ToolWar | Information Security (InfoSec) Tools

Anubis (Malware Analysis) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTmAx_NudzfUupSdKvSkb0hV3Z5-uet6DMoIU6IOOLV2D1jhrwUKJ1J0Nr8Y10u30CXriHeCoN7-RrUyMg2I2OXk-tJ-Nx16UORipoRzOCFsusKV1b90cEopYLaxyWRrAdtMGtf-nBFaQ5/s1600/anubis+logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="anubis logo" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTmAx_NudzfUupSdKvSkb0hV3Z5-uet6DMoIU6IOOLV2D1jhrwUKJ1J0Nr8Y10u30CXriHeCoN7-RrUyMg2I2OXk-tJ-Nx16UORipoRzOCFsusKV1b90cEopYLaxyWRrAdtMGtf-nBFaQ5/s200/anubis+logo.png" title="anubis logo" width="114" /></a></div>
<div style="text-align: justify;">
<b>Anubis</b> is a service for<b> analyzing malware.</b> Submit your <b>Windows executable</b> or <b>Android APK</b> and receive an analysis report telling you what it does.
  Alternatively, submit a <b>suspicious URL</b> and receive a report that shows you all the activities
  of the Internet Explorer process when visiting this URL. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Online :: </b><a href="http://anubis.iseclab.org/">http://anubis.iseclab.org/</a> </div>

Anubis (Malware Analysis) :: Tools

Anubis is a service for analyzing malware. Submit your Windows executable or Android APK and receive an analysis report telling you ...

Ardamax Keylogger :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKetu8Xus_BjvV3rk63-tZDAyPcmhnmWc0da71GaTnL9NLYdt5WXx5blf98p4tTADVATkzma8ZWwBsiqpSZvVNbpAkmHM3yKvGH3J00B4mXZyWlJdl9UCxoFSE7T4kq9gmMSUd3UTFgCwm/s1600/ardamax+keylogger+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="ardamax keylogger " border="0" height="267" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKetu8Xus_BjvV3rk63-tZDAyPcmhnmWc0da71GaTnL9NLYdt5WXx5blf98p4tTADVATkzma8ZWwBsiqpSZvVNbpAkmHM3yKvGH3J00B4mXZyWlJdl9UCxoFSE7T4kq9gmMSUd3UTFgCwm/s400/ardamax+keylogger+screenshot.png" title="ardamax keylogger " width="400" /></a></div>
<b>Ardamax Keylogger </b>is a <b><i>keystroke recorder</i></b> that captures user's  activity and saves it to an encrypted log file. The log file can be  viewed with the powerful Log Viewer. Use this <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> to find out what is  happening on your computer while you are away, maintain a backup of your  typed data automatically or use it to <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">monitor</a> your kids. Also you can  use it as a monitoring device for detecting unauthorised access. Logs  can be automatically sent to your e-mail address, access to the  keylogger is <a href="http://www.toolwar.com/search/label/Password" target="_blank">password</a> protected. Besides, <b>Ardamax Keylogger</b> logs  information about the Internet addresses the user has visited. This invisible spy application is designed for 2000, XP, 2003, Vista, 7 and <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> 8.</div>
<h3>
<b>Keylogger Features:</b></h3>
<ul>
<li><b>Email log delivery</b> - keylogger can send you recorded logs through e-mail delivery at set times - perfect for remote monitoring!</li>
<li><b>FTP delivery</b> - Ardamax Keylogger can upload recorded logs through FTP delivery.</li>
<li><b>Network delivery</b> - sends recorded logs through via LAN.</li>
<li><b>Clipboard logging</b> - capture all text copied to the Windows Clipboard. </li>
<li><b>Invisible mode</b> makes it absolutely  invisible to anyone. <b>Ardamax Keylogger</b> is not visible in the task bar,  system tray, Windows 2000/XP/2003/Vista/Windows 7 Task Manager, process  viewers (Process Explorer, WinTasks etc.), Start Menu and Windows  Startup list.</li>
<li><b>Visual surveillance</b> - periodically makes screenshots and stores the compressed images to log.</li>
<li><b>Chat monitoring</b> - Ardamax Keylogger is designed to record and monitor both sides of a conversation in following chats:             <ul>
<li>AIM</li>
<li>Windows Live Messenger 2011</li>
<li>ICQ 7</li>
<li>Skype 4</li>
<li>Yahoo Messenger 10</li>
<li>Google Talk</li>
<li>Miranda</li>
<li>QiP 2010</li>
</ul>
</li>
<li><b>Security</b> - allows you to protect program settings, Hidden Mode and Log file.</li>
<li><b>Application monitoring</b> - keylogger will record the application that was in use that received the keystroke!</li>
<li><b>Time/Date tracking</b> - it allows you to pinpoint the exact time a window received a keystroke!</li>
<li><b>Powerful Log Viewer</b> - you can view and save the log as a HTML page or plain text with keylogger Log Viewer.</li>
<li><b>Small size </b>– Ardamax Keylogger is several  times smaller than other programs with the same features. It has no  additional modules and libraries, so its size is smaller and the  performance is higher.</li>
<li>Ardamax Keylogger fully supports <b>Unicode</b>  characters which makes it possible to record keystrokes that include  characters from Japanese, Chinese, Arabic and many other character sets.</li>
<li>It records every keystroke. Captures passwords and all other invisible text.</li>
</ul>
<b>Other Features:</b><br />
<ul>
<li>Windows 2000/2003/XP/Vista/Windows 7/Windows 8 support</li>
<li>Monitors multi-user machines</li>
<li>Automatic startup</li>
<li>Friendly interface</li>
<li>Easy to install</li>
</ul>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/iJ2udtA48hg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
 </h3>
Screenshots :: <a href="http://www.ardamax.com/keylogger/screenshots.html" target="_blank">Click Here</a>
<br />
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.snapfiles.com/php/sfdwnld.php?id=107631&a=7115070&loc=x" target="_blank">Ardamax Keylogger (Trial Version)</a><b>
</b></div>
<div style="text-align: justify;">
<b>Buy $ ::</b> <a href="https://sites.fastspring.com/ardamax/instant/keylogger" target="_blank">Ardamax Keylogger (Buy Here)</a></div>

Ardamax Keylogger :: Tools

Ardamax Keylogger is a keystroke recorder that captures user's activity and saves it to an encrypted log file. The log file can be ...

Malware Classifier (Malware Analysis) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="adobe malware classifier " border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJFSWBvBrB6iEW5mUe0RLgLd4aTklWqEcrJku4K5HoKfHloY6DDXgTMVL4g8funQXw0_Yaxw2LuVUfUe3WqD_yvQoVBSUtp-dpw3XWg7kkmWbJlum9If5NsE1Kifvf0LFPi1Gryz7sq1ot/s400/adobe+malware+classifier.png" title="adobe malware classifier " width="400" /></div>
<div style="text-align: justify;">
<b>Adobe Malware Classifier</b> is a command-line tool that lets antivirus 
analysts, IT administrators, and security researchers quickly and easily
 determine if a <b><i>binary file contains malware</i></b>, so they can develop <b>
<a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> detection</b> signatures faster, reducing the time in which users' 
systems are vulnerable.
Malware Classifier uses machine learning algorithms to classify Win32 
binaries – EXEs and DLLs – into three classes: 0 for “clean,” 1 for 
“malicious,” or “UNKNOWN.”<br /><br />
The tool was developed using models resultant from running the J48, J48 
Graft, PART, and Ridor machine-learning algorithms on a dataset of 
approximately 100,000 malicious programs and 16,000 clean programs. <br />
The tool extracts seven key features from an unknown binary, feeds them 
to one of the four classifiers or all of them, and presents its 
classification of the unknown binary.</div>
<div style="text-align: justify;">
<h3>
Download :: </h3>
<b>Python :: </b><a href="http://sourceforge.net/projects/malclassifier.adobe/files/AdobeMalwareClassifier.py/download" target="_blank">AdobeMalwareClassifier.py</a><br />
<b>Source :: </b><a href="http://sourceforge.net/projects/malclassifier.adobe/?source=navbar">http://sourceforge.net/projects/malclassifier.adobe/?source=navbar</a></div>

Malware Classifier (Malware Analysis) :: Tools

Adobe Malware Classifier is a command-line tool that lets antivirus analysts, IT administrators, and security researchers quickly and e...

