all things security
Showing 1 - 25 of 643 RSS Feed

Files

Creepy Geolocation Gathering Tool 0.1.95
Posted Feb 10, 2012
Authored by Yiannis Kakavas | Site ilektrojohn.github.com

creepy is an application that allows you to gather geolocation related information about users from social networking platforms and image hosting services. The information is presented in a map inside the application where all the retrieved data is shown, accompanied with relevant information (i.e. what was posted from that specific location) to provide context to the presentation.

Changes: This release fixes the problem with Twitter consumer keys.
tags | tool
systems | unix
MD5 | 3c077a524286c650b67cc8b1c1c54905
Haveged 1.4
Posted Feb 8, 2012
Site issihosts.com

haveged is a daemon that feeds the /dev/random pool on Linux using an adaptation of the HArdware Volatile Entropy Gathering and Expansion algorithm invented at IRISA. The algorithm is self-tuning on machines with cpuid support, and has been tested in both 32-bit and 64-bit environments. The tarball uses the GNU build mechanism, and includes self test targets and a spec file for those who want to build an RPM.

Changes: A 'generic' architecture based upon clock_gettime() has also been added. An s390 architecture has also been added. The build script now allows non Red Hat init scripts to be installed without patching the build. The collection loop has been rewritten to support multiple instances, and an experimental threaded option is now available to spread the CPU load. Auto tuning has been rewritten to replace buggy cpuid code and to incorporate information obtained from the /proc and /sys filesystems.
tags | tool
systems | linux, unix
MD5 | 39a03d4b8a4225706f78dbef3f623b0e
Fake POP3 Daemon
Posted Feb 7, 2012
Authored by James Stevenson | Site stev.org

This is a compact fake pop3 daemon that logs password attacks.

tags | tool
systems | unix
MD5 | 6f1a11903c57d66bfbf2564e33984ea6
Whitewash 2.0
Posted Feb 7, 2012
Authored by Dmitry Borodaenko

The Whitewash module allows Ruby programs to clean up any HTML document or fragment coming from an untrusted source and to remove all dangerous constructs that could be used for cross-site scripting or request forgery. All HTML tags, attribute names and values, and CSS properties are filtered through a whitelist that defines which names and what kinds of values are allowed; everything that doesn't match the whitelist is removed. The whitelist is provided externally, and the default whitelist is loaded from the whitelist.yaml shipped with Whitewash. The default is the most strict (for example, it does not allow cross-site links to images in IMG tags) and can be considered safe for all uses.

tags | tool, xss, ruby
systems | unix
MD5 | c004def72787e8d8222d7b2e16706e97
IP-Link 0.2
Posted Feb 6, 2012
Authored by Cedric Bonhomme, Jerome Hussenet | Site ip-link.wikidot.com

The goal of IP-Link is to show the relationships between different IP addresses from network traffic capture, thus quickly determining for a given address the IP address with which it communicates the most.

Changes: This version introduces the generation of Bezier curves. It is now possible to see the relations between IP and ports. The tutorial has been updated.
tags | tool
systems | unix
MD5 | 1541e7f63a0edc4dbcbb732a283d52e8
OpenDNSSEC 1.3.5
Posted Jan 24, 2012
Site opendnssec.org

OpenDNSSEC is software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.

Changes: This release adds bugfixes. Auditor now includes the zone name in the log. ldns 1.6.12 is required. ods-ksmutil suppresses database connection information when no -v flag is given. ods-enforcerd stops multiple instances of the enforcer from running. ods-ksmutil's "zone delete" renames the signconf file, so if the zone is put back, the signer will not pick up the old file. Signer Engine's verbosity can now be set via conf.xml (the default is 3).
tags | tool
systems | unix
MD5 | e82098192f4a3965de7a84e6ae9f1f75
Distributed Access Control System 1.4.27
Posted Jan 18, 2012
Site dacs.dss.ca

DACS is a light-weight single sign-on and role-based access control system providing flexible, modular authentication methods and powerful, transparent rule-based authorization checking for Web services, CGI programs, or virtually any program.

Changes: This minor bugfix release upgrades third-party support packages, includes upgrades/fixes for Mac OS X 10.7.2, and fixes and extends the HTTP_AUTH directive and the dacsauth(1) command.
tags | tool, web, cgi
systems | linux, unix
MD5 | 72899c20059569317f6efe66baf888bf
OATH Toolkit 1.10.5
Posted Jan 17, 2012
Site nongnu.org

OATH Toolkit attempts to collect several tools that are useful when deploying technologies related to OATH, such as HOTP one-time passwords. It is a fork of the earlier HOTP Toolkit.

