May 30th, 2008
Nebula is a data analysis tool that automatically generates intrusion signatures from attack traces. It runs as a daemon that processes data submitted from honeypots. New signatures are published as Snort rules and can be used to defend a network from future intrusion attempts.
See the original post here:
nebula-0.2.2.tar.gz
Posted in Exploit | No Comments »
May 30th, 2008
Nebula is a data analysis tool that automatically generates intrusion signatures from attack traces. It runs as a daemon that processes data submitted from honeypots. New signatures are …
See original here:
nebula-0.2.2.tar.gz
Posted in Exploit | No Comments »
May 30th, 2008
Kismet is an 802.11 layer 2 wireless network sniffer. It can sniff 802.11b, 802.11a, and 802.11g traffic. It is capable of sniffing using almost any wireless card supported in Linux, which currently divide into cards handled by libpcap and the Linux-Wireless extensions (such as Cisco Aironet), and cards supported by the Wlan-NG project which use the Prism/2 chipset (such as Linksys, Dlink, and Zoom). Besides Linux, Kismet also supports FreeBSD, OpenBSD and Mac OS X systems. Features Multiple packet capture sources, Runtime network sorting by AP MAC address (bssid), IP block detection via ARP and DHCP packet dissection, Cisco product detection via CDP, Ethereal and tcpdump compatible file logging, Airsnort-compatible interesting (cryptographically weak) logging, Secure SUID behavior, GPS devices and wireless devices fingerprinting. Kismet …
Here is the original post:
kismet-2008-05-R1.tar.gz
Posted in Exploit | No Comments »
May 30th, 2008
Kismet is an 802.11 layer 2 wireless network sniffer. It can sniff 802.11b, 802.11a, and 802.11g traffic. …
View original post here:
kismet-2008-05-R1.tar.gz
Posted in Exploit | No Comments »
May 29th, 2008
This Ruby code will test a specified Host’s SSL certificate against the Debian-based blacklist of keys (RSA 2048 and DSA 1024) generated during the period where openssl on Debian-based installs …
Originally posted here:
haxssl.tgz
Posted in Exploit | No Comments »
May 28th, 2008
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.
The rest is here:
openssl-0.9.8h.tar.gz
Posted in Exploit | No Comments »
May 28th, 2008
Lynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware …
Read the original:
lynis-1.1.3.tar.gz
Posted in Exploit | No Comments »
May 27th, 2008
Debian OpenSSL weak client Diffie-Hellman Exchange checker version 0.1.
See more here:
check_weak_dh_ssh.pl.bz2
Posted in Exploit | No Comments »
May 23rd, 2008
Bunny the Fuzzer - A closed loop, high-performance, general purpose protocol-blind fuzzer for C programs. Uses compiler-level integration to seamlessly inject precise and reliable instrumentation hooks into the traced program. These hooks enable the fuzzer to receive real-time feedback on changes to the function call path, call parameters, and return values in response to variations in input data. This architecture makes it possible to significantly improve the coverage of the testing process without a noticeable performance impact usually associated with other attempts to peek into run-time internals.
Read more:
bunny-0.93.tgz
Posted in Exploit | No Comments »
May 23rd, 2008
FSlint is a toolkit to find various forms of lint on a filesystem. At the moment it reports duplicate files, bad symbolic links, troublesome file names, empty directories, non stripped executables, temporary files, duplicate/conflicting (binary) names, and unused ext2 directory blocks.
Continued here:
fslint-2.26.tar.gz
Posted in Exploit | No Comments »