ToolWar | Information Security (InfoSec) Tools: Proxy

Orbot (Tor for Android Devices) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="orbot logo" border="0" height="312" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5RYmrfY-dbfDYpMMg0kD6ucxTAaijL-WLejZZ5J8cNhrGhCl0Y07Wnk3u8L2K65SE63V51dEeDhwL_hVod55CRBWkisVhoF5PHttLmmDBqNtI-0OLlkc9RkbWIcFGN0qHryBxqCyEOEI-/s640-rw/orbot+logo.png" title="orbot logo" width="640" /></div>
<div style="text-align: justify;">
<b>Orbot</b> is a <b>free proxy app</b> that empowers other apps to use the <i> internet more securely</i>. <b>Orbot</b> uses Tor to <a href="http://www.toolwar.com/search/label/Encryption" target="_blank">encrypt</a> your Internet traffic  and then hides it by bouncing through a series of computers around the  world. <a href="http://www.toolwar.com/search/label/Tor" target="_blank"><b>Tor</b></a> is <a href="http://www.toolwar.com/search/label/Free" target="_blank">free</a> software and an open <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> that helps you defend  against a form of network surveillance that threatens personal freedom  and privacy, confidential business activities and relationships, and  state security known as traffic <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a>.</div>
<div style="text-align: justify;">
<b>Orbot</b> is the only app that creates a truly private internet  connection. As the New York Times writes, “when a communication arrives  from Tor, you can never know where or whom it’s from.” Tor won the 2012  Electronic Frontier Foundation (EFF) Pioneer Award.</div>
<div style="text-align: justify;">
<br />
<b>ACCEPT NO SUBSTITUTES</b>: <b>Orbot</b> is the safest way to use the Internet on  <a href="http://www.toolwar.com/search/label/Android" target="_blank">Android</a>. Period. <b>Orbot</b> bounces your encrypted traffic several times  through computers around the world, instead of connecting you directly  like <a href="http://www.toolwar.com/search/label/Proxy" target="_blank">VPNs and proxies</a>. This process takes a little longer, but the  strongest privacy and identity protection available is worth the wait.</div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Dcf5sh99ze0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
 </h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Android Play Store ::</b> <a href="https://market.android.com/details?id=org.torproject.android" target="_blank">Orbot</a> </div>
<div style="text-align: justify;">
<b>Direct Download :: </b><a href="https://guardianproject.info/releases/orbot-latest.apk" target="_blank">Orbot.apk</a></div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
</div>
</div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: left;">
<b>Official Website :: </b><a href="https://guardianproject.info/apps/orbot/">https://guardianproject.info/apps/orbot/</a></div>
<div class="separator" style="clear: both; text-align: left;">
<b>
</b></div>
<b> </b></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>

Orbot (Tor for Android Devices) :: Tools

Orbot is a free proxy app that empowers other apps to use the internet more securely . Orbot uses Tor to encrypt your Internet traff...