Changes: Build fixes. The Gnulib files were updated.
tags | tool
systems | unix
MD5 | b15754a7419592c57b8a98cc413eb873
Ban Facebook SSL Script 1.0
Posted Jan 15, 2012
Authored by Alexandru Cuciureanu

This tool pulls down all netblocks for Facebook and block access to the site via IPTables.

tags | tool
systems | unix
MD5 | 27a4b16cb5c6021f589fad3b2c92ccf0
AdSuck DNS Server 2.4.1
Posted Jan 11, 2012
Authored by Marco Peereboom | Site peereboom.us

adsuck is a small DNS server that spoofs blacklisted addresses and forwards all other queries. The idea is to be able to prevent connections to undesirable sites such as ad servers, crawlers, etc. It can be used locally, for the road warrior, or on the network perimeter in order to protect local machines from malicious sites.

Changes: This release updates hosts files. It has switched to git from cvs. It add additional stats. It fixes the dhclient script for OpenBSD where sometimes resolv.conf did not get updated.
tags | tool, local, spoof
systems | unix
MD5 | a74bc9a70653f8e6b993c9e9e7e6584d
Packet Fence 3.1.0
Posted Dec 24, 2011
Site packetfence.org

PacketFence is a network access control (NAC) system. It is actively maintained and has been deployed in numerous large-scale institutions. It can be used to effectively secure networks, from small to very large heterogeneous networks. PacketFence provides NAC-oriented features such as registration of new network devices, detection of abnormal network activities including from remote snort sensors, isolation of problematic devices, remediation through a captive portal, and registration-based and scheduled vulnerability scans.

Changes: A major release focused on new features and enhancements. Statement of Health (SoH) support for reliable client-side policy compliance, detection of rogue DHCP Servers through routers, RADIUS Change of Authorization (RFC3576) support for reliable and fast authorization changes, new charts in Web Admin, wireless profile provisioning for iPod, iPhone, and iPad devices, SNMP traps overload protection, improved captive portal detection on Mac OS X Lion and mobile devices, and support for stacked Cisco 3750 switches. There are also the usual minor performance optimizations and several bugfixes.
tags | tool, remote
systems | unix
MD5 | 256f88b08fbf6440711b79a995e293f2
OpenDNSSEC 1.3.4
Posted Dec 10, 2011
Site opendnssec.org

OpenDNSSEC is software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.

Changes: This release uses "debug" instead of "warning" for the drudgers queue being full, and sleeps 10 ms if it is full, so it doesn't hog the CPU. This has increased signing speed on single core machines by a factor of 2.
tags | tool
systems | unix
MD5 | 73196da477bfda620bd3b34e0d5b0a34
Circumference WebAuth Client 1.5
Posted Dec 4, 2011
Authored by Jan Engelhardt | Site circum.sourceforge.net

Circumference is a server-client-style implementation of a WebAuth client and server to supplement the WebAuth Diameter subprotocol, complete with an extensible Diameter server and base library. Diameter is a peer-to-peer authentication protocol as specified in RFC3588 and its updates.

Changes: This release adds a systemd service unit file and updates the code to use the libHX 3.12 API.
tags | tool, protocol
systems | unix
MD5 | 8faa6be4cc0205c2a6448b5b0d763591
HideMAC 1.2
Posted Dec 3, 2011
Authored by infodox | Site compsoc.nuigalway.ie

A MAC changing utility that uses both ifconfig and GNU-Macchanger (checks if mac changer exists, if not, uses ifconfig) to spoof ones MAC with a totally random value. Written in Python.

tags | tool, spoof, python
systems | unix
MD5 | cb4a03a3851cd847f91c37c693e96a72
ARP Toxin Cache Poisoner
Posted Nov 27, 2011
Authored by infodox

ARP Toxin is a simple Perl script designed to ARP poison a host on the LAN. It uses Nemesis as a packet crafting tool to create and send the ARP packets. It is NOT original code, merely a slightly improved version of the sample arpredirect script from the book "Hacking: The Art of Exploitation". This variant allows one to set their own poisoning interval and interface to poison on.

tags | tool, perl
systems | unix
MD5 | e92c2a88da193a2857879d6593066017
Packet Fence 3.0.3
Posted Nov 22, 2011
Site packetfence.org

PacketFence is a network access control (NAC) system. It is actively maintained and has been deployed in numerous large-scale institutions. It can be used to effectively secure networks, from small to very large heterogeneous networks. PacketFence provides NAC-oriented features such as registration of new network devices, detection of abnormal network activities including from remote snort sensors, isolation of problematic devices, remediation through a captive portal, and registration-based and scheduled vulnerability scans.

Changes: A minor release focused on important fixes but with some enhancements. There are performance improvements, Cisco 6500 switch support, better support for the HP Procurve 5400, translation improvements, new add-on tools, and better documentation. There are cosmetic changes in the Web Admin, fixes for some network device problems, several inline enforcement improvements, and handling of some captive portal corner cases.
tags | tool, remote
systems | unix
MD5 | cc3429f5d272c133cdb59915934b3ef6
OpenDNSSEC 1.3.2
Posted Nov 18, 2011
Site opendnssec.org

OpenDNSSEC is software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.

