ToolWar | Information Security (InfoSec) Tools: Tracking

Patriot NG (Changes Detection in Windows or in Network) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwNXqM7_LHQ7YPJaUfI2fTX1hrSU-cv68o0zWKOpWgQrMx00ihDHzEZ1zQqnMcN-LrAwuFoK8Lafq4glQ95bKL1ZOkMdq_O7GD58r9VgXtkOFpMY9SAsHN-3vcCy0tsleeTTehuydm0HHK/s1600/Patriot+NG+Screenshot.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwNXqM7_LHQ7YPJaUfI2fTX1hrSU-cv68o0zWKOpWgQrMx00ihDHzEZ1zQqnMcN-LrAwuFoK8Lafq4glQ95bKL1ZOkMdq_O7GD58r9VgXtkOFpMY9SAsHN-3vcCy0tsleeTTehuydm0HHK/s400/Patriot+NG+Screenshot.JPG" width="176" /></a></div>
<div style="text-align: justify;">
<b>Patriot NG</b> is a <i>'Host IDS' tool</i> which allows <i>real time monitoring of changes in Win<span style="font-size: 14px; line-height: 1.4em;">dows systems or Network attacks.</span></i></div>
<i>
</i>
<h3>
Patriot monitors:</h3>
<ul>
<li>New files in 'Startup' directories</li>
<li>Changes in Registry keys: Indicating whether any sensitive key (autorun, internet explorer settings...) is altered</li>
<li>New Users in the System</li>
<li>New Services installed</li>
<li>Changes in the hosts file</li>
<li>New scheduled jobs</li>
<li>Alteration of the integrity of Internet Explorer: (New BHOs, configuration changes, new toolbars)</li>
<li>Changes in ARP table (Prevention of MITM attacks)</li>
<li>Installation of new Drivers</li>
<li>New Netbios shares</li>
<li>TCP/IP Defense (New open ports, new connections made by processes, PortScan detection...)</li>
<li>Files in critical directories (New executables, new DLLs...)</li>
<li>New hidden windows (cmd.exe / Internet Explorer using OLE objects)</li>
<li>Netbios connections to the System</li>
<li>ARP Watch (New hosts in your network)</li>
<li>NIDS (Detect anomalous network traffic based on editable rules)</li>
</ul>
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://sbdtools.googlecode.com/files/PatriotNG2.01.zip" target="_blank">Patriot NG 2.01</a><br />
<h3>
Official Website ::</h3>
http://www.security-projects.com/

Patriot NG (Changes Detection in Windows or in Network) :: Tools

Patriot NG is a 'Host IDS' tool which allows real time monitoring of changes in Win dows systems or Network attacks. Patrio...

Yeti (Network Foot-Printing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5p_8uF28TyyEY6WHl18BJAymokj8-VVu3MRWW5Wt7IIrOKw2h-IiduRV_50rPsD9BqFdwAWtpQ9-szzl3mPK2neFFLS6lG6F0wxVLr7SueOJFhRZRFJRSJQia0DgBxQlZnQRUrCAjfAbO/s1600/yeti+tool+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Yeti tool screenshot" border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5p_8uF28TyyEY6WHl18BJAymokj8-VVu3MRWW5Wt7IIrOKw2h-IiduRV_50rPsD9BqFdwAWtpQ9-szzl3mPK2neFFLS6lG6F0wxVLr7SueOJFhRZRFJRSJQia0DgBxQlZnQRUrCAjfAbO/s400/yeti+tool+screenshot.png" title="Yeti tool screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>Yeti </b>is a network foot-printing tool and <b>Yeti</b> is a <i>perfect tool to perform the reconnaissance </i>phase before a 
pentest or a security assessment. A nice feature is the use of a <i>GeoIP 
database to look for IP addresses</i> and <i>display your network</i> on a world 
map. <b>Yeti</b> grabs information publicly available on the Internet and does 
not perform any intrusive actions. Big companies may have a huge amount 
of devices and resources online with remote offices in several 
countries, several websites. If you host applications in the cloud, it 
could also discover what are your “neighbours” (who share the same IP 
addresses as you).
</div>
<div style="text-align: justify;">
Yeti is developed in Java and run on all the well-known operating systems flavors. Yeti proposes the following features:
</div>
<ul style="text-align: justify;">
<li> Domain expansion – Based on a domain names list, it gathers 
information for all the available TLD (read from a list). Ex: 
rootshell.be, rootshell.org, rootshell.eu, rootshell.com, etc. Whois 
information is gathered and filters can be applied to search for 
relevant information.
</li>
<li> Forward lookup – Extracts information from domains (MX records, etc)
</li>
<li> Certification extraction – Extracts the SSL certificates from web sites.
</li>
<li> Reverse lookup – Performs reverse IP lookup from IP lists.
</li>
<li> IP/Site scan – Using the Microsoft Bing API, it extracts information based on domain names or IP addresses<b>. </b></li>
</ul>
<b>Tutorial :: </b><a href="http://spyeti.blogspot.in/p/getting-started.html" target="_blank">Click Here</a><b> </b><br />
<b>Download Here :: </b><a href="http://www.sensepost.com/cms/resources/labs/tools/misc/jyeti-dist.tar.bz2" target="_blank">Yeti .tar.bz2 (for Linux)</a><b><br /></b><br />
<b>Official Website ::</b> http://spyeti.blogspot.in/