AndiParos (Web Application Security Assessments) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH1vpXX0DjZZItydH0KB9zNnfXlCbRkY7UWHW5FiqbE4Hx-kZMJEJs4iZIKQXj74FOKOYKrBbA0ws0u1Dw5qCx02GfzGD3M8_BRJhHOetEmnneVAQP2WANvMYpwj_5WJdX8W1M8Ndcsq2S/s1600/Andiparos_Screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="AndiParos Screenshot" border="0" height="307" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH1vpXX0DjZZItydH0KB9zNnfXlCbRkY7UWHW5FiqbE4Hx-kZMJEJs4iZIKQXj74FOKOYKrBbA0ws0u1Dw5qCx02GfzGD3M8_BRJhHOetEmnneVAQP2WANvMYpwj_5WJdX8W1M8Ndcsq2S/s1600-rw/Andiparos_Screenshot.png" title="AndiParos Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>Andiparos</b> is a fork of the famous <a href="http://www.toolwar.com/2013/09/paros-proxy-tools.html" rel="" target="_blank">Paros Proxy</a>.
 It is an open source <b>web application security assessment tool</b> that 
gives <a href="http://www.toolwar.com/search/label/Penetration" target="_blank">penetration</a> testers the ability to spider websites, analyze 
content, intercept and modify requests, etc. </div>
<div style="text-align: justify;">
The advantage of 
<b>Andiparos</b> is mainly the support of Client Certificates on Smartcards. 
Moreover it has several small interface enhancements, making the life 
easier for penetration testers... </div>
<div style="text-align: justify;">
Features: </div>
<ul style="text-align: justify;">
<li>Smartcard support </li>
<li>BeanShell support </li>
<li>History Filter (URLs) </li>
<li>Passive Scanner </li>
<li>Advanced search functionality </li>
<li>MultiTags for request/response </li>
<li>Mark Request/Response </li>
<li>Better<a href="http://www.toolwar.com/search/label/Mac" target="_blank"> Mac OS X</a> integration </li>
<li>other nice enhancements... </li>
</ul>
<h3>
Tutorials ::</h3>
<b>Wiki ::</b> <a href="https://code.google.com/p/andiparos/w/list" target="_blank">Click Here</a>  <br />
<h3>
Download ::</h3>
<b>Linux | Windows | Mac :: </b><a href="https://code.google.com/p/andiparos/downloads/detail?name=Andiparos-1.0.6.zip" target="_blank">Andiparos v1.0.6</a> (.zip) | <a href="https://code.google.com/p/andiparos/downloads/detail?name=Andiparos-1.0.6-Installer.exe" target="_blank">Andiparos v1.0.6</a> (.exe) | <a href="https://code.google.com/p/andiparos/downloads/detail?name=Andiparos-v1.0.6.dmg" target="_blank">Andiparos v1.0.6</a> (.dmg) <br />
<b>Source Website :: </b><a href="https://code.google.com/p/andiparos/">https://code.google.com/p/andiparos/</a>

AndiParos (Web Application Security Assessments) :: Tools

Andiparos is a fork of the famous Paros Proxy . It is an open source web application security assessment tool that gives penetration ...

Fiddler (Web Debugger Proxy) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoMGV0ZYokZLN2EHLK6qkK_j46ll8DxX5tNAWsuTWrfhCFoHDzxx4SUQFYGKOWgGNkc3p12cIAU1IWKWCKRo16-Ffc1JXOnqM6M60CPkbbxgDqnRKDKo0SJjH0htwNuFreOKr16MRNlihG/s1600/Fiddler+logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="251" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoMGV0ZYokZLN2EHLK6qkK_j46ll8DxX5tNAWsuTWrfhCFoHDzxx4SUQFYGKOWgGNkc3p12cIAU1IWKWCKRo16-Ffc1JXOnqM6M60CPkbbxgDqnRKDKo0SJjH0htwNuFreOKr16MRNlihG/s1600-rw/Fiddler+logo.png" width="400" /></a></div>
<div style="text-align: justify;">
<b>Fiddler</b> is a <b>Web Debugging Proxy</b> which logs all HTTP(S) traffic between  your computer and the Internet. <b>Fiddler</b> allows you to inspect all  HTTP(S) traffic, set breakpoints, and "fiddle" with incoming or outgoing  data. Fiddler includes a powerful event-based scripting subsystem, and  can be extended using any .NET language.</div>
<ul style="text-align: justify;">
<li><b>HTTP/HTTPS Traffic Recording :: </b>Fiddler is a free <a href="http://www.toolwar.com/search/label/Web" target="_blank">web</a> <a href="http://www.toolwar.com/search/label/Debugger" target="_blank">debugging</a> proxy which logs all HTTP(s) traffic 
between your computer and the Internet. Use it to debug traffic from 
virtually any application that supports a proxy like IE, Chrome, Safari,
 Firefox, Opera and more.</li>
<li><b>Web Session Manipulation ::</b> Easily manipulate and edit web sessions. All you need to do is set a breakpoints to pause the processing of the session and permit alteration 
of the request/response. You can also compose your own HTTP requests to 
run through <b>Fiddler</b>.</li>
<li><b>Web Debugging :: </b>Debug traffic from PC, <a href="http://www.toolwar.com/search/label/Mac" target="_blank">Mac</a> or <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux systems</a> and <a href="http://www.toolwar.com/search/label/Mobile" target="_blank">mobile devices</a>. Ensure 
the proper cookies, headers and cache directives are transferred between
 the client and server. Supports any framework, including .NET, Java, 
Ruby, etc.</li>
<li><b> Security Testing :: </b>Use <b>Fiddler</b> for <a href="http://www.toolwar.com/search/label/Security" target="_blank">security testing</a> your web applications -- decrypt HTTPS 
traffic, and display and modify requests using a man-in-the-middle 
decryption technique. Configure Fiddler to decrypt all traffic, or only 
specific sessions.</li>
<li><b>Performance Testing :: </b>Fiddler lets you see the “total page weight,” HTTP caching and 
compression at a glance. Isolate performance bottlenecks with rules like
 “Flag any uncompressed responses larger than 25kb.”</li>
<li><b>Customizing Fiddler :: </b>Benefit from a rich extensibility model, ranging from simple 
FiddlerScript to powerful Extensions which can be developed using any 
.NET language.  </li>
<li><div class="sfContentBlock">
<b>Simulate Real User Load Using Fiddler Captures ::</b> Fiddler is an excellent tool for 
understanding the performance of your website, but how does your 
performance change when lots of users are hitting the site? Check out 
Telerik Test Studio powered by Fiddler to get an in-depth understanding 
of how your site performance degrades as the number of users increases.</div>
</li>
</ul>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/gujBKFGwjd4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
 </h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.telerik.com/docs/default-source/fiddler/fiddler4setup.exe?sfvrsn=2" target="_blank">Fiddler v4.4.6.2</a> (.exe) 
<b> </b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.telerik.com/download/fiddler">http://www.telerik.com/download/fiddler</a></div>

