Welcome to Flowgate Consulting


      Flowgate R+D department has developed some tools that are freely available for the global community.

      FG-Injector is a tool that leverages the pentester's work by facilitating the exploitation of SQL Injection vulnerabilities.
      It includes a a powerful proxy feature for intercepting and modifying HTTP requests, a network spy module to allow the analyst view HTTP requests and their corresponding responses and an inference engine for automating SQL injection exploitation.
      The Inference Engine Module of the FG-Injector Framework automates the generation and injection of SQL statements needed for exploitation of a Blind SQL Injection. This module will work also for regular injections using the same method. It can produce blind injections on web/app servers using MS SQL Server, MySQL, and PostgresSql DBMSs.

      + Documentation + Download

      StateSim is a statecharts simulation prototype of easy installation and usage that contemplates most of the formalism. The application is developed in Java, therefore it runs on every platform supporting the Java Virtual Machine.

      The statecharts can be generated with OpenOffice Draw. StateSim takes in an ODG file and a sequence of events indicated by the user, it then calculates all possible state transtitions and it generates a new ODG file where all final states reached are indicated.

      The requirements for a Linux environment are the following:
      • Open Office 2.3.0 or superior
      • Java SE Runtime Environment 1.6 or superior
      • Access through the variable PATH to the following binarys: cp, mv, rm, zip y unzip

      Under a MS Windows environment, the requirements are:
      • Open Office 2.3.0 or superior
      • Java SE Runtime Environment 1.6 or superior
      • Access through the variable PATH to the following binarys: copy, move, del, rd y 7z.exe (can be freely downloaded from http://www.7-zip.org.)

      The tool is installed jut by uncompressing and unarchiving the file stateSim.tar.gz.

      The release includes a user and programmer manual (ManualUsuarioYProgramador.pdf) that describes the tool and its usage.

      + Download + SHA-256 Hash

      Repose 1.0 (new version)
      Repose 1.0 allows to generate functional requirements prototypes for systems based on graphical interfases by using just office software. The prototypes are defined by drawing the interfases with OpenOffice Draw and specifying use cases for each prototype in a OpenOffice Calc spreadsheet. Then a script is run to generate the prototype based on those documents (the script actually runs a Java Program, which is the core of Repose 1.0).

      Later on, the engineer runs the prototype in the presence of the customer and analyzes its behavior with the use cases generated. Whether any use case or the interfase does not satisfy the customer, the engineer simply modifies the template or the scheme of the interfase and then runs the script to generate a new prototype.

      Currently, the available Repose 1.0 version is an experimental proof of concept, but it still offers enough features to be used in real case scenarios.

      Repose 1.0 is a Java program that interacts with Open Office. The requirements to install Repose 1.0 are the following:
      • Linux or MS Windows (Vista, XP, 2003, 2000, etc.)
      • Java SE Development Kit 6 or superior
      • Open Office 2.3.0 or superior (bear in mind that Repose 1.0 uses the Open Document Format from Open Office, which might vary from version to version. Therefore it might stop working with future versions of Open Office)

      For installation, simply uncompress and untar the file Repose-1.0.tar.gz in any directory you like.
      The distribution includes user manuals in spanish (check back later for english version).

      + Download + SHA-256 hash

      • Fastest

      FG-SToP is a tool that implements several interesting attacks for the link-layer protocols STP and RSTP (still in development - please check back soon).

      © Flowgate Consulting - 2011 - All Rights Reserved - +54 341 5272557