VirusTotal (Analyze files and URLs) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="virustotal logo" border="0" height="70" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_tdl85tCDSMyYMpacR9LL_CK2AehDKuIiji7z27f0HCHva-H4cBOUdzchlHBuKhIMi7y-qAjBkrxhPNy9QG9vMIgh180-_lugQgdYdr5OKvqWU_gT4lZqr9v8ppC2b39ZnvLE-LyNkSWa/s400/virustotal+logo.png" title="virustotal logo" width="400" /> </div>
<div style="text-align: justify;">
<b>VirusTotal</b>, a subsidiary of Google, is a <i><b>free <a href="http://www.toolwar.com/search/label/Online" target="_blank">online</a> service that           analyzes files and URLs</b></i> enabling the <i>identification of viruses,           worms, trojans and other kinds of malicious content</i> detected by           antivirus engines and website <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanners.</a> At the same time, it may be           used as a means to detect false positives, i.e. innocuous resources           detected as malicious by one or more scanners.         </div>
<div style="text-align: justify;">
<b>VirusTotal’</b>s mission is to help in improving the antivirus and           <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> industry and make the internet a safer place through the           development of free tools and services.<b> VirusTotal's</b> main characteristics are highlighted below.         </div>
<h3 style="text-align: justify;">
Free unbiased service ::</h3>
<div style="text-align: justify;">
<b>VirusTotal</b>, is offered freely to end users as long as its use has no           commercial purpose and does not become part of any business activity.           Even though the service works with engines belonging to different           enterprises and organizations, <b>VirusTotal</b> does not distribute or           advertise any products belonging to third parties, but simply acts           as an aggregator of information. This prevents us from being           subjected to any kind of bias and allows us to offer an objective           service to our users.         </div>
<h3 style="text-align: justify;">
Runs multiple antivirus engines and website scanners ::</h3>
<div style="text-align: justify;">
<b>VirusTotal</b> simply acts as an information aggregator. The aggregated           data is the output of different antivirus engines, website scanners,           file and URL <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a> tools and user contributions. The full list           of antivirus solutions and website scanners used in VirusTotal           can be found in the            credits and collaboration acknowledgements section.         </div>
<h3 style="text-align: justify;">
Runs multiple file and URL characterization tools ::</h3>
<div style="text-align: justify;">
As previously stated,<b> VirusTotal</b> also aggregates the output of a           number of file and URL characterization tools. These tools cover a           wide range of purposes, ranging from providing structural information           about Microsoft Windows portable executables (PEs) to identifying           signed software. The full list of file and URL characterization           tools used in <b>VirusTotal</b> can be found in the           credits and collaboration           acknowledgements section.         </div>
<h3 style="text-align: justify;">
Real time updates of virus signatures and blacklists ::</h3>
<div style="text-align: justify;">
The <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> signatures of antivirus solutions present in VirusTotal           are periodically updated as they are developed and distributed by the           antivirus companies. The update polling frequency is 15 minutes—this           makes sure that the products are using the latest signature sets.         </div>
<div style="text-align: justify;">
<a href="http://www.toolwar.com/search/label/Web" target="_blank">Website</a> scanning is done via API queries to the different companies           providing the particular solution, hence, the most updated version           of their dataset is always used.         </div>
<h3 style="text-align: justify;">
Detailed results from each scanner ::</h3>
<div style="text-align: justify;">
<b>VirusTotal </b>not only tells you whether a given antivirus solution           detected a submitted file, but also displays the exact detection           label returned by each engine (e.g.           <span class="label important">I-Worm.Allaple.gen</span>).         </div>
<div style="text-align: justify;">
This feature is also present in URL scanners. Most of them will           discriminate malware sites, phishing sites, suspicious sites, etc.           Moreover, some of the engines will provide additional information           explicitly stating whether a given URL belongs to a particular           botnet, which brand is targeted by a given phishing site, etc.         </div>
<h3 style="text-align: justify;">
Real time global service operation statistics ::</h3>
<div style="text-align: justify;">
Information about the number of resources (files and URLs) processed           by <b>VirusTotal</b> can be found in the            statistics section. These statistics provide a number of notions           and groupings, such as global detection ratios for the received files,           submissions per country, most popular detection labels, etc. No           statistics comparing the different antivirus products and website           detection engines are generated—neither will they ever be generated           (on a public or private basis), even though their calculation is           trivial. The reason is that using <b>VirusTotal </b>          for antivirus testing is a bad idea.         </div>
<h3 style="text-align: justify;">
Automation API ::</h3>
<div style="text-align: justify;">
File and URL scanning can be automated with a free public API. For           obvious reasons (including prevention of competition with the           antivirus products present in <b>VirusTotal</b>), the public API is           subjected to a strong request rate limitation. Should a user require           a higher request rate, a honeypot API is available for researchers           and a private mass API is offered to individuals with commercial and           product enhancement intentions. A detailed specification of the           different APIs can be found in the            advanced features section.         </div>
<h3 style="text-align: justify;">
Online malware research community ::</h3>
<div style="text-align: justify;">
In August 2010 <b>VirusTotal </b>integrated a pseudo-social network that           allows its users to interact with other users and comment on files           and URLs. These comments may range from deep malware analyses to           information on the distribution vector and in-the-wild locations           of the submitted files, hence, the community acts as the collective           intelligence component of VirusTotal. Files and URLs can be voted as           malicious or innocuous, building a community maliciousness score for           the resource.         </div>
<div style="text-align: justify;">
In other words, when security products fail (false positives/false           negatives), there is still a chance that some VirusTotal Community           user will have produced a useful review of the resource for its           community peers.         </div>
<h3 style="text-align: justify;">
Desktop applications for interacting with the service ::</h3>
<div style="text-align: justify;">
With the aim of making the Internet a safer place <b>VirusTotal's</b> team           has released a number of desktop applications and tools for           interacting with the service (one-click file uploader, <a href="http://www.toolwar.com/search/label/Browser" target="_blank">browser</a>           extensions, etc.). Many of <b>VirusTotal's</b> users have also developed           their own applications and have made them publicly available on the           Internet. More information about these resources can be found in the           advanced features section. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/TFSmJaiO_G0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br />
<b>Online :: </b><a href="https://www.virustotal.com/">https://www.virustotal.com/</a></div>

VirusTotal (Analyze files and URLs) :: Tools

VirusTotal , a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of v...

Cuckoo Sandbox (Malware Analysis) :: Tools

<div class="row" style="text-align: justify;">
<div class="span6" style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Cockoo sandbox logo" border="0" height="128" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgibr626QwfgXHYV4JYq_X59SkjRlgqtUxt37xeoKA02je4VxQCzLHM2HF_UMNOs73aOU78-Ym3kDdcNf_Sh4lu8veicfMPHF_ExBSG4ZSq32iari06OXQx68KZJGay6AFbiMYSwZObGuUD/s400/cuckoo+sandbox+logo.png" title="Cockoo sandbox logo" width="400" /></div>
<h3>
What is Cuckoo Sandbox?</h3>
<b>Cuckoo Sandbox</b> is a <b><i>malware analysis system</i></b>. What does that mean? It simply means that you can  throw any <i>suspicious file</i> at it and in a matter of seconds Cuckoo will  provide you back some detailed results outlining what such file did when  executed inside an isolated environment.<br />
<h3>
Why should you use it?</h3>
<i><b>Malware</b> is the swiss-army knife of cybercriminals</i> and any other adversary to your corporation or organization.<br />
In these evolving times, detecting and removing <a href="http://www.toolwar.com/search/label/Malware" target="_blank"> malware</a> artifacts is not enough: it's vitally important to understand  how they work and what they would do/did on your systems when deployed  and understand the context, the motivations and the goals of a breach.<br />
In this way you are able to more effectively understand the incident, respond to it and protect yourself for the future.<br />
There are infinite other contexts where you might  need to deploy a sandbox internally, from <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyzing</a> an internal breach  to proactively scouting wildly distributed threats, collect actionable  data and analyzing the ones actively targeting your infrastructure or  products.<br />
In any of these cases you'll find Cuckoo to be perfectly suitable, incredibly customizable and well... free!</div>
<div class="span6" style="text-align: justify;">
<h3>
What does it produce?</h3>
Cuckoo generates a handful of different raw data which include:<br />
<ul>
<li>Native functions and <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> API calls traces</li>
<li>Copies of files created and deleted from the filesystem</li>
<li>Dump of the memory of the selected process</li>
<li>Full <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory</a> dump of the analysis machine</li>
<li>Screenshots of the desktop during the execution of the malware analysis</li>
<li><a href="http://www.toolwar.com/search/label/Network" target="_blank">Network</a> dump generated by the machine used for the analysis</li>
</ul>
In order to make such results more consumable to the  end users, Cuckoo is able to process them and generate different type of  reports, which could include:<br />
<ul>
<li>JSON report</li>
<li>HTML report</li>
<li>MAEC report</li>
<li>MongoDB interface</li>
<li>HPFeeds interface</li>
</ul>
Even more interestingly, thanks to Cuckoo's extensive  modular design, you are able to customize both the processing and the  reporting stages. Cuckoo provides you all the requirements to easily  integrate the sandbox into your existing <a href="http://www.toolwar.com/search/label/Framework" target="_blank">frameworks</a> and storages with  the data you want, in the way you want, with the format you want.<br />
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/720Vh3FaGN8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/KVoDCrYeCXo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/-npWBiDloRQ?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download :: </h3>
<b>Alternative Downloads ::</b><br />
<pre>git clone git://github.com/cuckoobox/cuckoo.git</pre>
If you want to clone a specific branch ::<br />
<pre>git clone -b <branch name> git://github.com/cuckoobox/cuckoo.git</pre>
<b><span style="font-family: inherit;">Linux ::</span></b> <a href="http://www.cuckoosandbox.org/download.html" target="_blank">Cuckoo Sandbox 0.6</a><br />
<b>Official Website :: </b>http://www.cuckoosandbox.org/<br />
<h3>
</h3>
</div>
</div>

Cuckoo Sandbox (Malware Analysis) :: Tools

What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system . What does that mean? It simply means that you can throw any su...

PDFMiner (PDF Parser and Analyzer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="PDF Analyzer Logo" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMCjJJbO6cbhxU25HoYQQ8ON_84A1pWFiyQLa-JFIozC6ngptY0JwR3i0kmDfGHn30rDY8c8i1AKJlt85WCyQGkQ1xtKs733iaogmoBtlkajjWUsAMFPoLlIFMdiiDWpacJze0pKS8trfk/s320/PDF+Analyzer+logo.png" title="PDF Analyzer Logo" width="320" /></div>
<div style="text-align: justify;">
<b>PDFMiner </b>is a tool for <i>extracting information from PDF documents.</i>
Unlike other <b>PDF-</b>related tools, it focuses entirely on getting 
and<i> <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyzing</a> text data</i>. <b>PDFMiner </b>allows one to obtain
the exact location of text in a page, as well as 
other information such as fonts or lines.
It includes a PDF converter that can transform <a href="http://www.toolwar.com/search/label/PDF" target="_blank">PDF</a> files
into other text formats (such as HTML). It has an extensible
PDF parser that can be used for other purposes than text analysis.

