ToolWar | Information Security (InfoSec) Tools: Network

TamoGraph Site Survey (Wireless site survey) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="tamograph logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhf9PT_SSVfHD_K9wUBzLvVaeC3T3HU0lxshTZu6s_jhgnsMSqKMrn4U75ySHPHDnhaODmeTaNACxvIhYp_htUmKQY7Jf1JNt4jvNPXWcJjSOvPMJVKDdnAPh6OaQuzJRC9qnidD8Tb_Km7/s1600/Tamograph+tutorial.png" title="tamograph logo" /></div>
<b>TamoGraph</b> is a powerful and user-friendly <b>wireless site survey software tool</b> for <b>collecting</b>, <b>visualizing</b>, and <b>analyzing 802.11 a/b/g/n/ac Wi-Fi data</b>.  Wireless network deployment and maintenance requires the use of a  professional RF site survey tool that facilitates otherwise  time-consuming and very complex tasks, such as ongoing analysis and  reporting of <b>signal strength</b>, <b>noise</b> and <b>interference</b>, <b>channel allocation</b>, <b>data rates</b>, etc.</div>
<div style="text-align: justify;">
<a href="http://www.tamos.com/products/wifi-site-survey/tour.php" title=""></a>By using TamoGraph, businesses can dramatically <b>reduce the time and costs</b> that are involved in deploying and maintaining Wi-Fi networks and <b>improve network performance</b> and coverage in all kinds of environments: office buildings, airports, cafes, malls, or open space areas.</div>
<div style="clear: left; text-align: justify;">
</div>
<h3 style="text-align: justify;">
Key Features</h3>
<ul style="text-align: justify;">
<li>Simple and fast data collection</li>
<li>Passive, active, and predictive surveys</li>
<li>Spectrum analysis</li>
<li>Comprehensive WLAN analysis with easy-to-understand visualization of  signal level, interference, access point coverage areas, data rates,  network issues, etc.</li>
<li>Automatic access point location</li>
<li>Detailed information about every access point: channel, maximum data rate, vendor, encryption type, etc.</li>
<li>Full support of 802.11ac, as well as 802.11a, 802.11b, 802.11g, and 802.11n networks</li>
<li>GPS-assisted outdoor surveys</li>
<li>Detailed reporting in PDF and HTML formats</li>
<li>Attractive, competitive pricing</li>
</ul>
<h3 style="text-align: justify;">
Why to Perform a Site Survey</h3>
<div style="text-align: justify;">
<img align="left" alt="Click for more screen shots" border="0" height="210" hspace="0" src="http://www.tamos.com/i/tg_shot_new.png" style="margin-right: 10px;" title="Click for more screen shots" vspace="0" width="250" />In  a word, wireless site surveys are necessary because radio wave  propagation is difficult to predict, especially in non-open space  environments. It is virtually impossible to consider all the variables  that might affect the health and performance of your WLAN. Changing  conditions, even something as seemingly minor as a notebook equipped  with a legacy 802.11g adapter that your new employee connected to the  office wireless network, might seriously impact the WLAN performance. In  addition, considering the wide proliferation of wireless  infrastructure, factors such as interference from nearby WLANs play a  very important role. This is why regular site surveys that are conducted  with a professional tool are important.</div>
<h3 style="clear: both; text-align: justify;">
When to Perform a Site Survey</h3>
<div style="text-align: justify;">
<b>Pre-deployment surveys</b>: At this stage, a site survey is  necessary in order to verify that the network plan works well in a  real-world environment. Placement of temporary access points and a quick  survey of the resulting WLAN characteristics allow an engineer to  fine-tune AP and antennae placement, determine the optimal number and  types of APs and antennae, and avoid poor coverage zones.</div>
<div style="text-align: justify;">
<b>Post-deployment surveys</b>: Once a WLAN has been deployed, a  complete verification site survey is necessary to ensure that the WLAN  performance and coverage meet the design requirements. At this stage,  the Wi-Fi equipment placement is finalized and a site survey report  should be generated so that the historical records can be accessed at  any time in the future.</div>
<div style="text-align: justify;">
<b>Regular, ongoing surveys</b>: Maintaining high performance and  coverage requires regular "check-up" surveys.  New users, new equipment,  site expansion, neighboring WLANs, and other factors can adversely  affect your WLAN. It should be monitored on a regular basis.</div>
<h3 style="text-align: justify;">
Who Needs TamoGraph</h3>
<ul style="text-align: justify;">
<li>WLAN and IT administrators</li>
<li>Wireless service providers</li>
<li>Wi-Fi equipment vendors</li>
<li>Consultants</li>
</ul>
<h3 style="text-align: justify;">
System Requirements</h3>
<div style="text-align: justify;">
TamoGraph runs on Microsoft Windows XP, Windows Vista, Windows 7,  Windows 8, Windows Server 2003, Windows Server 2008, and Windows Server  2012. Both 32- and 64-bit versions are supported. You can also perform Wi-Fi site surveys using MacBooks.  TamoGraph requires a compatible wireless network adapter. To view the  list of the adapters that have been tested and are compatible with  TamoGraph, click on the link below:<br />
<br />
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/j0yhPM6cNgo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
</h3>
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://www.tamos.com/bitrix/redirect.php?event1=download&event2=tamograph&event3=&goto=/files/tg4.zip" target="_blank">TamoGraph (Evaluation Version)</a><br />
<b>Official Site :: </b><a href="http://www.tamos.com/" target="_blank">http://www.tamos.com/ </a><b>
</b></div>

TamoGraph Site Survey (Wireless site survey) :: Tools

TamoGraph is a powerful and user-friendly wireless site survey software tool for collecting , visualizing , and analyzing 802.11 a/b/g/...