Fiddler (Web Debugger Proxy) :: Tools

Fiddler is a Web Debugging Proxy which logs all HTTP(S) traffic between your computer and the Internet. Fiddler allows you to inspect...

ModSecurity (Web Application Firewall) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="modsecurity logo" border="0" height="212" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqIaR3MOqqt6M9kImwLEM90dn9peh4HGb7o2VN5_LqA_bdR7pZqI6NiXKpATu9GK7SXtf7mbPlWzHP-zqQrAfCIPEzsQuiMRdYdAsbjCDXBBaqUZI9R5Pk_6no9f8fPoZakuUWdh6BxuN1/s640-rw/mod-security+logo.jpg" title="modsecurity logo" width="640" /></div>
</div>
<div style="text-align: justify;">
<b>ModSecurity</b> is a <i>web application firewall</i> that can work either embedded  or as a <b>reverse proxy</b>. It provides protection from a range of <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attacks</a>  against web applications and allows for HTTP traffic monitoring, logging  and real-time analysis. </div>
<h2 style="text-align: justify;">
ModSecurity: Overview</h2>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
With over 70% of all attacks now carried out over the web application  level, organisations need every help they can get in making their  systems secure. <b>Web application firewalls</b> are deployed to establish an  external <a href="http://security/" target="_blank">security</a> layer that increases security, detects, and prevents  attacks before they reach web applications. </div>
<h3 style="text-align: justify;">
HTTP Traffic Logging</h3>
<div style="text-align: justify;">
<a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> servers are typically well-equipped to log traffic in a form useful  for marketing analyses, but fall short when it comes to logging of  traffic to web applications. In particular, most are not capable of  logging the request bodies. Your adversaries know this, and that is why  most attacks are now carried out via POST requests, rendering your  systems blind. </div>
<div style="text-align: justify;">
ModSecurity makes full HTTP transaction logging possible, allowing  complete requests and responses to be logged. Its logging facilities  also allow fine-grained decisions to be made about exactly what is  logged and when, ensure only the relevant data is recorded. </div>
<h3 style="text-align: justify;">
Real-Time Monitoring and Attack Detection</h3>
<div style="text-align: justify;">
In addition to providing logging facilities, <b>ModSecurity</b> can <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">monitor</a> the  HTTP traffic in real time in order to detect attacks. In this case <b> ModSecurity</b> operates as a web intrusion detection tool, allowing you to  react to suspicious events that take place at your web systems. </div>
<h3 style="text-align: justify;">
Attack Prevention and Just-in-time Patching</h3>
<div style="text-align: justify;">
<b>ModSecurity</b> can also act immediately to prevent attacks from reaching  your web applications. There are three commonly used approaches: </div>
<ol style="text-align: justify;">
<li><b>Negative security model.</b> Negative security model monitors  requests for anomalies, unusual behaviour, and common web application  attacks. It keeps anomaly scores for each request, IP addresses,  application sessions, and user accounts. Requests with high anomaly  scores are either logged or rejected altogether. </li>
<li><b>Known weaknesses and vulnerabilities.</b> Its rule language  makes ModSecurity an ideal external patching tool. External patching is  all about reducing the window of opportunity. Time needed to patch  application vulnerabilities often runs to weeks in many organisations.  With ModSecurity, applications can be patched from the outside, without  touching the application source code (and even without any access to  it), making your systems secure until a proper patch is produced. </li>
<li><b>Positive security model.</b> When positive security model is  deployed, only requests that are known to be valid are accepted, with  everything else rejected. This approach works best with applications  that are heavily used but rarely updated. </li>
</ol>
<h3 style="text-align: justify;">
Flexible Rule Engine</h3>
<div style="text-align: justify;">
A flexible rule engine sits in the heart of ModSecurity. It  implements the ModSecurity Rule <a href="http://www.toolwar.com/search/label/Language" target="_blank">Language</a>, which is a specialised  programming language designed to work with HTTP transaction data. The  <b>ModSecurity</b> Rule Language was designed to be easy to use, yet flexible:  common operations are simple while complex operations are possible.</div>
