added scroll bar to Info Window
    Added routine to check for updates
    Fixed some DNS issues. If FQDN is in the database but does not resolve. Use the IP address instead
    Fiexed problem with locking record during VulnhostAdd routine
    Added prompt when WHCC could not detect server type during scan
    Some new exploits added to exploits table
WHCC 0.6.65 January 5, 2003 Changed Fields Url and Description in the Exploits Table to be memo fields
    Changed Fiedl Textfld in VulnHosts table to be a memo field
    Exploit Url can now contain the keyword JUNK(XX) of which WHCC will replace it
with x amount of X's.
    URL Was not always showing the current URL being navigated to.
    Added 600 Plus new exploits to exploits table
 WHCC 0.6.64  December 11, 2002 Fixed Servtype empty message by makeing it "generic" if no type is found
    Minor cosmetics
 WHCC 0.6.63  November 16, 2002 Adjusting History and Back Featers of the Browser.
    Added Menu option to add a Button to Ineternet Explorer that will allow you to launch WHCC..
    Changed installation program to Install Shield.
    Added display of Web Server Type for each site you browse to.
    Added menu option to make WHCC your default browser.
    Fixed "Current Page" button on SQLInject form did not set the ssl port.
 WHCC 0.6.62  November 3, 2002 Added button to access your Favorites
    Fixed: Clicking on SSL hosts did not use HTTPS.
    Added options on the options dialog that allows you to disable/enable/Prompt for pop-up windows.
    Added View menu option.
    Changed program icon.
 WHCC 0.6.61  October 31, 2002 More work on SQLInject Module
 WHCC 0.6.60  October 30, 2002 Fixed High CPU Usage
 WHCC 0.6.59  October 27, 2002 Code house cleaning
 WHCC 0.6.58  October 25, 2002 Fixing Error Handler. Bare with me.
    Fixed DNS Lookup Error
    Updated Exploit editing routine
 WHCC 0.6.56 - 0.57  October 25, 2002 Big time broken - oops
 WHCC 0.6.56  October 22, 2002 Tweeks to the Design View and Browser View Modules
    Disabled anoying Pop-Ups while in Browser View
    Added ability to pass a URL to WHCC on startup. This will allow you to make WHCC your default browser.
    Removed the Text from the WHCC Startup Page
    Fixed: WHCC does not shutdown all the way if you try to shut it down while a scan is running
WHCC 0.6.55 October 18, 2002 More tweeks to the SQL Injection module
    Options Dialog SSL selection fix
    Long Server Type name aborts Scan. Fixed
     

Noted Issues:

Q304107 Windows Installer Starts When You Start The Application
  Select the Microsoft link on the Left or run one of the following commands:
  • Office 2000 Professional
    msiexec /i {00010409-78E1-11D2-B60F-006097C998E7} /qb- REMOVE=HTMLSourceEditing
  • Office 2000 Premium
    msiexec /i {00000409-78E1-11D2-B60F-006097C998E7} /qb- REMOVE=HTMLSourceEditing
  • Office 2000 Standard
    msiexec /i {00020409-78E1-11D2-B60F-006097C998E7} /qb- REMOVE=HTMLSourceEditing
  • Office 2000 SBE
    msiexec /i {00030409-78E1-11D2-B60F-006097C998E7} /qb- REMOVE=HTMLSourceEditing

Last Updated ( Friday, 30 March 2007 )
 



Unless you take steps to protect them, your web applications might be vulnerable to session hijacking attacks.

Every so often this topic comes to the forefront and is cause for some amount of debate. Recently a researcher found himself in the spotlight over his desire to be compensated for his research.

Even with the latest patches, BIND is still vulnerable to DNS cache poisoning attacks. But so far it looks like this isn't nearly as bad as the previous cache poisoning situation.

We've put the majority of the Black Hat USA 2008 slide presentations and White Papers online at


https://www.blackhat.com/html/bh-usa-08/bh-usa-08-archive.html


Keep your eye on this page for the rest of the presentations and video and audio.

You can take a look at our official Flickr feed for USA 2008 here:


http://flickr.com/photos/adunne/sets/72157606583937690/

The Electronic Frontier Foundation (EFF) today
launches its Coders' Rights Project -- a new initiative to
protect programmers and developers from legal threats
hampering their cutting-edge research.

In conjunction with the project's launch, EFF is staffing
an "EFF Is In" booth at Black Hat USA 2008 in Las Vegas on
August 6 and 7. At the booth, EFF attorneys will provide
legal information on reverse engineering, vulnerability
reporting, and copyright law, as well as patent, trade
secret, and free speech issues.

The rest of the release is here:

http://www.eff.org/press/archives/2008/08/05-0

Newsflash

Do you know HTML?

Can you use an extra $500 a month?
 

Have you heard of eBay? Of course you have. Do you sell items on eBay? Perhaps!

 

Here is your opportunity to build your own eBay Store Front. Build your own website filled with products from eBay. You will not have to worry about Inventory or Shipping any of the products. Find out more on how to get started and get a paycheck from eBay. Click HERE


Google Ads