ToolWar | Information Security (InfoSec) Tools

BlueBugger (Information Gathering) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRWT68-7tScmEGFEeFKiWmc_SNYITCODD2zGkNWWOzAUPw4hq4hChN30UixXPrJSG3j39xnPJgcKk33X8rIq0wkbX4rR672Zv0AJIL98ExNJdQWelFIit93JhVGj1YnzgXt1zo8PwXMYdq/s1600/bluebugger.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="bluebugger" border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRWT68-7tScmEGFEeFKiWmc_SNYITCODD2zGkNWWOzAUPw4hq4hChN30UixXPrJSG3j39xnPJgcKk33X8rIq0wkbX4rR672Zv0AJIL98ExNJdQWelFIit93JhVGj1YnzgXt1zo8PwXMYdq/s1600-rw/bluebugger.jpg" title="bluebugger " /></a></div>
<div style="text-align: justify;">
<b>BlueBugger </b>is a tool for bluetooth devices. You can get all informations, phonebook entries and messages with a simply run. <b>Bluebugger</b> is an implementation of the <b>bluebug</b> technique which was discovered by Martin Herfurt.</div>
<h3>
Uses ::</h3>
<span style="font-size: x-small;"><span style="font-weight: normal;"><span style="font-family: "Courier New",Courier,monospace;">bluebugger 0.1 (cant post urls :D)<br />
-----------------------------------------<br />
<br />
Usage: bluebugger [OPTIONS] -a <addr> [MODE]<br />
<br />
       -a <addr>     = Bluetooth address of target<br />
<br />
       Options:<br />
       --------<br />
       -m <name>     = Name to use when connecting (default: '')<br />
       -d <device>   = Device to use (default: '/dev/rfcomm')<br />
       -c <channel>  = Channelto use (default: 17)<br />
       -n            = No device name lookup<br />
       -t <timeout>  = Timeout in seconds for name lookup (default: 5)<br />
       -o <file>     = Write output to <file><br />
<br />
       Mode:<br />
       -----<br />
       info                   = Read Phone Info   (default)<br />
       phonebook              = Read Phonebook    (default)<br />
       messages               = Read SMS Messages (default)<br />
       dial <num>             = Dial number<br />
       ATCMD                  = Custom Command (e.g. '+GMI')<br />
<br />
       Note: Modes can be combined, e.g. 'info phonebook +GMI' </span></span></span><br />
<br />
Tutorial ::<br />
<b>Text :: </b><a href="https://github.com/pwnieexpress/pwn_plug_sources/tree/master/src/bluetooth/bluebugger" target="_blank">Click Here </a><br />
<h3>
Download ::</h3>
<b>Linux :: </b><a href="https://github.com/pwnieexpress/pwn_plug_sources/tree/master/src/bluetooth/bluebugger/source" target="_blank">BlueBugger Source </a><br />
<br />

BlueBugger (Information Gathering) :: Tools

BlueBugger is a tool for bluetooth devices. You can get all informations, phonebook entries and messages with a simply run. Bluebugger i...

Btscanner (Bluetooth Scanner) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjm0aKcbxbyWNe5Vn3_8vIVLYiu5DStLoy9ob-P-O1T2a2ChcS3NEDdMKVlUbBlv2wdqPdotzFW5gmg5V3MUErCDYF5jVTNQog18aXx5VAadxStWCjLGM2jMXUKtgaGBXc-i3tZTFJhurzw/s1600/Btscanner+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="btscanner screenshot" border="0" height="221" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjm0aKcbxbyWNe5Vn3_8vIVLYiu5DStLoy9ob-P-O1T2a2ChcS3NEDdMKVlUbBlv2wdqPdotzFW5gmg5V3MUErCDYF5jVTNQog18aXx5VAadxStWCjLGM2jMXUKtgaGBXc-i3tZTFJhurzw/s400-rw/Btscanner+screenshot.jpg" title="btscanner screenshot" width="400" /></a></div>
<br />
<b>Btscanner </b>is a<b> </b><i>Bluetooth scanner and Information Gathering tool</i><b>.</b> <b>Btscanner</b> is a <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> that extracts as much information as possible  from a <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">Bluetooth </a>device without the requirement to pair. A detailed  information screen extracts HCI and SDP information, and maintains an  open connection to monitor the RSSI and link quality.<b> btscanner</b> is based  on the BlueZ Bluetooth stack, which is included with recent Linux  kernels, and the BlueZ toolset. Using the information gathered from  these sources, it is possible to make educated guesses as to the host  device type. </div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Vl0TIhBFQ18?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows XP:: </b><a href="http://www.pentest.co.uk/src/btscanner_1_0_0.zip" target="_blank">Btscanner v1.0.0</a></div>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="http://www.pentest.co.uk/src/btscanner-2.1.tar.bz2" target="_blank">Btscanner v2.1</a></div>
<div style="text-align: justify;">
</div>

Btscanner (Bluetooth Scanner) :: Tools

Btscanner is a Bluetooth scanner and Information Gathering tool . Btscanner is a tool that extracts as much information as possible ...

Bluediving (Bluetooth Penetration Testing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGDR5aWRa3G4M6DF_zV6qBMmhquEXiTAH_xz6QSOaASWovOeBIZlJmVlQESXiEd8UeBPa2KyYjOrLvJ7enIwRj5PMVixhz0sZ-Gbq-oQ947GmNFTzX6KObVr-2g2jhXfvTCt-yWHT5472P/s1600/bluediving+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Bluediving Screenshot" border="0" height="226" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGDR5aWRa3G4M6DF_zV6qBMmhquEXiTAH_xz6QSOaASWovOeBIZlJmVlQESXiEd8UeBPa2KyYjOrLvJ7enIwRj5PMVixhz0sZ-Gbq-oQ947GmNFTzX6KObVr-2g2jhXfvTCt-yWHT5472P/s400-rw/bluediving+screenshot.jpg" title="Bluediving Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>Bluediving</b> is a <i>Bluetooth penetration testing suite</i>. Bluediving implements attacks like Bluebug, BlueSnarf, BlueSnarf++, BlueSmack, has features such as <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">Bluetooth</a> address spoofing, an AT and a RFCOMM socket shell and implements tools like carwhisperer, bss, L2CAP packetgenerator, L2CAP connection resetter, RFCOMM <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanner</a> and greenplaque scanning mode (using more than one hci device).<br />
<b>Programming languages:</b> Perl and C<br />
<b>Supported operating systems: </b>GNU Linux 2.4 / 2.6 and FreeBSD<br />
<b>Requirements:</b> BlueZ, Sox, obexftp, Gnu Readline library, XML::Simple</div>
<div style="text-align: justify;">
<h3>
Download :: </h3>
</div>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://sourceforge.net/projects/bluediving/files/bluediving/bluediving-0.9/bluediving-0.9.tgz/download" target="_blank">Bluediving v0.9</a></div>
<div style="text-align: justify;">
<h3>
Tutorial ::</h3>
<a href="http://www.youtube.com/watch?v=njUoGVI6l1s" target="_blank">Click Here</a> </div>

Bluediving (Bluetooth Penetration Testing) :: Tools

Bluediving is a Bluetooth penetration testing suite . Bluediving implements attacks like Bluebug, BlueSnarf, BlueSnarf++, BlueSmack, has...

Car Whisperer (Hack Carkit Bluetooth) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="car whisperer image" border="0" height="187" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkC2AwMgoejXDeEWtuft-qbIf2141FbNI8oAzWjtHadAjcvYqBkZruCI7RBFC5-doo_cjpVxr86oB-qXBC21UY4DLNwCdpK6eQhCbKuSAZ9XQb7Dyo8z3Bxy-sWym6ja8oSEjPmhExS0OA/s400-rw/Car+Whisperer+Image.jpg" title="car whisperer image" width="400" /></div>
<b>Carwhisperer</b> project intends to sensibilise manufacturers               of carkits and other <b>Bluetooth appliances</b> without display and keyboard               for the possible             security threat evolving from the use of standard passkeys.             </div>
<div style="text-align: justify;">
A <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank"><b>Bluetooth </b></a>passkey is used within the pairing process that takes               place, when                two<b> Bluetooth</b> enabled devices connect for the first time. Besides               other public                data, the passkey is a secret parameter used in the process that               generates and                exchanges the so-called link key. In Bluetooth communication scenarios               the link               key is used for authentication and encryption of the information               that is              exchanged between the counterparts of the communication.</div>
<div style="text-align: justify;">
The cw_scanner                 script is repeatedly performing a device inquiry for visible                 Bluetooth devices of which the class matches the one of Bluetooth                 Headsets                  and Hands-Free Units. Once a visible Bluetooth device with the                 appropriate <br />
device class is found, the cw_scanner script executes the carwhisperer                 binary                  that connects to the found device (on RFCOMM channel 1) and opens                 a control                connection and connects the SCO links.</div>
<div style="text-align: justify;">
The carwhiperer binary connects to the device found by the cw_scanner.               The passkey that is required for the initial connection to the               device is provided                by the cw_pin.pl script that replaces the official Bluez PIN helper               (graphical                application that usually prompts for the passkey). The cw_pin.pl               script                provides the passkey depending on the Bluetooth address that requests               it.                Depending on the first three bytes of the address, which references               the                manufacturer, different passkeys are returned by the cw_pin.sh               script. In                quite a few cases the preset standard passkey on headsets and handsfree               units              is '0000' or '1234'.</div>
<div style="text-align: justify;">
Once the connection has been successfully established, the carwhisperer               binary                starts sending audio to, and recording audio from the headset.               This allows attackers to inject audio data into the car. This could               be fake <br />
traffic announcements or nice words. Attackers are also able to               eavesdrop             conversations among people sitting in the car.</div>
<div style="text-align: justify;">
Ideally, the carwhisperer is used with a toooned dongle                and                 a directional                antenna that enhances the range of a Bluetooth radio quite a bit.</div>
<div style="text-align: justify;">
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/yZcL1k33tho?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe><iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/1c-jzYAH2gw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
<b>Linux :: </b><a href="http://trifinite.org/Downloads/carwhisperer-0.2.tar.gz" target="_blank">Car Whisperer v0.2</a><br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</div>

Car Whisperer (Hack Carkit Bluetooth) :: Tools

Carwhisperer project intends to sensibilise manufacturers of carkits and other Bluetooth appliances without display and k...