<div style="text-align: justify;">
Certified ModSecurity Rules, included with subscription to  <b>ModSecurity</b>, contain a comprehensive set of rules that implement  general-purpose hardening, common web application security issues.  Heavily commented, these rules can be used as a learning tool.</div>
<h3 style="text-align: justify;">
Embedded Deployment</h3>
<div style="text-align: justify;">
ModSecurity is an embeddable web application firewall, which means it  can be deployed as part of your existing web server infrastructure  (Apache, IIS7 and Nginx).</div>
<div style="text-align: justify;">
This deployment method has certain advantages:</div>
<ol style="text-align: justify;">
<li>No changes to existing network. It only takes a few minutes to add  ModSecurity to your existing web servers. And because it was designed to  be completely passive by default, you are free to deploy it  incrementally and only use the features you need. It is equally easy to  remove or deactivate it should decide you don't want it any more. </li>
<li>No single point of failure. Unlike with network-based  deployments, you will not be introducing a new point of failure to your  system. </li>
<li>Implicit load balancing and scaling. Because it works embedded  in web servers, <b>ModSecurity</b> will automatically take advantage of the  additional load balancing and scalability features. You will not need to  think of load balancing and scaling unless your existing system needs  them. </li>
<li>Minimal overhead. Because it works from inside the web server  process there is no overhead for network communication and minimal  overhead in parsing and data exchange. </li>
<li>No problem with encrypted or compressed content. Many <a href="http://www.toolwar.com/search/label/IDS" target="_blank">IDS</a>  systems have difficulties analysing SSL traffic. This is not a problem  for ModSecurity because it is positioned to work when the traffic is  decrypted and decompressed.  </li>
</ol>
<div style="text-align: justify;">
ModSecurity is known to work well on a wide range of operating systems.  Our customers are successfully running it on <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>, <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>, Solaris,  FreeBSD, OpenBSD, NetBSD, AIX, Mac OS X, and HP-UX. </div>
<h3 style="text-align: justify;">
Network-Based Deployment</h3>
<div style="text-align: justify;">
<b>ModSecurity</b> works equally well when deployed as part of a reverse proxy  server, and many of our customers choose to do so. In this scenario, one  installation of <b>ModSecurity </b>can protect any number or type of back-end  web servers. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/7w9aHEx-BmE?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/P-KJU785CKg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/nMGtIgrVv8s?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux :: </b></div>
<div style="text-align: justify;">
<b>Installation - Ubuntu/Debian</b>

<span style="font-family: "Courier New",Courier,monospace;"> </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo apt-get install libapache2-mod-security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo a2enmod mod-security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo /etc/init.d/apache2 force-reload</span><br />
<br />
 <b>Installation - Fedora/CentOS</b><span style="font-family: "Courier New",Courier,monospace;"> </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo yum install mod_security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo /etc/init.d/httpd restart</span>

<b> </b><br />
<br />
<b>Windows ::</b></div>
<ul>
<li><a href="https://www.modsecurity.org/tarball/2.7.5/ModSecurityIIS_2.7.5.msi">ModSecurity for IIS MSI Installer</a> </li>
<li><a href="https://www.modsecurity.org/tarball/2.7.5/ModSecurityIIS_2.7.5.msi.sha256">ModSecurity for IIS MSI Installer SHA25</a></li>
</ul>
<b>Official Website :: </b><a href="http://www.modsecurity.org/">http://www.modsecurity.org/</a><br />
<ul>
</ul>
<div style="text-align: justify;">
</div>

ModSecurity (Web Application Firewall) :: Tools

ModSecurity is a web application firewall that can work either embedded or as a reverse proxy . It provides protection from a range ...

