ToolWar | Information Security (InfoSec) Tools: Security

Hash Generator :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZKNgtee5QHJGMGG92lCWQPH2SaGSQWkH7KAlwkyK4tjl3Itrr147UV_LtlnMCsUVww02j3tEs-H2HT3DkjYpYeV88yv8cN-a6PJEycM5CpRpWEWPIo7uUTb4GShD3wXyZfPfIMUconqd1/s1600/hash+generator+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="hash generator screenshot" border="0" height="322" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZKNgtee5QHJGMGG92lCWQPH2SaGSQWkH7KAlwkyK4tjl3Itrr147UV_LtlnMCsUVww02j3tEs-H2HT3DkjYpYeV88yv8cN-a6PJEycM5CpRpWEWPIo7uUTb4GShD3wXyZfPfIMUconqd1/s400/hash+generator+screenshot.jpg" title="hash generator screenshot" width="400" /></a></div>
<b>Hash Generator</b> is the <i>FREE universal <a href="http://www.toolwar.com/search/label/Hash" target="_blank">hash</a> generator tool</i> which automates the generation of <i>14 different type of hashes</i> or checksums. It support most of the popular hashes including MD5 family, SHA family, BASE64, LM, NTLM, CRC32, ROT13, RIPEMD, ALDER32, HAVAL, WHIRLPOOL etc.<br />
<br />
<b>Hash Generator</b> can even generate hash for the file as well as text input also. User can directly enter or paste any text from clipboard and generate hash. It also supports 'Drag & Drop interface' which allows you to quickly drag files onto the <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> for hash generation.<br />
<br />
<b>Hashes or checksums</b> are mainly used for file integrity verification. Often files downloaded from Internet are checked with MD5/SHA256 hash to make sure file is not tempered. Hashes are also used in <a href="http://www.toolwar.com/search/label/Encryption" target="_blank">encryption</a> and storage of <a href="http://www.toolwar.com/search/label/Password" target="_blank">password</a> as well as other sensitive data to protect it from the spying eyes. <b>HashGenerator</b> helps in quickly computing or verifying the hash for any such file or password text.<br />
<br />
It works on wide range of platforms starting from <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> XP to latest operating system Windows 8.</div>
<div style="text-align: justify;">
<h2>
Features ::</h2>
<ul>
<li>Generate hashes for 15+ popular algorithms including MD5, SHA256, BASE64.</li>
<li>Create Hash for either the File or custom Text.</li>
<li>'Drag & Drop' feature to quickly drag files onto the tool.</li>
<li>Shell Context Menu to quickly generate hash by simply right clicking on any file.</li>
<li>Option to to selectively copy the hash from the displayed list.</li>
<li>Save the generated hash list to HTML/TEXT/XML file</li>
<li>Simple, Easy to Use <a href="http://www.toolwar.com/search/label/GUI" target="_blank">GUI Interface</a>.</li>
<li>Completely Portable Tool which also comes with Installer for local Installation & Uninstallation.  </li>
</ul>
</div>
<div style="text-align: justify;">
<h3>
<br />
</h3>
</div>
<div style="text-align: justify;">
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ImBdB0aPjMs?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
</div>
<div style="text-align: justify;">
<h3>
Download ::</h3>
</div>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://securityxploded.com/download.php#hashgenerator" target="_blank">Hash Generator v3.0</a><b><br /></b></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://securityxploded.com/hashgenerator.php">http://securityxploded.com/hashgenerator.php</a><b><br /></b></div>

Hash Generator :: Tools

Hash Generator is the FREE universal hash generator tool which automates the generation of 14 different type of hashes or checksums. ...

iScan Online :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="iscan logo online " border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeslw6s4bc1vdJpAy_EBblVvuVFaHURRWxOkNzjUnX9V89kGe-adrQQhV7XBSPrnczstoi85guEuodmRteZGABDY-ALPPiGYapmKUWj2XLLvFzmZ0CHTSFwsYTyffYtCtRHMwmzMDQPNqj/s1600/iscan+online+logo.png" title="iscan logo online " /></div>
<div style="text-align: justify;">
<b>iScan Online</b> is the <i>vulnerability scanning solutions for  Computing and Mobility.</i> <b>iScan Online</b> delivers its <i><a href="http://www.toolwar.com/search/label/Vulnerability" target="_blank">vulnerability</a> <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanning</a></i>   through a <b>browser plugin, native mobile app</b> or alternatively as a  downloadable <a href="http://www.toolwar.com/search/label/CLI" target="_blank">CLI</a> executable.<br />
<br />
For BYOD environments, HTML and  Javascript snippets are provided to scan any laptop or <a href="http://www.toolwar.com/search/label/Phone" target="_blank">mobile device</a>  connecting to a network and/or <a href="http://www.toolwar.com/search/label/Web" target="_blank">web </a>application.<br />
<br />
Data is submitted  to the cloud console where HTML, CSV and <a href="http://www.toolwar.com/search/label/PDF" target="_blank">PDF</a> reports are available.  JSON data is readily available with the RESTful API.<br />
<br />
Supported  platforms covered for vulnerability and data discovery scanning are:   <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>, <a href="http://www.toolwar.com/search/label/Mac" target="_blank">Mac OS X</a>, <a href="http://www.toolwar.com/search/label/Android" target="_blank">Android</a> and Apple iOS. Desktops, Servers, Smartphones  and Tablets supported.</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/SIIbrXW8ZMg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
</div>
<div style="text-align: justify;">
<b>Android (Play Store) ::</b> <a href="https://play.google.com/store/apps/details?id=com.iscanonline.iscanandroid" target="_blank">https://play.google.com/store/apps/details?id=com.iscanonline.iscanandroid </a></div>
<div style="text-align: justify;">
<b>Official Website & Online Plugins ::</b> <a href="https://www.iscanonline.com/" target="_blank">https://www.iscanonline.com/</a></div>
<div style="text-align: justify;">
<b>Submitted By ::</b> iScan Online </div>

iScan Online :: Tools

iScan Online is the vulnerability scanning solutions for Computing and Mobility. iScan Online delivers its vulnerability scanning ...

dotDefender (Web Application Firewall) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="dotdefender logo" border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNgB-QvtDSLba1_oj3raWHinKyPHlXi03q3ECtSO3gJ48vp-5nB4zTE6VeGXuf2zMoyT4qML8f8UFcVw3vF3eTqukbzuWA2BuOh0SMj7nVWNE42TjUn1Ljvis_vmEN16ihNYTUeLwR-dwx/s640/dotDefender+logo.jpg" title="dotdefender logo" width="640" /></div>
<br />
<b>dotDefender</b> is the market-leading software <b>Web Application Firewall  (WAF)</b>. <b>dotDefender</b> boasts enterprise-class <a href="http://www.toolwar.com/search/label/Security" target="_blank">security,</a> advanced  integration capabilities, easy maintenance and low total cost of  ownership (TCO). <b>dotDefender</b> is the perfect choice for protecting your  website and <a href="http://www.toolwar.com/search/label/Web" target="_blank">web</a> applications today. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
<b>Tutorials :: </b></h3>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/DKlTdoIiaSU?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
<b>Download ::</b> </h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.applicure.com/downloads/5.12%20no%20SP/DotDefender%20Install%2032Bit%20v5.12.13275%20msi.exe" target="_blank">dotDefender V5.12</a></div>
<div style="text-align: justify;">
<b>Debian :: </b><a href="http://www.applicure.com/downloads/5.12/Linux/i386/dotDefender-5.12.Linux.i386.deb.bin.gz" target="_blank">dotDefender V5.12</a></div>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://www.applicure.com/downloads/5.12/Linux/i386/dotDefender-5.12.Linux.i386.gen.bin.gz" target="_blank">dotDefender V5.12</a></div>
<b>RPM :: </b><a href="http://www.applicure.com/downloads/5.12/Linux/i386/dotDefender-5.12.Linux.i386.rpm.bin.gz" target="_blank">dotDefender V5.12</a>
<b> </b><br />
<b>Official Website :: </b><a href="http://www.applicure.com/">http://www.applicure.com/</a>

dotDefender (Web Application Firewall) :: Tools

dotDefender is the market-leading software Web Application Firewall (WAF) . dotDefender boasts enterprise-class security, advanced ...