BlueMaho (Bluetooth Devices Security Testing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNVahVyEcfeuzVD5lawFbk1swmp1o1H7I7v9E-pH4ejkRPZhlmFkUjvKXrBJxfz9ompBZO3fgIelIXorjmjWxOxR6sP7Oeyr968W6YoaZ1rdyC2xxbsgMJUT4ysmHVpx8skquk_Zn5LVOb/s1600/bluemaho+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="bluemaho screenshot" border="0" height="240" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNVahVyEcfeuzVD5lawFbk1swmp1o1H7I7v9E-pH4ejkRPZhlmFkUjvKXrBJxfz9ompBZO3fgIelIXorjmjWxOxR6sP7Oeyr968W6YoaZ1rdyC2xxbsgMJUT4ysmHVpx8skquk_Zn5LVOb/s320-rw/bluemaho+screenshot.jpg" title="bluemaho screenshot" width="320" /></a></div>
<div style="text-align: justify;">
<b>BlueMaho</b> is GUI-shell (interface) for suite of <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a>  for <i>testing security of bluetooth devices</i>. It is freeware, opensource,  written on <a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a>, uses wxPyhon. It can be used for testing BT-devices  for known vulnerabilities and major thing to do - testing to find  unknown vulns. Also it can form nice statistics. </div>
<h3 id="head-679ba20470ace2c0c9be33f0c0f8dc38db4b8bae" style="text-align: justify;">
What it can do? (features)</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-18"></span></div>
<ul style="text-align: justify;">
<li><a href="http://www.toolwar.com/search/label/Scanner" target="_blank">Scan</a> for devices, show advanced info, SDP records, vendor etc <span class="anchor" id="line-19"></span></li>
<li>Track devices - show where and how much times device was seen, its name changes <span class="anchor" id="line-20"></span></li>
<li>loop scan - it can scan all time, showing you online devices <span class="anchor" id="line-21"></span></li>
<li>alerts with sound if new device found <span class="anchor" id="line-22"></span></li>
<li>on_new_device - you can spacify what command should it run when it founds new device <span class="anchor" id="line-23"></span></li>
<li>it can use separate dongles - one for scaning (loop scan) and one for running tools or exploits <span class="anchor" id="line-24"></span></li>
<li>send files <span class="anchor" id="line-25"></span></li>
<li>change name, class, mode, BD_ADDR of local HCI devices <span class="anchor" id="line-26"></span></li>
<li>save results in database <span class="anchor" id="line-27"></span></li>
<li>form nice statistics (uniq devices by day/hour, vendors, services etc) <span class="anchor" id="line-28"></span></li>
<li>test remote device for known vulnerabilities (see <a href="http://www.toolwar.com/search/label/Exploitation" target="_blank">exploits</a> for more details) <span class="anchor" id="line-29"></span></li>
<li>test remote device for unknown vulnerabilities (see tools for more details) <span class="anchor" id="line-30"></span></li>
<li>themes! you can customize it  <span class="anchor" id="line-31"></span><span class="anchor" id="line-32"></span></li>
</ul>
<div class="line867" style="text-align: justify;">
</div>
<h3 id="head-be34a21c5d08001e482450faeb1c54cf3a8d0fab" style="text-align: justify;">
What tools and exploits it consist of?</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-33"></span></div>
<ul style="text-align: justify;">
<li style="list-style-type: none;"><b>Tools: </b><span class="anchor" id="line-34"></span></li>
<li>atshell.c by Bastian Ballmann (modified attest.c by Marcel Holtmann) <span class="anchor" id="line-35"></span></li>
<li>bccmd by Marcel Holtmann <span class="anchor" id="line-36"></span></li>
<li>bdaddr.c by Marcel Holtmann <span class="anchor" id="line-37"></span></li>
<li>bluetracker.py by smiley <span class="anchor" id="line-38"></span></li>
<li>carwhisperer v0.2 by Martin Herfurt <span class="anchor" id="line-39"></span></li>
<li>psm_scan and rfcomm_scan from bt_audit-0.1.1 by Collin R. Mulliner <span class="anchor" id="line-40"></span></li>
<li>BSS (Bluetooth Stack Smasher) v0.8 by Pierre Betouin <span class="anchor" id="line-41"></span></li>
<li>btftp v0.1 by Marcel Holtmann <span class="anchor" id="line-42"></span></li>
<li>btobex v0.1 by Marcel Holtmann <span class="anchor" id="line-43"></span></li>
<li>greenplaque v1.5 by digitalmunition.com <span class="anchor" id="line-44"></span></li>
<li>L2CAP packetgenerator by Bastian Ballmann <span class="anchor" id="line-45"></span></li>
<li>obex stress tests 0.1 <span class="anchor" id="line-46"></span></li>
<li>redfang v2.50 by Ollie Whitehouse <span class="anchor" id="line-47"></span></li>
<li>ussp-push v0.10 by Davide Libenzi <span class="anchor" id="line-48"></span><span class="anchor" id="line-49"></span></li>
<li class="gap" style="list-style-type: none;">exploits/attacks: <span class="anchor" id="line-50"></span></li>
<li>Bluebugger v0.1 by Martin J. Muench <span class="anchor" id="line-51"></span></li>
<li>bluePIMp by Kevin Finisterre <span class="anchor" id="line-52"></span></li>
<li>BlueZ hcidump v1.29 DoS PoC by Pierre Betouin <span class="anchor" id="line-53"></span></li>
<li>helomoto by Adam Laurie <span class="anchor" id="line-54"></span></li>
<li>hidattack v0.1 by Collin R. Mulliner <span class="anchor" id="line-55"></span></li>
<li>Mode 3 abuse attack <span class="anchor" id="line-56"></span></li>
<li>Nokia N70 l2cap packet DoS PoC Pierre Betouin <span class="anchor" id="line-57"></span></li>
<li>opush abuse (prompts flood) DoS attack <span class="anchor" id="line-58"></span></li>
<li>Sony-Ericsson reset display PoC by Pierre Betouin <span class="anchor" id="line-59"></span><span class="anchor" id="line-60"></span></li>
<li class="gap" style="list-style-type: none;">you can add your own tools by editing 'exploits/exploits.lst' and 'tools/tools.lst' <span class="anchor" id="line-61"></span><span class="anchor" id="line-62"></span></li>
</ul>
<div class="line867" style="text-align: justify;">
</div>
<h3 id="head-e627522f4fdfdbf663d44878db163eb1f1439774" style="text-align: justify;">
Requirements</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-63"></span></div>
<ul style="text-align: justify;">
<li>OS (tested with Debian 4.0 Etch / 2.6.18) <span class="anchor" id="line-64"></span></li>
<li><div class="line862">
<a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a> (python 2.4 http://www.python.org) <span class="anchor" id="line-65"></span></div>
</li>
<li><div class="line862">
wxPython (python-wxgtk2.6 http://www.wxpython.org) <span class="anchor" id="line-66"></span></div>
</li>
<li><div class="line862">
BlueZ (3.9/3.24) http://www.bluez.org <span class="anchor" id="line-67"></span></div>
</li>
<li>Eterm  to open tools somewhere, you can set another term in  'config/defaul.conf' changing the value of 'cmd_term' variable. (tested  with 1.1 ver) <span class="anchor" id="line-68"></span></li>
<li>pkg-config(0.21), 'tee' used in tools/showmaxlocaldevinfo.sh, openobex, obexftp <span class="anchor" id="line-69"></span></li>
<li>libopenobex1 + libopenobex-dev (needed by ussp-push) <span class="anchor" id="line-70"></span></li>
<li>libxml2, libxml2-dev (needed by btftp) <span class="anchor" id="line-71"></span></li>
<li>libusb-dev (needed by bccmd) <span class="anchor" id="line-72"></span></li>
<li>libreadline5-dev (needed by atshell.c) <span class="anchor" id="line-73"></span></li>
<li>lightblue-0.3.3 (needed by obexstress.py) <span class="anchor" id="line-74"></span></li>
<li>hardware: any bluez compatible bluetooth-device <span class="anchor" id="line-75"></span><span class="anchor" id="line-76"></span></li>
</ul>
<div class="line867" style="text-align: justify;">
</div>
<h3 id="head-24caaa99fac9202edff5973b243c88b76a030b49" style="text-align: justify;">
Configuration</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-77"></span></div>
<ol style="text-align: justify;" type="1">
<li>all configuration is in 'config' dir. <span class="anchor" id="line-78"></span></li>
<li>for  using bluemaho propertly you need to build tools and exploits. check if  you satisfy 'requirements' for bluemaho. then run 'build.sh'. if you  see 'Building complete!' message, than all went OK. if not - try to play  around requirements. <span class="anchor" id="line-79"></span></li>
<li>'default.conf'  is a default configuration file, you can edit it if you need to change  some options, path to files and commands used by bluemaho, theme etc. by  default you don't need to change it if you do all from 'requirements'  chapter. but, please, view it, for example just for setting  'user_location' variable for defining you location, which will be used  for tracking function. <span class="anchor" id="line-80"></span></li>
<li>'themes' - directory with themes for bluemaho GUI. You can set path to default theme with 'theme' variable in 'default.conf'  <span class="anchor" id="line-81"></span><span class="anchor" id="line-82"></span></li>
</ol>
<div class="line867" style="text-align: justify;">
</div>
<h3 id="head-2670038111a3c9008f5b357412c4e536fda3337a" style="text-align: justify;">
Run and use</h3>
<div style="text-align: justify;">
<span class="anchor" id="line-83"></span><br />
<div class="line862">
you can run <b>BlueMaho</b>  typing in console 'bluemaho.py'. For verbose output in console (and  redirecting std_err and std_out) run 'bluemaho.py -v'. it saves founded  devices to 'bluemaho.log' by default, you can change it in  'config/defaul.conf'. <span class="anchor" id="line-84"></span>enjoy! </div>
<h3 class="line862">
Download ::</h3>
<div class="line862">
<b>Linux :: </b> <a href="https://wiki.thc.org/BlueMaho?action=AttachFile&do=get&target=bluemaho_v090417.tgz" target="_blank">BlueMaho.tgz</a></div>
<div class="line862">
<br /></div>
<h3 class="line862">
Tutorial ::</h3>
<div class="line862">
Text :: <a class="external text" href="http://www.digitalmunition.com/DMA%5B2005-1214a%5D.txt" rel="nofollow">Bluetooth for Windows Remote Audio Eavesdropping</a></div>
</div>

BlueMaho (Bluetooth Devices Security Testing) :: Tools

BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices . It is freeware, opensource, written ...