</div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
Features</h3>
<ul style="text-align: justify;">
<li> Written entirely in Python. (for version 2.4 or newer)
</li>
<li> Parse, analyze, and convert PDF documents.
</li>
<li> PDF-1.7 specification support. (well, almost)
</li>
<li> CJK <a href="http://www.toolwar.com/search/label/Language" target="_blank">languages</a> and vertical writing scripts support.
</li>
<li> Various font types (Type1, TrueType, Type3, and CID) support.
</li>
<li> Basic encryption (RC4) support.
</li>
<li> PDF to HTML conversion (with a sample converter web app).
</li>
<li> Outline (TOC) extraction.
</li>
<li> Tagged contents extraction.
</li>
<li> Reconstruct the original layout by grouping text chunks.
</li>
</ul>
<div style="text-align: justify;">
<b>PDFMiner</b> is about 20 times slower than 
other C/C++-based counterparts such as XPdf. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<h4>
How to Install</h4>
<ol>
<li> Install <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> 2.4 or newer.
     (<b>Python 3 is not supported.</b>)
</li>
<li> Download the PDFMiner source.
</li>
<li> Unpack it.
</li>
<li> Run <code>setup.py</code> to install:<br />
<blockquote>
<pre><span style="font-family: "Courier New",Courier,monospace;"># <b>python setup.py install</b></span>
</pre>
</blockquote>
</li>
<li> Do the following test:<br />
<blockquote>
<pre><span style="font-family: "Courier New",Courier,monospace;">$ <b>pdf2txt.py samples/simple1.pdf</b>
Hello
World
Hello
World
H e l l o
W o r l d
H e l l o
W o r l d</span>
</pre>
</blockquote>
</li>
<li> Done!
</li>
</ol>
<div style="text-align: justify;">
For more tutorials visit official website.</div>
<h3 style="text-align: justify;">
<b>Download ::</b></h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="https://pypi.python.org/packages/source/p/pdfminer/pdfminer-20131113.tar.gz" target="_blank">PDFMiner-20131113.tar.gz</a><b> </b></div>
<div style="text-align: justify;">
<b>Official Website :: </b> <a href="http://www.unixuser.org/~euske/python/pdfminer/index.html">http://www.unixuser.org/~euske/python/pdfminer/index.html</a></div>

PDFMiner (PDF Parser and Analyzer) :: Tools

PDFMiner is a tool for extracting information from PDF documents. Unlike other PDF- related tools, it focuses entirely on getting and ...

Sahi Pro (Web Application Testing) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="sahi pro logo" border="0" height="186" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ6Br5uAi7vygfur1Hk2sXAQcW0JE-b8lFTIo5sO0ffn0u_e9kyHMselsNClcHQ8FuG1YZGONiJsC1UqXRp7AGDAvLG-zLfOprOI3HK1n-aV0xQqwBo0CEXuAMiMb4ffw39t_TvswkwYA3/s400/sahi+pro+logo.png" title="sahi pro logo" width="400" /></div>
<span style="font-size: small;"><b>Sahi Pro</b> is a powerful  tool for <i><b>automation of <a href="http://www.toolwar.com/search/label/Web" target="_blank">web</a> application testing</b></i>. <b>Sahi Pro</b> helps <i>test web  applications across different browsers</i> with high reliability and low  maintenance. Existing testing teams with minimal programming knowledge  can easily get started and contribute to test automation. </span> </div>
<div style="text-align: justify;">
<span style="font-size: small;">Sahi is especially suited for cross-browser/multi-<a href="http://www.toolwar.com/search/label/Browser" target="_blank">browser</a> <a href="http://www.toolwar.com/search/label/Testing" target="_blank">testing</a> of  complex web 2.0 applications with lots of AJAX and dynamic content. <b>Sahi</b>  works well in Agile development environments, enabling rapid automation  and maintenance and easily integrating with build systems. Sahi saves  time and effort with faster development, less maintenance and fast  distributed playback. Sahi runs on any modern browser which supports  javascript.</span></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<span style="font-size: small;">For testing teams in product companies and captive IT units which  need rapid reliable web automation, Sahi would be the best choice among  web automation tools. </span><br />
<h3 class="pro_feature_heading">
Record & Playback on Any Browser</h3>
<div class="pro_feature_body">
Record and playback any web application on any browser, any operating  system. Recording saves time and helps non-technical users contribute to  automation. The Sahi Controller helps easily identify and experiment  with elements on any browser. <b>The same script works on all browsers</b> </div>
<div class="pro_feature_body">
<h3 class="pro_feature_heading">
Smart Accessor Identification</h3>
<div class="pro_feature_body">
Sahi identifies elements in simple stable ways. Sahi works even on  applications with dynamic ids, using _near, _in etc. APIs to easily  locate one element with respect to another. Sahi can automate  applications built using ExtJS, ZK, Dojo, YUI or any other framework. </div>
<div class="pro_feature_body">
<h3 class="pro_feature_heading">
AJAX? No Timeout Issues</h3>
<div class="pro_feature_body">
Sahi’s technology eliminates need for wait statements even for  inconsistent page loads and AJAX. Sahi tests are stable and do not fail  because of timing issues. Sahi scripts need less code and are easier to  maintain. </div>
<div class="pro_feature_body">
<h3 class="pro_feature_heading">
Rich Inbuilt Reports and Logs</h3>
<div class="pro_feature_body">
See complete information of script execution. From concise summaries and  graphs across runs, to exact line of script failure in code, get full  end to end reporting. All logs are stored in database. Reports can be  easily customized. </div>
<div class="pro_feature_body">
<h3 class="pro_feature_heading">
Fast Parallel Batch Playback</h3>
<div class="pro_feature_body">
Club together thousands of Sahi scipts in a  suite file and let Sahi execute them in parallel on one machine or  distribute it across machines. Cut play back time by upto 90%. Run from <b>command line</b>, <b>ant</b> or <b>build</b> and <b>continuous integration</b> systems. </div>
<div class="pro_feature_body">
<h3 class="pro_feature_heading">
Simple Powerful Scripting</h3>
<div class="pro_feature_body">
Sahi Script is based on Javascript.  Interact with your File-System, Databases, Excel sheets, CSV files with  ease. Call any Java code or library from Sahi Script to get added power. </div>
<div class="pro_feature_body">
<h3 class="pro_feature_heading">
Inbuilt Excel Framework</h3>
<div class="pro_feature_body">
Use the inbuilt Excel Framework to let  your business analysts and non technical testers contribute to testing.  Easily test from the Controller. Get detailed inbuilt reports. </div>
</div>
<h3>
<span style="font-size: small;">Tutorials ::</span></h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/5VlbtlrFv3E?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</div>
<div class="pro_feature_body">
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/lnaFZynoeyw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
<span style="font-size: small;">Download ::</span></h3>
<span style="font-size: small;"><b>Windows ::</b> <a href="http://sahi.co.in/download-sahi-pro" target="_blank"><span style="font-weight: normal;">Sahi</span> <span style="font-weight: normal;">Pro v5.1.0</span></a></span>
<span style="font-size: small;"><span style="font-weight: normal;"><b> </b></span></span><br />
<span style="font-size: small;"><span style="font-weight: normal;"><b>Buy ::</b> <a href="https://crm.sahi.co.in/pay/index.php/order/create" target="_blank">Sahi Pro</a> in $495 </span></span><br />
<span style="font-size: small;"><span style="font-weight: normal;"><b>Official Website ::  </b><a href="http://sahi.co.in/">http://sahi.co.in/</a> </span></span></div>
</div>
</div>
</div>
</div>
</div>

Sahi Pro (Web Application Testing) :: Tools

Sahi Pro is a powerful tool for automation of web application testing . Sahi Pro helps test web applications across different browse...

Bizploit (ERP Penetration Testing) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="onapsis logo" border="0" height="157" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEin6I42nzkLY76YbK6quX_PVYjdXrZ8ZpxDui0742p564fJp9gziwUTmwc3CRFGoTz5et3sDfyb3dBOMb7o0I9stsuh20N8o7GqsAhA_mdKp5AO_osq2EkqNGSDHp9JvasUAXoL_9P3L4Ce/s400/onapsis+logo.png" title="onapsis logo" width="400" /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="text-align: justify;">
<b>Bizploit</b> is the first Opensource <i>ERP Penetration Testing framework</i>. 
Developed by the <b>Onapsis Research Labs,</b> <b>Bizploit</b> assists security 
professionals in the discovery, exploration, vulnerability assessment 
and exploitation phases of specialized <b>ERP Penetration Tests</b>.<br />
Currently, <b>Bizploit</b> is shipped with many plugins to assess the security 
of SAP business platforms. Plugins for other popular ERPs will be 
included in the short term.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials :: </h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux :: </b><a class="download" href="http://www.onapsis.com/get.php?resid=bizploit-linux-1-5">Bizploit v1.50-rc1</a></div>
<div style="text-align: justify;">
<b>Windows ::</b> <a class="download" href="http://www.onapsis.com/get.php?resid=bizploit-win32-1-5">Bizploit v1.50-rc1</a><br />
<b>Official Website :: </b><a href="http://www.onapsis.com/">http://www.onapsis.com</a>/</div>

Bizploit (ERP Penetration Testing) :: Framework

Bizploit is the first Opensource ERP Penetration Testing framework . Developed by the Onapsis Research Labs, Bizploit assists secur...

