Hostrisk

This is a small extension script to monitor suff.py, or the Simple Universal Fortigate Fuzzer, and to collect crashlogs for future analysis.

Simple Universal Fortigate Fuzzer Extension Script ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers.

Nikto Web Scanner 2.5.0 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

This is a custom firmware written for the Proxmark3 device. It extends the currently available firmware. This release is nicknamed Faraday.

Proxmark3 4.17511 Custom Firmware ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Webfwlog is a Web-based firewall log reporting and analysis tool. It allows users to design reports to use on logged firewall data in whatever configuration they desire. Included are sample reports as a starting point. Reports can be sorted with a single click, or “drilled-down” all the way to the packet level, and saved for later use. Supported log formats are netfilter, ipfilter, ipfw, ipchains, and Windows XP. Netfilter support includes ulogd MySQL or PostgreSQL database logs using the iptables ULOG target.

Web-Based Firewall Logging Tool 1.1.3 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Wireshark is a GTK±based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.

Wireshark Analyzer 4.2.0 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

Faraday 4.6.2 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Samhain File Integrity Checker 4.5.0 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs). This is the source code release.

TOR Virtual Network Tunneling Tool 0.4.8.9 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyber-infrastructure. Zeek’s user community includes major universities, research labs, supercomputing centers, and open-science communities. This is the source code release.

Zeek 6.0.2 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about Falco as a mix between snort, ossec and strace.

Falco 0.36.2 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software. This is the LTS source code release.

Clam AntiVirus Toolkit 1.2.1 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

GRR Rapid Response is an incident response framework focused on remote live forensics. The goal of GRR is to support forensics and investigations in a fast, scalable manner to allow analysts to quickly triage attacks and perform analysis remotely. GRR consists of 2 parts: client and server. GRR client is deployed on systems that one might want to investigate. On every such system, once deployed, GRR client periodically polls GRR frontend servers for work. “Work” means running a specific action: downloading file, listing a directory, etc. GRR server infrastructure consists of several components (frontends, workers, UI servers) and provides web-based graphical user interface and an API endpoint that allows analysts to schedule actions on clients and view and process collected data.

GRR 3.4.7.1 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

Faraday 4.6.1 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It’s capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.

Suricata IDPE 7.0.2 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about Falco as a mix between snort, ossec and strace.

Falco 0.36.1 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL Injection is also part of the official penetration testing distribution Kali Linux and is included in various other distributions like Pentest Box, Parrot Security OS, ArchStrike and BlackArch Linux. This is the source code release.

jSQL Injection 0.95 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. This is the cross platform package.

Zed Attack Proxy 2.14.0 Cross Platform Package ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Simple Packet Sender (SPS) is a Linux packet crafting tool. It supports IPv4, IPv6 (but not extension headers yet), and tunneling IPv6 over IPv4. Written in C on Linux with GUI built using GTK+. Both source and binaries are included. Features include packet crafting and sending one, multiple, or flooding packets of type TCP, ICMP, or UDP. All values within ethernet frame can be modified arbitrarily. Supports TCP, ICMP and UDP data as well, with input from either keyboard as UTF-8/ASCII, keyboard as hexadecimal, or from file. Various other features exist as well.

Simple Packet Sender 5.0 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL Injection is also part of the official penetration testing distribution Kali Linux and is included in various other distributions like Pentest Box, Parrot Security OS, ArchStrike and BlackArch Linux. This is the source code release.

jSQL Injection 0.94 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)

Wireshark is a GTK±based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.

Wireshark Analyzer 4.0.10 ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

favicon

(packetstormsecurity.com)