WirelessKeyView :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyV5EWKOwKmNohnyM0701TKfO3xMiN7vo2oN2Yhrn8k18Lh0an26ieaSm3VJZr9AZPp-QzR9eaEtbFjvSDwgzimLAhTuQCMdmpXofoYgbSRFIm29-Yi7qtT9dB54w3lR31k1titAhxVvcu/s1600/wirelesskeyview.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wirelesskeyview screenshot" border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyV5EWKOwKmNohnyM0701TKfO3xMiN7vo2oN2Yhrn8k18Lh0an26ieaSm3VJZr9AZPp-QzR9eaEtbFjvSDwgzimLAhTuQCMdmpXofoYgbSRFIm29-Yi7qtT9dB54w3lR31k1titAhxVvcu/s1600-rw/wirelesskeyview.gif" title="wirelesskeyview screenshot" /></a></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>WirelessKeyView</b> <i>recovers all wireless network security keys/passwords 
(WEP/WPA)</i> stored in your computer by the 
'<b>Wireless Zero Configuration</b>' service of <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows </a>XP or by the <b>'WLAN 
AutoConfig</b>' service of Windows Vista, Windows 7, Windows 8, and Windows 
Server 2008.
It allows you to easily save all keys to text/html/xml file, or copy a 
single key to the clipboard.
You can also export your wireless keys into a file and import these keys
 into another computer. </div>
<h3 class="utilsubject" style="text-align: justify;">
System Requirement</h3>
<ul style="text-align: justify;">
<li><a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> XP with SP1 or greater.
</li>
<li>You must login to windows with admin user.
</li>
</ul>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Using WirelessKeyView</h3>
<div style="text-align: justify;">
<b>WirelessKeyView</b> doesn't require any installation process or additional DLL files.
Just copy the executable file (WirelessKeyView.exe) to any folder you like, and run it.
<br />
After you run it, the main window should displayed all <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">WEP/WPA keys</a> 
stored in your computer by Windows '<b>Wireless Zero Configuration</b>' 
service.
For WEP keys, the key is also displayed in Ascii form.
Be aware that this utility can only reveal the network keys stored by 
Windows operating system. 
It cannot recover network keys stored by any other third-party software.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Notice About WPA-PSK Keys</h3>
<div style="text-align: justify;">
When you type a WPA-PSK key in Windows XP, the characters that you type 
are automatically converted into a
new binary key that contains 32 bytes (64 Hexadecimal digits). This 
binary key cannot instantly be converted back to the 
original key that you typed, but you can still use it for connecting the
 wireless network exactly like the original key.
In this case,<b> WirelessKeyView</b> displays this binary key in the Hex key 
column, but it doesn't display the original key that you typed.
<br />
As opposed to Windows XP, Windows Vista doesn't convert the WPA-PSK Key that you type into a new binary key, 
but it simply keep the original key that you type. So under Windows Vista, the original WPA-PSK key that you typed is 
displayed in the Ascii key column.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Registry/File Location of The Stored Keys</h3>
<div style="text-align: justify;">
Windows XP and Windows Vista stores the wireless keys in completely different locations:
</div>
<ul style="text-align: justify;">
<li>Windows XP: The wireless keys are stored in the Registry under 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WZCSVC\Parameters\Interfaces\[Interface
 Guid].
</li>
<li>Windows Vista: The wireless keys are stored in the file system,
 under c:\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces\[Interface 
Guid]. 
The encrypted keys are stored in .xml file.
</li>
</ul>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Deleting Wireless Keys Of Old Network Adapters</h3>
<div style="text-align: justify;">
Starting from version 1.15 of <b>WirelessKeyView, </b>you can delete wireless keys/passwords of old network adapters that are 
no longer plugged to your computer, by using the 'Delete Selected Items' option.
<br />
Be aware that this delete option only works for network adapters that are not active anymore.
If your network adapter is active, use the standard user interface of Windows to delete the unwanted keys.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Export And Import Wireless Keys</h3>
<div style="text-align: justify;">
Starting from version 1.50, you can select one or more wireless keys, export them into a text file by using the 
'Export Selected Items' under the File menu, and then import these keys into another computer by using the
'Import Keys From Export File' option.
</div>
<div style="text-align: justify;">
Before you start using this feature, you should be aware that there are some problems/limitations:
</div>
<ul style="text-align: justify;">
<li>The import feature only works on Windows XP with Service Pack 3 or 
later, including Windows 7, Windows 2008, and Windows Vista.
You cannot use the import feature on Windows XP with Service Pack 1 or 
Service Pack 2.
As opposed to the import feature, the export feature works on any 
system, including Windows XP with Service Pack 1 or Service Pack 2.
</li>
<li>The import feature on Windows XP/SP3 is very slow, and WirelessKeyView may temporary hang during the import process.
</li>
<li>The wireless keys stored inside the export file are not 
encrypted, so if you're concerned about the security of your network,
you should keep this file in a place where unauthorized users cannot 
read it, or simply delete it after the import process is finished.
</li>
<li>The import feature only works with a text file created with the 'Export Selected Items' option.
You cannot use the import feature with the files created by the 'Save Selected Items' option.
</li>
<li>Your wireless network adapter must be active when using the import feature. If you have a USB wireless adapter,
you must plug it before you start the import process.
</li>
<li>If you have multiple wireless network adapters, a separated key entry will be added for each adapter.
</li>
</ul>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/wirelesskeyview.zip" target="_blank">WirelessKeyView 1.68</a></div>
<div style="text-align: justify;">
<b>Official Website :</b>: <a href="http://www.nirsoft.net/utils/wireless_key.html" target="_blank">http://www.nirsoft.net/utils/wireless_key.html</a></div>

WirelessKeyView :: Tools

WirelessKeyView recovers all wireless network security keys/passwords (WEP/WPA) stored in your computer by the ' Wireless Zero ...

LSASecretsDump :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrymio5IP8dgRUToTlGLTxYxjBYQI-x19I5HJdDb0URU10aoaS0EX1wObj_kEZnQmsGjN5hEwOw3N94v7Ure1ZdMMizpkKpaw_7VT58x1O1ekM3-6bWgggqQSrIGGD3kUNOV8FKY5EpWXz/s1600/lsasecretsview.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="LSAsecretsdump screenshot" border="0" height="162" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrymio5IP8dgRUToTlGLTxYxjBYQI-x19I5HJdDb0URU10aoaS0EX1wObj_kEZnQmsGjN5hEwOw3N94v7Ure1ZdMMizpkKpaw_7VT58x1O1ekM3-6bWgggqQSrIGGD3kUNOV8FKY5EpWXz/s400-rw/lsasecretsview.gif" title="LSAsecretsdump screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>LSASecretsDump </b>is a small <i>console application</i> that <i>extract the LSA secrets from the Registry, </i>
decrypt them, and dump them into the console window.
<br />
The LSA secrets key is located under HKEY_LOCAL_MACHINE\Security\Policy\Secrets and may contain your
RAS/VPN passwords, Autologon password, and other system passwords/keys. </div>
<h3 class="utilsubject" style="text-align: justify;">
Using LSASecretsDump</h3>
<div style="text-align: justify;">
<b>LSASecretsDump</b> is a console application, so in order the view the output, you have to run it in 
console (Command-Prompt) window.
<br />
As with any console application, you dump the output into a file, for example:
<br />
LSASecretsDump.exe > c:\temp\lsa.txt </div>
<h3 class="utilsubject" style="text-align: justify;">
System Requirement</h3>
<div style="text-align: justify;">
This utility works on Windows 2000/XP/2003/2008/Vista/7. Windows 98/ME is not supported.

</div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/lsasecretsdump.zip" target="_blank">LSASecretsDump 1.21</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.nirsoft.net/utils/lsa_secrets_dump.html" target="_blank">http://www.nirsoft.net/utils/lsa_secrets_dump.html</a></div>

LSASecretsDump :: Tools

LSASecretsDump is a small console application that extract the LSA secrets from the Registry, decrypt them, and dump them into the cons...