ModSecurity (Web Application Firewall) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="modsecurity logo" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqIaR3MOqqt6M9kImwLEM90dn9peh4HGb7o2VN5_LqA_bdR7pZqI6NiXKpATu9GK7SXtf7mbPlWzHP-zqQrAfCIPEzsQuiMRdYdAsbjCDXBBaqUZI9R5Pk_6no9f8fPoZakuUWdh6BxuN1/s640/mod-security+logo.jpg" title="modsecurity logo" width="640" /></div>
</div>
<div style="text-align: justify;">
<b>ModSecurity</b> is a <i>web application firewall</i> that can work either embedded  or as a <b>reverse proxy</b>. It provides protection from a range of <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attacks</a>  against web applications and allows for HTTP traffic monitoring, logging  and real-time analysis. </div>
<h2 style="text-align: justify;">
ModSecurity: Overview</h2>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
With over 70% of all attacks now carried out over the web application  level, organisations need every help they can get in making their  systems secure. <b>Web application firewalls</b> are deployed to establish an  external <a href="http://security/" target="_blank">security</a> layer that increases security, detects, and prevents  attacks before they reach web applications. </div>
<h3 style="text-align: justify;">
HTTP Traffic Logging</h3>
<div style="text-align: justify;">
<a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> servers are typically well-equipped to log traffic in a form useful  for marketing analyses, but fall short when it comes to logging of  traffic to web applications. In particular, most are not capable of  logging the request bodies. Your adversaries know this, and that is why  most attacks are now carried out via POST requests, rendering your  systems blind. </div>
<div style="text-align: justify;">
ModSecurity makes full HTTP transaction logging possible, allowing  complete requests and responses to be logged. Its logging facilities  also allow fine-grained decisions to be made about exactly what is  logged and when, ensure only the relevant data is recorded. </div>
<h3 style="text-align: justify;">
Real-Time Monitoring and Attack Detection</h3>
<div style="text-align: justify;">
In addition to providing logging facilities, <b>ModSecurity</b> can <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">monitor</a> the  HTTP traffic in real time in order to detect attacks. In this case <b> ModSecurity</b> operates as a web intrusion detection tool, allowing you to  react to suspicious events that take place at your web systems. </div>
<h3 style="text-align: justify;">
Attack Prevention and Just-in-time Patching</h3>
<div style="text-align: justify;">
<b>ModSecurity</b> can also act immediately to prevent attacks from reaching  your web applications. There are three commonly used approaches: </div>
<ol style="text-align: justify;">
<li><b>Negative security model.</b> Negative security model monitors  requests for anomalies, unusual behaviour, and common web application  attacks. It keeps anomaly scores for each request, IP addresses,  application sessions, and user accounts. Requests with high anomaly  scores are either logged or rejected altogether. </li>
<li><b>Known weaknesses and vulnerabilities.</b> Its rule language  makes ModSecurity an ideal external patching tool. External patching is  all about reducing the window of opportunity. Time needed to patch  application vulnerabilities often runs to weeks in many organisations.  With ModSecurity, applications can be patched from the outside, without  touching the application source code (and even without any access to  it), making your systems secure until a proper patch is produced. </li>
<li><b>Positive security model.</b> When positive security model is  deployed, only requests that are known to be valid are accepted, with  everything else rejected. This approach works best with applications  that are heavily used but rarely updated. </li>
</ol>
<h3 style="text-align: justify;">
Flexible Rule Engine</h3>
<div style="text-align: justify;">
A flexible rule engine sits in the heart of ModSecurity. It  implements the ModSecurity Rule <a href="http://www.toolwar.com/search/label/Language" target="_blank">Language</a>, which is a specialised  programming language designed to work with HTTP transaction data. The  <b>ModSecurity</b> Rule Language was designed to be easy to use, yet flexible:  common operations are simple while complex operations are possible.</div>
<div style="text-align: justify;">
Certified ModSecurity Rules, included with subscription to  <b>ModSecurity</b>, contain a comprehensive set of rules that implement  general-purpose hardening, common web application security issues.  Heavily commented, these rules can be used as a learning tool.</div>
<h3 style="text-align: justify;">
Embedded Deployment</h3>
<div style="text-align: justify;">
ModSecurity is an embeddable web application firewall, which means it  can be deployed as part of your existing web server infrastructure  (Apache, IIS7 and Nginx).</div>
<div style="text-align: justify;">
This deployment method has certain advantages:</div>
<ol style="text-align: justify;">
<li>No changes to existing network. It only takes a few minutes to add  ModSecurity to your existing web servers. And because it was designed to  be completely passive by default, you are free to deploy it  incrementally and only use the features you need. It is equally easy to  remove or deactivate it should decide you don't want it any more. </li>
<li>No single point of failure. Unlike with network-based  deployments, you will not be introducing a new point of failure to your  system. </li>
<li>Implicit load balancing and scaling. Because it works embedded  in web servers, <b>ModSecurity</b> will automatically take advantage of the  additional load balancing and scalability features. You will not need to  think of load balancing and scaling unless your existing system needs  them. </li>
<li>Minimal overhead. Because it works from inside the web server  process there is no overhead for network communication and minimal  overhead in parsing and data exchange. </li>
<li>No problem with encrypted or compressed content. Many <a href="http://www.toolwar.com/search/label/IDS" target="_blank">IDS</a>  systems have difficulties analysing SSL traffic. This is not a problem  for ModSecurity because it is positioned to work when the traffic is  decrypted and decompressed.  </li>
</ol>
<div style="text-align: justify;">
ModSecurity is known to work well on a wide range of operating systems.  Our customers are successfully running it on <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>, <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>, Solaris,  FreeBSD, OpenBSD, NetBSD, AIX, Mac OS X, and HP-UX. </div>
<h3 style="text-align: justify;">
Network-Based Deployment</h3>
<div style="text-align: justify;">
<b>ModSecurity</b> works equally well when deployed as part of a reverse proxy  server, and many of our customers choose to do so. In this scenario, one  installation of <b>ModSecurity </b>can protect any number or type of back-end  web servers. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/7w9aHEx-BmE?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/P-KJU785CKg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/nMGtIgrVv8s?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux :: </b></div>
<div style="text-align: justify;">
<b>Installation - Ubuntu/Debian</b>

<span style="font-family: "Courier New",Courier,monospace;"> </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo apt-get install libapache2-mod-security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo a2enmod mod-security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo /etc/init.d/apache2 force-reload</span><br />
<br />
 <b>Installation - Fedora/CentOS</b><span style="font-family: "Courier New",Courier,monospace;"> </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo yum install mod_security </span><br />
<span style="font-family: "Courier New",Courier,monospace;">$ sudo /etc/init.d/httpd restart</span>

<b> </b><br />
<br />
<b>Windows ::</b></div>
<ul>
<li><a href="https://www.modsecurity.org/tarball/2.7.5/ModSecurityIIS_2.7.5.msi">ModSecurity for IIS MSI Installer</a> </li>
<li><a href="https://www.modsecurity.org/tarball/2.7.5/ModSecurityIIS_2.7.5.msi.sha256">ModSecurity for IIS MSI Installer SHA25</a></li>
</ul>
<b>Official Website :: </b><a href="http://www.modsecurity.org/">http://www.modsecurity.org/</a><br />
<ul>
</ul>
<div style="text-align: justify;">
</div>

ModSecurity (Web Application Firewall) :: Tools

ModSecurity is a web application firewall that can work either embedded or as a reverse proxy . It provides protection from a range ...

CSRFTester (CSRF Vulnerability Tester) :: Tools

<div style="text-align: justify;">
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiknqrcJ0AaQrbIi2UugREgBG1Z7upbwf_PCp5NSgxfWNpFLOAh1v96V2StvLmvgsPEtP2oPyKdCM89YAwgSZIES4vC0cqy0W8AduQVObDEuZoVJVWEKAAnYQeQDeGbotNoS0AoMnH2kYv7/s1600/CSRF-tester+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="csrf tester screenshot" border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiknqrcJ0AaQrbIi2UugREgBG1Z7upbwf_PCp5NSgxfWNpFLOAh1v96V2StvLmvgsPEtP2oPyKdCM89YAwgSZIES4vC0cqy0W8AduQVObDEuZoVJVWEKAAnYQeQDeGbotNoS0AoMnH2kYv7/s400/CSRF-tester+screenshot.png" title="csrf tester screenshot" width="400" /></a> </div>
<b>OWASP CSRFTester</b> is a tool for <b>testing CSRF vulnerability in websites</b>. Just when developers are starting to run in circles over Cross Site  Scripting, the 'sleeping giant' awakes for yet another web-catastrophe.<b>  Cross-Site Request Forgery (CSRF) </b>is an attack whereby the victim is  tricked into loading information from or submitting information to a web  application for which they are currently authenticated. The problem is  that the web application has no means of verifying the integrity of the  request. The <b>OWASP CSRFTester </b>Project attempts to give developers the  ability to test their applications for CSRF flaws. </div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Luocnr0t8_o?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Zip :: </b><a href="https://www.owasp.org/images/0/08/CSRFTester-1.0.zip" target="_blank">CSRFTester-1.0.zip</a><br />
<b>Official Website :: </b> <a href="https://www.owasp.org/">https://www.owasp.org/</a></div>

CSRFTester (CSRF Vulnerability Tester) :: Tools

OWASP CSRFTester is a tool for testing CSRF vulnerability in websites . Just when developers are starting to run in circles over Cross...