Commview (Network Monitor and Analyzer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj325VnPYeEK6ly4CYJXLQZBCnGpXso07Hh__zhit87MylbBCCkFqkhrv2USEX8QJ3ErjhZ8vvoiSFuI52w7VRvAyehbHNdHZTsxguVjHscq6YZUH9TH2Eyrq9_zwLaIzKzsGWI8hbWxTRt/s1600/Commview+for+wifi+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Commview network analyzer screenshot" border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj325VnPYeEK6ly4CYJXLQZBCnGpXso07Hh__zhit87MylbBCCkFqkhrv2USEX8QJ3ErjhZ8vvoiSFuI52w7VRvAyehbHNdHZTsxguVjHscq6YZUH9TH2Eyrq9_zwLaIzKzsGWI8hbWxTRt/s400/Commview+for+wifi+screenshot.jpg" title="Commview network analyzer screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>CommView</b> is a powerful <b><a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> monitor</b> and <b>analyzer</b>  designed for LAN administrators, security professionals, network  programmers, home users…virtually anyone who wants a full picture of the  traffic flowing through a PC or LAN segment. Loaded with many  user-friendly features, <b>CommView </b>combines performance and flexibility  with an ease of use unmatched in the industry.   </div>
<div style="text-align: justify;">
This application captures every packet on the wire to display important information such as a <b>list of <a href="http://www.toolwar.com/search/label/Packet" target="_blank">packets</a> and network connections</b>, vital <b>statistics</b>, protocol distribution <b>charts</b>,  and so on. You can examine, save, filter, import and export captured  packets, view <a href="http://www.toolwar.com/search/label/Protocol" target="_blank">protocol</a> decodes down to the lowest layer with <b>full <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a></b> of over 70 widespread protocols. With this information, <b>CommView</b> can help you <b>pinpoint network problems</b> and troubleshoot software and hardware. </div>
<div style="text-align: justify;">
CommView includes a <b>VoIP</b> analyzer for in-depth analysis, recording, and playback of SIP and H.323 voice communications. </div>
<div style="text-align: justify;">
<a href="http://www.tamos.com/upload/iblock/b1486ecd9d485e6e0c1aaa85376617e8.png" id="screenshots" rel="lightbox[shots]" title=""></a>CommView  runs on Windows XP / Vista/ 7 / 8 or <a href="http://www.toolwar.com/search/label/WIndows" target="_blank">Windows</a> Server 2003 / 2008 / 2012  (both 32- and 64-bit versions). It requires a 10/100/1000 Mbps Ethernet,  Wireless Ethernet, or Token Ring network card, or a standard dial-up  adapter. For <b>remote monitoring tasks</b>, you can use our special, optional add-on for CommView: CommView Remote Agent.  It allows CommView users to capture network traffic on any computer  where Remote Agent is running, regardless of the computer's physical  location. This powerful and unique technology broadens your monitoring  range: you are no longer limited by your LAN segment or personal  computer. </div>
<h3 style="text-align: justify;">
How can a network analyzer help me? ::</h3>
<div style="text-align: justify;">
If you are a seasoned professional, you definitely know the answer.  Managing a LAN, creating network-oriented software, or performing a  security audit have one thing in common: You're blind without a good  network monitor. Every day, it helps you <b>maintain efficient network data transmission</b>, <b>test firewalls</b> and <a href="http://www.toolwar.com/search/label/IDS" target="_blank"><b>intrusion detection systems</b></a>, or <b>identify problems</b>  with network-based applications. And there is an important economic  reason behind using a network analyzer: it costs a fraction of the price  of information, time, software, and hardware that may potentially be  lost or wasted by <i>not</i> using a network analyzer. A number of <b>case studies</b> describe real-world applications of CommView  in business, government, and education sectors.  </div>
<div style="text-align: justify;">
If you are new to networking, you'll find CommView extremely  useful for understanding how the Internet and your LAN work. Being a  network analyzer (also commonly referred to as a <i>packet analyzer, network monitor, or packet sniffer</i>), it captures and decodes network traffic and makes sense of it, allowing you to <b>see what, where, and how information leaves and enters your computer</b> -- which is critically important for a secure Internet experience. The Online Tutorial is an excellent resource for learning about the many exciting features CommView offers.   </div>
<div style="text-align: justify;">
Be sure to read our white paper, Promiscuous <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">Monitoring</a> in Ethernet and <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">Wi-Fi</a> Networks,  that examines the problems related to the deployment and usage of  software-based network monitoring solutions in wired and wireless LANs.  It demonstrates the methods of achieving network traffic visibility in  various network configurations that include hubs, switches, routers,  etc.  </div>
<div style="text-align: justify;">
No matter what user category you belong to, you can be certain  that CommView is the right choice for your network monitoring solution.  </div>
<h3 style="text-align: justify;">
What you can do with CommView ::</h3>
<ul class="bullet" style="text-align: justify;">
<li>View detailed IP connections statistics: IP addresses, ports, sessions, etc.  </li>
<li>Reconstruct TCP sessions.  </li>
<li>Map packets to the application that is sending or receiving them. </li>
<li>View protocols distribution, bandwidth utilization, and network nodes charts and tables.  </li>
<li>Generate traffic reports in real time. </li>
<li>Browse captured and decoded packets in real time.  </li>
<li>Search for strings or hex data in captured packet contents.  </li>
<li>Import and export packets in Sniffer®, EtherPeek™, AiroPeek™,  Observer®, NetMon, and Tcpdump formats, export packets in hex and text  formats.  </li>
<li>Configure alarms that can notify you about important events,  such as suspicious packets, high bandwidth utilization, unknown  addresses, etc. </li>
<li>Create your own plug-ins for decoding any protocol. </li>
<li>Exchange data with your application over TCP/IP. </li>
<li>Export any IP address to SmartWhois for quick, easy IP lookup.  </li>
<li>Capture loopback traffic. </li>
</ul>
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/hdE-s_SQl50?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
<b>Windows ::</b> 
<a href="http://www.tamos.com/bitrix/redirect.php?event1=download&event2=commview&event3=cv6&goto=/files/cv6.zip" target="_blank">Commview v6.5 (Trial Version)</a><b><br /></b><br />
<b>Official Website :: </b><a href="http://www.tamos.com/products/commview/">http://www.tamos.com/products/commview/</a>

Commview (Network Monitor and Analyzer) :: Tools

CommView is a powerful network monitor and analyzer designed for LAN administrators, security professionals, network programmers, h...

Commview for WiFi (Wireless Network Monitor and Analyzer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifqWsa_cgm-7HH4xzL0ejeSIshghYPqKMYXdz_SA8Nh8J_E8hKyYR30mBv-is_Bda0EYIY21YAhcIHM_o1E4OKOX6zA07C2ILllcbNYvJdc5nxQ_ksR_go6h9NnucLa_JdOVqRjyE0Pnrb/s1600/Commview+for+wifi+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Commview for WiFi screenshot" border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifqWsa_cgm-7HH4xzL0ejeSIshghYPqKMYXdz_SA8Nh8J_E8hKyYR30mBv-is_Bda0EYIY21YAhcIHM_o1E4OKOX6zA07C2ILllcbNYvJdc5nxQ_ksR_go6h9NnucLa_JdOVqRjyE0Pnrb/s400/Commview+for+wifi+screenshot.jpg" title="Commview for WiFi screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>CommView for WiFi</b> is a powerful <b>wireless <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> monitor and <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyzer</a></b>  for 802.11 a/b/g/n/ac networks. Loaded with many user-friendly  features, <b>CommView for WiFi </b>combines performance and flexibility with an  ease of use unmatched in the industry.  </div>
<div style="text-align: justify;">
<b>CommView for WiFi </b>captures every <a href="http://www.toolwar.com/search/label/Packet" target="_blank">packet </a>on the air to display important information such as the list of <b>access points</b> and <b>stations</b>, per-node and per-channel <b>statistics</b>, <b>signal strength</b>, a list of packets and <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> <b>connections</b>, protocol distribution <b>charts</b>,  etc. By providing this information, CommView for WiFi can help you view  and examine packets, pinpoint network problems, and troubleshoot  software and hardware. </div>
<div style="text-align: justify;">
<a href="http://www.tamos.com/upload/iblock/ac79f4ac4ad9ee81c2f0fc2987267948.png" id="screenshots" rel="lightbox[shots]" title=""></a>CommView for WiFi includes a <b>VoIP</b> module for in-depth analysis, recording, and playback of SIP and H.323 voice communications. </div>
<div style="text-align: justify;">
Packets can be decrypted utilizing user-defined <b>WEP or WPA-PSK</b> keys and are decoded down to the lowest layer. With <b>over 70 supported protocols</b>,  this network analyzer allows you to see every detail of a captured  packet using a convenient tree-like structure to display protocol layers  and packet headers. Additionally, the product provides an open  interface for plugging in custom decoding modules.   </div>
<div style="text-align: justify;">
A number of <b>case studies</b> describe real-world applications of <b>CommView for WiFi</b> in business, government, and education sectors. </div>
<div style="text-align: justify;">
<b>CommView for WiFi</b> is a comprehensive and affordable tool for <a href="http://www.toolwar.com/search/label/Wireless" target="_blank">wireless</a> LAN administrators, security professionals, network  programmers, or anyone who wants to have a full picture of the WLAN  traffic. This application runs on <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> XP / Vista/ 7 / 8 or Windows  Server 2003 / 2008 / 2012 (both 32- and 64-bit versions) and requires a  compatible wireless network adapter. You can also run CommView for WiFi on Macs. To view the list of the adapters that have been tested and are compatible with CommView for WiFi, click on the link below: </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<span class="subtitletext">What you can do with <b>CommView for WiFi ::</b></span>  </div>
<ul style="text-align: justify;">
<li>Scan the air for WiFi stations and access points.  </li>
<li>Capture 802.11a, 802.11b, 802.11g, 802.11n, and 802.11ac WLAN traffic.  </li>
<li>Specify WEP or WPA keys to decrypt encrypted packets.  </li>
<li>View detailed per-node and per-channel statistics.  </li>
<li>View detailed IP connections statistics: IP addresses, ports, sessions, etc.  </li>
<li>Reconstruct TCP sessions.  </li>
<li>Configure alarms that can notify you about important events,  such as suspicious packets, high bandwidth utilization, unknown  addresses, rogue access points, etc.  </li>
<li>View protocol "pie" charts.  </li>
<li>Monitor bandwidth utilization.  </li>
<li>Browse captured and decoded packets in real time.  </li>
<li>Search for strings or hex data in captured packet contents.  </li>
<li>Log individual or all packets to files.  </li>
<li>Load and view capture files offline.  </li>
<li>Import and export packets in Sniffer®, EtherPeek™, AiroPeek™, Observer®, NetMon, Tcpdump, hex, and text formats.  </li>
<li>Export any IP address to SmartWhois for quick, easy IP lookup. </li>
<li>Capture data from multiple channels simultaneously using several USB adapters. </li>
<li>Capture A-MPDU and A-MSDU packets. </li>
<li>Simulate access points.</li>
<li>And much more! </li>
</ul>
<h3>
Tutorials :: </h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/pkXEa5TKlCo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
</h3>
<h3>
Download :: </h3>
<b>Windows ::</b> <a href="http://www.tamos.com/bitrix/redirect.php?event1=download&event2=commwifi&event3=&goto=/files/ca7.zip" target="_blank">Commview for WiFi v7 (Evaluation Version)</a> <b> </b>
<b>Official Website ::</b> <a href="http://www.tamos.com/products/commwifi/">http://www.tamos.com/products/commwifi/</a>

Commview for WiFi (Wireless Network Monitor and Analyzer) :: Tools

CommView for WiFi is a powerful wireless network monitor and analyzer for 802.11 a/b/g/n/ac networks. Loaded with many user-friendly ...