WebBrowserPassView :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCSZC7Azmf_Cu7J8oiUk0Q5txbNfNPGepi_KAKICm9Gmn4SOBF9_exVxI9nCvHR1A7oa_zoklqRtbqvAy-63o0udy_PN_2awmSZns8B4NMWLrHSJZJ1IZkB0csY2SDJDVBLyHefnK5WXJK/s1600/webbrowserpassview.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WebBrowserPassView Screenshot" border="0" height="201" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCSZC7Azmf_Cu7J8oiUk0Q5txbNfNPGepi_KAKICm9Gmn4SOBF9_exVxI9nCvHR1A7oa_zoklqRtbqvAy-63o0udy_PN_2awmSZns8B4NMWLrHSJZJ1IZkB0csY2SDJDVBLyHefnK5WXJK/s400-rw/webbrowserpassview.gif" title="WebBrowserPassView Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>WebBrowserPassView </b>is a <b>password recovery tool</b> that reveals the<b> passwords stored by the following <a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> <a href="http://www.toolwar.com/search/label/Browser" target="_blank">browsers</a>:
Internet Explorer (Version 4.0 - 10.0), Mozilla Firefox (All Versions), Google Chrome, Safari, and Opera</b>.
This tool can be used to recover your lost/forgotten password of any Website, including popular Web sites, like
Facebook, Yahoo, Google, and GMail, as long as the password is stored by your Web Browser. 
</div>
<div style="text-align: justify;">
After retrieving your lost passwords, you can save them into 
text/html/csv/xml file, by using the 'Save Selected Items' option 
(Ctrl+S). </div>
<h3 class="utilsubject" style="text-align: justify;">
System Requirements And Limitations</h3>
<ul style="text-align: justify;">
<li>This utility works on any version of <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> starting from Windows 2000, and up to Windows 8, including 64-bit systems.
Older versions of Windows (Windows 98/ME) are not supported, because this utility is a Unicode application.
</li>
<li>Currently, <b>WebBrowserPassView</b> cannot retrieve the passwords if they are <a href="http://www.toolwar.com/search/label/Encryption" target="_blank">encrypted </a>with a master password.
Support for master password will probably be added in future versions.
</li>
<li>Currently, <b>WebBrowserPassView</b> cannot retrieve passwords from 
external hard-drive. Support for that might be added in future versions.
</li>
<li>On Internet Explorer 7.0-9.0, the passwords are encrypted with 
the URL of the Web site, so <b>WebBrowserPassView</b> uses
the history file of Internet Explorer to decrypt the passwords. If you 
clear the history of Internet Explorer, <b>WebBrowserPassView</b>
won't be able to decrypt the passwords.
</li>
<li>On Google Chrome - passwords originally imported from Internet Explorer 7.0-9.0, cannot be decrypted. </li>
</ul>
<h3 class="utilsubject" style="text-align: justify;">
Using WebBrowserPassView</h3>
<div style="text-align: justify;">
<b>WebBrowserPassView </b>doesn't require any installation process or additional DLL files.
In order to start using it, simply run the executable file - WebBrowserPassView.exe
</div>
<div style="text-align: justify;">
After running it, the main window of <b>WebBrowserPassView </b>displays the list of all Web browser passwords found in your 
system. You can select one or more passwords and then copy the list to the clipboard (Ctrl+C) or export them into
text/xml/html/csv file (Ctrl+S).

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
False Virus/Trojan Warning</h3>
<div style="text-align: justify;">
<b>WebBrowserPassView</b> is a <a href="http://www.toolwar.com/search/label/tools" target="_blank">tool</a> that retrieves secret passwords stored in your system, and thus 
your Antivirus may falsely detect this tool is infected with Trojan/Virus.
<a href="http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/" target="false_positive">Click here</a> to read more about false alerts in Antivirus programs.

</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/webbrowserpassview.zip" target="_blank">WebBrowserPassView 1.45</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.nirsoft.net/utils/web_browser_password.html" target="_blank">http://www.nirsoft.net/utils/web_browser_password.html</a></div>

WebBrowserPassView :: Tools

WebBrowserPassView is a password recovery tool that reveals the passwords stored by the following Web browsers : Internet Explorer (Ve...

ChromePass (Chrome Password Recovery) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDxdR7GqGCOXZH9SMeU0viPkwuBEWPpP_1Ll1WPOOEkmXvduPu7LRCmpjmNxQMuo6yA3YJtdoCizXJNXgeSm0ur1fNoaWcNIr3TMEz2nIO8ek4sA9q_kDt7dOSTP_aW6Kt-6FnxHIuVO3u/s1600/chromepass.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="ChromePass Screenshot" border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDxdR7GqGCOXZH9SMeU0viPkwuBEWPpP_1Ll1WPOOEkmXvduPu7LRCmpjmNxQMuo6yA3YJtdoCizXJNXgeSm0ur1fNoaWcNIr3TMEz2nIO8ek4sA9q_kDt7dOSTP_aW6Kt-6FnxHIuVO3u/s1600-rw/chromepass.gif" title="ChromePass Screenshot" /></a></div>
<div style="text-align: justify;">
<b>ChromePass </b>is a <i>small password recovery tool</i> that allows you to view the
 user names and passwords stored by <b>Google Chrome Web browser.</b>
For each <a href="http://www.toolwar.com/search/label/Password" target="_blank">password</a> entry, the following information is <b>displayed</b>: 
<i>Origin URL, Action URL, User Name Field, Password Field, User Name, 
Password, and Created Time.
</i><br />
You can select one or more items and then save them into text/html/xml file or copy them to the clipboard. </div>
<h3 class="utilsubject" style="text-align: justify;">
Using ChromePass</h3>
<div style="text-align: justify;">
<b>ChromePass</b> doesn't require any installation process or additional DLL files.
In order to start using <b>ChromePass</b>, simply run the executable file - ChromePass.exe
After running it, the main window will display all passwords that are currently stored in your <b>Google Chrome browser.

</b></div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Reading ChromePass passwords from external drive</h3>
<div style="text-align: justify;">
Starting from version 1.05, you can also read the passwords stored by <b>
Chrome Web <a href="http://www.toolwar.com/search/label/Browser" target="_blank">browser</a></b> from an external profile in your current operating 
system or from another external drive (For example:
from a dead system that cannot boot anymore).
In order to use this feature, you must know the last logged-on password 
used for this profile, because the 
passwords are encrypted with the SHA hash of the log-on password, and 
without that hash, the passwords cannot be decrypted.
<br />
You can use this feature from the UI, by selecting the 'Advanced Options' in the File menu, or from command-line, 
by using /external parameter. The user profile path should be something like "C:\Documents and Settings\admin"
in <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> XP/2003 or "C:\users\myuser" in Windows Vista/2008.
</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/chromepass.zip" target="_blank">ChromePass 1.25</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.nirsoft.net/" target="_blank">http://www.nirsoft.net/</a></div>

ChromePass (Chrome Password Recovery) :: Tools

ChromePass is a small password recovery tool that allows you to view the user names and passwords stored by Google Chrome Web browser. ...

PasswordFox (Firefox Password Recovery) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDaw_peIbiVkifF3bsnCEB8D3XdHXRhWGP2blN9bm2-xZpcvJgaWzgb9_i1b5yT5ZIwJd4Sa0NaclhBladS99MwJGkbN4hNI0T9apuxefHNHVDlze_7W5f7biAhLmKiY4QAQz9U-EVRKGC/s1600/passwordfox.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="PasswordFox Screenshot" border="0" height="268" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDaw_peIbiVkifF3bsnCEB8D3XdHXRhWGP2blN9bm2-xZpcvJgaWzgb9_i1b5yT5ZIwJd4Sa0NaclhBladS99MwJGkbN4hNI0T9apuxefHNHVDlze_7W5f7biAhLmKiY4QAQz9U-EVRKGC/s400-rw/passwordfox.gif" title="PasswordFox Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>PasswordFox</b> is a small <i>password recovery tool</i> that allows you to view 
the user names and <a href="http://www.toolwar.com/search/label/Password" target="_blank">passwords</a> stored by <b>Mozilla Firefox Web browser</b>.
By default, <b>PasswordFox</b> displays the passwords stored in your current 
profile, but you can easily select to watch the passwords
of any other Firefox profile.
For each password entry, the following information is displayed: 
Record Index, <a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> Site, User Name, Password, User Name Field, Password 
Field, and the Signons filename.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
System Requirements</h3>
<div style="text-align: justify;">
This utility works under <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows 7.
Firefox should also be installed on your system in order to use this utility.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Known Problems</h3>
<div style="text-align: justify;">
<b>False Alert Problems:</b> Some Antivirus programs detect<b> PasswordFox </b>utility as infected with Trojan/Virus.
<a href="http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/" target="antivirus-companies">Click here</a> to read more about false alerts in Antivirus programs </div>
<div style="text-align: justify;">
<h3 class="utilsubject">
Using PasswordFox</h3>
<b>PasswordFox</b> doesn't require any installation process or additional DLL files.
However, Firefox browser must be installed on your computer in order allow PasswordFox to grab the passwords list.
<br />
In order to start using PasswordFox, simply run the executable file - PasswordFox.exe
<br />
After running it, the main window will display all your passwords list for the last profile that you used.
If PasswordFox chose the wrong profile folder, you can use the 'Select Profile Folder' option to choose the right one.

</div>
<div style="text-align: justify;">
<h3>
Download ::</h3>
</div>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/passwordfox.zip" target="_blank">PasswordFox 1.36</a> </div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.nirsoft.net/</div>

PasswordFox (Firefox Password Recovery) :: Tools

PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web brow...

Skype Log Viewer :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAflgbadf6ct9bAFvVqWdD_92MW4Nah8u2BN1NGhc5Z19vDLaQonrxXaZ3nksPZJsBtTnT7OJ3omSnkBRTVG3SLqnVSvhAGNqzbZDjqBaDnTnmZBsRqUEFlcbCATZ4k1iRpenoDpRy7QF5/s1600/skypelogview.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Skype Log Viewer screenshot" border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAflgbadf6ct9bAFvVqWdD_92MW4Nah8u2BN1NGhc5Z19vDLaQonrxXaZ3nksPZJsBtTnT7OJ3omSnkBRTVG3SLqnVSvhAGNqzbZDjqBaDnTnmZBsRqUEFlcbCATZ4k1iRpenoDpRy7QF5/s1600-rw/skypelogview.gif" title="Skype Log Viewer screenshot" /></a></div>
<div style="text-align: justify;">
<b>SkypeLogView</b> reads the log files created by <b>Skype</b> application, and 
displays the details of incoming/outgoing calls, chat messages, and file
transfers made by the specified Skype account. 
You can select one or more items from the logs list, and then copy them 
to the clipboard, or export them into text/html/csv/xml file.