Vulture (Reverse Proxy and Web Application Firewall) :: Tools

<div class="separator" style="clear: both; text-align: justify;">
<img alt="Vulture Web Application firewall logo" border="0" height="120" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcN3Rs0hVvmx1PZMlzm4cKq8LfrgzLmawv5_6MTJGCGcv80todCVORuLNw89N_c_q6Bdo12ScoCZC5pVkwGY4LZjHRpyykzf-7j32yGUKJIY-_FBDWsdfPinXJLDDJ1x8ofO4ztGKtEKS1/s640-rw/vulture+web+application+firewall+logo.png" title="Vulture Web Application firewall logo" width="640" /></div>
<div style="text-align: justify;">
<b>Vulture </b>is a <i><span itemprop="description">Open Source Reverse Proxy / Web Application Firewall</span></i><b>. Vulture </b>is a Web-SSO solution based on technology<i> reverse <a href="http://www.toolwar.com/search/label/Proxy" target="_blank">proxy</a></i> 
implemented on a base Apache 2.2. Vulture also provides <i>application <a href="http://www.toolwar.com/search/label/Firewalls" target="_blank">firewall</a></i> functionality and interfaces between <i><a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> applications </i>and 
Internet to provide unified <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> and authentication.
</div>
<h3 style="text-align: justify;">
<b>Features :: </b></h3>
<div style="text-align: justify;">
The authentication of users with many methods supported
LDAP, SQL, text file, radius server, digital certificates ...
Modular design allows you to add new authentication methods
The spread of authentication on protected applications
The encryption flow
Filtering and rewriting content
Some features to protect against injection attacks
Load balancing
.</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="https://googledrive.com/host/0B73hnOQoTupkUkdwM2VGOGNWVTA/" target="_blank">Vulture 2.0.7</a> </div>
<h2 style="text-align: justify;">
 <span class="mw-headline" id="Details"> </span></h2>

Vulture (Reverse Proxy and Web Application Firewall) :: Tools

Vulture is a Open Source Reverse Proxy / Web Application Firewall . Vulture is a Web-SSO solution based on technology reverse proxy im...

Tortilla :: Tools

<div style="text-align: justify;">
<span class="field-content"></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmwKrsLbKQTKrY6pFC_rTOgytToiYTmIX0hi59EM3vEd51i6WOiGFek59HfVx1QWH0ADQpaN-ck8gH8LDG48zZEWJrxUA89hSBNenbHowXEcSk7o-CrF4mBavCXtyX8ffcPXUo81ys8B3U/s1600/tortilla.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="259" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmwKrsLbKQTKrY6pFC_rTOgytToiYTmIX0hi59EM3vEd51i6WOiGFek59HfVx1QWH0ADQpaN-ck8gH8LDG48zZEWJrxUA89hSBNenbHowXEcSk7o-CrF4mBavCXtyX8ffcPXUo81ys8B3U/s320-rw/tortilla.jpg" width="320" /></a></div>
<b>Tortilla</b> is an open source tool that 
allows users to <i>securely, anonymously, and transparently route</i> all 
TCP/IP and DNS traffic through Tor, regardless of the client software, 
and without relying on VPNs or additional hardware or virtual machines.<br />
<b>Supported Operating Systems:</b> The tool runs on 32 bit and 64 bit versions of Windows from XP and above.<br />
<h3>
<span class="field-content">Download :: </span></h3>
<b><span style="font-weight: normal;"><b>Windows ::</b> <a href="http://download.crowdstrike.com/tortilla/Tortilla_v1.1.0_Beta.zip" target="_blank">Tortilla 1.1.0</a></span></b><br />

<b>Official Website ::</b><a href="http://www.crowdstrike.com/" target="_blank"> http://www.crowdstrike.com/</a><br />
<span class="field-content"></span><br />
<h3>
<span class="field-content"></span></h3>

Tortilla :: Tools

Tortilla is an open source tool that allows users to securely, anonymously, and transparently route all TCP/IP and DNS traffic throu...