Beast-Check (SSL/TLS BEAST Vulnerability Check) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPX99p7OpWXx86CRPoDgco35kA8zXAjBG_l0dAQqBWT0feEqj9A1w1aPOcGpyS0DbdryxrvPzF4dTTNWY5ygzT9bP3hy9j04M3iACwFr6i2ykH2cC2G1p5-gauXZ_gz_9gWFAsUToI4Bik/s1600/beast-check+vulnerability+scanner.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="beast-check vulnerability scanner" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPX99p7OpWXx86CRPoDgco35kA8zXAjBG_l0dAQqBWT0feEqj9A1w1aPOcGpyS0DbdryxrvPzF4dTTNWY5ygzT9bP3hy9j04M3iACwFr6i2ykH2cC2G1p5-gauXZ_gz_9gWFAsUToI4Bik/s640/beast-check+vulnerability+scanner.jpg" title="beast-check vulnerability scanner" width="640" /></a></div>
<div style="text-align: justify;">
<b>Beast-Chec</b>k is a small <i>perl script</i> that <i>checks a target server</i> whether it is <i><b>prone to  BEAST <a href="http://www.toolwar.com/search/label/Vulnerability" target="_blank">vulnerability</a></b></i> via target preferred cipher. It assumes no  workaround (i.e. EMPTY FRAGMENT) applied in target server. Some sources  said this workaround was disabled by default for compatibility reasons.  This may be the reason why RC4 ciphersuite was widely chosen as highest  preferred ciphersuite for the primary workaround. </div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<span style="font-size: large;">Uses ::  </span></div>
<pre class="prettyprint"><span class="pln">$ </span><span class="pun">./</span><span class="pln">beast</span><span class="pun">.</span><span class="pln">pl
</span><span class="pun">===============================================</span><span class="pln">

port </span><span class="pun">=</span><span class="pln"> </span><span class="lit">443</span><span class="pln"> </span><span class="kwd">by</span><span class="pln"> </span><span class="kwd">default</span><span class="pln"> </span><span class="pun">{</span><span class="pln">optional</span><span class="pun">}</span></pre>
<pre class="prettyprint"><span class="pun"> </span></pre>
<div class="prettyprint">
<span style="font-family: inherit;"><span style="font-size: small;"><span class="pun"><b>Example :: Scanning Google</b></span></span></span></div>
<pre class="prettyprint"><span class="pun"><b><span class="pln"> </span></b></span></pre>
<pre class="prettyprint"><span style="background-color: white;"><span class="pun"><span class="pln">$ </span><span class="pun">./</span><span class="pln">beast</span><span class="pun">.</span><span class="pln">pl www</span><span class="pun">.</span><span class="pln">google</span><span class="pun">.</span><span class="pln">com
</span><span class="pun">===============================================</span><span class="pln">

SSL</span><span class="pun">/</span><span class="pln">TLS BEAST </span><span class="typ">Vulnerability</span><span class="pln"> </span><span class="typ">Check</span><span class="pln">
 </span><span class="kwd">by</span><span class="pln"> YGN </span><span class="typ">Ethical</span><span class="pln"> </span><span class="typ">Hacker</span><span class="pln"> </span><span class="typ">Group</span><span class="pun">,</span><span class="pln"> http</span><span class="pun">:</span><span class="com">//yehg.net/</span><span class="pln">
</span><span class="pun">===============================================</span><span class="pln">
</span><span class="typ">Target</span><span class="pun">:</span><span class="pln"> www</span><span class="pun">.</span><span class="pln">google</span><span class="pun">.</span><span class="pln">com</span><span class="pun">:</span><span class="lit">443</span><span class="pln">
</span><span class="com">## The target is NOT vulnerable to BEAST attack. ##</span><span class="pln">
</span><span class="typ">Protocol</span><span class="pun">:</span><span class="pln"> TLS v1</span><span class="typ">Server</span><span class="pln"> </span><span class="typ">Preferred</span><span class="pln"> </span><span class="typ">Cipher</span><span class="pun">:</span><span class="pln"> ECDHE</span><span class="pun">-</span><span class="pln">RSA</span><span class="pun">-</span><span class="pln">RC4</span><span class="pun">-</span><span class="pln">SHA</span><span class="typ">Vulnerable</span><span class="pun">:</span><span class="pln"> NO</span>  </span></span></pre>
<pre class="prettyprint"><span style="background-color: white;"><span class="pun"> </span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/4uCn1bjEC7s?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<pre class="prettyprint"><span style="background-color: white;"><span class="pun"> </span></span></pre>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b><span style="font-size: small;">Linux & Windows :: </span></b><a href="http://beast-check.googlecode.com/files/beast.pl" target="_blank">Beast-Check </a>(Perl Script)</div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://yehg.net/">http://yehg.net/</a></div>

Beast-Check (SSL/TLS BEAST Vulnerability Check) :: Tools

Beast-Chec k is a small perl script that checks a target server whether it is prone to BEAST vulnerability via target preferred ciphe...

Malware Classifier (Malware Analysis) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="adobe malware classifier " border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJFSWBvBrB6iEW5mUe0RLgLd4aTklWqEcrJku4K5HoKfHloY6DDXgTMVL4g8funQXw0_Yaxw2LuVUfUe3WqD_yvQoVBSUtp-dpw3XWg7kkmWbJlum9If5NsE1Kifvf0LFPi1Gryz7sq1ot/s400/adobe+malware+classifier.png" title="adobe malware classifier " width="400" /></div>
<div style="text-align: justify;">
<b>Adobe Malware Classifier</b> is a command-line tool that lets antivirus 
analysts, IT administrators, and security researchers quickly and easily
 determine if a <b><i>binary file contains malware</i></b>, so they can develop <b>
<a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> detection</b> signatures faster, reducing the time in which users' 
systems are vulnerable.
Malware Classifier uses machine learning algorithms to classify Win32 
binaries – EXEs and DLLs – into three classes: 0 for “clean,” 1 for 
“malicious,” or “UNKNOWN.”<br /><br />
The tool was developed using models resultant from running the J48, J48 
Graft, PART, and Ridor machine-learning algorithms on a dataset of 
approximately 100,000 malicious programs and 16,000 clean programs. <br />
The tool extracts seven key features from an unknown binary, feeds them 
to one of the four classifiers or all of them, and presents its 
classification of the unknown binary.</div>
<div style="text-align: justify;">
<h3>
Download :: </h3>
<b>Python :: </b><a href="http://sourceforge.net/projects/malclassifier.adobe/files/AdobeMalwareClassifier.py/download" target="_blank">AdobeMalwareClassifier.py</a><br />
<b>Source :: </b><a href="http://sourceforge.net/projects/malclassifier.adobe/?source=navbar">http://sourceforge.net/projects/malclassifier.adobe/?source=navbar</a></div>

Malware Classifier (Malware Analysis) :: Tools

Adobe Malware Classifier is a command-line tool that lets antivirus analysts, IT administrators, and security researchers quickly and e...

Bizploit (ERP Penetration Testing) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="onapsis logo" border="0" height="157" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEin6I42nzkLY76YbK6quX_PVYjdXrZ8ZpxDui0742p564fJp9gziwUTmwc3CRFGoTz5et3sDfyb3dBOMb7o0I9stsuh20N8o7GqsAhA_mdKp5AO_osq2EkqNGSDHp9JvasUAXoL_9P3L4Ce/s400/onapsis+logo.png" title="onapsis logo" width="400" /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="text-align: justify;">
<b>Bizploit</b> is the first Opensource <i>ERP Penetration Testing framework</i>. 
Developed by the <b>Onapsis Research Labs,</b> <b>Bizploit</b> assists security 
professionals in the discovery, exploration, vulnerability assessment 
and exploitation phases of specialized <b>ERP Penetration Tests</b>.<br />
Currently, <b>Bizploit</b> is shipped with many plugins to assess the security 
of SAP business platforms. Plugins for other popular ERPs will be 
included in the short term.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials :: </h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux :: </b><a class="download" href="http://www.onapsis.com/get.php?resid=bizploit-linux-1-5">Bizploit v1.50-rc1</a></div>
<div style="text-align: justify;">
<b>Windows ::</b> <a class="download" href="http://www.onapsis.com/get.php?resid=bizploit-win32-1-5">Bizploit v1.50-rc1</a><br />
<b>Official Website :: </b><a href="http://www.onapsis.com/">http://www.onapsis.com</a>/</div>

Bizploit (ERP Penetration Testing) :: Framework

Bizploit is the first Opensource ERP Penetration Testing framework . Developed by the Onapsis Research Labs, Bizploit assists secur...