</div>
<div style="text-align: justify;">
</div>
<h4 class="utilsubject" style="text-align: justify;">
System Requirements</h4>
<div style="text-align: justify;">
This utility works on any version of <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows </a>starting from Windows 2000 and up to Windows 2008.
You don't have to install Skype in order to use this utility. You only need the original log files created by skype, 
even if they are on an external drive. </div>
<div style="text-align: justify;">
<h3>
Download :: </h3>
</div>
<div style="text-align: justify;">
<b>Windows :: </b> <a href="http://www.nirsoft.net/utils/skypelogview.zip" target="_blank">Skype Log Viewer </a></div>

Skype Log Viewer :: Tools

SkypeLogView reads the log files created by Skype application, and displays the details of incoming/outgoing calls, chat messages, and...

Vulture (Reverse Proxy and Web Application Firewall) :: Tools

<div class="separator" style="clear: both; text-align: justify;">
<img alt="Vulture Web Application firewall logo" border="0" height="120" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcN3Rs0hVvmx1PZMlzm4cKq8LfrgzLmawv5_6MTJGCGcv80todCVORuLNw89N_c_q6Bdo12ScoCZC5pVkwGY4LZjHRpyykzf-7j32yGUKJIY-_FBDWsdfPinXJLDDJ1x8ofO4ztGKtEKS1/s640-rw/vulture+web+application+firewall+logo.png" title="Vulture Web Application firewall logo" width="640" /></div>
<div style="text-align: justify;">
<b>Vulture </b>is a <i><span itemprop="description">Open Source Reverse Proxy / Web Application Firewall</span></i><b>. Vulture </b>is a Web-SSO solution based on technology<i> reverse <a href="http://www.toolwar.com/search/label/Proxy" target="_blank">proxy</a></i> 
implemented on a base Apache 2.2. Vulture also provides <i>application <a href="http://www.toolwar.com/search/label/Firewalls" target="_blank">firewall</a></i> functionality and interfaces between <i><a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> applications </i>and 
Internet to provide unified <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> and authentication.
</div>
<h3 style="text-align: justify;">
<b>Features :: </b></h3>
<div style="text-align: justify;">
The authentication of users with many methods supported
LDAP, SQL, text file, radius server, digital certificates ...
Modular design allows you to add new authentication methods
The spread of authentication on protected applications
The encryption flow
Filtering and rewriting content
Some features to protect against injection attacks
Load balancing
.</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="https://googledrive.com/host/0B73hnOQoTupkUkdwM2VGOGNWVTA/" target="_blank">Vulture 2.0.7</a> </div>
<h2 style="text-align: justify;">
 <span class="mw-headline" id="Details"> </span></h2>

Vulture (Reverse Proxy and Web Application Firewall) :: Tools

Vulture is a Open Source Reverse Proxy / Web Application Firewall . Vulture is a Web-SSO solution based on technology reverse proxy im...

Comodo Firewall :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Comodo Firewall logo" border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi92gYqhU6WXsU5QSuwFESFgVBUZRIZ93TAb8ZSRVFkaQCazEWClk9C1VhN3JPzO4FXEOvgIEDZouPKkAeFP2mcTXNqBII0QedzsI8xqmfcaqksPzn22tzvkBWT6GUHRHWO_ipJ5d2WUz_T/s1600-rw/comodo-firewall+logo.png" title="Comodo Firewall logo" /></div>
<b>Comodo Firewall</b>  Pro introduces the next evolution in <i>computer security</i>: Default Deny  Protection (DDP™). What is DDP? Most security programs maintain a list  of known <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a>, and use that list to decide which applications and  files shouldn't access a PC. The problem here is obvious. What if the  list of malware is missing some entries, or isn't up to date?</div>
<div style="text-align: justify;">
<b>Comodo <a href="http://www.toolwar.com/search/label/Firewalls" target="_blank">Firewall</a> </b>is the best choice for users seeking a<b> full featured <a href="http://www.toolwar.com/search/label/Security" target="_blank"> security</a> suite.</b> This latest release is suitable for both lightly-skilled  users (still must have knowledge of installed programs) and technically  advanced users. Its robust and active HIPS (or application monitoring  feature), called "Defense+", matches or exceeds the security performance  of pay products. Comodo allows for much control and customization for  the curious or the paranoid. </div>
<div style="text-align: justify;">
<b>Comodo</b> includes a "<i>memory firewall</i>" (against buffer overflow  attacks) and a light sandbox component to limit the way unknown  applications and new software installations affect your computer. The  use of sandbox protection limits the negative effects of malware. It  maintains a lengthy list of known safe applications, but if an unknown  application attempts entry through the firewall, <b>Comodo</b> will deny the  application and ask the user what to do. The new release contains user  friendly features by default while allowing experienced users to  maintain control over ports, protocols, and configurations. </div>
<div style="text-align: justify;">
DDP fixes this problem to ensure complete security. The <b> firewall </b>references a list of over two million known PC-friendly  applications. If a file that is not on this safe-list knocks on your  PC's door, the Firewall immediately alerts you to the possibility of  attacking malware. All this occurs before the <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> infects your  computer. It's prevention-based security, the only way to keep PCs  totally safe.</div>
<h3 style="font-size: 16px; margin-bottom: 10px; margin-top: 15px; padding: 10px 0px 0px; text-align: justify;">
5 top secrets why Comodo Firewall is different</h3>
<ul class="facts-list" style="text-align: justify;">
<li>No complex configuration issues—perfect for amateur users </li>
<li>Quickly learns user behavior to deliver personalized protection</li>
<li>User-friendly, attractive graphical interface</li>
<li>Lots of configuration options let techies configure things just as they like</li>
<li>DDP-based security keeps you informed and PCs safe</li>
</ul>
<div style="text-align: justify;">
One of the first steps in securing a computer is downloading  and activating a quality firewall to repel intruders. Only this free  firewall software has access to Comodo's extensive safe-list of  PC-friendly applications, a key component of Default Deny Protection™.</div>
<h3>
<b>System Requirements:</b></h3>
<div style="text-align: justify;">
Windows 7 / Vista / XP SP2 / Windows 8, 152 MB RAM / 400 MB space</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorial :: </h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/T4uAAgicpZ4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>Windows ::</b> <a href="http://www.comodo.com/home/download/download.php?prod=firewall" target="_blank">Comodo Firewall</a></div>
<h3 style="text-align: justify;">
</h3>

Comodo Firewall :: Tools

Comodo Firewall Pro introduces the next evolution in computer security : Default Deny Protection (DDP™). What is DDP? Most security pr...

Patriot NG (Changes Detection in Windows or in Network) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwNXqM7_LHQ7YPJaUfI2fTX1hrSU-cv68o0zWKOpWgQrMx00ihDHzEZ1zQqnMcN-LrAwuFoK8Lafq4glQ95bKL1ZOkMdq_O7GD58r9VgXtkOFpMY9SAsHN-3vcCy0tsleeTTehuydm0HHK/s1600/Patriot+NG+Screenshot.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwNXqM7_LHQ7YPJaUfI2fTX1hrSU-cv68o0zWKOpWgQrMx00ihDHzEZ1zQqnMcN-LrAwuFoK8Lafq4glQ95bKL1ZOkMdq_O7GD58r9VgXtkOFpMY9SAsHN-3vcCy0tsleeTTehuydm0HHK/s400-rw/Patriot+NG+Screenshot.JPG" width="176" /></a></div>
<div style="text-align: justify;">
<b>Patriot NG</b> is a <i>'Host IDS' tool</i> which allows <i>real time monitoring of changes in Win<span style="font-size: 14px; line-height: 1.4em;">dows systems or Network attacks.</span></i></div>
<i>
</i>
<h3>
Patriot monitors:</h3>
<ul>
<li>New files in 'Startup' directories</li>
<li>Changes in Registry keys: Indicating whether any sensitive key (autorun, internet explorer settings...) is altered</li>
<li>New Users in the System</li>
<li>New Services installed</li>
<li>Changes in the hosts file</li>
<li>New scheduled jobs</li>
<li>Alteration of the integrity of Internet Explorer: (New BHOs, configuration changes, new toolbars)</li>
<li>Changes in ARP table (Prevention of MITM attacks)</li>
<li>Installation of new Drivers</li>
<li>New Netbios shares</li>
<li>TCP/IP Defense (New open ports, new connections made by processes, PortScan detection...)</li>
<li>Files in critical directories (New executables, new DLLs...)</li>
<li>New hidden windows (cmd.exe / Internet Explorer using OLE objects)</li>
<li>Netbios connections to the System</li>
<li>ARP Watch (New hosts in your network)</li>
<li>NIDS (Detect anomalous network traffic based on editable rules)</li>
</ul>
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://sbdtools.googlecode.com/files/PatriotNG2.01.zip" target="_blank">Patriot NG 2.01</a><br />
<h3>
Official Website ::</h3>
http://www.security-projects.com/

Patriot NG (Changes Detection in Windows or in Network) :: Tools

Patriot NG is a 'Host IDS' tool which allows real time monitoring of changes in Win dows systems or Network attacks. Patrio...