Yeti (Network Foot-Printing) :: Tools

Yeti is a network foot-printing tool and Yeti is a perfect tool to perform the reconnaissance phase before a pentest or a security asse...

Spamhole (Fake Open SMTP Relay) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="spamhole icon" border="0" height="288" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqgcukVMDw1RsYGJ3aGblNfFV_xTdGEVOlVczM9nJ9m8k1eXqNCk2wif9XPVHMr_ZIL4s9Nn9vAIyf8K7a8o-5NzEpSjVjd1wssVxKNoB14was_qw88F8xtQ89GTkteQlby9ostpsdlgN6/s320/spamhole+logo.jpg" title="spamhole icon" width="320" /></div>
<b>Spamhole</b> is a <i>fake open SMTP relay</i>, intended to stop (some) spam by 
convincing spammers that it is delivering spam messages for them, when 
in fact it is not.<b> </b><br />
<h2>
<b>Usages :: </b></h2>
<pre><span style="font-family: "Courier New",Courier,monospace;">spamhole.h Config Options:

PWD - spamhole's present working directory (where it stores it's data.

UID - spamhole's running UID (after binding to the port, it drops privs to this user)

IDENT - A text string to uniquely identify this spamhole.This string will be added to modified emails via the
 X-SpamHole-Ident header.

LOCAL_IP - The local address you want spamhole to listen on (use "0.0.0.0" for all local addresses).

LOCAL_PORT - The local port for spamhole to listen to (usually port 25)

SMTP_RELAY - The remote SMTP relay or mail server that spamhole will redirect connections to for mail service.

SMTP_PORT - The port that SMTP_RELAY listens on for SMTP.

MAX_CON - The maximum number of unmodified 'passthrough' SMTP connections any given IP is allowed to have.  After
 this threshold is reached, incoming SMTP will be modified and tagged via X-SpamHole headers.

HOLEADDR - The email address that modified connections will have emails re-addressed to.  This should be a SPAM
 mailbox or spam registration address, such as the registration address for a Bayesian Filter.</span></pre>
<br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/spamhole/files/latest/download" target="_blank">Spamhole 0.4.tar.gz (for Linux)</a><br />
<b>Official Website :: </b>http://www.spamhole.net/

Spamhole (Fake Open SMTP Relay) :: Tools

Spamhole is a fake open SMTP relay , intended to stop (some) spam by convincing spammers that it is delivering spam messages for them, w...