Changes: This release adds bugfixes in the Enforcer, the Auditor, and the Signer.
tags | tool
systems | unix
MD5 | bcc7a7787b1c4370b0cd85679b047897
ROP Gadget Tool 3.3
Posted Nov 9, 2011
Authored by Jonathan Salwan

This tool lets you search your gadgets on your binaries (ELF format) to facilitate your ROP exploitation. The gadgets are found on executable segments.

Changes: New core and news features.
tags | tool
systems | unix
MD5 | 44c4b34259054d8074760102a2cce793
Haveged 1.3a
Posted Nov 8, 2011
Site issihosts.com

haveged is a daemon that feeds the /dev/random pool on Linux using an adaptation of the HArdware Volatile Entropy Gathering and Expansion algorithm invented at IRISA. The algorithm is self-tuning on machines with cpuid support, and has been tested in both 32-bit and 64-bit environments. The tarball uses the GNU build mechanism, and includes self test targets and a spec file for those who want to build an RPM.

Changes: Small fixes to the 1.3 version for PPC.
tags | tool
systems | linux, unix
MD5 | dad8b95c6eafcec7eb42eb8454e60a0d
DNS Goblin Search Utility
Posted Nov 5, 2011
Authored by atzeton | Site nullsecurity.net

DNS Goblin is a nasty creature that searches for DNS servers. It uses DNS queries and waits for replies.

tags | tool
systems | unix
MD5 | 31729c0572ab19ea0883ccf73f035b08
FStealer Filesystem Mirroring Tool
Posted Oct 31, 2011
Authored by pleed

FStealer automates file system mirroring through remote file disclosure vulnerabilities on Linux machines. It uses both, initial path signatures and runtime analysis of downloaded files to recursively find new files. Because of its modularity it is trivial to extend it by writing your own file or path analysis.

tags | tool, remote, vulnerability
systems | linux, unix
MD5 | a4d280034bc90b78804ef5635d94daf6
Packet Fence 3.0.2
Posted Oct 25, 2011
Site packetfence.org

PacketFence is a network access control (NAC) system. It is actively maintained and has been deployed in numerous large-scale institutions. It can be used to effectively secure networks, from small to very large heterogeneous networks. PacketFence provides NAC-oriented features such as registration of new network devices, detection of abnormal network activities including from remote snort sensors, isolation of problematic devices, remediation through a captive portal, and registration-based and scheduled vulnerability scans.

Changes: This minor release focused on small improvements and fixes, including some security fixes. Enhancements included Trapeze hardware support, support for wireless devices in bridge mode, and guest management options put behind configurable values. There were several inline enforcement and guest management fixes, changes to default firewall rules, fixes for long-standing issues with the pie charts in the Web admin, and several other minor bugfixes.
tags | tool, remote
systems | unix
MD5 | d4b6326a15c0c37a8e72de4feadceb18
Haveged 1.3
Posted Oct 25, 2011
Site issihosts.com

haveged is a daemon that feeds the /dev/random pool on Linux using an adaptation of the HArdware Volatile Entropy Gathering and Expansion algorithm invented at IRISA. The algorithm is self-tuning on machines with cpuid support, and has been tested in both 32-bit and 64-bit environments. The tarball uses the GNU build mechanism, and includes self test targets and a spec file for those who want to build an RPM.

Changes: haveged has been reorganized to allow its collection mechanism to be better accessed directly through the file system. This reorganization includes the option to suppress the daemon interface in the build for circumstances where /dev/random is unavailable or its use is inappropriate. This also means that haveged can now be built and used on non-Linux systems.
tags | tool
systems | linux, unix
MD5 | 7e7fed038fa45f455610ed430ca30a5e
ROP Gadget Tool 3.2
Posted Oct 11, 2011
Authored by Jonathan Salwan

This tool lets you search your gadgets on your binaries (ELF format) to facilitate your ROP exploitation. The gadgets are found on executable segments.

Changes: This version adds a filter function/researchs opcodes and now you can convert your shellcode on ROP instructions.
tags | tool
systems | unix
MD5 | 763d1f8c8f75c8858f3f4fab36775123
ExploitPack Security Framework
Posted Oct 4, 2011
Authored by Juan Sacco

Exploit Pack is an open source security framework that combines the benefits of a Java GUI, Python as an Engine, and well-known exploits in the wild. It has an IDE to make the task of developing new exploits easier, instant search, and XML-based modules.

tags | tool, java, python
systems | unix
MD5 | a43f4d847ec2f9b0a92b8c056efdacba
Page 1 of 26
Back12345Next

Top Authors In Last 30 Days

packet storm

© 2012 Packet Storm. All rights reserved.

close