RadioGraPhy (Windows Forensics):: Tools

<h1 style="text-align: justify;">
</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGdfL6aAjuUZfL4cv2ishXKH3b7wm0sBeE4Mv263XGux7kLLjdPx__2bfEER6EfwdbeuHKidz9M_nQnouYZOdT9g4CP8dg9gYZnPyIeR22fWyzdCN8nK9OJwlrCztFqYhjnDtG_ChHcUGu/s1600/radiography+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="RadioGraPhy Screenshot" border="0" height="308" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGdfL6aAjuUZfL4cv2ishXKH3b7wm0sBeE4Mv263XGux7kLLjdPx__2bfEER6EfwdbeuHKidz9M_nQnouYZOdT9g4CP8dg9gYZnPyIeR22fWyzdCN8nK9OJwlrCztFqYhjnDtG_ChHcUGu/s320-rw/radiography+screenshot.jpg" title="RadioGraPhy Screenshot" width="320" /></a></div>
<div style="text-align: justify;">
<b>Radiography</b> is a<i> forensic tool </i>which <i>grabs as much information as possible from a Windows system.</i></div>
<h3 style="text-align: justify;">
Its checks:</h3>
<ul style="text-align: justify;">
<li><b>Registry keys related to startup process</b></li>
<li><b>Registry keys with Internet Explorer settings</b></li>
<li><b>System Accounts and properties</b></li>
<li><b>Startup files</b></li>
<li><b>System services</b></li>
<li><b>Hosts file contents</b></li>
<li><b>TaskScheduler tasks</b></li>
<li><b>Loaded System Drivers</b></li>
<li><b>NetBios Shares</b></li>
<li><b>Hidden Windows</b></li>
<li><b>System processes running (and their location if possible)</b></li>
<li><b>Network information (Open connections, listening ports ...) </b></li>
</ul>
<h3 style="text-align: justify;">
<b>It has also unique features:</b></h3>
<div style="text-align: justify;">
-When it identifies a process (running 
or configured in registry keys, startup directories or task scheduler) 
it checks its hash with Team Cymru's MALWARE HASH REGISTRY<span style="font-size: 14px; line-height: 1.4em;"> service to identify potential threats</span></div>
<div style="text-align: justify;">
-RadioGraPhy does a process integrity test using 'WinUnhide' to catch hidden processes</div>
<div style="text-align: justify;">
-Dump a copy of Eventlog and grab a copy of the process binaries for later review </div>
<div style="text-align: justify;">
RadioGraPhy is <b>OpenSource</b> (GPL License) and come with a <b>CLI version</b> and a <b>graphic frontend</b> (please have a look to Screenshots section)</div>
<h3 style="text-align: justify;">
 </h3>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://sbdtools.googlecode.com/files/RadioGraPhyV2.zip" target="_blank"><b></b>RadioGraPhy 2.0</a><br />
<h3>
Official Website :: </h3>
http://www.security-projects.com/ </div>

RadioGraPhy (Windows Forensics):: Tools

Radiography is a forensic tool which grabs as much information as possible from a Windows system. Its checks: Registry keys relat...

SRDF - Security Research and Development Framework :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="SRDF - Security Research and Development Framework" border="0" height="312" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGnFfLl9tWVJH2zHKe7QLRdJ4tE1-4JAVwWqtOKo-ds-ItC_74qf8W7on7y6J8LHN7QOoORnyUYL9kjj92u8pROLRqs2-pzuPS2_fdPhfbbIAtfarXwCUSP_srtZSZgrFQ8NKSyvpKJCAy/s640-rw/SRDF+Logo.jpg" title="SRDF - Security Research and Development Framework" width="640" /></div>
<div style="text-align: justify;">
<b>SRDF - Security Research and Development Framework</b> is a free open source <i>Development Framework</i> created to support <i>
writing security tools and malware analysis tools</i>. And to convert the 
security researches and ideas from the theoretical approach to the 
practical implementation.  </div>
<div style="text-align: justify;">
This development framework created 
mainly to support the malware field to create malware analysis tools and
 anti-virus tools easily without reinventing the wheel and inspire the 
innovative minds to write their researches on this field and implement 
them using SRDF. </div>
<h3 style="text-align: justify;">
<span style="font-size: large;"><b>Introduction:</b></span> </h3>
<div style="text-align: justify;">
In the 
last several years, the malware black market grows widely. The 
statistics shows that the number of new viruses increased from 300,000 
viruses to millions and millions nowadays. </div>
<div style="text-align: justify;">
The complexity of malware attacks also increased from small amateur viruses to stuxnet, duqu and flame. </div>
<div style="text-align: justify;">
The
 malware field is searching for new technologies and researches, 
searching for united community can withstand against these attacks. And 
that’s why SRDF </div>
<div style="text-align: justify;">
The SRDF is not and will not be developed by one 
person or a team. It will be developed by a big community tries to share
 their knowledge and tools inside this Framework </div>
<div style="text-align: justify;">
SRDF still not 
finished … and it will not be finished as it’s a community based 
framework developed by the contributors. We just begin the idea. </div>
<div style="text-align: justify;">
The SRDF is divided into 2 parts: User-Mode and Kernel-Mode. And we will describe each one in the next section. </div>
<h3 style="text-align: justify;">
<span style="font-size: large;"><b>The Features:</b></span> </h3>
<div style="text-align: justify;">
Before
 talking about SRDF Design and structure, I want to give you what you 
will gain from SRDF and what it could add to your project. </div>
<div style="text-align: justify;">
In User-Mode part, SRDF gives you many helpful tools … and they are: </div>
<ul style="text-align: justify;">
<li>Assembler and Disassembler </li>
</ul>
<ul style="text-align: justify;">
<li>x86 Emulator </li>
</ul>
<ul style="text-align: justify;">
<li>Debugger </li>
</ul>
<ul style="text-align: justify;">
<li>PE Analyzer </li>
</ul>
<ul style="text-align: justify;">
<li>Process Analyzer (Loaded DLLs, Memory Maps … etc) </li>
</ul>
<ul style="text-align: justify;">
<li>MD5, SSDeep and Wildlist Scanner (YARA) </li>
</ul>
<ul style="text-align: justify;">
<li>API Hooker and Process Injection </li>
</ul>
<ul style="text-align: justify;">
<li>Backend Database, XML Serializer </li>
</ul>
<ul style="text-align: justify;">
<li>And many more </li>
</ul>
<div style="text-align: justify;">
In
 the Kernel-Mode part, it tries to make it easy to write your own filter
 device driver (not with WDF and callbacks) and gives an easy, object 
oriented (as much as we can) development framework with these features: </div>
<ul style="text-align: justify;">
<li>Object-oriented and easy to use development framework </li>
</ul>
<ul style="text-align: justify;">
<li>Easy IRP dispatching mechanism </li>
</ul>
<ul style="text-align: justify;">
<li>SSDT Hooker </li>
</ul>
<ul style="text-align: justify;">
<li>Layered Devices Filtering </li>
</ul>
<ul style="text-align: justify;">
<li>TDI Firewall </li>
</ul>
<ul style="text-align: justify;">
<li>File and Registry Manager </li>
</ul>
<ul style="text-align: justify;">
<li>Kernel Mode easy to use internet sockets </li>
</ul>
<ul style="text-align: justify;">
<li>Filesystem Filter </li>
</ul>
<div style="text-align: justify;">
Still the Kernel-Mode in progress and many features will be added in the near future. </div>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://srdf.googlecode.com/files/SRDF-v1.00.rar" target="_blank">SRDF v1.0</a></div>
<div style="text-align: justify;">
<b>Help & Official Website :: </b>https://www.owasp.org/</div>

SRDF - Security Research and Development Framework :: Framework

SRDF - Security Research and Development Framework is a free open source Development Framework created to support writing security too...

USBDeviceForensics :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="USBDeviceForensics " border="0" height="213" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivy2ewa1vXYlJsngnLLgNW_xU3Nws3UpG84lud9sbXntXzXiSKCvGjOWOI2gfHK_jp5QvTSRYrOilAtp2nHCwIWqSGebWtVM8EE6I5X2YRNeX_MRLNAQaUjj3QWLWfO5mxTx2dWnwjUVH-/s320-rw/USB-Device-Forensics.png" title="USBDeviceForensics " width="320" /></div>
<div style="text-align: justify;">
<b>USBDeviceForensics</b> is an application to <i>extract numerous bits of 
information regarding USB devices</i>. It uses the information from a SANS 
blog posting to retrieve operating system specific information. It now 
has the ability to process multiple NTUSER.dat registry hives in one go.</div>
<div style="text-align: justify;">
It should be noted that whilst the information in the blog posting is
 accurate, there is a caveat to be aware of. During my testing I have 
found that an unknown process can update the Date/Time values across all
 keys, in particular the USBSTOR keys. Therefore, you could see the same
 Last Written Date/Time value on each device key. If you see this 
occurring, then you obviously cannot rely on the values retrieved. All 
of the dates should be UTC.</div>
<div style="text-align: justify;">
It is possible to set a time zone offset by using the Time Zone 
window e.g. Tools->Time Zone menu item. The Install date time zone 
appears to be the local time zone.</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.woanware.co.uk/downloads/USBDeviceForensics.v.1.0.11.zip" target="_blank">USB Device Forensics </a> </div>
<div style="text-align: justify;">
<br /></div>

USBDeviceForensics :: Tools

USBDeviceForensics is an application to extract numerous bits of information regarding USB devices . It uses the information from a SAN...