SILICA (WiFi Penetration Testing) :: Tools

<div style="text-align: justify;">
<span style="font-size: small;"></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3Pvv_IBiRa-8oX-3aa_2A22D5nvUsowumkAz3fTkG5t9hmCiUfG5XBQ9K7MtHa4Kch16v2V0fOiVRZCFh1GtfuGsYF9YsTitnsPUXCPQgDqqoijMqSka4DOSumJJFHujYBuhicQzLzSR-/s1600/Silica+Wireless+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Silica Wireless Screenshot" border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3Pvv_IBiRa-8oX-3aa_2A22D5nvUsowumkAz3fTkG5t9hmCiUfG5XBQ9K7MtHa4Kch16v2V0fOiVRZCFh1GtfuGsYF9YsTitnsPUXCPQgDqqoijMqSka4DOSumJJFHujYBuhicQzLzSR-/s400/Silica+Wireless+screenshot.png" title="Silica Wireless Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<span style="font-size: small;"><b>SILICA</b> is a tool for hacking or <i>Wi-Fi penetration testing</i>. Understanding the <a href="http://www.toolwar.com/search/label/Vulnerability" target="_blank">vulnerabilities</a> of your <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">WiFi</a> network can be challenging as users can easily create networks
on demand, or even perhaps unintentionally. But as recent events have demonstrated, scanning your <i>WiFi
network</i> is an important part of understanding your <a href="http://www.toolwar.com/search/label/Security" target="_blank">security </a>posture.</span></div>
<div style="text-align: justify;">
<span style="font-size: small;">
Most vulnerability assessment tools
simply take their current network scanners and point them at the wireless infrastructure. This approach does not
give you the information that is unique to <a href="http://www.toolwar.com/search/label/Wireless" target="_blank">wireless </a>networks. Immunity has built the first automated, WiFi
specific, vulnerability assessment and penetration tool.</span></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
Unlike traditional scanners that merely identify possible
vulnerabilities, <b>SILICA</b> determines the true risk of a particular
access point. <b>SILICA</b> does this by unintrusively leveraging
vulnerabilities and determining what assets behind the
vulnerable access point can be compromised.</div>
<div style="text-align: justify;">
Additionally while traditional <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanners</a> can enumerate the vulnerabilities of
a particular target, they cannot evaluate whether a mitigating
control is in place on the target or in the surrounding environ-
ment. With<b> SILICA</b>’s unique methodology it can report on
whether vulnerability can be successfully exploited.</div>
<div style="text-align: justify;">
<b>More than simple scanning, the benefits of using SILICA include:</b></div>
<div style="text-align: justify;">
1) Improved security posture<br />
2) Simplified trouble shooting<br />
3) <a href="http://www.toolwar.com/search/label/Network" target="_blank">Network</a> mapping<br />
4) Create real threat profiles and vulnerability assessments<br />
5) Build WiFi risk and vulnerability analysis for PCI, SOX<br />
6) Rogue access point detection<br />
7) Auditing wireless client security</div>
<h3 style="text-align: justify;">
<span style="font-size: small;">With SILICA You Can ::</span></h3>
<div style="text-align: justify;">
<span style="font-size: small;">1. Recover WEP, WPA 1,2 and LEAP keys<br />2. Passively hijack web application sessions for email, social networking and Intranet sites.<br />3. Map a wireless network and identify its relationships with associated clients and other access points.<br />4. Identify vendors, hidden SSIDs and equipment passively.<br />5. Scan and break into hosts on the network using integrated CANVAS exploit modules and commands to recover screenshots, password hashes and other sensitive information.<br />6. Perform man-in-the-middle attacks to find valuable information exchanged between hosts.<br />7. Generate reports for wireless and network data.<br />8. Hijack wireless client connections via access point impersonation.<br />9. Passively inject custom content into client's web sessions.<br />10. Take full control of wireless clients via CANVAS's client-side exploitation framework (clientD).<br />11. Decrypt and easily view all WEP and WPA 1/2 traffic.</span></div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<b>Videos :: </b><a href="http://www.immunitysec.com/products-silica.shtml" target="_blank">Silica Videos Tutorials</a> </div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://downloads.immunityinc.com/SILICA_VM.zip" target="_blank">SILICA_VM</a></div>
<div style="text-align: justify;">
<span style="font-size: small;"></span></div>
<div style="text-align: justify;">
</div>

SILICA (WiFi Penetration Testing) :: Tools

SILICA is a tool for hacking or Wi-Fi penetration testing . Understanding the vulnerabilities of your WiFi network can be challengin...

Comodo Firewall :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Comodo Firewall logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi92gYqhU6WXsU5QSuwFESFgVBUZRIZ93TAb8ZSRVFkaQCazEWClk9C1VhN3JPzO4FXEOvgIEDZouPKkAeFP2mcTXNqBII0QedzsI8xqmfcaqksPzn22tzvkBWT6GUHRHWO_ipJ5d2WUz_T/s1600/comodo-firewall+logo.png" title="Comodo Firewall logo" /></div>
<b>Comodo Firewall</b>  Pro introduces the next evolution in <i>computer security</i>: Default Deny  Protection (DDP™). What is DDP? Most security programs maintain a list  of known <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a>, and use that list to decide which applications and  files shouldn't access a PC. The problem here is obvious. What if the  list of malware is missing some entries, or isn't up to date?</div>
<div style="text-align: justify;">
<b>Comodo <a href="http://www.toolwar.com/search/label/Firewalls" target="_blank">Firewall</a> </b>is the best choice for users seeking a<b> full featured <a href="http://www.toolwar.com/search/label/Security" target="_blank"> security</a> suite.</b> This latest release is suitable for both lightly-skilled  users (still must have knowledge of installed programs) and technically  advanced users. Its robust and active HIPS (or application monitoring  feature), called "Defense+", matches or exceeds the security performance  of pay products. Comodo allows for much control and customization for  the curious or the paranoid. </div>
<div style="text-align: justify;">
<b>Comodo</b> includes a "<i>memory firewall</i>" (against buffer overflow  attacks) and a light sandbox component to limit the way unknown  applications and new software installations affect your computer. The  use of sandbox protection limits the negative effects of malware. It  maintains a lengthy list of known safe applications, but if an unknown  application attempts entry through the firewall, <b>Comodo</b> will deny the  application and ask the user what to do. The new release contains user  friendly features by default while allowing experienced users to  maintain control over ports, protocols, and configurations. </div>
<div style="text-align: justify;">
DDP fixes this problem to ensure complete security. The <b> firewall </b>references a list of over two million known PC-friendly  applications. If a file that is not on this safe-list knocks on your  PC's door, the Firewall immediately alerts you to the possibility of  attacking malware. All this occurs before the <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> infects your  computer. It's prevention-based security, the only way to keep PCs  totally safe.</div>
<h3 style="font-size: 16px; margin-bottom: 10px; margin-top: 15px; padding: 10px 0px 0px; text-align: justify;">
5 top secrets why Comodo Firewall is different</h3>
<ul class="facts-list" style="text-align: justify;">
<li>No complex configuration issues—perfect for amateur users </li>
<li>Quickly learns user behavior to deliver personalized protection</li>
<li>User-friendly, attractive graphical interface</li>
<li>Lots of configuration options let techies configure things just as they like</li>
<li>DDP-based security keeps you informed and PCs safe</li>
</ul>
<div style="text-align: justify;">
One of the first steps in securing a computer is downloading  and activating a quality firewall to repel intruders. Only this free  firewall software has access to Comodo's extensive safe-list of  PC-friendly applications, a key component of Default Deny Protection™.</div>
<h3>
<b>System Requirements:</b></h3>
<div style="text-align: justify;">
Windows 7 / Vista / XP SP2 / Windows 8, 152 MB RAM / 400 MB space</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorial :: </h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/T4uAAgicpZ4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>Windows ::</b> <a href="http://www.comodo.com/home/download/download.php?prod=firewall" target="_blank">Comodo Firewall</a></div>
<h3 style="text-align: justify;">
</h3>

Comodo Firewall :: Tools

Comodo Firewall Pro introduces the next evolution in computer security : Default Deny Protection (DDP™). What is DDP? Most security pr...