DVWA (Damn Vulnerable Web Application) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6lDm7-Ac-rSmIX0YYaz1CD7DrJi4lxkPqEbHy1wd3ZlxeWqM20xjQXp8T9E5nT1CDbMuyH4AGydtLIqMTwMKyQ_aHiKCwQDdUYZjvXHUR36d_Axi8Fxb1iAFQfaMoXTPwxnu2yp6flOqQ/s1600/Screenshot-Damn+Vulnerable+Web+App+(DVWA).png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Screenshot-Damn Vulnerable Web App (DVWA)" border="0" height="280" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6lDm7-Ac-rSmIX0YYaz1CD7DrJi4lxkPqEbHy1wd3ZlxeWqM20xjQXp8T9E5nT1CDbMuyH4AGydtLIqMTwMKyQ_aHiKCwQDdUYZjvXHUR36d_Axi8Fxb1iAFQfaMoXTPwxnu2yp6flOqQ/s400/Screenshot-Damn+Vulnerable+Web+App+(DVWA).png" title="Screenshot-Damn Vulnerable Web App (DVWA)" width="400" /></a></div>
<div style="text-align: justify;">
<b>Damn Vulnerable Web App (DVWA)</b> is a <i>PHP/MySQL web application</i> that  is <i>damn vulnerable</i>. Its main goals are to be an aid for security  professionals to test their skills and tools in a legal environment,  help web developers better understand the processes of securing web  applications and aid teachers/students to teach/learn web application  security in a class room environment.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ywnVlyuP7SY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe> </div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
 <iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/B75FgRT2npc?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Zip ::</b> <a href="https://github.com/RandomStorm/DVWA/archive/v1.0.8.zip" target="_blank">DVWA 1.0.8</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://www.dvwa.co.uk/">http://www.dvwa.co.uk/</a></div>

DVWA (Damn Vulnerable Web Application) :: Framework

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable . Its main goals are to be an aid for security ...

smali (Assembler for dex format) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="smali logo" border="0" height="280" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvMgaYIXu9kEb3LQsy_paHL9-EAN0SvjQzMdS81TVU5uaddIxFjIuHqW3L6x3rb6FIMC6sospuMkKGIK7mZMULVynwkyYRiqEieuG-GOkROFXWN-vbQRNRKpSqjCupCOaX4CDM4kzJXtTF/s320/smali+logo.jpg" title="smali logo" width="320" /></div>
<br />
<b>smali/baksmali</b> is an <i>assembler/disassembler for the dex format</i> used  by dalvik, Android's Java VM implementation. The syntax is loosely based  on Jasmin's/dedexer's syntax, and supports the full functionality of  the dex format (annotations, debug info, line info, etc.) </div>
<div style="text-align: justify;">
The  names <b>"smali"</b> and "baksmali" are the Icelandic equivalents of  "assembler" and "disassembler" respectively. Why Icelandic you ask?  Because dalvik was named for an Icelandic fishing village. </div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/9h8kzHTp6fA?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Java ::</b> <a href="https://bitbucket.org/JesusFreke/smali/downloads" target="_blank">Download smali 2.0.2 and baksmali 2.0.2</a></div>
<div style="text-align: justify;">
<b>Source ::</b> <a href="http://code.google.com/p/smali/">http://code.google.com/p/smali/</a></div>

smali (Assembler for dex format) :: Tools

smali/baksmali is an assembler/disassembler for the dex format used by dalvik, Android's Java VM implementation. The syntax is lo...

MKBRUTUS (Password Bruteforcer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="mkbrutus logo" border="0" height="353" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiViiIesu7ycbO83Ze95F3a6rEbAX25oe7Fu42GbSYsUNI3kB976gsBmupnszGaShO0BrXpfcovw7eL-mTFKzHBM5y1alSSOorU68wJFAnK6FS7k-ta0w9IKoKwvfhbKIb7l1RW3OkN9O2/s640/mkbrutus+logo.png" title="mkbrutus logo" width="640" /></div>
<div style="text-align: justify;">
<b>MKBRUTUS </b>is a Password bruteforcer for <b>MikroTik devices</b> or boxes running <b>RouterOS. MKBRUTUS</b> is a tool developed in <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> 3 that performs <i>bruteforce  attacks</i> (dictionary-based) <i>systems against RouterOS </i>(ver. 3.x or newer)  which have the 8728/TCP port open. Currently has all the basic features of a tool to make dictionary-based  attacks, but in the future we plan to incorporate other options.</div>
<div style="text-align: justify;">
Some boxes running<i> <b>Mikrotik RouterOS</b></i> (3.x or newer) have the API port enabled (by default, in the port 8728/TCP) for administrative purposes instead SSH, Winbox or HTTPS (or have all of them). This is (another) <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attack</a> vector as it might be possible to perform a bruteforce to obtain valid credentials if no protection is available on that port. As the API uses a specific privative protocol, some code published by the vendor was included. Python 3.x is required in order to run this tool. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux</b><b> :: </b><a href="https://github.com/mkbrutusproject/MKBRUTUS/tarball/master" target="_blank">MKBRUTUS</a><b>  </b></div>
<div style="text-align: justify;">
<b>Windows</b> :: <a href="https://github.com/mkbrutusproject/MKBRUTUS/zipball/master" target="_blank">MKBRUTUS </a><br />
<b>Official Website :: </b><a href="http://mkbrutusproject.github.io/MKBRUTUS/">http://mkbrutusproject.github.io/MKBRUTUS/</a> </div>

MKBRUTUS (Password Bruteforcer) :: Tools

MKBRUTUS is a Password bruteforcer for MikroTik devices or boxes running RouterOS. MKBRUTUS is a tool developed in Python 3 that perfo...

APKinspector (Android Application Analysis) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDfll6W-RvD12nGiztawoL8QzR2hiHtY9U0CyFpiOh8DIlhHtylQu4GXGEeJOXGgm-Kn-50SpKrC-tMzOnEz3XmJq8OPzHGd1s1Cbwz9hJkW4ewca_vWW6qMKYQEEKP3C2IbytnRVmnsY7/s1600/APKinspector+Logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="APKinspector Logo" border="0" height="283" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDfll6W-RvD12nGiztawoL8QzR2hiHtY9U0CyFpiOh8DIlhHtylQu4GXGEeJOXGgm-Kn-50SpKrC-tMzOnEz3XmJq8OPzHGd1s1Cbwz9hJkW4ewca_vWW6qMKYQEEKP3C2IbytnRVmnsY7/s320/APKinspector+Logo.png" title="APKinspector Logo" width="320" /></a></div>
<div style="text-align: justify;">
<span itemprop="description"><br />
</span></div>
<div style="text-align: justify;">
<span itemprop="description"><b>APKinspector</b> is a powerful GUI tool for analysts to <b>analyze the Android applications.</b></span> The goal of this project is to aide analysts and  reverse engineers to visualize compiled <a href="http://www.toolwar.com/search/label/Android" target="_blank">Android</a> packages and their  corresponding DEX code. <b>APKInspector</b> provides both <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a> functions  and graphic features for the users to gain deep insight into the  malicious apps: </div>
<ul style="text-align: justify;">
<li>    CFG   </li>
</ul>
<ul style="text-align: justify;">
<li>    Call Graph </li>
</ul>
<ul style="text-align: justify;">
<li>Static Instrumentation </li>
</ul>
<ul style="text-align: justify;">
<li>Permission Analysis </li>
</ul>
<ul style="text-align: justify;">
<li>Dalvik codes  </li>
</ul>
<ul style="text-align: justify;">
<li>Smali codes  </li>
</ul>
<ul style="text-align: justify;">
<li>Java codes  </li>
</ul>
<ul style="text-align: justify;">
<li>APK Information  </li>
</ul>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
This  is a guide to get <b>APKInspector</b> running on your own computer. The latest  version is tested on Ubuntu 10.10 and Ubuntu 11.04.  </div>
<ol style="text-align: justify;">
<li>Download the latest version of <b>APKInspector</b> via GIT </li>
<li>Run “./Install.sh” </li>
<li>Test if APKInspector can boot correctly, go to the directory of “<b>APKInspector</b>”, run “python StartQT.py”. </li>
</ol>
<h3 style="text-align: justify;">
<a href="http://www.blogger.com/null" name="What’s_new?"></a></h3>
<h3>
Download ::</h3>
<b>Windows or Linux ::</b> <a href="http://apkinspector.googlecode.com/files/apkinspector.Beta.zip" target="_blank">APKInspector Beta</a><br />
<b>Source :: </b><a href="http://code.google.com/p/apkinspector/">http://code.google.com/p/apkinspector/</a>

APKinspector (Android Application Analysis) :: Tools

APKinspector is a powerful GUI tool for analysts to analyze the Android applications. The goal of this project is to aide analysts a...

Moblie Sandbox (Malware Analysis) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_qbvIc8E9v5X4r0t44FgOmDqC7zmSCQI18Co_RwJhj0LT7b4V-Fj-eVHPAknjUafduiYnS9pLdD13ccoRx_BiMGYy_llqPPE47AkWGQqbljQmA3IhxZeudMKZ9SsaZtPxKZpIvhO9NBXn/s1600/Mobile+Sandbox+Logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Mobile Sandbox Logo" border="0" height="146" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_qbvIc8E9v5X4r0t44FgOmDqC7zmSCQI18Co_RwJhj0LT7b4V-Fj-eVHPAknjUafduiYnS9pLdD13ccoRx_BiMGYy_llqPPE47AkWGQqbljQmA3IhxZeudMKZ9SsaZtPxKZpIvhO9NBXn/s400/Mobile+Sandbox+Logo.png" title="Mobile Sandbox Logo" width="400" /></a></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Mobile-Sandbox</b>.com is part of the <b>MobWorm</b> project and provides<b> static and dynamic malware analysis</b> for Android OS smartphones.<br />
<b>Mobile Sandbox</b> provides static analysis of <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> images with an easy accessible <a href="http://www.toolwar.com/search/label/Web" target="_blank">web</a> interface for submission.<br />
This  service is still under continuous development and is run purely as a  research tool and a best effort service. We reserve the right to take it  down at any point for maintenance or other reasons.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Online Website ::<a href="http://www.blogger.com/goog_1673190333"> </a></b><a href="http://mobilesandbox.org/">http://mobilesandbox.org/</a></div>

Moblie Sandbox (Malware Analysis) :: Tools

Mobile-Sandbox .com is part of the MobWorm project and provides static and dynamic malware analysis for Android OS smartphones. Mob...