3D Traceroute :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBJ4Xr604xfPWiWvBb3Aw8WC8JzrHpS4IdXHwZsvAKuDnn51KaLpu1Dgd-Paplt_znZOVLlOh34op8IXHV0WS3R0jj0OTBQ77qlSjjoSbSDmrRQDu-L60juD4COAGGYu1ruVPbo6XXf_AN/s1600/3d-traceroute+screenshot.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="3D Traceroute screenshot" border="0" height="295" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBJ4Xr604xfPWiWvBb3Aw8WC8JzrHpS4IdXHwZsvAKuDnn51KaLpu1Dgd-Paplt_znZOVLlOh34op8IXHV0WS3R0jj0OTBQ77qlSjjoSbSDmrRQDu-L60juD4COAGGYu1ruVPbo6XXf_AN/s400/3d-traceroute+screenshot.gif" title="3D Traceroute screenshot" width="400" /></a></div>
<ul style="text-align: justify;">
<li><b>3d traceroute display: </b>multiple graphics modification        options</li>
<li><b>statistics window: </b>min, max, average,        standard deviation and       history window with destination ping time</li>
<li><b>as list:</b> the usual data view with lots of features</li>
<li>long period Ping and HTTP monitor</li>
<li><b>Whois query:</b> everything with only one click</li>
<li><b>record and playback: </b>record any trace and        playback step by step</li>
<li><b>build in browser: </b>and the browser is        already built in.</li>
<li>ASN inspector</li>
<li><b>NSLookup:</b> with UDP and TCP. And zone        transfer capability.</li>
<li><b>Day and Night trace:</b> Admins beloved toy</li>
<li><b>Command-line execution mode: </b>full replacement        for good old buddy tracert.</li>
<li>passive OS fingerprinting</li>
<li>three different Portscanner (knows 3,612        well known ports)</li>
<li>analyze eMail headers: against RBLs</li>
<li>Connection viewer: TCP, IP, UDP etc.        statistics</li>
<li><b>HTTP Spy: </b>query HTTP-headers and webpages</li>
<li>Atomic Clock Sync</li>
<li>ISO 3166 code browser</li>
<li>build in TELNET client</li>
<li>low CPU-Usage</li>
<li>everywhere a usefull context menu</li>
<li>Working with Windows 2000 and Windows XP, XP SP1 und XP SP2       (perhaps with Windows 98, 98SE or ME and NT4)</li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/zw7cl_JtDWY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b>
<b> </b><a href="http://www.d3tr.de/downloads/d3tr-1-6-46-94.exe" target="_blank">3D Traceroute (for Windows)</a><br />
<b>Official Website :: </b>http://www.d3tr.de/ </div>

3D Traceroute :: Tools

3d traceroute display: multiple graphics modification options statistics window: min, max, average, standard deviation an...

eMailTrackerPro :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipm5lCo7c-C8Zh8fBebeme0YA0c8SYv4pY8x8hgwDgSrpTJjQtw1od8KHEPNCkJmMqdpYmzJ9KP_Xh5WzwvdEwcsuvgZPv9plIDzbPLfy6hzyfH484jFfbGp6xtgCHpg7yDFPfJGT2Hche/s1600/emailtrackerpro+logo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="emailtrackerpro logo" border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipm5lCo7c-C8Zh8fBebeme0YA0c8SYv4pY8x8hgwDgSrpTJjQtw1od8KHEPNCkJmMqdpYmzJ9KP_Xh5WzwvdEwcsuvgZPv9plIDzbPLfy6hzyfH484jFfbGp6xtgCHpg7yDFPfJGT2Hche/s320/emailtrackerpro+logo.jpg" title="emailtrackerpro logo" width="320" /></a></div>
<div style="text-align: justify;">
<b>eMailTrackerPro </b>is a <b>email tracking tool</b> for emails that trace the location of email as well as it provides additional facilities like report abuse and spam filter. Over 97% of all email is spam. Spam can be harmless but annoying, it can  contain viruses or it can try and trick someone into giving up personal  details which in turn leads to identity fraud. EmailTrackerPro not only  offers the ability to <b>trace an email</b> using the email header but it also comes with a <b>spam filter</b>  (advanced edition), which scans each email as it arrives and warns the  user if it's suspected spam. Essentially stopping spam email before it  reaches its intended recipient. Pro version available at $29.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="font-size: small;">An email 'header' contains all the information required to track where  it came from. It holds the footprint of each server the email travelled  through which in almost all cases leads us back to the city/town the  email originated.  </span></div>
<div style="text-align: justify;">
<span style="font-size: small;"><br />
</span></div>
<div style="text-align: justify;">
<span style="font-size: small;"><span style="color: #333333;">Whois information is  essentially contact details for the organization that registered/is  responsible for the IP address or website being traced. Also uncovered  are any services running on the destination machine.</span></span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="color: #333333; font-size: 14px;"><span style="font-size: small;"><span style="color: #333333;">The most valuable feature is the ability to trace more than one IP address or domain name at a time. <b>Trace as many IP addresses and domain names as required</b> and either output the results to a new tab or an Excel/HTML file.</span></span></span></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/smoGpdnGgVg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<span style="color: #333333; font-size: 14px;"><span style="font-size: small;"><span style="color: #333333;"><b>Trial Download Here ::</b> <a href="http://download.visualware.com/pub/emt/emt.exe" target="_blank">eMailTrackerPro v10.0b (for Windows)</a></span></span></span></div>
<div style="text-align: justify;">
<span style="color: #333333; font-size: 14px;"><span style="font-size: small;"><span style="color: #333333;"><b>Official Website ::</b>  http://www.emailtrackerpro.com/</span></span> </span></div>
</div>