Patriot NG (Changes Detection in Windows or in Network) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwNXqM7_LHQ7YPJaUfI2fTX1hrSU-cv68o0zWKOpWgQrMx00ihDHzEZ1zQqnMcN-LrAwuFoK8Lafq4glQ95bKL1ZOkMdq_O7GD58r9VgXtkOFpMY9SAsHN-3vcCy0tsleeTTehuydm0HHK/s1600/Patriot+NG+Screenshot.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwNXqM7_LHQ7YPJaUfI2fTX1hrSU-cv68o0zWKOpWgQrMx00ihDHzEZ1zQqnMcN-LrAwuFoK8Lafq4glQ95bKL1ZOkMdq_O7GD58r9VgXtkOFpMY9SAsHN-3vcCy0tsleeTTehuydm0HHK/s400/Patriot+NG+Screenshot.JPG" width="176" /></a></div>
<div style="text-align: justify;">
<b>Patriot NG</b> is a <i>'Host IDS' tool</i> which allows <i>real time monitoring of changes in Win<span style="font-size: 14px; line-height: 1.4em;">dows systems or Network attacks.</span></i></div>
<i>
</i>
<h3>
Patriot monitors:</h3>
<ul>
<li>New files in 'Startup' directories</li>
<li>Changes in Registry keys: Indicating whether any sensitive key (autorun, internet explorer settings...) is altered</li>
<li>New Users in the System</li>
<li>New Services installed</li>
<li>Changes in the hosts file</li>
<li>New scheduled jobs</li>
<li>Alteration of the integrity of Internet Explorer: (New BHOs, configuration changes, new toolbars)</li>
<li>Changes in ARP table (Prevention of MITM attacks)</li>
<li>Installation of new Drivers</li>
<li>New Netbios shares</li>
<li>TCP/IP Defense (New open ports, new connections made by processes, PortScan detection...)</li>
<li>Files in critical directories (New executables, new DLLs...)</li>
<li>New hidden windows (cmd.exe / Internet Explorer using OLE objects)</li>
<li>Netbios connections to the System</li>
<li>ARP Watch (New hosts in your network)</li>
<li>NIDS (Detect anomalous network traffic based on editable rules)</li>
</ul>
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://sbdtools.googlecode.com/files/PatriotNG2.01.zip" target="_blank">Patriot NG 2.01</a><br />
<h3>
Official Website ::</h3>
http://www.security-projects.com/

Patriot NG (Changes Detection in Windows or in Network) :: Tools

Patriot NG is a 'Host IDS' tool which allows real time monitoring of changes in Win dows systems or Network attacks. Patrio...

Tortilla :: Tools

<div style="text-align: justify;">
<span class="field-content"></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmwKrsLbKQTKrY6pFC_rTOgytToiYTmIX0hi59EM3vEd51i6WOiGFek59HfVx1QWH0ADQpaN-ck8gH8LDG48zZEWJrxUA89hSBNenbHowXEcSk7o-CrF4mBavCXtyX8ffcPXUo81ys8B3U/s1600/tortilla.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="259" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmwKrsLbKQTKrY6pFC_rTOgytToiYTmIX0hi59EM3vEd51i6WOiGFek59HfVx1QWH0ADQpaN-ck8gH8LDG48zZEWJrxUA89hSBNenbHowXEcSk7o-CrF4mBavCXtyX8ffcPXUo81ys8B3U/s320/tortilla.jpg" width="320" /></a></div>
<b>Tortilla</b> is an open source tool that 
allows users to <i>securely, anonymously, and transparently route</i> all 
TCP/IP and DNS traffic through Tor, regardless of the client software, 
and without relying on VPNs or additional hardware or virtual machines.<br />
<b>Supported Operating Systems:</b> The tool runs on 32 bit and 64 bit versions of Windows from XP and above.<br />
<h3>
<span class="field-content">Download :: </span></h3>
<b><span style="font-weight: normal;"><b>Windows ::</b> <a href="http://download.crowdstrike.com/tortilla/Tortilla_v1.1.0_Beta.zip" target="_blank">Tortilla 1.1.0</a></span></b><br />

<b>Official Website ::</b><a href="http://www.crowdstrike.com/" target="_blank"> http://www.crowdstrike.com/</a><br />
<span class="field-content"></span><br />
<h3>
<span class="field-content"></span></h3>

Tortilla :: Tools

Tortilla is an open source tool that allows users to securely, anonymously, and transparently route all TCP/IP and DNS traffic throu...

Xplico (Internet Traffic Capture) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhADe8Vu4zpdECwwvaAUMUBIlNyGzgvoW1gtLMdHKUZdSDUYlA3t6WdcEN1U1D5ec7BhAtfCN00j4FkO__Ft1LEMzYbd6sUlKDkbK_M05ShgYfYXn2To-j6g4BHCtrNsI1X5D6zJB4dzCE5/s1600/xplico+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="xplico screenshot" border="0" height="217" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhADe8Vu4zpdECwwvaAUMUBIlNyGzgvoW1gtLMdHKUZdSDUYlA3t6WdcEN1U1D5ec7BhAtfCN00j4FkO__Ft1LEMzYbd6sUlKDkbK_M05ShgYfYXn2To-j6g4BHCtrNsI1X5D6zJB4dzCE5/s400/xplico+screenshot.png" title="xplico screenshot" width="400" /></a></div>
<b>Xplico</b> is <i>extract from an internet traffic capture</i> the applications data contained.  For example, from a pcap file Xplico extracts each email (POP, IMAP, and  SMTP protocols), all HTTP contents, each VoIP call (SIP), FTP, TFTP,  and so on. Xplico isn’t a network protocol analyzer. Xplico is an open  source Network Forensic Analysis Tool (NFAT).<br />
Xplico is released under the <b>GNU General Public License</b> and with some scripts under <b>Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported</b> (CC BY-NC-SA 3.0) License. For more details see License.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Features</h3>
<ul style="text-align: justify;">
<li>Protocols supported: HTTP, SIP, IMAP, POP, SMTP, TCP, UDP, IPv6. </li>
<li>Port Independent Protocol Identification (PIPI) for each application protocol;</li>
<li>Multithreading;</li>
<li>Output data and information in SQLite database or Mysql database and/or files;</li>
<li>At each data reassembled by Xplico is associated a XML file that  uniquely identifies the flows and the pcap containing the data  reassembled;</li>
<li>Realtime elaboration (depends on the number of flows, the types of  protocols and by the performance of computer -RAM, CPU, HD access time. </li>
<li>TCP reassembly with ACK verification for any packet or soft ACK verification;</li>
<li>Reverse DNS lookup from DNS packages contained in the inputs files (pcap), not from external DNS server;</li>
<li>No size limit on data entry or the number of files entrance (the only limit is HD size);</li>
<li>IPv4 and IPv6 support;</li>
<li>Modularity.  Each Xplico component is modular. The input interface,  the protocol decoder (Dissector) and the output interface (dispatcher)  are all modules;</li>
<li> The ability to easily create any kind of dispatcher with which to  organize the data extracted in the most appropriate and useful to you.</li>
</ul>
<h3>
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/uzn8yDEbKC0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Ek8uSUwEjC8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
<b>Ubuntu ::</b> <a href="http://sourceforge.net/projects/xplico/files/Xplico%20versions" target="_blank">Download here</a><br />
OR <br />
<code>sudo bash -c 'echo "deb http://repo.xplico.org/ $(lsb_release -s -c) main" >> /etc/apt/sources.list'<br />
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 791C25CE<br />
sudo apt-get update<br />
sudo apt-get install xplico</code> <br />
<br />
<b>Deafult Users ::</b><br />
user: admin, xplico<br />
password: xplico, xplico<br />
<h3>
</h3>

Xplico (Internet Traffic Capture) :: Tools

Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each...