Droidbox (Dynamic Analysis of Android Application) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxjcKyHHA4pdNe2hL5YdmmobKmzVoyS5GUB_R3hBEykHcJucVuhf-2b6P080HXYZLvhYkKrx72b8ItbCDvaHvF2k88KX0z9AUrNJDhUbtv5x6paMTNG69Uu7N3-KIKP4kOzHAPV20Ux3qv/s1600/droidbox+analysis.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Droidbox Analysis" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxjcKyHHA4pdNe2hL5YdmmobKmzVoyS5GUB_R3hBEykHcJucVuhf-2b6P080HXYZLvhYkKrx72b8ItbCDvaHvF2k88KX0z9AUrNJDhUbtv5x6paMTNG69Uu7N3-KIKP4kOzHAPV20Ux3qv/s400/droidbox+analysis.png" title="Droidbox Analysis" width="400" /></a></div>
<br />
<div style="text-align: justify;">
<b>DroidBox </b>is developed to offer <b>dynamic analysis of Android  applications</b>. The following information is shown in the results,  generated when analysis is ended:   </div>
<ul style="text-align: justify;">
<li>Hashes for the analyzed package </li>
<li>Incoming/outgoing network data </li>
<li>File read and write operations </li>
<li>Started services and loaded classes through DexClassLoader </li>
<li>Information leaks via the network, file and SMS </li>
<li>Circumvented permissions </li>
<li>Cryptography operations performed using <a href="http://www.toolwar.com/search/label/Android" target="_blank">Android</a> API </li>
<li>Listing broadcast receivers </li>
<li>Sent SMS and phone calls </li>
</ul>
<div style="text-align: justify;">
Additionally,  two images are generated visualizing the behavior of the package. One  showing the temporal order of the operations and the other one being a  treemap that can be used to check similarity between analyzed packages. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorial :: </h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/E-3s7ZfjTsA?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="http://droidbox.googlecode.com/files/droidbox4.1.1.tar.gz" target="_blank">Droidbox 4.1.1</a>
<b>Source :: </b> <a href="http://code.google.com/p/droidbox/">http://code.google.com/p/droidbox/</a></div>

Droidbox (Dynamic Analysis of Android Application) :: Tools

DroidBox is developed to offer dynamic analysis of Android applications . The following information is shown in the results, generated...

TamoGraph Site Survey (Wireless site survey) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="tamograph logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhf9PT_SSVfHD_K9wUBzLvVaeC3T3HU0lxshTZu6s_jhgnsMSqKMrn4U75ySHPHDnhaODmeTaNACxvIhYp_htUmKQY7Jf1JNt4jvNPXWcJjSOvPMJVKDdnAPh6OaQuzJRC9qnidD8Tb_Km7/s1600/Tamograph+tutorial.png" title="tamograph logo" /></div>
<b>TamoGraph</b> is a powerful and user-friendly <b>wireless site survey software tool</b> for <b>collecting</b>, <b>visualizing</b>, and <b>analyzing 802.11 a/b/g/n/ac Wi-Fi data</b>.  Wireless network deployment and maintenance requires the use of a  professional RF site survey tool that facilitates otherwise  time-consuming and very complex tasks, such as ongoing analysis and  reporting of <b>signal strength</b>, <b>noise</b> and <b>interference</b>, <b>channel allocation</b>, <b>data rates</b>, etc.</div>
<div style="text-align: justify;">
<a href="http://www.tamos.com/products/wifi-site-survey/tour.php" title=""></a>By using TamoGraph, businesses can dramatically <b>reduce the time and costs</b> that are involved in deploying and maintaining Wi-Fi networks and <b>improve network performance</b> and coverage in all kinds of environments: office buildings, airports, cafes, malls, or open space areas.</div>
<div style="clear: left; text-align: justify;">
</div>
<h3 style="text-align: justify;">
Key Features</h3>
<ul style="text-align: justify;">
<li>Simple and fast data collection</li>
<li>Passive, active, and predictive surveys</li>
<li>Spectrum analysis</li>
<li>Comprehensive WLAN analysis with easy-to-understand visualization of  signal level, interference, access point coverage areas, data rates,  network issues, etc.</li>
<li>Automatic access point location</li>
<li>Detailed information about every access point: channel, maximum data rate, vendor, encryption type, etc.</li>
<li>Full support of 802.11ac, as well as 802.11a, 802.11b, 802.11g, and 802.11n networks</li>
<li>GPS-assisted outdoor surveys</li>
<li>Detailed reporting in PDF and HTML formats</li>
<li>Attractive, competitive pricing</li>
</ul>
<h3 style="text-align: justify;">
Why to Perform a Site Survey</h3>
<div style="text-align: justify;">
<img align="left" alt="Click for more screen shots" border="0" height="210" hspace="0" src="http://www.tamos.com/i/tg_shot_new.png" style="margin-right: 10px;" title="Click for more screen shots" vspace="0" width="250" />In  a word, wireless site surveys are necessary because radio wave  propagation is difficult to predict, especially in non-open space  environments. It is virtually impossible to consider all the variables  that might affect the health and performance of your WLAN. Changing  conditions, even something as seemingly minor as a notebook equipped  with a legacy 802.11g adapter that your new employee connected to the  office wireless network, might seriously impact the WLAN performance. In  addition, considering the wide proliferation of wireless  infrastructure, factors such as interference from nearby WLANs play a  very important role. This is why regular site surveys that are conducted  with a professional tool are important.</div>
<h3 style="clear: both; text-align: justify;">
When to Perform a Site Survey</h3>
<div style="text-align: justify;">
<b>Pre-deployment surveys</b>: At this stage, a site survey is  necessary in order to verify that the network plan works well in a  real-world environment. Placement of temporary access points and a quick  survey of the resulting WLAN characteristics allow an engineer to  fine-tune AP and antennae placement, determine the optimal number and  types of APs and antennae, and avoid poor coverage zones.</div>
<div style="text-align: justify;">
<b>Post-deployment surveys</b>: Once a WLAN has been deployed, a  complete verification site survey is necessary to ensure that the WLAN  performance and coverage meet the design requirements. At this stage,  the Wi-Fi equipment placement is finalized and a site survey report  should be generated so that the historical records can be accessed at  any time in the future.</div>
<div style="text-align: justify;">
<b>Regular, ongoing surveys</b>: Maintaining high performance and  coverage requires regular "check-up" surveys.  New users, new equipment,  site expansion, neighboring WLANs, and other factors can adversely  affect your WLAN. It should be monitored on a regular basis.</div>
<h3 style="text-align: justify;">
Who Needs TamoGraph</h3>
<ul style="text-align: justify;">
<li>WLAN and IT administrators</li>
<li>Wireless service providers</li>
<li>Wi-Fi equipment vendors</li>
<li>Consultants</li>
</ul>
<h3 style="text-align: justify;">
System Requirements</h3>
<div style="text-align: justify;">
TamoGraph runs on Microsoft Windows XP, Windows Vista, Windows 7,  Windows 8, Windows Server 2003, Windows Server 2008, and Windows Server  2012. Both 32- and 64-bit versions are supported. You can also perform Wi-Fi site surveys using MacBooks.  TamoGraph requires a compatible wireless network adapter. To view the  list of the adapters that have been tested and are compatible with  TamoGraph, click on the link below:<br />
<br />
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/j0yhPM6cNgo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
</h3>
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://www.tamos.com/bitrix/redirect.php?event1=download&event2=tamograph&event3=&goto=/files/tg4.zip" target="_blank">TamoGraph (Evaluation Version)</a><br />
<b>Official Site :: </b><a href="http://www.tamos.com/" target="_blank">http://www.tamos.com/ </a><b>
</b></div>

TamoGraph Site Survey (Wireless site survey) :: Tools

TamoGraph is a powerful and user-friendly wireless site survey software tool for collecting , visualizing , and analyzing 802.11 a/b/g/...