ModSecurity (Web Application Firewall) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="modsecurity logo" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqIaR3MOqqt6M9kImwLEM90dn9peh4HGb7o2VN5_LqA_bdR7pZqI6NiXKpATu9GK7SXtf7mbPlWzHP-zqQrAfCIPEzsQuiMRdYdAsbjCDXBBaqUZI9R5Pk_6no9f8fPoZakuUWdh6BxuN1/s640/mod-security+logo.jpg" title="modsecurity logo" width="640" /></div>
</div>
<div style="text-align: justify;">
<b>ModSecurity</b> is a <i>web application firewall</i> that can work either embedded  or as a <b>reverse proxy</b>. It provides protection from a range of <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attacks</a>  against web applications and allows for HTTP traffic monitoring, logging  and real-time analysis. </div>
<h2 style="text-align: justify;">
ModSecurity: Overview</h2>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
With over 70% of all attacks now carried out over the web application  level, organisations need every help they can get in making their  systems secure. <b>Web application firewalls</b> are deployed to establish an  external <a href="http://security/" target="_blank">security</a> layer that increases security, detects, and prevents  attacks before they reach web applications. </div>
<h3 style="text-align: justify;">
HTTP Traffic Logging</h3>
<div style="text-align: justify;">
<a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> servers are typically well-equipped to log traffic in a form useful  for marketing analyses, but fall short when it comes to logging of  traffic to web applications. In particular, most are not capable of  logging the request bodies. Your adversaries know this, and that is why  most attacks are now carried out via POST requests, rendering your  systems blind. </div>
<div style="text-align: justify;">
ModSecurity makes full HTTP transaction logging possible, allowing  complete requests and responses to be logged. Its logging facilities  also allow fine-grained decisions to be made about exactly what is  logged and when, ensure only the relevant data is recorded. </div>
<h3 style="text-align: justify;">
Real-Time Monitoring and Attack Detection</h3>
<div style="text-align: justify;">
In addition to providing logging facilities, <b>ModSecurity</b> can <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">monitor</a> the  HTTP traffic in real time in order to detect attacks. In this case <b> ModSecurity</b> operates as a web intrusion detection tool, allowing you to  react to suspicious events that take place at your web systems. </div>
<h3 style="text-align: justify;">
Attack Prevention and Just-in-time Patching</h3>
<div style="text-align: justify;">
<b>ModSecurity</b> can also act immediately to prevent attacks from reaching  your web applications. There are three commonly used approaches: </div>
<ol style="text-align: justify;">
<li><b>Negative security model.</b> Negative security model monitors  requests for anomalies, unusual behaviour, and common web application  attacks. It keeps anomaly scores for each request, IP addresses,  application sessions, and user accounts. Requests with high anomaly  scores are either logged or rejected altogether. </li>
<li><b>Known weaknesses and vulnerabilities.</b> Its rule language  makes ModSecurity an ideal external patching tool. External patching is  all about reducing the window of opportunity. Time needed to patch  application vulnerabilities often runs to weeks in many organisations.  With ModSecurity, applications can be patched from the outside, without  touching the application source code (and even without any access to  it), making your systems secure until a proper patch is produced. </li>
<li><b>Positive security model.</b> When positive security model is  deployed, only requests that are known to be valid are accepted, with  everything else rejected. This approach works best with applications  that are heavily used but rarely updated. </li>
</ol>
<h3 style="text-align: justify;">
Flexible Rule Engine</h3>
<div style="text-align: justify;">
A flexible rule engine sits in the heart of ModSecurity. It  implements the ModSecurity Rule <a href="http://www.toolwar.com/search/label/Language" target="_blank">Language</a>, which is a specialised  programming language designed to work with HTTP transaction data. The  <b>ModSecurity</b> Rule Language was designed to be easy to use, yet flexible:  common operations are simple while complex operations are possible.</div>
<div style="text-align: justify;">
Certified ModSecurity Rules, included with subscription to  <b>ModSecurity</b>, contain a comprehensive set of rules that implement  general-purpose hardening, common web application security issues.  Heavily commented, these rules can be used as a learning tool.</div>
<h3 style="text-align: justify;">
Embedded Deployment</h3>
<div style="text-align: justify;">
ModSecurity is an embeddable web application firewall, which means it  can be deployed as part of your existing web server infrastructure  (Apache, IIS7 and Nginx).</div>
<div style="text-align: justify;">
This deployment method has certain advantages:</div>
<ol style="text-align: justify;">
<li>No changes to existing network. It only takes a few minutes to add  ModSecurity to your existing web servers. And because it was designed to  be completely passive by default, you are free to deploy it  incrementally and only use the features you need. It is equally easy to  remove or deactivate it should decide you don't want it any more. </li>
<li>No single point of failure. Unlike with network-based  deployments, you will not be introducing a new point of failure to your  system. </li>
<li>Implicit load balancing and scaling. Because it works embedded  in web servers, <b>ModSecurity</b> will automatically take advantage of the  additional load balancing and scalability features. You will not need to  think of load balancing and scaling unless your existing system needs  them. </li>
<li>Minimal overhead. Because it works from inside the web server  process there is no overhead for network communication and minimal  overhead in parsing and data exchange. </li>
<li>No problem with encrypted or compressed content. Many <a href="http://www.toolwar.com/search/label/IDS" target="_blank">IDS</a>  systems have difficulties analysing SSL traffic. This is not a problem  for ModSecurity because it is positioned to work when the traffic is  decrypted and decompressed.  </li>
</ol>
<div style="text-align: justify;">
ModSecurity is known to work well on a wide range of operating systems.  Our customers are successfully running it on <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>, <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>, Solaris,  FreeBSD, OpenBSD, NetBSD, AIX, Mac OS X, and HP-UX. </div>
<h3 style="text-align: justify;">
Network-Based Deployment</h3>
<div style="text-align: justify;">
<b>ModSecurity</b> works equally well when deployed as part of a reverse proxy  server, and many of our customers choose to do so. In this scenario, one  installation of <b>ModSecurity </b>can protect any number or type of back-end  web servers. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/7w9aHEx-BmE?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/P-KJU785CKg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/nMGtIgrVv8s?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux :: </b></div>
<div style="text-align: justify;">
<b>Installation - Ubuntu/Debian</b>

<span style="font-family: "Courier New",Courier,monospace;"> </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo apt-get install libapache2-mod-security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo a2enmod mod-security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo /etc/init.d/apache2 force-reload</span><br />
<br />
 <b>Installation - Fedora/CentOS</b><span style="font-family: "Courier New",Courier,monospace;"> </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo yum install mod_security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo /etc/init.d/httpd restart</span>

<b> </b><br />
<br />
<b>Windows ::</b></div>
<ul>
<li><a href="https://www.modsecurity.org/tarball/2.7.5/ModSecurityIIS_2.7.5.msi">ModSecurity for IIS MSI Installer</a> </li>
<li><a href="https://www.modsecurity.org/tarball/2.7.5/ModSecurityIIS_2.7.5.msi.sha256">ModSecurity for IIS MSI Installer SHA25</a></li>
</ul>
<b>Official Website :: </b><a href="http://www.modsecurity.org/">http://www.modsecurity.org/</a><br />
<ul>
</ul>
<div style="text-align: justify;">
</div>

ModSecurity (Web Application Firewall) :: Tools

ModSecurity is a web application firewall that can work either embedded or as a reverse proxy . It provides protection from a range ...