eMailTrackerPro :: Tools

eMailTrackerPro is a email tracking tool for emails that trace the location of email as well as it provides additional facilities like ...

Magic NetTrace :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitcGgXxKhw9H9P_fygc4LLDsJnd8VStH1ul7w-vpicdfdC-F1Ou1TEIdQH6b5SHTf2nkgazZb1ZpBiixzBylT9X680Lj6m2tGdHQh98pOtALd6-1SYITPaEVswwG4CfsneY5wB-BvYE8Xf/s1600/magic+nettrace+logo.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="magic nettrace" border="0" height="284" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitcGgXxKhw9H9P_fygc4LLDsJnd8VStH1ul7w-vpicdfdC-F1Ou1TEIdQH6b5SHTf2nkgazZb1ZpBiixzBylT9X680Lj6m2tGdHQh98pOtALd6-1SYITPaEVswwG4CfsneY5wB-BvYE8Xf/s400/magic+nettrace+logo.gif" title="magic nettrace" width="400" /></a></div>
<div style="text-align: justify;">
<b>Magic NetTrace</b> is an<b> IP Tracer software</b> with multithreading that will let you know the exact route the signal goes from your PC to any host or IP in the Web. The tool runs whois queries for all intermediate routing nodes, looking up their IP addresses and domain names. You can also ping the host to check accessibility. The program features a multithreading architecture, integration with IExplorer and multilingual support. The 'magic' of the IP Tracer utility, making it pre-eminent among the similar software, lies within the unique multithreading system. <b>Magic NetTrace</b> doesn't require the host's reply before sending a request to another host, as the tool simultaneously tracks the entire amount of routes between hosts. Such an advanced tracking scheme provides the results with the best speed possible. Convenience is not an empty sound for the creators of<b> Magic NetTrace.</b> The program integrates with Internet Explorer 5.0 or higher, allowing you to use the tool's features right in the browser window. One click on a special button located on the IExplorer's toolbar will launch the tracking right away. It'll trace the route to the host displayed in the IE address bar. The worldwide popularity of Magic NetTrace led to the implementation of multilingual support. The utility supports English, French, German, Dutch, Catalan, Greek, Italian, Spanish. </div>
<div style="text-align: justify;">
<b><br /></b></div>
<div style="text-align: justify;">
<b>Trial Download Here ::</b> <a href="http://www.tialsoft.com/download/?url=http://www.tialsoft.com/mNTr.exe" target="_blank">Magic NetTrace (for Windows)</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.tialsoft.com/mnettrace/</div>
</div>

Magic NetTrace :: Tools

Magic NetTrace is an IP Tracer software with multithreading that will let you know the exact route the signal goes from your PC to an...

Subscribe to: Posts ( Atom )