Commview (Network Monitor and Analyzer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj325VnPYeEK6ly4CYJXLQZBCnGpXso07Hh__zhit87MylbBCCkFqkhrv2USEX8QJ3ErjhZ8vvoiSFuI52w7VRvAyehbHNdHZTsxguVjHscq6YZUH9TH2Eyrq9_zwLaIzKzsGWI8hbWxTRt/s1600/Commview+for+wifi+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Commview network analyzer screenshot" border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj325VnPYeEK6ly4CYJXLQZBCnGpXso07Hh__zhit87MylbBCCkFqkhrv2USEX8QJ3ErjhZ8vvoiSFuI52w7VRvAyehbHNdHZTsxguVjHscq6YZUH9TH2Eyrq9_zwLaIzKzsGWI8hbWxTRt/s400/Commview+for+wifi+screenshot.jpg" title="Commview network analyzer screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>CommView</b> is a powerful <b><a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> monitor</b> and <b>analyzer</b>  designed for LAN administrators, security professionals, network  programmers, home users…virtually anyone who wants a full picture of the  traffic flowing through a PC or LAN segment. Loaded with many  user-friendly features, <b>CommView </b>combines performance and flexibility  with an ease of use unmatched in the industry.   </div>
<div style="text-align: justify;">
This application captures every packet on the wire to display important information such as a <b>list of <a href="http://www.toolwar.com/search/label/Packet" target="_blank">packets</a> and network connections</b>, vital <b>statistics</b>, protocol distribution <b>charts</b>,  and so on. You can examine, save, filter, import and export captured  packets, view <a href="http://www.toolwar.com/search/label/Protocol" target="_blank">protocol</a> decodes down to the lowest layer with <b>full <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a></b> of over 70 widespread protocols. With this information, <b>CommView</b> can help you <b>pinpoint network problems</b> and troubleshoot software and hardware. </div>
<div style="text-align: justify;">
CommView includes a <b>VoIP</b> analyzer for in-depth analysis, recording, and playback of SIP and H.323 voice communications. </div>
<div style="text-align: justify;">
<a href="http://www.tamos.com/upload/iblock/b1486ecd9d485e6e0c1aaa85376617e8.png" id="screenshots" rel="lightbox[shots]" title=""></a>CommView  runs on Windows XP / Vista/ 7 / 8 or <a href="http://www.toolwar.com/search/label/WIndows" target="_blank">Windows</a> Server 2003 / 2008 / 2012  (both 32- and 64-bit versions). It requires a 10/100/1000 Mbps Ethernet,  Wireless Ethernet, or Token Ring network card, or a standard dial-up  adapter. For <b>remote monitoring tasks</b>, you can use our special, optional add-on for CommView: CommView Remote Agent.  It allows CommView users to capture network traffic on any computer  where Remote Agent is running, regardless of the computer's physical  location. This powerful and unique technology broadens your monitoring  range: you are no longer limited by your LAN segment or personal  computer. </div>
<h3 style="text-align: justify;">
How can a network analyzer help me? ::</h3>
<div style="text-align: justify;">
If you are a seasoned professional, you definitely know the answer.  Managing a LAN, creating network-oriented software, or performing a  security audit have one thing in common: You're blind without a good  network monitor. Every day, it helps you <b>maintain efficient network data transmission</b>, <b>test firewalls</b> and <a href="http://www.toolwar.com/search/label/IDS" target="_blank"><b>intrusion detection systems</b></a>, or <b>identify problems</b>  with network-based applications. And there is an important economic  reason behind using a network analyzer: it costs a fraction of the price  of information, time, software, and hardware that may potentially be  lost or wasted by <i>not</i> using a network analyzer. A number of <b>case studies</b> describe real-world applications of CommView  in business, government, and education sectors.  </div>
<div style="text-align: justify;">
If you are new to networking, you'll find CommView extremely  useful for understanding how the Internet and your LAN work. Being a  network analyzer (also commonly referred to as a <i>packet analyzer, network monitor, or packet sniffer</i>), it captures and decodes network traffic and makes sense of it, allowing you to <b>see what, where, and how information leaves and enters your computer</b> -- which is critically important for a secure Internet experience. The Online Tutorial is an excellent resource for learning about the many exciting features CommView offers.   </div>
<div style="text-align: justify;">
Be sure to read our white paper, Promiscuous <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">Monitoring</a> in Ethernet and <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">Wi-Fi</a> Networks,  that examines the problems related to the deployment and usage of  software-based network monitoring solutions in wired and wireless LANs.  It demonstrates the methods of achieving network traffic visibility in  various network configurations that include hubs, switches, routers,  etc.  </div>
<div style="text-align: justify;">
No matter what user category you belong to, you can be certain  that CommView is the right choice for your network monitoring solution.  </div>
<h3 style="text-align: justify;">
What you can do with CommView ::</h3>
<ul class="bullet" style="text-align: justify;">
<li>View detailed IP connections statistics: IP addresses, ports, sessions, etc.  </li>
<li>Reconstruct TCP sessions.  </li>
<li>Map packets to the application that is sending or receiving them. </li>
<li>View protocols distribution, bandwidth utilization, and network nodes charts and tables.  </li>
<li>Generate traffic reports in real time. </li>
<li>Browse captured and decoded packets in real time.  </li>
<li>Search for strings or hex data in captured packet contents.  </li>
<li>Import and export packets in Sniffer®, EtherPeek™, AiroPeek™,  Observer®, NetMon, and Tcpdump formats, export packets in hex and text  formats.  </li>
<li>Configure alarms that can notify you about important events,  such as suspicious packets, high bandwidth utilization, unknown  addresses, etc. </li>
<li>Create your own plug-ins for decoding any protocol. </li>
<li>Exchange data with your application over TCP/IP. </li>
<li>Export any IP address to SmartWhois for quick, easy IP lookup.  </li>
<li>Capture loopback traffic. </li>
</ul>
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/hdE-s_SQl50?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
<b>Windows ::</b> 
<a href="http://www.tamos.com/bitrix/redirect.php?event1=download&event2=commview&event3=cv6&goto=/files/cv6.zip" target="_blank">Commview v6.5 (Trial Version)</a><b><br /></b><br />
<b>Official Website :: </b><a href="http://www.tamos.com/products/commview/">http://www.tamos.com/products/commview/</a>

Commview (Network Monitor and Analyzer) :: Tools

CommView is a powerful network monitor and analyzer designed for LAN administrators, security professionals, network programmers, h...

Commview for WiFi (Wireless Network Monitor and Analyzer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifqWsa_cgm-7HH4xzL0ejeSIshghYPqKMYXdz_SA8Nh8J_E8hKyYR30mBv-is_Bda0EYIY21YAhcIHM_o1E4OKOX6zA07C2ILllcbNYvJdc5nxQ_ksR_go6h9NnucLa_JdOVqRjyE0Pnrb/s1600/Commview+for+wifi+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Commview for WiFi screenshot" border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifqWsa_cgm-7HH4xzL0ejeSIshghYPqKMYXdz_SA8Nh8J_E8hKyYR30mBv-is_Bda0EYIY21YAhcIHM_o1E4OKOX6zA07C2ILllcbNYvJdc5nxQ_ksR_go6h9NnucLa_JdOVqRjyE0Pnrb/s400/Commview+for+wifi+screenshot.jpg" title="Commview for WiFi screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>CommView for WiFi</b> is a powerful <b>wireless <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> monitor and <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyzer</a></b>  for 802.11 a/b/g/n/ac networks. Loaded with many user-friendly  features, <b>CommView for WiFi </b>combines performance and flexibility with an  ease of use unmatched in the industry.  </div>
<div style="text-align: justify;">
<b>CommView for WiFi </b>captures every <a href="http://www.toolwar.com/search/label/Packet" target="_blank">packet </a>on the air to display important information such as the list of <b>access points</b> and <b>stations</b>, per-node and per-channel <b>statistics</b>, <b>signal strength</b>, a list of packets and <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> <b>connections</b>, protocol distribution <b>charts</b>,  etc. By providing this information, CommView for WiFi can help you view  and examine packets, pinpoint network problems, and troubleshoot  software and hardware. </div>
<div style="text-align: justify;">
<a href="http://www.tamos.com/upload/iblock/ac79f4ac4ad9ee81c2f0fc2987267948.png" id="screenshots" rel="lightbox[shots]" title=""></a>CommView for WiFi includes a <b>VoIP</b> module for in-depth analysis, recording, and playback of SIP and H.323 voice communications. </div>
<div style="text-align: justify;">
Packets can be decrypted utilizing user-defined <b>WEP or WPA-PSK</b> keys and are decoded down to the lowest layer. With <b>over 70 supported protocols</b>,  this network analyzer allows you to see every detail of a captured  packet using a convenient tree-like structure to display protocol layers  and packet headers. Additionally, the product provides an open  interface for plugging in custom decoding modules.   </div>
<div style="text-align: justify;">
A number of <b>case studies</b> describe real-world applications of <b>CommView for WiFi</b> in business, government, and education sectors. </div>
<div style="text-align: justify;">
<b>CommView for WiFi</b> is a comprehensive and affordable tool for <a href="http://www.toolwar.com/search/label/Wireless" target="_blank">wireless</a> LAN administrators, security professionals, network  programmers, or anyone who wants to have a full picture of the WLAN  traffic. This application runs on <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> XP / Vista/ 7 / 8 or Windows  Server 2003 / 2008 / 2012 (both 32- and 64-bit versions) and requires a  compatible wireless network adapter. You can also run CommView for WiFi on Macs. To view the list of the adapters that have been tested and are compatible with CommView for WiFi, click on the link below: </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<span class="subtitletext">What you can do with <b>CommView for WiFi ::</b></span>  </div>
<ul style="text-align: justify;">
<li>Scan the air for WiFi stations and access points.  </li>
<li>Capture 802.11a, 802.11b, 802.11g, 802.11n, and 802.11ac WLAN traffic.  </li>
<li>Specify WEP or WPA keys to decrypt encrypted packets.  </li>
<li>View detailed per-node and per-channel statistics.  </li>
<li>View detailed IP connections statistics: IP addresses, ports, sessions, etc.  </li>
<li>Reconstruct TCP sessions.  </li>
<li>Configure alarms that can notify you about important events,  such as suspicious packets, high bandwidth utilization, unknown  addresses, rogue access points, etc.  </li>
<li>View protocol "pie" charts.  </li>
<li>Monitor bandwidth utilization.  </li>
<li>Browse captured and decoded packets in real time.  </li>
<li>Search for strings or hex data in captured packet contents.  </li>
<li>Log individual or all packets to files.  </li>
<li>Load and view capture files offline.  </li>
<li>Import and export packets in Sniffer®, EtherPeek™, AiroPeek™, Observer®, NetMon, Tcpdump, hex, and text formats.  </li>
<li>Export any IP address to SmartWhois for quick, easy IP lookup. </li>
<li>Capture data from multiple channels simultaneously using several USB adapters. </li>
<li>Capture A-MPDU and A-MSDU packets. </li>
<li>Simulate access points.</li>
<li>And much more! </li>
</ul>
<h3>
Tutorials :: </h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/pkXEa5TKlCo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
</h3>
<h3>
Download :: </h3>
<b>Windows ::</b> <a href="http://www.tamos.com/bitrix/redirect.php?event1=download&event2=commwifi&event3=&goto=/files/ca7.zip" target="_blank">Commview for WiFi v7 (Evaluation Version)</a> <b> </b>
<b>Official Website ::</b> <a href="http://www.tamos.com/products/commwifi/">http://www.tamos.com/products/commwifi/</a>

Commview for WiFi (Wireless Network Monitor and Analyzer) :: Tools

CommView for WiFi is a powerful wireless network monitor and analyzer for 802.11 a/b/g/n/ac networks. Loaded with many user-friendly ...