DVWA (Damn Vulnerable Web Application) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6lDm7-Ac-rSmIX0YYaz1CD7DrJi4lxkPqEbHy1wd3ZlxeWqM20xjQXp8T9E5nT1CDbMuyH4AGydtLIqMTwMKyQ_aHiKCwQDdUYZjvXHUR36d_Axi8Fxb1iAFQfaMoXTPwxnu2yp6flOqQ/s1600/Screenshot-Damn+Vulnerable+Web+App+(DVWA).png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Screenshot-Damn Vulnerable Web App (DVWA)" border="0" height="280" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6lDm7-Ac-rSmIX0YYaz1CD7DrJi4lxkPqEbHy1wd3ZlxeWqM20xjQXp8T9E5nT1CDbMuyH4AGydtLIqMTwMKyQ_aHiKCwQDdUYZjvXHUR36d_Axi8Fxb1iAFQfaMoXTPwxnu2yp6flOqQ/s400/Screenshot-Damn+Vulnerable+Web+App+(DVWA).png" title="Screenshot-Damn Vulnerable Web App (DVWA)" width="400" /></a></div>
<div style="text-align: justify;">
<b>Damn Vulnerable Web App (DVWA)</b> is a <i>PHP/MySQL web application</i> that  is <i>damn vulnerable</i>. Its main goals are to be an aid for security  professionals to test their skills and tools in a legal environment,  help web developers better understand the processes of securing web  applications and aid teachers/students to teach/learn web application  security in a class room environment.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ywnVlyuP7SY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe> </div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
 <iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/B75FgRT2npc?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Zip ::</b> <a href="https://github.com/RandomStorm/DVWA/archive/v1.0.8.zip" target="_blank">DVWA 1.0.8</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://www.dvwa.co.uk/">http://www.dvwa.co.uk/</a></div>

DVWA (Damn Vulnerable Web Application) :: Framework

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable . Its main goals are to be an aid for security ...

Commview (Network Monitor and Analyzer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj325VnPYeEK6ly4CYJXLQZBCnGpXso07Hh__zhit87MylbBCCkFqkhrv2USEX8QJ3ErjhZ8vvoiSFuI52w7VRvAyehbHNdHZTsxguVjHscq6YZUH9TH2Eyrq9_zwLaIzKzsGWI8hbWxTRt/s1600/Commview+for+wifi+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Commview network analyzer screenshot" border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj325VnPYeEK6ly4CYJXLQZBCnGpXso07Hh__zhit87MylbBCCkFqkhrv2USEX8QJ3ErjhZ8vvoiSFuI52w7VRvAyehbHNdHZTsxguVjHscq6YZUH9TH2Eyrq9_zwLaIzKzsGWI8hbWxTRt/s400/Commview+for+wifi+screenshot.jpg" title="Commview network analyzer screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>CommView</b> is a powerful <b><a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> monitor</b> and <b>analyzer</b>  designed for LAN administrators, security professionals, network  programmers, home users…virtually anyone who wants a full picture of the  traffic flowing through a PC or LAN segment. Loaded with many  user-friendly features, <b>CommView </b>combines performance and flexibility  with an ease of use unmatched in the industry.   </div>
<div style="text-align: justify;">
This application captures every packet on the wire to display important information such as a <b>list of <a href="http://www.toolwar.com/search/label/Packet" target="_blank">packets</a> and network connections</b>, vital <b>statistics</b>, protocol distribution <b>charts</b>,  and so on. You can examine, save, filter, import and export captured  packets, view <a href="http://www.toolwar.com/search/label/Protocol" target="_blank">protocol</a> decodes down to the lowest layer with <b>full <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a></b> of over 70 widespread protocols. With this information, <b>CommView</b> can help you <b>pinpoint network problems</b> and troubleshoot software and hardware. </div>
<div style="text-align: justify;">
CommView includes a <b>VoIP</b> analyzer for in-depth analysis, recording, and playback of SIP and H.323 voice communications. </div>
<div style="text-align: justify;">
<a href="http://www.tamos.com/upload/iblock/b1486ecd9d485e6e0c1aaa85376617e8.png" id="screenshots" rel="lightbox[shots]" title=""></a>CommView  runs on Windows XP / Vista/ 7 / 8 or <a href="http://www.toolwar.com/search/label/WIndows" target="_blank">Windows</a> Server 2003 / 2008 / 2012  (both 32- and 64-bit versions). It requires a 10/100/1000 Mbps Ethernet,  Wireless Ethernet, or Token Ring network card, or a standard dial-up  adapter. For <b>remote monitoring tasks</b>, you can use our special, optional add-on for CommView: CommView Remote Agent.  It allows CommView users to capture network traffic on any computer  where Remote Agent is running, regardless of the computer's physical  location. This powerful and unique technology broadens your monitoring  range: you are no longer limited by your LAN segment or personal  computer. </div>
<h3 style="text-align: justify;">
How can a network analyzer help me? ::</h3>
<div style="text-align: justify;">
If you are a seasoned professional, you definitely know the answer.  Managing a LAN, creating network-oriented software, or performing a  security audit have one thing in common: You're blind without a good  network monitor. Every day, it helps you <b>maintain efficient network data transmission</b>, <b>test firewalls</b> and <a href="http://www.toolwar.com/search/label/IDS" target="_blank"><b>intrusion detection systems</b></a>, or <b>identify problems</b>  with network-based applications. And there is an important economic  reason behind using a network analyzer: it costs a fraction of the price  of information, time, software, and hardware that may potentially be  lost or wasted by <i>not</i> using a network analyzer. A number of <b>case studies</b> describe real-world applications of CommView  in business, government, and education sectors.  </div>
<div style="text-align: justify;">
If you are new to networking, you'll find CommView extremely  useful for understanding how the Internet and your LAN work. Being a  network analyzer (also commonly referred to as a <i>packet analyzer, network monitor, or packet sniffer</i>), it captures and decodes network traffic and makes sense of it, allowing you to <b>see what, where, and how information leaves and enters your computer</b> -- which is critically important for a secure Internet experience. The Online Tutorial is an excellent resource for learning about the many exciting features CommView offers.   </div>
<div style="text-align: justify;">
Be sure to read our white paper, Promiscuous <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">Monitoring</a> in Ethernet and <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">Wi-Fi</a> Networks,  that examines the problems related to the deployment and usage of  software-based network monitoring solutions in wired and wireless LANs.  It demonstrates the methods of achieving network traffic visibility in  various network configurations that include hubs, switches, routers,  etc.  </div>
<div style="text-align: justify;">
No matter what user category you belong to, you can be certain  that CommView is the right choice for your network monitoring solution.  </div>
<h3 style="text-align: justify;">
What you can do with CommView ::</h3>
<ul class="bullet" style="text-align: justify;">
<li>View detailed IP connections statistics: IP addresses, ports, sessions, etc.  </li>
<li>Reconstruct TCP sessions.  </li>
<li>Map packets to the application that is sending or receiving them. </li>
<li>View protocols distribution, bandwidth utilization, and network nodes charts and tables.  </li>
<li>Generate traffic reports in real time. </li>
<li>Browse captured and decoded packets in real time.  </li>
<li>Search for strings or hex data in captured packet contents.  </li>
<li>Import and export packets in Sniffer®, EtherPeek™, AiroPeek™,  Observer®, NetMon, and Tcpdump formats, export packets in hex and text  formats.  </li>
<li>Configure alarms that can notify you about important events,  such as suspicious packets, high bandwidth utilization, unknown  addresses, etc. </li>
<li>Create your own plug-ins for decoding any protocol. </li>
<li>Exchange data with your application over TCP/IP. </li>
<li>Export any IP address to SmartWhois for quick, easy IP lookup.  </li>
<li>Capture loopback traffic. </li>
</ul>
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/hdE-s_SQl50?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
<b>Windows ::</b> 
<a href="http://www.tamos.com/bitrix/redirect.php?event1=download&event2=commview&event3=cv6&goto=/files/cv6.zip" target="_blank">Commview v6.5 (Trial Version)</a><b><br /></b><br />
<b>Official Website :: </b><a href="http://www.tamos.com/products/commview/">http://www.tamos.com/products/commview/</a>

Commview (Network Monitor and Analyzer) :: Tools

CommView is a powerful network monitor and analyzer designed for LAN administrators, security professionals, network programmers, h...