Polipo (Fast Caching Web Proxy) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-NyUbYXHd__DneQqwv5fvd1SVGs74usTJyhqxbZKsUNdTap7RuNPogsL8ETY0pKvOltAv4cV3YLUaGUWh04ihvwKbvm0rLcHhSbvj22zKYf-dY-FI2PAaxKo4wOc5WHr7ZTFYTSpxkkdS/s1600/polipo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="polipo" border="0" height="272" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-NyUbYXHd__DneQqwv5fvd1SVGs74usTJyhqxbZKsUNdTap7RuNPogsL8ETY0pKvOltAv4cV3YLUaGUWh04ihvwKbvm0rLcHhSbvj22zKYf-dY-FI2PAaxKo4wOc5WHr7ZTFYTSpxkkdS/s320-rw/polipo.png" title="polipo" width="320" /></a></div>
<div style="text-align: justify;">
<b>Polipo</b> is a small and<i> fast caching web proxy</i>
(a web cache, an HTTP
proxy, a proxy server).  While <b>Polipo </b>was designed to be used by one
person or a small group of people, there is nothing that prevents it
from being used by a larger group.

</div>
<div style="text-align: justify;">
<b>Polipo </b>has some features that are, as far as I know, unique among
currently available proxies:
</div>
<ul style="text-align: justify;">
<li><b>Polipo </b>will use HTTP/1.1 
pipelining if it believes
that the remote server supports it, whether the incoming requests
are pipelined or come in simultaneously on multiple connections (this
is more than the simple usage of persistent connections, which is done
by <i>e.g.</i> Squid);
</li>
<li><b>Polipo</b> will cache the
initial segment of an instance if the download has been
interrupted, and, if necessary, complete it later using 
Range
requests;
</li>
<li><b>Polip</b>o will upgrade client requests to HTTP/1.1 even if they come
in as HTTP/1.0, and up- or downgrade server replies to the client's
capabilities (this may involve conversion to or from the HTTP/1.1
chunked
encoding);
</li>
<li><b>Polipo </b>has complete support for 
IPv6 
(except for scoped (link-local) addresses).
</li>
<li><b>Polipo </b>can optionally use a technique known as 
Poor Man's
Multiplexing to reduce latency even further.
</li>
</ul>
<div style="text-align: justify;">
In short, <b>Polipo u</b>ses a plethora of techniques to make web browsing
(seem) faster. </div>
<div style="text-align: justify;">
<br /></div>
<b>Download Here ::</b> git clone git://git.wifi.pps.univ-paris-diderot.fr/polipo<br />
                              <a href="http://freehaven.net/~chrisd/polipo/polipo-1.0.4.tar.gz" target="_blank">Polipo-1.0.4.tar.gz (for Linux)</a><br />
                              <a href="http://freehaven.net/~chrisd/polipo/polipo-1.0.4-win32.zip" target="_blank">Polipo-1.0.4-win32.zip</a><br />
<b>Tutorial & Official Website ::</b>  http://www.pps.univ-paris-diderot.fr/~jch/software/polipo/

Polipo (Fast Caching Web Proxy) :: Tools

Polipo is a small and fast caching web proxy (a web cache, an HTTP proxy, a proxy server). While Polipo was designed to be used by on...

Zed Attack Proxy ( Zaproxy ) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="ZAProxy Logo" border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmu0fkacdAzN-GWTtIyI1XINok6jSC1qVPlNiE4-TnxAZ1UesBgsD1o8zq0598LWwrn0_K48Bo-3AMzgdRMhxFYo6Sh3Ze0nN4RV2sTOxOO0ZL0ixnKLkIUryAOAPhyphenhypheng44Kda8MJxtYJxR/s1600-rw/Zed+Attack+Proxy+Logo.png" title="ZAProxy logo" /></div>
<div style="text-align: justify;">
The <b>Zed Attack Proxy (ZAP)</b> is an easy to use integrated penetration  testing tool for finding <b>vulnerabilities in web applications.</b> It is designed to be used by people with a wide range of security  experience and as such is ideal for developers and functional testers  who are new to penetration testing. <b>ZAProxy</b> provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. </div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/a-lJafBdAeM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b>
</b> <b> </b><br />
<b>Download Here :: </b><a href="http://zaproxy.googlecode.com/files/ZAP_2.2.1_Mac_OS_X.zip" target="_blank">ZAP 2.2.1 MAC-OS.zip</a> (for MAC OS)
                          <br />
                               <a href="http://zaproxy.googlecode.com/files/ZAP_2.2.1_Windows.exe" target="_blank">ZAP 2.2.1.exe </a>(for Windows) 
                           <br />
                               <a href="http://zaproxy.googlecode.com/files/ZAP_2.2.1_Linux.tar.gz" target="_blank">ZAP 2.2.1.tar.gz</a> (for Linux)
<b> </b><br />
<b>Official Website ::</b> https://www.owasp.org/</div>

Zed Attack Proxy ( Zaproxy ) :: Tools

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It ...