OSForensics :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9KEAg94layniw3-bxaqyqfRHExQ5nF5fE3mHBF29YBYuyLHnlZrGCKU8UsFQAgRTuC6XVgoQr7eGIrjFrQlwZBudUF26hWQDDBWmjO7Gy1qYYLAz3x2CyFYzTnDzulf40Xk7mwbiGOHul/s1600/OSForensics+Screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="OSForensics Screenshot" border="0" height="281" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9KEAg94layniw3-bxaqyqfRHExQ5nF5fE3mHBF29YBYuyLHnlZrGCKU8UsFQAgRTuC6XVgoQr7eGIrjFrQlwZBudUF26hWQDDBWmjO7Gy1qYYLAz3x2CyFYzTnDzulf40Xk7mwbiGOHul/s320-rw/OSForensics+Screenshot.png" title="OSForensics Screenshot" width="320" /></a></div>
<div style="text-align: justify;">
<b>OSForensics</b> provides one of the fastest and most powerful ways to <i> locate files on a Windows computer.</i> You can search by filename, size,  creation and modified dates, and other criteria.Results are returned and  made available in several different useful views. This includes the  Timeline View which allows you to sift through the matches on a  timeline, making evident the pattern of user activity on the machine.  </div>
<div style="text-align: justify;">
<b>OSForensics</b> allows you to identify suspicious files and activity with  hash matching, drive signature comparisons, e-mails, memory and binary  data. <b>OSForensics </b>lets you extract forensic evidence from computers quickly  with advanced file searching and indexing and enables this data to be  managed effectively.</div>
<h2 class="featuresmall" style="text-align: justify;">
Features</h2>
<div style="text-align: justify;">
<b>Discover Forensic Evidence Faster</b></div>
<ul id="download_list" style="text-align: justify;">
<li>Find files faster, search by filename, size and time</li>
<li>Search within file contents using the Zoom search engine</li>
<li>Search through email archives from Outlook, ThunderBird, Mozilla and more </li>
<li>Recover and search deleted files </li>
<li>Uncover recent activity of website vists, downloads and logins</li>
<li>Collect detailed system information</li>
<li>Password recovery from web browsers, decryption of office documents </li>
<li>Discover and reveal hidden areas in your hard disk</li>
<li>Browse Volume Shadow copies to see past versions of files</li>
</ul>
<div style="text-align: justify;">
<b>Identify Suspicious Files and Activity</b></div>
<ul id="download_list" style="text-align: justify;">
<li>Verify and match files with MD5, SHA-1 and SHA-256 hashes</li>
<li>Find misnamed files where the contents don't match their extension</li>
<li>Create and compare drive signatures to identify differences</li>
<li>Timeline viewer provides a visual representation of system activity over time</li>
<li>File viewer that can display streams, hex, text, images and meta data</li>
<li>Email viewer that can display messages directly from the archive</li>
<li>Registry viewer to allow easy access to Windows registry hive files</li>
</ul>
<div style="text-align: justify;">
<b>Manage Your Digital Investigation</b></div>
<ul id="download_list" style="text-align: justify;">
<li>Case management enables you to aggregate and organize results and case items</li>
<li>HTML case reports provide a summary of all results and items you have associated with a case</li>
<li>Rebuild RAID arrays from individual disk images</li>
<li>OSForensics can be installed on a USB flash drive for more portability</li>
</ul>
<h4 class="feature">
System requirements</h4>
Windows XP                  SP2, Vista & Win 7<br />
Windows Server 2000, 2003, 2008<br />
32bit and 64bit support, (64bit recommended)<br />
Minimum 1GB of RAM. (4GB+ recommended)<br />
30MB of free disk space, or can be run from USB drive<br />
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/tMuCTkSSza0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div class="feature">
<b>Windows :: </b><a href="http://www.osforensics.com/downloads/osf_2_3_beta.exe" target="_blank">OSForensics 2.3.1 Beta</a></div>
<div class="feature">
<b>For More Videos ::</b> <a href="http://www.osforensics.com/faqs-and-tutorials/video_demonstrations.html" target="_blank">Click Here  </a><br />
<b>Official Website ::</b> http://www.osforensics.com/</div>

OSForensics :: Tools

OSForensics provides one of the fastest and most powerful ways to locate files on a Windows computer. You can search by filename, size...

Tortilla :: Tools

<div style="text-align: justify;">
<span class="field-content"></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmwKrsLbKQTKrY6pFC_rTOgytToiYTmIX0hi59EM3vEd51i6WOiGFek59HfVx1QWH0ADQpaN-ck8gH8LDG48zZEWJrxUA89hSBNenbHowXEcSk7o-CrF4mBavCXtyX8ffcPXUo81ys8B3U/s1600/tortilla.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="259" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmwKrsLbKQTKrY6pFC_rTOgytToiYTmIX0hi59EM3vEd51i6WOiGFek59HfVx1QWH0ADQpaN-ck8gH8LDG48zZEWJrxUA89hSBNenbHowXEcSk7o-CrF4mBavCXtyX8ffcPXUo81ys8B3U/s320-rw/tortilla.jpg" width="320" /></a></div>
<b>Tortilla</b> is an open source tool that 
allows users to <i>securely, anonymously, and transparently route</i> all 
TCP/IP and DNS traffic through Tor, regardless of the client software, 
and without relying on VPNs or additional hardware or virtual machines.<br />
<b>Supported Operating Systems:</b> The tool runs on 32 bit and 64 bit versions of Windows from XP and above.<br />
<h3>
<span class="field-content">Download :: </span></h3>
<b><span style="font-weight: normal;"><b>Windows ::</b> <a href="http://download.crowdstrike.com/tortilla/Tortilla_v1.1.0_Beta.zip" target="_blank">Tortilla 1.1.0</a></span></b><br />

<b>Official Website ::</b><a href="http://www.crowdstrike.com/" target="_blank"> http://www.crowdstrike.com/</a><br />
<span class="field-content"></span><br />
<h3>
<span class="field-content"></span></h3>

Tortilla :: Tools

Tortilla is an open source tool that allows users to securely, anonymously, and transparently route all TCP/IP and DNS traffic throu...

MagicRescue (File Carving) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjorQ5EZnU6iOJ6pD4BIWoEAYCX9YQdach2XSKLG2E7C7BqqXyF-fRInYuSijnX-ho2R5YNr_RJUmnQlkSydxTJUdKoc5R31WumBeSIVuSkNJUUHk_yHym8LLR1oHKzX3_4qN_LV3AGFPsf/s1600/magicrescue+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="magicrescue screenshot" border="0" height="222" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjorQ5EZnU6iOJ6pD4BIWoEAYCX9YQdach2XSKLG2E7C7BqqXyF-fRInYuSijnX-ho2R5YNr_RJUmnQlkSydxTJUdKoc5R31WumBeSIVuSkNJUUHk_yHym8LLR1oHKzX3_4qN_LV3AGFPsf/s320-rw/magicrescue+screenshot.jpg" title="magicrescue screenshot" width="320" /></a></div>
<b>MagicRescue</b> is a <b>file carving </b>utility it scans a block device for file types it knows how to recover and calls an external program to extract them. It looks at "magic bytes" in file contents, so it can be used both as an undelete utility and for recovering a corrupted drive or partition. As long as the file data is there, it will find it.</div>
<div style="text-align: justify;">
<b>MagicRescue</b> works on any file system, but on very fragmented file systems it can only recover the first chunk of each file. Practical experience (this program was not written for fun) shows, however, that chunks of 30-50MB are not uncommon.</div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/VJ41EkP5jVg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="http://www.itu.dk/~jobr/magicrescue/release/magicrescue-1.1.9.tar.gz" target="_blank">MagicRescue 1.1.9</a></div>

MagicRescue (File Carving) :: Tools

MagicRescue is a file carving utility it scans a block device for file types it knows how to recover and calls an external program to ex...

Xplico (Internet Traffic Capture) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhADe8Vu4zpdECwwvaAUMUBIlNyGzgvoW1gtLMdHKUZdSDUYlA3t6WdcEN1U1D5ec7BhAtfCN00j4FkO__Ft1LEMzYbd6sUlKDkbK_M05ShgYfYXn2To-j6g4BHCtrNsI1X5D6zJB4dzCE5/s1600/xplico+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="xplico screenshot" border="0" height="217" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhADe8Vu4zpdECwwvaAUMUBIlNyGzgvoW1gtLMdHKUZdSDUYlA3t6WdcEN1U1D5ec7BhAtfCN00j4FkO__Ft1LEMzYbd6sUlKDkbK_M05ShgYfYXn2To-j6g4BHCtrNsI1X5D6zJB4dzCE5/s400-rw/xplico+screenshot.png" title="xplico screenshot" width="400" /></a></div>
<b>Xplico</b> is <i>extract from an internet traffic capture</i> the applications data contained.  For example, from a pcap file Xplico extracts each email (POP, IMAP, and  SMTP protocols), all HTTP contents, each VoIP call (SIP), FTP, TFTP,  and so on. Xplico isn’t a network protocol analyzer. Xplico is an open  source Network Forensic Analysis Tool (NFAT).<br />
Xplico is released under the <b>GNU General Public License</b> and with some scripts under <b>Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported</b> (CC BY-NC-SA 3.0) License. For more details see License.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Features</h3>
<ul style="text-align: justify;">
<li>Protocols supported: HTTP, SIP, IMAP, POP, SMTP, TCP, UDP, IPv6. </li>
<li>Port Independent Protocol Identification (PIPI) for each application protocol;</li>
<li>Multithreading;</li>
<li>Output data and information in SQLite database or Mysql database and/or files;</li>
<li>At each data reassembled by Xplico is associated a XML file that  uniquely identifies the flows and the pcap containing the data  reassembled;</li>
<li>Realtime elaboration (depends on the number of flows, the types of  protocols and by the performance of computer -RAM, CPU, HD access time. </li>
<li>TCP reassembly with ACK verification for any packet or soft ACK verification;</li>
<li>Reverse DNS lookup from DNS packages contained in the inputs files (pcap), not from external DNS server;</li>
<li>No size limit on data entry or the number of files entrance (the only limit is HD size);</li>
<li>IPv4 and IPv6 support;</li>
<li>Modularity.  Each Xplico component is modular. The input interface,  the protocol decoder (Dissector) and the output interface (dispatcher)  are all modules;</li>
<li> The ability to easily create any kind of dispatcher with which to  organize the data extracted in the most appropriate and useful to you.</li>
</ul>
<h3>
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/uzn8yDEbKC0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Ek8uSUwEjC8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
<b>Ubuntu ::</b> <a href="http://sourceforge.net/projects/xplico/files/Xplico%20versions" target="_blank">Download here</a><br />
OR <br />
<code>sudo bash -c 'echo "deb http://repo.xplico.org/ $(lsb_release -s -c) main" >> /etc/apt/sources.list'<br />
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 791C25CE<br />
sudo apt-get update<br />
sudo apt-get install xplico</code> <br />
<br />
<b>Deafult Users ::</b><br />
user: admin, xplico<br />
password: xplico, xplico<br />
<h3>
</h3>

Xplico (Internet Traffic Capture) :: Tools

Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each...