BlueMaho (Bluetooth Devices Security Testing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNVahVyEcfeuzVD5lawFbk1swmp1o1H7I7v9E-pH4ejkRPZhlmFkUjvKXrBJxfz9ompBZO3fgIelIXorjmjWxOxR6sP7Oeyr968W6YoaZ1rdyC2xxbsgMJUT4ysmHVpx8skquk_Zn5LVOb/s1600/bluemaho+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="bluemaho screenshot" border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNVahVyEcfeuzVD5lawFbk1swmp1o1H7I7v9E-pH4ejkRPZhlmFkUjvKXrBJxfz9ompBZO3fgIelIXorjmjWxOxR6sP7Oeyr968W6YoaZ1rdyC2xxbsgMJUT4ysmHVpx8skquk_Zn5LVOb/s320/bluemaho+screenshot.jpg" title="bluemaho screenshot" width="320" /></a></div>
<div style="text-align: justify;">
<b>BlueMaho</b> is GUI-shell (interface) for suite of <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a>  for <i>testing security of bluetooth devices</i>. It is freeware, opensource,  written on <a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a>, uses wxPyhon. It can be used for testing BT-devices  for known vulnerabilities and major thing to do - testing to find  unknown vulns. Also it can form nice statistics. </div>
<h3 id="head-679ba20470ace2c0c9be33f0c0f8dc38db4b8bae" style="text-align: justify;">
What it can do? (features)</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-18"></span></div>
<ul style="text-align: justify;">
<li><a href="http://www.toolwar.com/search/label/Scanner" target="_blank">Scan</a> for devices, show advanced info, SDP records, vendor etc <span class="anchor" id="line-19"></span></li>
<li>Track devices - show where and how much times device was seen, its name changes <span class="anchor" id="line-20"></span></li>
<li>loop scan - it can scan all time, showing you online devices <span class="anchor" id="line-21"></span></li>
<li>alerts with sound if new device found <span class="anchor" id="line-22"></span></li>
<li>on_new_device - you can spacify what command should it run when it founds new device <span class="anchor" id="line-23"></span></li>
<li>it can use separate dongles - one for scaning (loop scan) and one for running tools or exploits <span class="anchor" id="line-24"></span></li>
<li>send files <span class="anchor" id="line-25"></span></li>
<li>change name, class, mode, BD_ADDR of local HCI devices <span class="anchor" id="line-26"></span></li>
<li>save results in database <span class="anchor" id="line-27"></span></li>
<li>form nice statistics (uniq devices by day/hour, vendors, services etc) <span class="anchor" id="line-28"></span></li>
<li>test remote device for known vulnerabilities (see <a href="http://www.toolwar.com/search/label/Exploitation" target="_blank">exploits</a> for more details) <span class="anchor" id="line-29"></span></li>
<li>test remote device for unknown vulnerabilities (see tools for more details) <span class="anchor" id="line-30"></span></li>
<li>themes! you can customize it  <span class="anchor" id="line-31"></span><span class="anchor" id="line-32"></span></li>
</ul>
<div class="line867" style="text-align: justify;">
</div>
<h3 id="head-be34a21c5d08001e482450faeb1c54cf3a8d0fab" style="text-align: justify;">
What tools and exploits it consist of?</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-33"></span></div>
<ul style="text-align: justify;">
<li style="list-style-type: none;"><b>Tools: </b><span class="anchor" id="line-34"></span></li>
<li>atshell.c by Bastian Ballmann (modified attest.c by Marcel Holtmann) <span class="anchor" id="line-35"></span></li>
<li>bccmd by Marcel Holtmann <span class="anchor" id="line-36"></span></li>
<li>bdaddr.c by Marcel Holtmann <span class="anchor" id="line-37"></span></li>
<li>bluetracker.py by smiley <span class="anchor" id="line-38"></span></li>
<li>carwhisperer v0.2 by Martin Herfurt <span class="anchor" id="line-39"></span></li>
<li>psm_scan and rfcomm_scan from bt_audit-0.1.1 by Collin R. Mulliner <span class="anchor" id="line-40"></span></li>
<li>BSS (Bluetooth Stack Smasher) v0.8 by Pierre Betouin <span class="anchor" id="line-41"></span></li>
<li>btftp v0.1 by Marcel Holtmann <span class="anchor" id="line-42"></span></li>
<li>btobex v0.1 by Marcel Holtmann <span class="anchor" id="line-43"></span></li>
<li>greenplaque v1.5 by digitalmunition.com <span class="anchor" id="line-44"></span></li>
<li>L2CAP packetgenerator by Bastian Ballmann <span class="anchor" id="line-45"></span></li>
<li>obex stress tests 0.1 <span class="anchor" id="line-46"></span></li>
<li>redfang v2.50 by Ollie Whitehouse <span class="anchor" id="line-47"></span></li>
<li>ussp-push v0.10 by Davide Libenzi <span class="anchor" id="line-48"></span><span class="anchor" id="line-49"></span></li>
<li class="gap" style="list-style-type: none;">exploits/attacks: <span class="anchor" id="line-50"></span></li>
<li>Bluebugger v0.1 by Martin J. Muench <span class="anchor" id="line-51"></span></li>
<li>bluePIMp by Kevin Finisterre <span class="anchor" id="line-52"></span></li>
<li>BlueZ hcidump v1.29 DoS PoC by Pierre Betouin <span class="anchor" id="line-53"></span></li>
<li>helomoto by Adam Laurie <span class="anchor" id="line-54"></span></li>
<li>hidattack v0.1 by Collin R. Mulliner <span class="anchor" id="line-55"></span></li>
<li>Mode 3 abuse attack <span class="anchor" id="line-56"></span></li>
<li>Nokia N70 l2cap packet DoS PoC Pierre Betouin <span class="anchor" id="line-57"></span></li>
<li>opush abuse (prompts flood) DoS attack <span class="anchor" id="line-58"></span></li>
<li>Sony-Ericsson reset display PoC by Pierre Betouin <span class="anchor" id="line-59"></span><span class="anchor" id="line-60"></span></li>
<li class="gap" style="list-style-type: none;">you can add your own tools by editing 'exploits/exploits.lst' and 'tools/tools.lst' <span class="anchor" id="line-61"></span><span class="anchor" id="line-62"></span></li>
</ul>
<div class="line867" style="text-align: justify;">
</div>
<h3 id="head-e627522f4fdfdbf663d44878db163eb1f1439774" style="text-align: justify;">
Requirements</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-63"></span></div>
<ul style="text-align: justify;">
<li>OS (tested with Debian 4.0 Etch / 2.6.18) <span class="anchor" id="line-64"></span></li>
<li><div class="line862">
<a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a> (python 2.4 http://www.python.org) <span class="anchor" id="line-65"></span></div>
</li>
<li><div class="line862">
wxPython (python-wxgtk2.6 http://www.wxpython.org) <span class="anchor" id="line-66"></span></div>
</li>
<li><div class="line862">
BlueZ (3.9/3.24) http://www.bluez.org <span class="anchor" id="line-67"></span></div>
</li>
<li>Eterm  to open tools somewhere, you can set another term in  'config/defaul.conf' changing the value of 'cmd_term' variable. (tested  with 1.1 ver) <span class="anchor" id="line-68"></span></li>
<li>pkg-config(0.21), 'tee' used in tools/showmaxlocaldevinfo.sh, openobex, obexftp <span class="anchor" id="line-69"></span></li>
<li>libopenobex1 + libopenobex-dev (needed by ussp-push) <span class="anchor" id="line-70"></span></li>
<li>libxml2, libxml2-dev (needed by btftp) <span class="anchor" id="line-71"></span></li>
<li>libusb-dev (needed by bccmd) <span class="anchor" id="line-72"></span></li>
<li>libreadline5-dev (needed by atshell.c) <span class="anchor" id="line-73"></span></li>
<li>lightblue-0.3.3 (needed by obexstress.py) <span class="anchor" id="line-74"></span></li>
<li>hardware: any bluez compatible bluetooth-device <span class="anchor" id="line-75"></span><span class="anchor" id="line-76"></span></li>
</ul>
<div class="line867" style="text-align: justify;">
</div>
<h3 id="head-24caaa99fac9202edff5973b243c88b76a030b49" style="text-align: justify;">
Configuration</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-77"></span></div>
<ol style="text-align: justify;" type="1">
<li>all configuration is in 'config' dir. <span class="anchor" id="line-78"></span></li>
<li>for  using bluemaho propertly you need to build tools and exploits. check if  you satisfy 'requirements' for bluemaho. then run 'build.sh'. if you  see 'Building complete!' message, than all went OK. if not - try to play  around requirements. <span class="anchor" id="line-79"></span></li>
<li>'default.conf'  is a default configuration file, you can edit it if you need to change  some options, path to files and commands used by bluemaho, theme etc. by  default you don't need to change it if you do all from 'requirements'  chapter. but, please, view it, for example just for setting  'user_location' variable for defining you location, which will be used  for tracking function. <span class="anchor" id="line-80"></span></li>
<li>'themes' - directory with themes for bluemaho GUI. You can set path to default theme with 'theme' variable in 'default.conf'  <span class="anchor" id="line-81"></span><span class="anchor" id="line-82"></span></li>
</ol>
<div class="line867" style="text-align: justify;">
</div>
<h3 id="head-2670038111a3c9008f5b357412c4e536fda3337a" style="text-align: justify;">
Run and use</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-83"></span><br />
<div class="line862">
you can run <b>BlueMaho</b>  typing in console 'bluemaho.py'. For verbose output in console (and  redirecting std_err and std_out) run 'bluemaho.py -v'. it saves founded  devices to 'bluemaho.log' by default, you can change it in  'config/defaul.conf'. <span class="anchor" id="line-84"></span>enjoy! </div>
<h3 class="line862">
Download ::</h3>
<div class="line862">
<b>Linux :: </b> <a href="https://wiki.thc.org/BlueMaho?action=AttachFile&do=get&target=bluemaho_v090417.tgz" target="_blank">BlueMaho.tgz</a></div>
<div class="line862">
<br /></div>
<h3 class="line862">
Tutorial ::</h3>
<div class="line862">
Text :: <a class="external text" href="http://www.digitalmunition.com/DMA%5B2005-1214a%5D.txt" rel="nofollow">Bluetooth for Windows Remote Audio Eavesdropping</a></div>
</div>