WhatWeb (Identifies Websites) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Y3Xc5XJJiJAmm6k8YcIZNOrOB7uG7CgdTi3S5kN-OmfZ98jwawq6HH-Ntm-wT192dKf5QrY_p3LgrMXJGEVlT8HbDjmC9PZILfoV_kY9uhM5FewuU0d2gOcSmRjuqbeh80xsr9j3mUSS/s1600/whatweb+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WhatWeb Screenshot" border="0" height="188" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Y3Xc5XJJiJAmm6k8YcIZNOrOB7uG7CgdTi3S5kN-OmfZ98jwawq6HH-Ntm-wT192dKf5QrY_p3LgrMXJGEVlT8HbDjmC9PZILfoV_kY9uhM5FewuU0d2gOcSmRjuqbeh80xsr9j3mUSS/s400/whatweb+screenshot.png" title="WhatWeb Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>WhatWeb </b><i>identifies websites.</i> Its goal is to answer the question, 
“<i>What is that Website?”</i>. <b>WhatWeb</b> recognises <i>web technologie</i>s including 
content management systems (CMS), blogging platforms, 
statistic/analytics packages, JavaScript libraries, web servers, and 
embedded devices. WhatWeb has over 900 plugins, each to recognise 
something different. WhatWeb also identifies version numbers, email 
addresses, account IDs, web framework modules, SQL errors, and more.</div>
<div style="text-align: justify;">
<b>WhatWeb</b> can be stealthy and fast, or thorough but slow. <b>WhatWeb</b> 
supports an aggression level to control the trade off between speed and 
reliability. When you visit a website in your browser, the transaction 
includes many hints of what web technologies are powering that website. 
Sometimes a single webpage visit contains enough information to identify
 a website but when it does not, <b>WhatWeb</b> can interrogate the website 
further. The default level of aggression, called ‘passive’, is the 
fastest and requires only one HTTP request of a website. This is 
suitable for scanning public websites. More aggressive modes were 
developed for in penetration tests.</div>
<div style="text-align: justify;">
Most WhatWeb plugins are thorough and recognise a range of cues from 
subtle to obvious. For example, most WordPress websites can be 
identified by the meta HTML tag, e.g. ‘‘, but a minority of WordPress 
websites remove this identifying tag but this does not thwart WhatWeb. 
The WordPress <b>WhatWeb</b> plugin has over 15 tests, which include checking 
the favicon, default installation files, login pages, and checking for 
“/wp-content/” within relative links.</div>
<h3>
Features:</h3>
<div style="text-align: justify;">
* Over 900 plugins<br />
* Control the trade off between speed/stealth and reliability<br />
* Plugins include example URLs<br />
* Performance tuning. Control how many websites to scan concurrently.<br />
* Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB.<br />
* Recursive web spidering<br />
* Proxy support including TOR<br />
* Custom HTTP headers<br />
* Basic HTTP authentication<br />
* Control over webpage redirection<br />
* Nmap-style IP ranges<br />
* Fuzzy matching<br />
* Result certainty awareness<br />
* Custom plugins defined on the command line</div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://www.morningstarsecurity.com/downloads/whatweb-0.4.7.tar.gz">whatweb-0.4.7.tar.gz</a></div>
<div style="text-align: justify;">
<b>Tutorial :: </b>  <a href="http://www.morningstarsecurity.com/research/whatweb" target="_blank">Click Here </a></div>
<div style="text-align: justify;">
</div>

WhatWeb (Identifies Websites) :: Tools

WhatWeb identifies websites. Its goal is to answer the question, “ What is that Website?” . WhatWeb recognises web technologie s inclu...

Polipo (Fast Caching Web Proxy) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-NyUbYXHd__DneQqwv5fvd1SVGs74usTJyhqxbZKsUNdTap7RuNPogsL8ETY0pKvOltAv4cV3YLUaGUWh04ihvwKbvm0rLcHhSbvj22zKYf-dY-FI2PAaxKo4wOc5WHr7ZTFYTSpxkkdS/s1600/polipo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="polipo" border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-NyUbYXHd__DneQqwv5fvd1SVGs74usTJyhqxbZKsUNdTap7RuNPogsL8ETY0pKvOltAv4cV3YLUaGUWh04ihvwKbvm0rLcHhSbvj22zKYf-dY-FI2PAaxKo4wOc5WHr7ZTFYTSpxkkdS/s320/polipo.png" title="polipo" width="320" /></a></div>
<div style="text-align: justify;">
<b>Polipo</b> is a small and<i> fast caching web proxy</i>
(a web cache, an HTTP
proxy, a proxy server).  While <b>Polipo </b>was designed to be used by one
person or a small group of people, there is nothing that prevents it
from being used by a larger group.

</div>
<div style="text-align: justify;">
<b>Polipo </b>has some features that are, as far as I know, unique among
currently available proxies:
</div>
<ul style="text-align: justify;">
<li><b>Polipo </b>will use HTTP/1.1 
pipelining if it believes
that the remote server supports it, whether the incoming requests
are pipelined or come in simultaneously on multiple connections (this
is more than the simple usage of persistent connections, which is done
by <i>e.g.</i> Squid);
</li>
<li><b>Polipo</b> will cache the
initial segment of an instance if the download has been
interrupted, and, if necessary, complete it later using 
Range
requests;
</li>
<li><b>Polip</b>o will upgrade client requests to HTTP/1.1 even if they come
in as HTTP/1.0, and up- or downgrade server replies to the client's
capabilities (this may involve conversion to or from the HTTP/1.1
chunked
encoding);
</li>
<li><b>Polipo </b>has complete support for 
IPv6 
(except for scoped (link-local) addresses).
</li>
<li><b>Polipo </b>can optionally use a technique known as 
Poor Man's
Multiplexing to reduce latency even further.
</li>
</ul>
<div style="text-align: justify;">
In short, <b>Polipo u</b>ses a plethora of techniques to make web browsing
(seem) faster. </div>
<div style="text-align: justify;">
<br /></div>
<b>Download Here ::</b> git clone git://git.wifi.pps.univ-paris-diderot.fr/polipo<br />
                              <a href="http://freehaven.net/~chrisd/polipo/polipo-1.0.4.tar.gz" target="_blank">Polipo-1.0.4.tar.gz (for Linux)</a><br />
                              <a href="http://freehaven.net/~chrisd/polipo/polipo-1.0.4-win32.zip" target="_blank">Polipo-1.0.4-win32.zip</a><br />
<b>Tutorial & Official Website ::</b>  http://www.pps.univ-paris-diderot.fr/~jch/software/polipo/

Polipo (Fast Caching Web Proxy) :: Tools

Polipo is a small and fast caching web proxy (a web cache, an HTTP proxy, a proxy server). While Polipo was designed to be used by on...

HULK (Web Server DDoS) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="hulk ddos tool" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmkIpDIrPxvWHtvaai_4lmV1eyCCUucwGOrd8aUni-ylFt1wNOuMbrXPPPrtc8hntwhyphenhyphenoPGGfY1vutVU40iKl62ewiHoIVJpoPAVQxG0fGoJuJYywjG5L1Kwvzl-NBExPpV23vg0rSOtoY/s320/hulk+web+server+logo.jpg" title="hulk ddos tool" width="320" /></div>
<b>HULK</b> is a <i>web server denial of service tool (DDoS Tool)</i> written for research 
purposes. It is designed to generate volumes of unique and obfuscated 
traffic at a webserver, bypassing caching engines and therefore hitting 
the server's direct resource pool.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
The <b>Hulk Web server</b> is a brainchild of Barry Shteiman. This<i> DDoS attack 
tool </i>distinguishes itself from many of the other tools out in the wild. 
According to its creator, the Hulk Web server was born of his conclusion
 that most available DDoS attack tools produced predictable repeated 
patterns that could easily be mitigated. The principle behind the Hulk 
Web server is that a unique pattern is generated at each and every 
request, with the intention of increasing the load on the servers as 
well as evading any intrusion detection and prevention systems. </div>
<h3 style="text-align: justify;">
Some Techniques</h3>
<ul style="text-align: justify;">
<li>Obfuscation of Source Client – this is done by using a list of known
 User Agents, and for every request that is constructed, the User Agent 
is a random value out of the known list</li>
<li>Reference Forgery – the <i>referer</i> that points at the request is obfuscated and points into either the host itself or some major prelisted websites.</li>
<li>Stickiness – using some standard Http command to try and ask the 
server to maintain open connections by using Keep-Alive with variable 
time window</li>
<li>no-cache – this is a given, but by asking the HTTP server for <i>no-cache</i> , a server that is not behind a dedicated caching service will present a unique page.</li>
<li>Unique Transformation of URL – to eliminate caching and other 
optimization tools, I crafted custom parameter names and values and they
 are randomized and attached to each request, rendering it to be Unique,
 causing the server to process the response on each event.</li>
</ul>
<div style="text-align: justify;">
<b>Video Tutorial :: </b><a href="https://www.youtube.com/watch?v=dYjx2VoXjEA" target="_blank">Click Here</a></div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://packetstormsecurity.com/files/download/112856/hulk.zip" target="_blank">Hulk.zip</a><b><a href="http://packetstormsecurity.com/files/download/112856/hulk.zip" target="_blank"> </a></b></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.sectorix.com/ </div>

HULK (Web Server DDoS) :: Tools

HULK is a web server denial of service tool (DDoS Tool) written for research purposes. It is designed to generate volumes of unique an...