Orion Browser Dumper (Browser History Dumper) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaCJd3-0xxZqzg5KSVfpz7T0byRvE7nyrSvbaMHp06mBJQWkhR7jRz3Inz6VABoE-Vak0RkQcDMPCrwHCnYXvT5-pce_iHHODP0FhCRnTxkEgJdUdJ3llmfXPdRC5PoUb-LhkiOyyud_ed/s1600/orion-browser-dumper-screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Orion Browser Dumper Screenshot" border="0" height="210" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaCJd3-0xxZqzg5KSVfpz7T0byRvE7nyrSvbaMHp06mBJQWkhR7jRz3Inz6VABoE-Vak0RkQcDMPCrwHCnYXvT5-pce_iHHODP0FhCRnTxkEgJdUdJ3llmfXPdRC5PoUb-LhkiOyyud_ed/s400-rw/orion-browser-dumper-screenshot.png" title="Orion Browser Dumper Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>Orion Browser Dumper</b> is an <i>advanced local browser history extractor (dumper)</i>,  in less than few seconds (like for Browser Forensic Tool) it will  extract the whole history content of most famous web browser, Actually  Internet Explorer, Mozilla FireFox, Google Chrome, COMODO Dragon,  Rockmelt and Opera. </div>
<div style="text-align: justify;">
<b>Orion Browser Dumper</b> is a console application which means runs under a  MS-DOS environment (No User Interface or UI). Console applications are  very useful in case you want to make some sort of automatism or want to  use a simple BATCH script to launch the dump process (from, say, a USB  Device).We designed this tool to be very easy to understand for every  user. It even simulates progress bars to show the progress of each  browser scan. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/dC-27m0pDBU?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b> <a href="http://phrozensoft.com/downloads/OrionBrowserDumperV1_setup.zip" target="_blank">Orion Browser Dumper  v1.0</a></div>
<h3 style="text-align: justify;">
</h3>
<div class="separator" style="clear: both; text-align: center;">
</div>
<h3 style="text-align: justify;">
</h3>

Orion Browser Dumper (Browser History Dumper) :: Tools

Orion Browser Dumper is an advanced local browser history extractor (dumper) , in less than few seconds (like for Browser Forensic Tool...

Resource Hacker :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpZjVrGJFtH2BFitMappIozYSxt03ch0tyD_rxMWkU1soLQT3wgej5yZ06mQAN7xBudt2kdUQDrSIVJbk3jU5LdZyJq4CEpCc0PruQ86DigUqc-UV15TtqvYQJ2nCeEa40Db6HlweBfjig/s1600/resource+hacker+logo.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="resource-hacker-logo" border="0" height="106" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpZjVrGJFtH2BFitMappIozYSxt03ch0tyD_rxMWkU1soLQT3wgej5yZ06mQAN7xBudt2kdUQDrSIVJbk3jU5LdZyJq4CEpCc0PruQ86DigUqc-UV15TtqvYQJ2nCeEa40Db6HlweBfjig/s320-rw/resource+hacker+logo.gif" title="resource-hacker-logo" width="320" /></a></div>
<div style="text-align: justify;">
<b>Resource Hacker</b><sup><span style="font-size: xx-small;"></span></sup> is a <strong>freeware</strong>
 utility to <i>view, modify, rename, add, delete and extract resources in 
32bit & 64bit Windows executables and resource files (*.res).</i> It 
incorporates an internal resource script compiler and decompiler and 
works on all (Win95 - Win7) Windows operating systems.<br /><br />
 
 <i><b>Viewing Resources</b>:</i> Cursor, Icon, Bitmap, GIF, AVI, and JPG 
resource images can be viewed. WAV and MIDI audio resources can be 
played. Menus, Dialogs, MessageTables, StringTables, Accelerators, 
Delphi Forms, and VersionInfo resources can be viewed as decompiled 
resource scripts. Menus and Dialogs can also be viewed as they would 
appear in a running application.<br /><br />
 
 <b><i>Saving Resources:</i></b> Resources can be saved as image files (*.ico, 
*.bmp etc), as script files (*.rc), as binary resource files (*.res), or
 as untyped binary files (*.bin).<br /><br />
 
 <i><b>Modifying Resources</b>:</i> Resources can be modified by replacing the 
resource with a resource located in another file (*.ico, *.bmp, *.res 
etc) or by using the internal resource script compiler (for menus, 
dialogs etc). Dialog controls can also be visually moved and/or resized 
by clicking and dragging the respective dialog controls prior to 
recompiling with the internal compiler.<br /><b><br />
 
 <i>Adding Resources:</i></b> Resources can be added to an application by copying them from external resource files (*.res).<br /><br />

<b><i>Deleting Resources:</i></b> Most compilers add resources into 
applications which are never used by the application. Removing unused 
resources can reduce an application's size. </div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Text :: </b><a href="http://www.askvg.com/tutorial-all-about-resource-hacker-in-a-brief-tutorial/" target="_blank">Click Here </a></div>
<div style="text-align: justify;">
<b>Video ::</b></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/KfMZRjXxQ9w?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/e0QRLcCqUEc?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.angusj.com/resourcehacker/reshack_setup.exe" target="_blank">Resource Hacker 3.6.0</a></div>

Resource Hacker :: Tools

Resource Hacker is a freeware utility to view, modify, rename, add, delete and extract resources in 32bit & 64bit Windows executa...

WhatWeb (Identifies Websites) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Y3Xc5XJJiJAmm6k8YcIZNOrOB7uG7CgdTi3S5kN-OmfZ98jwawq6HH-Ntm-wT192dKf5QrY_p3LgrMXJGEVlT8HbDjmC9PZILfoV_kY9uhM5FewuU0d2gOcSmRjuqbeh80xsr9j3mUSS/s1600/whatweb+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WhatWeb Screenshot" border="0" height="188" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Y3Xc5XJJiJAmm6k8YcIZNOrOB7uG7CgdTi3S5kN-OmfZ98jwawq6HH-Ntm-wT192dKf5QrY_p3LgrMXJGEVlT8HbDjmC9PZILfoV_kY9uhM5FewuU0d2gOcSmRjuqbeh80xsr9j3mUSS/s400-rw/whatweb+screenshot.png" title="WhatWeb Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>WhatWeb </b><i>identifies websites.</i> Its goal is to answer the question, 
“<i>What is that Website?”</i>. <b>WhatWeb</b> recognises <i>web technologie</i>s including 
content management systems (CMS), blogging platforms, 
statistic/analytics packages, JavaScript libraries, web servers, and 
embedded devices. WhatWeb has over 900 plugins, each to recognise 
something different. WhatWeb also identifies version numbers, email 
addresses, account IDs, web framework modules, SQL errors, and more.</div>
<div style="text-align: justify;">
<b>WhatWeb</b> can be stealthy and fast, or thorough but slow. <b>WhatWeb</b> 
supports an aggression level to control the trade off between speed and 
reliability. When you visit a website in your browser, the transaction 
includes many hints of what web technologies are powering that website. 
Sometimes a single webpage visit contains enough information to identify
 a website but when it does not, <b>WhatWeb</b> can interrogate the website 
further. The default level of aggression, called ‘passive’, is the 
fastest and requires only one HTTP request of a website. This is 
suitable for scanning public websites. More aggressive modes were 
developed for in penetration tests.</div>
<div style="text-align: justify;">
Most WhatWeb plugins are thorough and recognise a range of cues from 
subtle to obvious. For example, most WordPress websites can be 
identified by the meta HTML tag, e.g. ‘‘, but a minority of WordPress 
websites remove this identifying tag but this does not thwart WhatWeb. 
The WordPress <b>WhatWeb</b> plugin has over 15 tests, which include checking 
the favicon, default installation files, login pages, and checking for 
“/wp-content/” within relative links.</div>
<h3>
Features:</h3>
<div style="text-align: justify;">
* Over 900 plugins<br />
* Control the trade off between speed/stealth and reliability<br />
* Plugins include example URLs<br />
* Performance tuning. Control how many websites to scan concurrently.<br />
* Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB.<br />
* Recursive web spidering<br />
* Proxy support including TOR<br />
* Custom HTTP headers<br />
* Basic HTTP authentication<br />
* Control over webpage redirection<br />
* Nmap-style IP ranges<br />
* Fuzzy matching<br />
* Result certainty awareness<br />
* Custom plugins defined on the command line</div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://www.morningstarsecurity.com/downloads/whatweb-0.4.7.tar.gz">whatweb-0.4.7.tar.gz</a></div>
<div style="text-align: justify;">
<b>Tutorial :: </b>  <a href="http://www.morningstarsecurity.com/research/whatweb" target="_blank">Click Here </a></div>
<div style="text-align: justify;">
</div>

WhatWeb (Identifies Websites) :: Tools

WhatWeb identifies websites. Its goal is to answer the question, “ What is that Website?” . WhatWeb recognises web technologie s inclu...

Subscribe to: Comments ( Atom )