BlueMaho (Bluetooth Devices Security Testing) :: Tools

BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices . It is freeware, opensource, written ...

Vulture (Reverse Proxy and Web Application Firewall) :: Tools

<div class="separator" style="clear: both; text-align: justify;">
<img alt="Vulture Web Application firewall logo" border="0" height="120" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcN3Rs0hVvmx1PZMlzm4cKq8LfrgzLmawv5_6MTJGCGcv80todCVORuLNw89N_c_q6Bdo12ScoCZC5pVkwGY4LZjHRpyykzf-7j32yGUKJIY-_FBDWsdfPinXJLDDJ1x8ofO4ztGKtEKS1/s640/vulture+web+application+firewall+logo.png" title="Vulture Web Application firewall logo" width="640" /></div>
<div style="text-align: justify;">
<b>Vulture </b>is a <i><span itemprop="description">Open Source Reverse Proxy / Web Application Firewall</span></i><b>. Vulture </b>is a Web-SSO solution based on technology<i> reverse <a href="http://www.toolwar.com/search/label/Proxy" target="_blank">proxy</a></i> 
implemented on a base Apache 2.2. Vulture also provides <i>application <a href="http://www.toolwar.com/search/label/Firewalls" target="_blank">firewall</a></i> functionality and interfaces between <i><a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> applications </i>and 
Internet to provide unified <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> and authentication.
</div>
<h3 style="text-align: justify;">
<b>Features :: </b></h3>
<div style="text-align: justify;">
The authentication of users with many methods supported
LDAP, SQL, text file, radius server, digital certificates ...
Modular design allows you to add new authentication methods
The spread of authentication on protected applications
The encryption flow
Filtering and rewriting content
Some features to protect against injection attacks
Load balancing
.</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="https://googledrive.com/host/0B73hnOQoTupkUkdwM2VGOGNWVTA/" target="_blank">Vulture 2.0.7</a> </div>
<h2 style="text-align: justify;">
 <span class="mw-headline" id="Details"> </span></h2>

Vulture (Reverse Proxy and Web Application Firewall) :: Tools

Vulture is a Open Source Reverse Proxy / Web Application Firewall . Vulture is a Web-SSO solution based on technology reverse proxy im...

Comodo Firewall :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Comodo Firewall logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi92gYqhU6WXsU5QSuwFESFgVBUZRIZ93TAb8ZSRVFkaQCazEWClk9C1VhN3JPzO4FXEOvgIEDZouPKkAeFP2mcTXNqBII0QedzsI8xqmfcaqksPzn22tzvkBWT6GUHRHWO_ipJ5d2WUz_T/s1600/comodo-firewall+logo.png" title="Comodo Firewall logo" /></div>
<b>Comodo Firewall</b>  Pro introduces the next evolution in <i>computer security</i>: Default Deny  Protection (DDP™). What is DDP? Most security programs maintain a list  of known <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a>, and use that list to decide which applications and  files shouldn't access a PC. The problem here is obvious. What if the  list of malware is missing some entries, or isn't up to date?</div>
<div style="text-align: justify;">
<b>Comodo <a href="http://www.toolwar.com/search/label/Firewalls" target="_blank">Firewall</a> </b>is the best choice for users seeking a<b> full featured <a href="http://www.toolwar.com/search/label/Security" target="_blank"> security</a> suite.</b> This latest release is suitable for both lightly-skilled  users (still must have knowledge of installed programs) and technically  advanced users. Its robust and active HIPS (or application monitoring  feature), called "Defense+", matches or exceeds the security performance  of pay products. Comodo allows for much control and customization for  the curious or the paranoid. </div>
<div style="text-align: justify;">
<b>Comodo</b> includes a "<i>memory firewall</i>" (against buffer overflow  attacks) and a light sandbox component to limit the way unknown  applications and new software installations affect your computer. The  use of sandbox protection limits the negative effects of malware. It  maintains a lengthy list of known safe applications, but if an unknown  application attempts entry through the firewall, <b>Comodo</b> will deny the  application and ask the user what to do. The new release contains user  friendly features by default while allowing experienced users to  maintain control over ports, protocols, and configurations. </div>
<div style="text-align: justify;">
DDP fixes this problem to ensure complete security. The <b> firewall </b>references a list of over two million known PC-friendly  applications. If a file that is not on this safe-list knocks on your  PC's door, the Firewall immediately alerts you to the possibility of  attacking malware. All this occurs before the <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> infects your  computer. It's prevention-based security, the only way to keep PCs  totally safe.</div>
<h3 style="font-size: 16px; margin-bottom: 10px; margin-top: 15px; padding: 10px 0px 0px; text-align: justify;">
5 top secrets why Comodo Firewall is different</h3>
<ul class="facts-list" style="text-align: justify;">
<li>No complex configuration issues—perfect for amateur users </li>
<li>Quickly learns user behavior to deliver personalized protection</li>
<li>User-friendly, attractive graphical interface</li>
<li>Lots of configuration options let techies configure things just as they like</li>
<li>DDP-based security keeps you informed and PCs safe</li>
</ul>
<div style="text-align: justify;">
One of the first steps in securing a computer is downloading  and activating a quality firewall to repel intruders. Only this free  firewall software has access to Comodo's extensive safe-list of  PC-friendly applications, a key component of Default Deny Protection™.</div>
<h3>
<b>System Requirements:</b></h3>
<div style="text-align: justify;">
Windows 7 / Vista / XP SP2 / Windows 8, 152 MB RAM / 400 MB space</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorial :: </h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/T4uAAgicpZ4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>Windows ::</b> <a href="http://www.comodo.com/home/download/download.php?prod=firewall" target="_blank">Comodo Firewall</a></div>
<h3 style="text-align: justify;">
</h3>

Comodo Firewall :: Tools

Comodo Firewall Pro introduces the next evolution in computer security : Default Deny Protection (DDP™). What is DDP? Most security pr...

