BRO- Network Security Monitor

0 comments

Posted on 14th January 2012 by Alon in Uncategorized

broWhile focusing on network security monitoring, Bro provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Bro has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyberinfrastructure. Bro’s user community includes major universities, research labs, supercomputing centers, and open-science communities.

Bro has originally been developed by Vern Paxson, who continues to lead the project now jointly with a core team of researchers and developers at the International Computer Science Institute in Berkeley, CA; and the National Center for Supercomputing Applications in Urbana-Champaign, IL.

 

Download Bro HERE.

 

CSET- Cyber Security Evaluation Tool

0 comments

Posted on 12th October 2011 by Alon in Forensics |Live CD |Pentest |Tools

,

CSSP has released Version 4.0 of the Cyber Security Evaluation Tool (CSET). This new version of the tool can be downloaded. This new release includes new standards such as NERC CIP Revision 3, NRC Regulatory Guide 5.71, a new key requirements set, and Version 7 of the DHS “Catalog of Security Requirements: Recommendations for Standards Developers.” The new CSET also includes a fully revised set of reports with complete gap rankings, new diagramming functionality, and a new resource library as well as minor enhancements. This tool supports evaluations of both business and industrial control systems.

 

Download CSET here

PuttyHijack

0 comments

Posted on 3rd October 2011 by Alon in Live CD |Pentest |Tools

PuttyHijack is a POC tool that injects a dll into the Putty process to hijack an existing, or soon to be created, connection. This can be useful during penetration tests when a windows box that has been compromised is used to SSH/Telnet into other servers.

1) Start a nc listener
2) Run PuttyHijack specify the listener ip and port
3) Watch the echoing of everything including passwords

Some basic commands in this version include;

!disco – disconnect the real putty from the display
!reco – reconnect it
!exit – just another way to exit the injected shell

 

 

 

 

 

 

 

 

 

 

 

Download PuttyHijack Here

Mobius Forensic Toolkit

0 comments

Posted on 21st July 2011 by Alon in Forensics |Tools

,

Mobius Forensic Toolkit is an open-source forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files, for easy integration with other tools.

 

 

Download Mobius here

Cryptography Megaprimer Part 1

0 comments

Posted on 20th July 2011 by Alon in Uncategorized

A cryptography video tutorial from asgsa asfas.

Learn about the history, tasks, usage of cryptography, general definitions, ESA, Enigma, DES, RSA and more.

Untitled from asgsa asfas on Vimeo.

NMapiSi4

0 comments

Posted on 20th July 2011 by Alon in Information Gathering |Tools

NmapSi4 is a complete Qt4-based Gui with the design goals to provide a complete nmap interface for Users, in order to menage all option of this power security net scanner and search services vulnerability.

  • Traceroute support with nmap.
  • Lookup support with internal tool or dig.
  • Vulnerabilities search support (new functionality done 0.3~git).
  • nmap nse support (works in progress 0.3~git).
  • discover network ip active from a class and local interface up (done 0.3~git).
  • multiple profile support, static and dynamic (done 0.3~git).
  • full scan with nmap.

Download NMapiSi4 here

CloseTheDoor

0 comments

Posted on 18th July 2011 by Alon in Uncategorized

CloseTheDoor indentifies all the listening ports TCP/UDP over IPv4/v6 and the associated program files. This will help you to detect security holes and close backdoors when you want to prevent remote attacks.

 

Download CloseTheDoor here

 

Sqlninja 0.2.6-rc2 is available!

0 comments

Posted on 17th July 2011 by Alon in Tools

,

Fancy going from a SQL Injection on Microsoft SQL Server to a full GUI access on the DB? Take a few new SQL Injection tricks, add a couple of remote shots in the registry to disable Data Execution Prevention, mix with a little Perl that automatically generates a debug script, put all this in a shaker with a Metasploit wrapper, shake well and you have just one of the attack modules of sqlninja!
Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end.
Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered.

Download Sqlninja here

Zed Attack Proxy (ZAP)

0 comments

Posted on 16th July 2011 by Alon in Pentest |Tools

, ,

The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing as well as being a useful addition to an experienced pen testers toolbox.

Download ZAP Here

Beef 0.4.2.7

0 comments

Posted on 15th July 2011 by Alon in Live CD |Pentest |Tools

, ,

The Browser Exploitation Framework (BeEF) is a powerful professional security tool. BeEF is pioneering techniques that provide the experienced penetration tester with practical client side attack vectors. Unlike other security frameworks, BeEF focuses on leveraging browser vulnerabilities to assess the security posture of a target. This project is developed solely for lawful research and penetration testing.

BeEF hooks one or more web browsers as beachheads for the launching of directed command modules. Each browser is likely to be within a different security context, and each context may provide a set of unique attack vectors. The framework allows the penetration tester to select specific modules (in real-time) to target each browser, and therefore each context.

The framework contains numerous command modules that employ BeEF’s simple and powerful API. This API is at the heart of the framework’s effectiveness and efficiency. It abstracts complexity and facilitates quick development of custom modules.

Download Beef here