TOR :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="TOR Logo :: ToolWar" border="0" height="202" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyyARrPvpVxCbs27_V9z_I7eiYf6vKlAU3NSgxPPVrtH8oiCvPx5XVYp_tRUQdSsTNoN-cqZuUykCYKshqTrkRJ6FYg08wKhEL4MAJ-HPtxU4_HQAYY5nSICcYuOEvSgF7zT7gQAGvJz3n/s1600-rw/Tor_project_logo_hq.png" title="TOR Logo :: ToolWar" width="320" /></div>
<div style="text-align: justify;">
<b>Tor</b> is a network of <i>virtual tunnels</i> designed to improve privacy and  security on the Internet by routing your requests through a series of  intermediate machines. It uses a normal <i>proxy server interface</i> so that  ordinary Internet applications like web browsers and chat programs can  be configured to use it. In addition to helping preserve users'  anonymity, <b>Tor</b> can help evade firewall restrictions. <b>Tor's</b> hidden  services allow users publish web sites and other services without  revealing their identity or location. For a free cross-platform GUI,  users recommend Vidalia.  Remember that Tor exit nodes are sometimes run by malicious parties and can sniff your traffic,  so avoid authenticating using insecure network protocols (such as  non-SSL web sites and mail servers).  That is always dangerous, but  particularly bad when routing through Tor.</div>
<div style="text-align: justify;">
<b>Tor</b> protects you by bouncing your communications around a           distributed network of relays run by volunteers all around           the world: it prevents somebody watching your Internet           connection from learning what sites you visit, and it prevents           the sites you visit from learning your physical location.           Tor works with many of your existing applications, including           web browsers, instant messaging clients, remote login, and           other applications based on the TCP protocol.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/KDNEoddcBSY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://www.torproject.org.in/dist/torbrowser/tor-browser-2.2.37-1_en-US.exe" target="_blank">TOR 2.2.37.exe</a><b> (for Windows)</b></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.torproject.org.in/ </div>
</div>

TOR :: Tools

Tor is a network of virtual tunnels designed to improve privacy and security on the Internet by routing your requests through a serie...

HosProxy (HTTP to SMTP Proxy) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLBxI1RnSP18NLjVt5I0QjbdHaiR-Fshh1E_VEvvQcMdQENM0ZPMBdUK8lm38zoBWPgjKA009eLSPWbOLSyLpX4U7eW8wslkOt5rd-s_cqgMyFp2W4Da3Wgb3Bbgc74tRip8au6LmBAAkn/s1600/hosproxy.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="hosproxy :: toolwar" border="0" height="320" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLBxI1RnSP18NLjVt5I0QjbdHaiR-Fshh1E_VEvvQcMdQENM0ZPMBdUK8lm38zoBWPgjKA009eLSPWbOLSyLpX4U7eW8wslkOt5rd-s_cqgMyFp2W4Da3Wgb3Bbgc74tRip8au6LmBAAkn/s1600-rw/hosproxy.png" title="Hosproxy :: toolwar" width="289" /></a></div>
<div style="text-align: justify;">
<b>HosProxy</b> is a <i>HTTP to SMTP proxy</i> or we can say that this is a<i> HTTP tunneler</i>. <b>HosProxy</b> is a tool designed to let you access the web in a LAN without 
internet connection but with access to an E-mail system only.