SRDF - Security Research and Development Framework :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="SRDF - Security Research and Development Framework" border="0" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGnFfLl9tWVJH2zHKe7QLRdJ4tE1-4JAVwWqtOKo-ds-ItC_74qf8W7on7y6J8LHN7QOoORnyUYL9kjj92u8pROLRqs2-pzuPS2_fdPhfbbIAtfarXwCUSP_srtZSZgrFQ8NKSyvpKJCAy/s640/SRDF+Logo.jpg" title="SRDF - Security Research and Development Framework" width="640" /></div>
<div style="text-align: justify;">
<b>SRDF - Security Research and Development Framework</b> is a free open source <i>Development Framework</i> created to support <i>
writing security tools and malware analysis tools</i>. And to convert the 
security researches and ideas from the theoretical approach to the 
practical implementation.  </div>
<div style="text-align: justify;">
This development framework created 
mainly to support the malware field to create malware analysis tools and
 anti-virus tools easily without reinventing the wheel and inspire the 
innovative minds to write their researches on this field and implement 
them using SRDF. </div>
<h3 style="text-align: justify;">
<span style="font-size: large;"><b>Introduction:</b></span> </h3>
<div style="text-align: justify;">
In the 
last several years, the malware black market grows widely. The 
statistics shows that the number of new viruses increased from 300,000 
viruses to millions and millions nowadays. </div>
<div style="text-align: justify;">
The complexity of malware attacks also increased from small amateur viruses to stuxnet, duqu and flame. </div>
<div style="text-align: justify;">
The
 malware field is searching for new technologies and researches, 
searching for united community can withstand against these attacks. And 
that’s why SRDF </div>
<div style="text-align: justify;">
The SRDF is not and will not be developed by one 
person or a team. It will be developed by a big community tries to share
 their knowledge and tools inside this Framework </div>
<div style="text-align: justify;">
SRDF still not 
finished … and it will not be finished as it’s a community based 
framework developed by the contributors. We just begin the idea. </div>
<div style="text-align: justify;">
The SRDF is divided into 2 parts: User-Mode and Kernel-Mode. And we will describe each one in the next section. </div>
<h3 style="text-align: justify;">
<span style="font-size: large;"><b>The Features:</b></span> </h3>
<div style="text-align: justify;">
Before
 talking about SRDF Design and structure, I want to give you what you 
will gain from SRDF and what it could add to your project. </div>
<div style="text-align: justify;">
In User-Mode part, SRDF gives you many helpful tools … and they are: </div>
<ul style="text-align: justify;">
<li>Assembler and Disassembler </li>
</ul>
<ul style="text-align: justify;">
<li>x86 Emulator </li>
</ul>
<ul style="text-align: justify;">
<li>Debugger </li>
</ul>
<ul style="text-align: justify;">
<li>PE Analyzer </li>
</ul>
<ul style="text-align: justify;">
<li>Process Analyzer (Loaded DLLs, Memory Maps … etc) </li>
</ul>
<ul style="text-align: justify;">
<li>MD5, SSDeep and Wildlist Scanner (YARA) </li>
</ul>
<ul style="text-align: justify;">
<li>API Hooker and Process Injection </li>
</ul>
<ul style="text-align: justify;">
<li>Backend Database, XML Serializer </li>
</ul>
<ul style="text-align: justify;">
<li>And many more </li>
</ul>
<div style="text-align: justify;">
In
 the Kernel-Mode part, it tries to make it easy to write your own filter
 device driver (not with WDF and callbacks) and gives an easy, object 
oriented (as much as we can) development framework with these features: </div>
<ul style="text-align: justify;">
<li>Object-oriented and easy to use development framework </li>
</ul>
<ul style="text-align: justify;">
<li>Easy IRP dispatching mechanism </li>
</ul>
<ul style="text-align: justify;">
<li>SSDT Hooker </li>
</ul>
<ul style="text-align: justify;">
<li>Layered Devices Filtering </li>
</ul>
<ul style="text-align: justify;">
<li>TDI Firewall </li>
</ul>
<ul style="text-align: justify;">
<li>File and Registry Manager </li>
</ul>
<ul style="text-align: justify;">
<li>Kernel Mode easy to use internet sockets </li>
</ul>
<ul style="text-align: justify;">
<li>Filesystem Filter </li>
</ul>
<div style="text-align: justify;">
Still the Kernel-Mode in progress and many features will be added in the near future. </div>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://srdf.googlecode.com/files/SRDF-v1.00.rar" target="_blank">SRDF v1.0</a></div>
<div style="text-align: justify;">
<b>Help & Official Website :: </b>https://www.owasp.org/</div>

SRDF - Security Research and Development Framework :: Framework

SRDF - Security Research and Development Framework is a free open source Development Framework created to support writing security too...

Tortilla :: Tools

<div style="text-align: justify;">
<span class="field-content"></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmwKrsLbKQTKrY6pFC_rTOgytToiYTmIX0hi59EM3vEd51i6WOiGFek59HfVx1QWH0ADQpaN-ck8gH8LDG48zZEWJrxUA89hSBNenbHowXEcSk7o-CrF4mBavCXtyX8ffcPXUo81ys8B3U/s1600/tortilla.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="259" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmwKrsLbKQTKrY6pFC_rTOgytToiYTmIX0hi59EM3vEd51i6WOiGFek59HfVx1QWH0ADQpaN-ck8gH8LDG48zZEWJrxUA89hSBNenbHowXEcSk7o-CrF4mBavCXtyX8ffcPXUo81ys8B3U/s320/tortilla.jpg" width="320" /></a></div>
<b>Tortilla</b> is an open source tool that 
allows users to <i>securely, anonymously, and transparently route</i> all 
TCP/IP and DNS traffic through Tor, regardless of the client software, 
and without relying on VPNs or additional hardware or virtual machines.<br />
<b>Supported Operating Systems:</b> The tool runs on 32 bit and 64 bit versions of Windows from XP and above.<br />
<h3>
<span class="field-content">Download :: </span></h3>
<b><span style="font-weight: normal;"><b>Windows ::</b> <a href="http://download.crowdstrike.com/tortilla/Tortilla_v1.1.0_Beta.zip" target="_blank">Tortilla 1.1.0</a></span></b><br />

<b>Official Website ::</b><a href="http://www.crowdstrike.com/" target="_blank"> http://www.crowdstrike.com/</a><br />
<span class="field-content"></span><br />
<h3>
<span class="field-content"></span></h3>

Tortilla :: Tools

Tortilla is an open source tool that allows users to securely, anonymously, and transparently route all TCP/IP and DNS traffic throu...

Firewalk (Network Security) : Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbgRWmUehqIWyGZoJXMGkeGJ6Adyg2kd1Nkij3CmxD2O-XBpIGbA8YfKq4tt7WQ08fNWxzGIr6MolNMNAIoH6YLFrOfxN646eLpW537-wWTMrl2wh-bI2JMptxMvOTPK9b6s0iEnu1kenq/s1600/firewalk.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="92" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbgRWmUehqIWyGZoJXMGkeGJ6Adyg2kd1Nkij3CmxD2O-XBpIGbA8YfKq4tt7WQ08fNWxzGIr6MolNMNAIoH6YLFrOfxN646eLpW537-wWTMrl2wh-bI2JMptxMvOTPK9b6s0iEnu1kenq/s320/firewalk.gif" width="320" /></a></div>
<div style="text-align: justify;">
<b>Firewalk</b> is an <b>active reconnaissance network security tool</b> that attempts to determine what layer 4 protocols a  given IP forwarding device will pass. Firewalk  works  by sending out TCP or UDP packets with a TTL one greater than the targeted gateway.  If the gateway allows the traffic, it will forward the packets to the next hop where they will expire and elicit an ICMP_TIME_EXCEEDED  message.  If the gateway hostdoes not allow the traffic, it will likely drop the packets on  the floor and we will see no response.</div>
<div style="text-align: justify;">
To get  the  correct  IP  TTL that will result in expired packets one beyond the gateway we need  to  ramp  up  hop-counts.   We  do  this  in the same manner that traceroute works.  Once we have the gateway hopcount (at  that point the scan is said to be `bound`) we can begin our scan.</div>
<div style="text-align: justify;">
It is significant to note the fact that the ultimate destination host does not have to be reached.  It just  needs to be somewhere downstream, on the other side of the gateway, from the scanning host.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/VWNnAcrpZ_4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b><a href="http://packetfactory.openwall.net/firewalk/dist/firewalk.tar.gz" target="_blank">Firewalk 5.0 (for Linux)</a>
<b> </b><br />
<b>Official Website :: </b>http://packetfactory.openwall.net/projects/firewalk/</div>

Firewalk (Network Security) : Tools

Firewalk is an active reconnaissance network security tool that attempts to determine what layer 4 protocols a given IP forwarding de...