Yeti (Network Foot-Printing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5p_8uF28TyyEY6WHl18BJAymokj8-VVu3MRWW5Wt7IIrOKw2h-IiduRV_50rPsD9BqFdwAWtpQ9-szzl3mPK2neFFLS6lG6F0wxVLr7SueOJFhRZRFJRSJQia0DgBxQlZnQRUrCAjfAbO/s1600/yeti+tool+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Yeti tool screenshot" border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5p_8uF28TyyEY6WHl18BJAymokj8-VVu3MRWW5Wt7IIrOKw2h-IiduRV_50rPsD9BqFdwAWtpQ9-szzl3mPK2neFFLS6lG6F0wxVLr7SueOJFhRZRFJRSJQia0DgBxQlZnQRUrCAjfAbO/s400/yeti+tool+screenshot.png" title="Yeti tool screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>Yeti </b>is a network foot-printing tool and <b>Yeti</b> is a <i>perfect tool to perform the reconnaissance </i>phase before a 
pentest or a security assessment. A nice feature is the use of a <i>GeoIP 
database to look for IP addresses</i> and <i>display your network</i> on a world 
map. <b>Yeti</b> grabs information publicly available on the Internet and does 
not perform any intrusive actions. Big companies may have a huge amount 
of devices and resources online with remote offices in several 
countries, several websites. If you host applications in the cloud, it 
could also discover what are your “neighbours” (who share the same IP 
addresses as you).
</div>
<div style="text-align: justify;">
Yeti is developed in Java and run on all the well-known operating systems flavors. Yeti proposes the following features:
</div>
<ul style="text-align: justify;">
<li> Domain expansion – Based on a domain names list, it gathers 
information for all the available TLD (read from a list). Ex: 
rootshell.be, rootshell.org, rootshell.eu, rootshell.com, etc. Whois 
information is gathered and filters can be applied to search for 
relevant information.
</li>
<li> Forward lookup – Extracts information from domains (MX records, etc)
</li>
<li> Certification extraction – Extracts the SSL certificates from web sites.
</li>
<li> Reverse lookup – Performs reverse IP lookup from IP lists.
</li>
<li> IP/Site scan – Using the Microsoft Bing API, it extracts information based on domain names or IP addresses<b>. </b></li>
</ul>
<b>Tutorial :: </b><a href="http://spyeti.blogspot.in/p/getting-started.html" target="_blank">Click Here</a><b> </b><br />
<b>Download Here :: </b><a href="http://www.sensepost.com/cms/resources/labs/tools/misc/jyeti-dist.tar.bz2" target="_blank">Yeti .tar.bz2 (for Linux)</a><b><br /></b><br />
<b>Official Website ::</b> http://spyeti.blogspot.in/

Yeti (Network Foot-Printing) :: Tools

Yeti is a network foot-printing tool and Yeti is a perfect tool to perform the reconnaissance phase before a pentest or a security asse...

Open Port Check :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicOHIjv0sZ6FWi82BD2iuD-v4RVC7PrOOwgcyjOEffZhUsxMYw0_jC8qZH0d7S5vNhLSpa_JhSkdOz07kcikEL7iGBp-VTN6buPqChCQk80D1dFP8ODW8IUMlyGELXXpqIKtR8XqszQgxZ/s1600/open+port+check.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="open port checker logo" border="0" height="172" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicOHIjv0sZ6FWi82BD2iuD-v4RVC7PrOOwgcyjOEffZhUsxMYw0_jC8qZH0d7S5vNhLSpa_JhSkdOz07kcikEL7iGBp-VTN6buPqChCQk80D1dFP8ODW8IUMlyGELXXpqIKtR8XqszQgxZ/s400/open+port+check.JPG" title="open port checker logo" width="400" /></a></div>
<div style="text-align: justify;">
The <b>open port checker</b> is a tool you can use to<i> check your external IP 
address</i> and <i>detect open ports on your connection</i>. <b>Open Port Check</b> tool is useful 
for finding out if your port forwarding is setup correctly or if your 
server applications are being blocked by a firewall. This tool may also 
be used as a port scanner to scan your network for ports that are 
commonly forwarded. It is important to note that some ports, such as 
port 25, are often blocked at the ISP level in an attempt to prevent 
malicious activity. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Online ::</b> <a href="http://www.yougetsignal.com/tools/open-ports/" target="_blank">Open Port Check Here</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.yougetsignal.com/</div>

Open Port Check :: Tools

The open port checker is a tool you can use to check your external IP address and detect open ports on your connection . Open Port Ch...

Spamhole (Fake Open SMTP Relay) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="spamhole icon" border="0" height="288" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqgcukVMDw1RsYGJ3aGblNfFV_xTdGEVOlVczM9nJ9m8k1eXqNCk2wif9XPVHMr_ZIL4s9Nn9vAIyf8K7a8o-5NzEpSjVjd1wssVxKNoB14was_qw88F8xtQ89GTkteQlby9ostpsdlgN6/s320/spamhole+logo.jpg" title="spamhole icon" width="320" /></div>
<b>Spamhole</b> is a <i>fake open SMTP relay</i>, intended to stop (some) spam by 
convincing spammers that it is delivering spam messages for them, when 
in fact it is not.<b> </b><br />
<h2>
<b>Usages :: </b></h2>
<pre><span style="font-family: "Courier New",Courier,monospace;">spamhole.h Config Options:

PWD - spamhole's present working directory (where it stores it's data.

UID - spamhole's running UID (after binding to the port, it drops privs to this user)

IDENT - A text string to uniquely identify this spamhole.This string will be added to modified emails via the
 X-SpamHole-Ident header.

LOCAL_IP - The local address you want spamhole to listen on (use "0.0.0.0" for all local addresses).

LOCAL_PORT - The local port for spamhole to listen to (usually port 25)

SMTP_RELAY - The remote SMTP relay or mail server that spamhole will redirect connections to for mail service.

SMTP_PORT - The port that SMTP_RELAY listens on for SMTP.

MAX_CON - The maximum number of unmodified 'passthrough' SMTP connections any given IP is allowed to have.  After
 this threshold is reached, incoming SMTP will be modified and tagged via X-SpamHole headers.

HOLEADDR - The email address that modified connections will have emails re-addressed to.  This should be a SPAM
 mailbox or spam registration address, such as the registration address for a Bayesian Filter.</span></pre>
<br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/spamhole/files/latest/download" target="_blank">Spamhole 0.4.tar.gz (for Linux)</a><br />
<b>Official Website :: </b>http://www.spamhole.net/

Spamhole (Fake Open SMTP Relay) :: Tools

Spamhole is a fake open SMTP relay , intended to stop (some) spam by convincing spammers that it is delivering spam messages for them, w...

