We’re happy to announce the release of Roboo - the first and most advanced open-source HTTP Robot mitigator of its kind!

Roboo uses advanced non-interactive HTTP challenge/response mechanisms to detect and subsequently mitigate HTTP robots, by verifying the existence of HTTP, HTML, DOM, Javascript and Flash stacks at the client side.

Such deep level of verification weeds out the larger percentage of HTTP robots which do not use real browsers or implement full browser stacks, resulting in the mitigation of various web threats:

• HTTP Denial of Service tools - e.g. Low Orbit Ion Cannon
• Vulnerability Scanning - e.g. Acunetix Web Vulnerability Scanner, Metasploit Pro, Nessus
• Web exploits
• Automatic comment posters/comment spam as a replacement of conventional CAPTCHA methods
• Spiders, Crawlers and other robotic evil

You can find the first public version here - for more information, refer to the presentation “Building Floodgates: Cutting-Edge Denial of Service Mitigation” given at Black Hat Europe 2011 (slides) and the Roboo source code repository.

Worminator (source & binary) - A Win32 tool for easing/automating the process of creating IDS/IPS signatures for SMTP based worms, providing a comfortable GUI, including raw base64 variants and Snort signatures support. Written in Delphi.

Proof of concept exploit code for the double-free vulnerability in NetFilter’s snmp_trap_decode() function in Linux kernels 2.6.16.17 and older, causing a kernel panic (CVE-2006-2444)