OpenSCAP :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="openscap logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXQFj4zLeCW14YEVKoqD8MA3fWadKIZo-_UJ6_GUaXS8XEx85KgovsQNqIQM9VbWcOQV7B_waPPpDlc9txypQddRoEgzz-bnZoHLzIalEcR8xhVoDKoglRqmBHG6aSJZNh5NyrnFUrUOCe/s1600/open-scap-logo_small.png" title="openscap logo" /></div>
<div style="text-align: justify;">
The <b>OpenSCAP </b>Project is created to provide an open-source framework 
to the community which enables integration with the <i>Security Content 
Automation Protocol (SCAP) suite</i> of standards and capabilities. It is 
the goal of OpenSCAP to provide a simple, easy to use set of interfaces 
to serve as the framework for community use of SCAP.
</div>
<div style="text-align: justify;">
<b>SCAP </b>is a line of standards managed by NIST. It was created to 
provide a standardized approach to maintaining the security of 
enterprise systems, such as automatically verifying the presence of 
patches, checking system security configuration settings, and examining 
systems for signs of compromise. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Text Tutorial :: </b><a href="http://www.open-scap.org/page/Documentation" target="_blank">Click Here </a></div>
<div style="text-align: justify;">
<b>Download Here ::</b> <a href="http://www.open-scap.org/page/Download" target="_blank">Click Here</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.open-scap.org/page/Main_Page </div>
</div>

OpenSCAP :: Framework

The OpenSCAP Project is created to provide an open-source framework to the community which enables integration with the Security Conten...

Matriux :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="matriux logo" border="0" height="172" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGH_1dFXf9r-j5uQethVAQgIkPIJ2hfg9mwn-W0QQjsCn3x3c_a08dudXKpu78Qgq5YKkw8dMH0fONfrk-pSGsdTH5G0YCUrcVuUrFzrow68QtcE95vndH__UwV-6WqLAnM04pTzV7-d7g/s320/matriux+logo.jpg" title="matriux logo" width="320" /></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
The <b>Matriux</b> is a phenomenon that was waiting to happen. It is a <i> fully featured security distribution </i>based on Debian consisting of a  powerful bunch of more than <b>300 open source</b> and free tools that can be  used for various purposes including, but not limited to, penetration  testing, ethical hacking, system and network administration, cyber  forensics investigations, security testing, vulnerability analysis,  and  much more. It is a distribution designed for security enthusiasts and  professionals, although it can be used normally as your default desktop  system.</div>
<div style="text-align: justify;">
With <b>Matriux</b>, you can turn any system into a powerful penetration  testing toolkit, without having to install any software into your  hardisk. Matriux is designed to run from a Live environment like a CD /  DVD or USB stick or it can easily be installed to your hard disk in a  few steps. Matriux also includes a set of computer forensics and data  recovery tools that can be used for forensic analysis and investigations  and data retrieval.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: center;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/W6BgzpN9Co0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/HpG6NZyT5xk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b><b>Authentification</b></b></div>
<div style="text-align: center;">
Username: <b>root</b><br />
Username: <b>matriux</b><br />
Username: <b>tiger</b><br />
Password: <b>toor</b></div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://linuxfreedom.com/matriux/Matriux_Leandros20130923.iso" target="_blank">Matriux Leandros ISO</a> </div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.matriux.com/ </div>
</div>

Matriux :: Distribution

The Matriux is a phenomenon that was waiting to happen. It is a fully featured security distribution based on Debian consisting of a...

Katana (Security Suite) :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<img alt="katana logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMSbSG85pmi-m_F-HR3S76YmZ7XvVAJdDrFeEMUAgFWeZWQNuv-XTVp5kdZ44ePTBqagWCfIm-OttLK5TI832kqhbREco9fx8m3PzahkLoGW_nLEfrl26n5OIz2tYbkM9H3sVo787-erIb/s1600/katana+logo.png" title="katana logo" /></div>
<div style="text-align: justify;">
<b>Katana</b> is a portable multi-boot security suite which brings together  many of today's best security distributions and portable applications to  run off a single Flash Drive. It includes distributions which focus on  Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and  Malware Removal. Katana also comes with over 100 portable Windows  applications; such as Wireshark, Metasploit, NMAP, Cain & Abel, and  many more. </div>
<div style="text-align: justify;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/q4pV0fJMOjM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b><br /></b>
<b>Download Here :: </b><a href="http://public.acetolyne.net/katana-v2.0.rar" target="_blank">Katana v2.0</a><br />
<b>Official Website ::</b> http://www.hackfromacave.com/katana.html</div>
<div style="text-align: justify;">
</div>
</div>

Katana (Security Suite) :: Distribution

Katana is a portable multi-boot security suite which brings together many of today's best security distributions and portable app...

SSL Vulnerability Analyzer :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH12DB6_ms3O3s1_td8BwM7StWC_nv4S2ExjursWZTouuu445awygxmJEjwkFBQ0YsXbsZFoHvtP3lH0D5vlc-ZXpPbRGp9kb5moG1o_dK7LjMhPelK6CgYkRdbRcbRtGtRxmmoQ5qcQGU/s1600/ssl+vulnerability+analyzer+toolwar.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="SSL Vulnerability Analyzer toolwar" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH12DB6_ms3O3s1_td8BwM7StWC_nv4S2ExjursWZTouuu445awygxmJEjwkFBQ0YsXbsZFoHvtP3lH0D5vlc-ZXpPbRGp9kb5moG1o_dK7LjMhPelK6CgYkRdbRcbRtGtRxmmoQ5qcQGU/s320/ssl+vulnerability+analyzer+toolwar.png" title="SSL Vulnerability Analyzer toolwar" width="264" /></a></div>
<div style="text-align: justify;">
The <b>SSL Vulnerabilities Analyzer</b> is designed for website owners and 
security testers. The tool takes a domain and/or IP address, tests the 
encryptions and algorithms supported by them and analyzes the results in
 a graphic form, reporting problematic encryption methods.</div>
<div style="text-align: justify;">
PS, the browser may warn you about a danger file, but it's because that the zip file contains an installation file.</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Help/Tutorial :: </b><a href="https://appsec-labs.com/SSL_Analyzer/help" target="_blank">Click Here</a> </div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="https://appsec-labs.com/sites/default/files/d/tools/SSL_Vulnerabilities_analyzer/SSL_Analyzer_v1.1.zip" target="_blank">SSL Vulnerability Analyzer</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>https://appsec-labs.com/ </div>
</div>

SSL Vulnerability Analyzer :: Tools

The SSL Vulnerabilities Analyzer is designed for website owners and security testers. The tool takes a domain and/or IP address, tes...

Polyvaccine (Polymorphic Detection Engine) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="http logo toolwar" border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7Ssb4iktrAq-1DF0nSISPStIk_c880oa92Afo9cJfj4vr1GAGb65APEC0Efd4mJ9Ra_FRt84OkcM3cr48QO7tIb_zq3ABSlag7v7UH3Prm8dS-h5bLjN_8WoXu_DdbNNgrSbRz5l8TfuA/s320/http+logo+toolwar.jpg" title="http logo toolwar" width="320" /></div>
<div style="text-align: justify;">
<b>Polyvaccine </b>is a <i>Polymorphic Detection Engine </i><b>Polyvaccine </b>is a detection software that enables protection to HTTP 
or SIP servers from unknown binary attacks, such as polymorphic exploit 
attacks, and DDoS at application layer.
</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Polyvaccine is supports the next platforms:</b>
</div>
<div style="text-align: justify;">
Linux x86_32(deprecated) x86_64
Freebsd x86_64 (beta)
Polyvaccine have the next main characteristics:
</div>
<div style="text-align: justify;">
Don't need signature updates.
The main three task(detection, protection, filtering) could be placed distributed on several nodes
The architecture is fully distributed (using dbus as main orb).
The integration with other subsystems such as logger, firewalls and so on is easy just by using simple python scripts.
Don't have support for Sql-injection, just any type of binary attacks.
Don't try to replace the functions of a NIDS.
The management task are negligible. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Help ::</b> http://code.google.com/p/polyvaccine/w/list</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://polyvaccine.googlecode.com/files/polyvaccine-0.5.tar.gz" target="_blank">Polyvaccine-0.5.tar.gz</a></div>
<div style="text-align: justify;">
<b>Source ::</b> http://code.google.com/p/polyvaccine/</div>
</div>

Polyvaccine (Polymorphic Detection Engine) :: Tools

Polyvaccine is a Polymorphic Detection Engine Polyvaccine is a detection software that enables protection to HTTP or SIP servers from u...

Subscribe to: Posts ( Atom )