DNSRecon (DNS Information Gathering) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBmBNrk2zjtV5xfWpJ9Ho5Dxa_UwHGMt5XrbrxISfORTwpUgIpmszrDOrbLbsO6loanBsuVWDn27vHVtA4zWOLDGCd-r9_Uf7Bc1W2EBm0TDEkMdxq6dRPqXoKZ8Jj5iD12qE0nBpf7Oz_/s1600/dnsrecon1.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="dnsrecon" border="0" height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBmBNrk2zjtV5xfWpJ9Ho5Dxa_UwHGMt5XrbrxISfORTwpUgIpmszrDOrbLbsO6loanBsuVWDn27vHVtA4zWOLDGCd-r9_Uf7Bc1W2EBm0TDEkMdxq6dRPqXoKZ8Jj5iD12qE0nBpf7Oz_/s400/dnsrecon1.jpeg" title="dnsrecon" width="400" /></a></div>
<span class="nodeLabelBox repTarget " role="treeitem"><span class="nodeBracket editable insertBefore "></span><span class="nodeText editable "><span class="  "><b>DNS
 reconnaissance or DNSRecon</b> is part of the <i>information gathering stage</i> on a 
penetration test engagement.When a penetration tester is performing a 
DNS reconnaissance is trying to obtain as much as information as he can 
regarding the DNS servers and their records.The information that can be 
gathered it can disclose the network infrastructure of the company 
without alerting the IDS/IPS.This is due that most of the organizations 
are not monitoring their DNS server traffic and those that do they only 
monitor the zone transfers attempts.</span></span></span><br />
<span class="nodeLabelBox repTarget " role="treeitem"><span class="nodeText editable "><span class="  ">On the web there are a variety of tools available that can gather DNS information effectively but in this article we will focus on the DNSRecon which is a tool that was developed by Carlos Perez and it is designed to perform DNS reconnaissance.This tool is included on backtrack and it is written in python. </span></span></span><br />
<b>DNSrecon</b> is a simple tool writen for target <b>enumeration</b> during  authorized penetration test engaments. This tool provides diferent  methods for enumerating targets thru DNS service. </div>
<ul style="text-align: justify;">
<li>Standard Record Enumeration for a given domain (A, NS, SOA and MX). </li>
<li>Top Leven Domain Expansion for a given domain. </li>
<li>Zone Transfer against all NS records of a given domain. </li>
<li>Reverse Lookup against a given IP Range given a start and end IP. </li>
</ul>
<div style="text-align: justify;">
 Here is an Example of the tool enumerating SRV Record and Standard Record.</div>
<pre style="background-color: #fbfbfb; border: 1px solid #cecece; min-height: 40px; overflow: auto; padding: 5px; width: 650px;"><pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 19px; margin: 0em; width: 100%;">root@bt:~# ./dnsrecon.rb -t srv -d avaya.com</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">_sip._udp.avaya.com,198.152.17.90,5060</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; margin: 0em; width: 100%;">_sip._tcp.avaya.com,198.152.17.90,5060</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">root@bt:~# ./dnsrecon.rb -t std -d google.com</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 18px; margin: 0em; width: 100%;">google.com,209.85.171.100,A</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">google.com,74.125.67.100,A</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">google.com,74.125.45.100,A</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 19px; margin: 0em; width: 100%;">ns1.google.com,216.239.32.10,SOA</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">ns4.google.com,216.239.38.10,NS</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 18px; margin: 0em; width: 100%;">ns1.google.com,216.239.32.10,NS</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 18px; margin: 0em; width: 100%;">ns2.google.com,216.239.34.10,NS</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">ns3.google.com,216.239.36.10,NS</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 18px; margin: 0em; width: 100%;">smtp4.google.com,72.14.221.25,MX,10</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 19px; margin: 0em; width: 100%;">smtp1.google.com,209.85.237.25,MX,10</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 19px; margin: 0em; width: 100%;">smtp2.google.com,64.233.165.25,MX,10</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; margin: 0em; width: 100%;">smtp3.google.com,209.85.137.25,MX,10</pre>
</pre>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/uy9Z6C8vVRw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="https://github.com/darkoperator/dnsrecon/blob/master/dnsrecon.py" target="_blank">dnsrecon.py</a><b>
</b></div>
<div style="text-align: justify;">
<b>Source :: </b><cite>https://github.com/darkoperator/<b>dnsrecon</b></cite></div>
</div>

DNSRecon (DNS Information Gathering) :: Tools

DNS reconnaissance or DNSRecon is part of the information gathering stage on a penetration test engagement.When a penetration tester...

HostMap (Hosts Discovery) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGKwLKElCSEhex-_U5vhK8pGd5CaZoOheAiXG3v0gep9WqvjsG1ezuhfstT4PnSblQG1kBjqmvrn9pgrXFl9uIM2tW8oXHGndJXwmDDNKLJymjRBM4E_ewFeSOdy5ERmljHWZzlmGxW2gy/s1600/Hostmap+image.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="hostmap image" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGKwLKElCSEhex-_U5vhK8pGd5CaZoOheAiXG3v0gep9WqvjsG1ezuhfstT4PnSblQG1kBjqmvrn9pgrXFl9uIM2tW8oXHGndJXwmDDNKLJymjRBM4E_ewFeSOdy5ERmljHWZzlmGxW2gy/s1600/Hostmap+image.png" title="hostmap image" /></a></div>
<div style="text-align: justify;">
<b>Hostmap</b> is a free, <i>automatic, hostnames and virtual hosts 
discovery tool</i> written in Ruby by Alessandro `jekil` Tanasi and licensed
 under GNU General Public License version 3 (GPLv3). It's goal is to 
enumerate all hostnames and configured virtual hosts on an IP address. 
The primary users of hostmap are professionals performing vulnerability 
assessments and penetration tests.
</div>
<div style="text-align: justify;">
hostmap helps you using several techniques to enumerate all the hostnames associated with an IP address.
</div>
<div style="text-align: justify;">
The major features are:
</div>
<ul style="text-align: justify;">
<li> DNS names and virtual hosts enumeration
</li>
<li> Multiple discovery techniques, to read more see documentation.
</li>
<li> Results correlation, aggregation and normalization
</li>
<li> Multithreaded and event based engine
</li>
<li> Platform independent
</li>
</ul>
<div style="text-align: justify;">
<b>Downlaod Here ::</b> <a href="https://sourceforge.net/projects/hostmap/files/hostmap/hostmap-0.2/hostmap-0.2.tar.gz/download" target="_blank">Hostmap (for Linux)</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.lonerunners.net/ </div>
</div>

HostMap (Hosts Discovery) :: Tools

Hostmap is a free, automatic, hostnames and virtual hosts discovery tool written in Ruby by Alessandro `jekil` Tanasi and licensed u...

Angry IP Scanner :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="angryip scanner logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgr5X1wp_12n0btEqP-TCO2mzp0n5YFM9n3Vo5p9Schm2bSkt5J-owscFGqTVtO6g3W9EzeWbUea2nfbxOQiLNnjvIkbJY141NAJhHk3wQI5aiUBe3b2UJGo9riUXcvga8Aiolecr7zO3MR/s1600/angryip+scanner+logo.jpg" title="angryip scanner logo" /></div>
<div style="text-align: justify;">
<b>Angry IP Scanner</b> (or simply <i>ipscan</i>) is an open-source and  cross-platform <b>network scanner</b> designed to be fast and simple to use. It  scans IP addresses and ports as well as has many other features. </div>
<div style="text-align: justify;">
It is widely used by <i>network administrators</i> and just curious  users around the world, including large and small enterprises, banks,  and government agencies. It runs on <i>Linux</i>, <i>Windows</i>, and <i>Mac OS X</i>, possibly supporting other platforms as well. </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/9wgcdgP-fgI?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
  </div>
<div style="text-align: justify;">
<b>Download Here ::</b> <a href="http://sourceforge.net/projects/ipscan/files/ipscan3-binary/3.2/ipscan-win32-3.2.exe" target="_blank">Windows</a>  |  <a href="http://sourceforge.net/projects/ipscan/files/ipscan3-binary/3.2/ipscan_3.2_i386.deb" target="_blank">Linux</a>  |  <a href="http://sourceforge.net/projects/ipscan/files/ipscan3-binary/3.2/ipscan-mac-3.2.zip" target="_blank">MAC</a> </div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://angryip.org/ </div>
</div>

Angry IP Scanner :: Tools

Angry IP Scanner (or simply ipscan ) is an open-source and cross-platform network scanner designed to be fast and simple to use. It ...