HoS means Http over SMTP, that is to say, using the E-mail system as 
http-proxy to navigate the web.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>HoSProxy is made up of two parts:</b>

</div>
<div style="text-align: justify;">
<b>HosTunnel</b>: You need an external server (outside LAN) which must 
be running HoSTunnel (with root privileges to listen on port 25) and 
which receives and sends emails with encoded and packaged http 
requests/responses.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>HoSProxy</b>: An internal proxy connected to the web browser, that sends 
HTTP request trough emails via the company SMTP server, and polls for 
responses in the company POP/IMAP server. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Download Here :: <a href="http://www.edge-security.com/soft/hosProxy-1.0.tar.gz" target="_blank">HosProxy1.0</a> </b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> </div>
</div>

HosProxy (HTTP to SMTP Proxy) :: Tools

HosProxy is a HTTP to SMTP proxy or we can say that this is a HTTP tunneler . HosProxy is a tool designed to let you access the web ...

ProxyStrike (Web Application Proxy) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge78U7MQQKmBqqrofRPUEQ8S5bYcppmr1mk7FrI-pqVmZXoW3WPniXtP2cfLNP1GdtGlQzq165Y2DSHUK7MACZoWV7Bu4izxybRx63m-unu5dcdFSeHnTLGfhyI6rsmrtNjga-GHs1EE8F/s1600/proxystrike+logo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="86" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge78U7MQQKmBqqrofRPUEQ8S5bYcppmr1mk7FrI-pqVmZXoW3WPniXtP2cfLNP1GdtGlQzq165Y2DSHUK7MACZoWV7Bu4izxybRx63m-unu5dcdFSeHnTLGfhyI6rsmrtNjga-GHs1EE8F/s1600-rw/proxystrike+logo.jpg" width="400" /></a></div>
<div style="text-align: justify;">
<b>ProxyStrike v2.1</b> is an active Web Application Proxy.  It's a tool designed to find vulnerabilities while browsing  an  application. It was created because the problems we faced in the  pentests of web applications that depends heavily on Javascript, not  many web scanners did it good in this stage, so we came with this proxy.  </div>
<div style="text-align: justify;">
Right now it has available Sql injection and XSS plugins.  Both  plugins are designed to catch as many vulnerabilities  as we can, it's  that why the SQL Injection plugin is a  Python port of the great  DarkRaver "Sqlibf". </div>
<div style="text-align: justify;">
The process is very simple, ProxyStrike runs  like a proxy listening in port 8008 by default, so you have to browse  the desired web site setting your browser to use ProxyStrike as a proxy,  and ProxyStrike will analyze all the paremeters in background mode. For  the user is a passive proxy because you won't see any different in the  behaviour of the application, but in the background is very active. :) </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/l8kioy4QX7U?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://proxystrike.googlecode.com/files/proxystrike-2.2.tar.bz2">ProxyStrike-2.2.tar.gz</a> (for Linux)<br />
                               <a href="http://proxystrike.googlecode.com/files/ProxyStrike-2.2.zip" target="_blank">ProxyStrike-2.2.zip  </a>(for Windows)<b>  </b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.edge-security.com/proxystrike.php</div>
</div>

ProxyStrike (Web Application Proxy) :: Tools

ProxyStrike v2.1 is an active Web Application Proxy. It's a tool designed to find vulnerabilities while browsing an application....

Paros Proxy (HTTP/HTTPS Proxy) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="paros proxy logo" border="0" height="95" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6PNFLVMc95ioiDfdibnMAineAE5F6GDK8ARdqWNZn3hc73q2Ru-NRFXX-JsEaaMNO2QE2xSvFl1Gt-Upl7NCdnPt3yg_f1qJpDHgvakLrNyLBTbM4u67UJzLZ2blzd_wSeLBdjJIDIQLE/s200-rw/paros-proxy-logo.jpg" title="paros proxy logo" width="200" /></div>
<div style="text-align: justify;">
<b>Paros Proxy</b> is a Java based HTTP/HTTPS proxy for assessing web application  vulnerability. It supports editing/viewing HTTP messages on-the-fly.  Other featuers include spiders, client certificate, proxy-chaining,  intelligent scanning for XSS and SQL injections etc.</div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Uix19SmN3hg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b><br /></b>
<b>Download Here :: </b><a href="http://sourceforge.net/projects/paros/files/latest/download" target="_blank">Paros Proxy 3.2.13win.exe</a><b><br /></b><br />
<b>Official Website :: </b>http://www.parsoproxy.org/</div>
<div style="text-align: center;">
</div>
</div>

Paros Proxy (HTTP/HTTPS Proxy) :: Tools

Paros Proxy is a Java based HTTP/HTTPS proxy for assessing web application vulnerability. It supports editing/viewing HTTP messages on...

Subscribe to: Comments ( Atom )