p0f (OS and Application Fingerprinting) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxMdkwqLhu3-pobymZBIO1qkTOxYwuX4bDCm4Q611wMbhHmVJFqDwC9T4Kry2DSL2ce_ZpjZSs3_1aULLvVDqe4vFIpOWUhyphenhyphenEX_EdPrmfz-HG-XmVhf9ArdZ8L37QRcjw75UeZOC30pf8G/s1600/p0f+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="p0f screenshot" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxMdkwqLhu3-pobymZBIO1qkTOxYwuX4bDCm4Q611wMbhHmVJFqDwC9T4Kry2DSL2ce_ZpjZSs3_1aULLvVDqe4vFIpOWUhyphenhyphenEX_EdPrmfz-HG-XmVhf9ArdZ8L37QRcjw75UeZOC30pf8G/s320/p0f+screenshot.jpg" title="p0f screenshot" width="320" /></a></div>
<div style="text-align: justify;">
<b>p0f</b> is a versatile <i>passive OS and application fingerprinter,</i> and a tool  for <i>detecting NAT/connection sharing</i>.  It is useful for <i>penetration  testing, routine network monitoring, and forensics</i>, and to aid abuse  detection tools such as IDSes, spam filters, or honeypots. <b>P0f</b> is a tool that utilizes an array of sophisticated, purely passive traffic fingerprinting mechanisms to identify the players behind any incidental TCP/IP communications (often as little as a single normal SYN) without interfering in any way. Version 3 is a complete rewrite of the original codebase, incorporating a significant number of improvements to network-level fingerprinting, and introducing the ability to reason about application-level payloads (e.g., HTTP). </div>
<div style="text-align: justify;">
Some of p0f's capabilities include: </div>
<ul style="text-align: justify;">
<li> Highly scalable and extremely fast identification of the operating system      and software on both endpoints of a vanilla TCP connection - especially in      settings where <a href="http://www.nmap.org/">NMap</a> probes are blocked, too slow, unreliable, or would      simply set off alarms.  </li>
<li> Measurement of system uptime and network hookup, distance (including      topology behind NAT or packet filters), user language preferences, and so on.  </li>
<li> Automated detection of connection sharing / NAT, load balancing, and      application-level proxying setups.  </li>
<li> Detection of clients and servers that forge declarative statements      such as <i>X-Mailer</i> or <i>User-Agent</i>.  </li>
</ul>
<div style="text-align: justify;">
<b>p0f</b> can be operated in the foreground or as a daemon, and offers a simple real-time API for third-party components that wish to obtain additional information about the actors they are talking to. </div>
<div style="text-align: justify;">
Common uses for p0f include reconnaissance during penetration tests; routine network monitoring; detection of unauthorized network interconnects in corporate environments; providing signals for abuse-prevention tools; and miscellanous forensics. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/OROE_HoN8mg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
Download Here :: <a href="http://lcamtuf.coredump.cx/p0f3/releases/p0f-3.06b.tgz" target="_blank">p0f-3.06b.tgz (for Linux)</a></div>
<div style="text-align: justify;">
Official Website :: http://lcamtuf.coredump.cx/p0f3/</div>
</div>

p0f (OS and Application Fingerprinting) :: Tools

p0f is a versatile passive OS and application fingerprinter, and a tool for detecting NAT/connection sharing . It is useful for pene...

Yersinia (Network Tool) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Yersinia Logo" border="0" height="155" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaip-ZZ9WXtUFqjvHpyobAuFZwEjxo7tfG3P7zCZO3FhpEcOO4kT7V5Tpw5l2HzQaqs_2m02KHTdfYYWHsDikZeBdyfU9d9bp3nMRC-uEUFZIOMoDgpdnVV5pb-NxIy1tBP9_DoBwLj8qN/s320/yersinia+logo.jpg" title="Yersinia Logo" width="320" /></div>
<b>Yersinia</b> is a <i>network tool designed</i> to take advantage of <i>some  weakeness in different network protocols.</i> It pretends to be a solid  framework for analyzing and testing the deployed networks and systems. </div>
<div style="text-align: justify;">
Currently, there are some network protocols implemented, but others  are coming (tell us which one is your preferred). Attacks for the  following network protocols are implemented (but of course you are free  for implementing new ones): </div>
<ul style="text-align: justify;">
<li>Spanning Tree Protocol (STP)</li>
<li>Cisco Discovery Protocol (CDP)</li>
<li>Dynamic Trunking Protocol (DTP)</li>
<li>Dynamic Host Configuration Protocol (DHCP)</li>
<li>Hot Standby Router Protocol (HSRP)</li>
<li>IEEE 802.1Q</li>
<li>IEEE 802.1X</li>
<li>Inter-Switch Link Protocol (ISL)</li>
<li>VLAN Trunking Protocol (VTP)</li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/cyU-ds5M9Uo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here ::</b> <a href="http://www.yersinia.net/download/yersinia-0.7.1.tar.gz"> Yersinia-0.7.1.tar.gz</a>  
<b> </b><br />
<b>Official Website ::</b> http://www.yersinia.net/</div>

Yersinia (Network Tool) :: Tools

Yersinia is a network tool designed to take advantage of some weakeness in different network protocols. It pretends to be a solid f...

Fierce (DNS Enumeration) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
 <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-d0GilIUG5gDmVrO9tXHE8UJRtwhXIr4VOfgiq6g0SySvlmFZvw7j4UPg3IEW2Ngpv9CxGhO0Cq94iAL9eUmsarmZ8wzwJHgmSM1t3kWG8zfMEfxm7QLPnHMWfkarA-sqsYXQJRJUhROK/s1600/fierce+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="fierce domain" border="0" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-d0GilIUG5gDmVrO9tXHE8UJRtwhXIr4VOfgiq6g0SySvlmFZvw7j4UPg3IEW2Ngpv9CxGhO0Cq94iAL9eUmsarmZ8wzwJHgmSM1t3kWG8zfMEfxm7QLPnHMWfkarA-sqsYXQJRJUhROK/s400/fierce+screenshot.png" title="fierce domain" width="400" /></a></div>
<div style="text-align: justify;">
<b>Fierce </b>is a <i>DNS Enumeration</i> and <b>Fierce</b> is a <i>semi-lightweight scanner that helps locate non-contiguous IP  space and hostnames</i> against specified domains.  It's really meant as a  pre-cursor to nmap, unicornscan, nessus, nikto, etc, since all of those  require that you already know what IP space you are looking for.  This  does not perform exploitation and does not scan the whole internet  indiscriminately.  It is meant specifically to locate likely targets  both inside and outside a corporate network.  Because it uses DNS  primarily you will often find mis-configured networks that leak internal  address space. That's especially useful in targeted malware.  <b><br />
</b></div>
<div style="text-align: justify;">
<b>Fierce</b> domain scan was born out of personal frustration after  performing a web application security audit.  It is traditionally very  difficult to discover large swaths of a corporate network that is  non-contiguous.  It's terribly easy to run a scanner against an IP  range, but if the IP ranges are nowhere near one another you can miss  huge chunks of networks.</div>
<div style="text-align: justify;">
First what Fierce is not.  Fierce is not an IP scanner, it is not a  DDoS tool, it is not designed to scan the whole internet or perform any  un-targeted attacks. It is meant specifically to locate likely targets  both inside and outside a corporate network.  Only those targets are  listed (unless the -nopattern switch is used).  No exploitation is  performed (unless you do something intentionally malicious with the  -connect switch).  Fierce is a reconnaissance tool.  Fierce is a PERL  script that quickly scans domains (usually in just a few minutes,  assuming no network lag) using several tactics.</div>
<div style="text-align: justify;">
First it queries your DNS for the DNS servers of the target.  It then  switches to using the target's DNS server (you can use a different one  if you want using the -dnsserver switch but this can cause problems if  the server you use won't tell you information about other people's sites  and of course you won't find much relevant internal address space).   Fierce then attempts to dump the SOA records for the domain in the very  slim hope that the DNS server that your target uses may be  misconfigured.  Once that fails (because it almost always will) it  attempts to "guess" names that are common amongst a lot of different  companies.  Don't ask me where I got the list, it's just a list of names  that id and I have seen all over the place.  I thought about adding a  dictionary to this, but I think that would take a lot longer, and given  that very few of the words are dictionary words I don't think this would  add a lot of value.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/il6Ey1sNc0w?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://ha.ckers.org/fierce/fierce.pl" target="_blank">fierce.pl</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://ha.ckers.org/fierce/</div>
</div>

Fierce (DNS Enumeration) :: Tools

Fierce is a DNS Enumeration and Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and hostnames again...

Subscribe to: Posts ( Atom )