SILICA (WiFi Penetration Testing) :: Tools

<div style="text-align: justify;">
<span style="font-size: small;"></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3Pvv_IBiRa-8oX-3aa_2A22D5nvUsowumkAz3fTkG5t9hmCiUfG5XBQ9K7MtHa4Kch16v2V0fOiVRZCFh1GtfuGsYF9YsTitnsPUXCPQgDqqoijMqSka4DOSumJJFHujYBuhicQzLzSR-/s1600/Silica+Wireless+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Silica Wireless Screenshot" border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3Pvv_IBiRa-8oX-3aa_2A22D5nvUsowumkAz3fTkG5t9hmCiUfG5XBQ9K7MtHa4Kch16v2V0fOiVRZCFh1GtfuGsYF9YsTitnsPUXCPQgDqqoijMqSka4DOSumJJFHujYBuhicQzLzSR-/s400/Silica+Wireless+screenshot.png" title="Silica Wireless Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<span style="font-size: small;"><b>SILICA</b> is a tool for hacking or <i>Wi-Fi penetration testing</i>. Understanding the <a href="http://www.toolwar.com/search/label/Vulnerability" target="_blank">vulnerabilities</a> of your <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">WiFi</a> network can be challenging as users can easily create networks
on demand, or even perhaps unintentionally. But as recent events have demonstrated, scanning your <i>WiFi
network</i> is an important part of understanding your <a href="http://www.toolwar.com/search/label/Security" target="_blank">security </a>posture.</span></div>
<div style="text-align: justify;">
<span style="font-size: small;">
Most vulnerability assessment tools
simply take their current network scanners and point them at the wireless infrastructure. This approach does not
give you the information that is unique to <a href="http://www.toolwar.com/search/label/Wireless" target="_blank">wireless </a>networks. Immunity has built the first automated, WiFi
specific, vulnerability assessment and penetration tool.</span></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
Unlike traditional scanners that merely identify possible
vulnerabilities, <b>SILICA</b> determines the true risk of a particular
access point. <b>SILICA</b> does this by unintrusively leveraging
vulnerabilities and determining what assets behind the
vulnerable access point can be compromised.</div>
<div style="text-align: justify;">
Additionally while traditional <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanners</a> can enumerate the vulnerabilities of
a particular target, they cannot evaluate whether a mitigating
control is in place on the target or in the surrounding environ-
ment. With<b> SILICA</b>’s unique methodology it can report on
whether vulnerability can be successfully exploited.</div>
<div style="text-align: justify;">
<b>More than simple scanning, the benefits of using SILICA include:</b></div>
<div style="text-align: justify;">
1) Improved security posture<br />
2) Simplified trouble shooting<br />
3) <a href="http://www.toolwar.com/search/label/Network" target="_blank">Network</a> mapping<br />
4) Create real threat profiles and vulnerability assessments<br />
5) Build WiFi risk and vulnerability analysis for PCI, SOX<br />
6) Rogue access point detection<br />
7) Auditing wireless client security</div>
<h3 style="text-align: justify;">
<span style="font-size: small;">With SILICA You Can ::</span></h3>
<div style="text-align: justify;">
<span style="font-size: small;">1. Recover WEP, WPA 1,2 and LEAP keys<br />2. Passively hijack web application sessions for email, social networking and Intranet sites.<br />3. Map a wireless network and identify its relationships with associated clients and other access points.<br />4. Identify vendors, hidden SSIDs and equipment passively.<br />5. Scan and break into hosts on the network using integrated CANVAS exploit modules and commands to recover screenshots, password hashes and other sensitive information.<br />6. Perform man-in-the-middle attacks to find valuable information exchanged between hosts.<br />7. Generate reports for wireless and network data.<br />8. Hijack wireless client connections via access point impersonation.<br />9. Passively inject custom content into client's web sessions.<br />10. Take full control of wireless clients via CANVAS's client-side exploitation framework (clientD).<br />11. Decrypt and easily view all WEP and WPA 1/2 traffic.</span></div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<b>Videos :: </b><a href="http://www.immunitysec.com/products-silica.shtml" target="_blank">Silica Videos Tutorials</a> </div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://downloads.immunityinc.com/SILICA_VM.zip" target="_blank">SILICA_VM</a></div>
<div style="text-align: justify;">
<span style="font-size: small;"></span></div>
<div style="text-align: justify;">
</div>

SILICA (WiFi Penetration Testing) :: Tools

SILICA is a tool for hacking or Wi-Fi penetration testing . Understanding the vulnerabilities of your WiFi network can be challengin...

WiFinger (Wireless LAN Detection Spoofing Detection) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVDj7Y0NDoDy9HMBWONTX8N5TJRzUxRigF40NKMtb4g3YHnm7mFFbvSgmvtBBe0RA6HYGodlx5K4_auWXunr9miihTF44zDK4JEAuO4hp0yGplgNBxyMJvjlbZYIKoCfAjIHxGUxmFgyYx/s1600/wifinger.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WiFinger" border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVDj7Y0NDoDy9HMBWONTX8N5TJRzUxRigF40NKMtb4g3YHnm7mFFbvSgmvtBBe0RA6HYGodlx5K4_auWXunr9miihTF44zDK4JEAuO4hp0yGplgNBxyMJvjlbZYIKoCfAjIHxGUxmFgyYx/s320/wifinger.jpg" title="WiFinger" width="320" /></a></div>
<div style="text-align: justify;">
<b>WiFinger </b>was planed to become the ﬁrst available <i>wireless</i> <i>LAN<a href="http://www.toolwar.com/search/label/Spoofer" target="_blank"> spooﬁng</a> detection tool</i>. <b>WiFinger</b> is a passively identifies wireless access points based on matching the
 Information Elements in their <b>beacon packets </b>against a fingerprint 
database. It is written in <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> and uses Scapy, and has been tested in
 <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>.
</div>
<div style="text-align: justify;">
Currently we only have a handful of signatures, so if you want to contribute to this tool, here’s what you can do:</div>
<ol style="text-align: justify;">
<li>Get your access point and enable WPA and WPS (if supported).</li>
<li>Capture the beacon frames that your access point is broadcasting and save them to a pcap file.</li>
<li>Send us the pcap file along with as much information about the 
access point as you can (make, model, <a href="http://firmware/" target="_blank">firmware</a> version, hardware 
revision, ESSID and BSSID).</li>
</ol>
<h3>
 </h3>
<h3>
Download ::</h3>
<b>Linux :: </b><a href="http://www.sourcesec.com/Lab/wifinger.tar.gz" target="_blank">WiFinger.tar.gz</a> <br />
<b>Official Website :: </b><a href="http://wifinger.sourceforge.net/">http://wifinger.sourceforge.net/</a>

WiFinger (Wireless LAN Detection Spoofing Detection) :: Tools

WiFinger was planed to become the ﬁrst available wireless LAN spooﬁng detection tool . WiFinger is a passively identifies wireless ac...

Haraldscan (Bluetooth Scanner) :: Tools

<div class="separator" style="clear: both; text-align: center;">
 <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSyj8NI7RbwtmH4bmwqJHa2NAn-lvlBdx_2YfPB-G4GM7b73kAnWg6As2qAAb9eXS7Ge4Rhyphenhyphenr7CGuhYg3stwxHyxN1-_i7aSk1Hn_FT6-dE8i3haJJbza3brYB_TOoXTAyixlZBPEFnnVi/s1600/Harald+Scan+Screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Harald Scan Screenshot" border="0" height="153" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSyj8NI7RbwtmH4bmwqJHa2NAn-lvlBdx_2YfPB-G4GM7b73kAnWg6As2qAAb9eXS7Ge4Rhyphenhyphenr7CGuhYg3stwxHyxN1-_i7aSk1Hn_FT6-dE8i3haJJbza3brYB_TOoXTAyixlZBPEFnnVi/s400/Harald+Scan+Screenshot.png" title="Harald Scan Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>Harald Scan </b>is a <b>Bluetooth Scanner</b> for <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a> and Mac OS X. <b>Harald Scan</b> is  able to determine Major and Minor device class of device, as well as  attempt to resolve the device's <b>MAC address</b> to the largest known  <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">Bluetooth </a>MAC address Vendor list. </div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<b>Installation :: </b><a href="http://code.google.com/p/haraldscan/wiki/Installation" target="_blank">Click Here  </a></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Mac :: </b><a href="http://haraldscan.googlecode.com/files/haraldscan-osx-0.42.tar.gz" target="_blank">HaraldScan-osx-0.42</a></div>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://haraldscan.googlecode.com/files/haraldscan-dist-32-0.42.tar.gz" target="_blank">Haraldscan-dist-32-0.42</a></div>

Haraldscan (Bluetooth Scanner) :: Tools

Harald Scan is a Bluetooth Scanner for Linux and Mac OS X. Harald Scan is able to determine Major and Minor device class of device,...

Blue|Smash (Bluetooth Penetration Testing Suite) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAbSu1pJlmWvitiwSQ6VbwDnk9YGXBwiQYxb8jRWOKY83EeuFf8reMEgHAd0wiMs_5B4voq_teB_0YZUKMxghjkcSF1FlCPn0JQTQwdhz0psxua3qc4t1izcLhHPAIIUFma1XcjO6U93xU/s1600/bluesmash+logo.gif" imageanchor="1"><img alt="qBluesmash logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAbSu1pJlmWvitiwSQ6VbwDnk9YGXBwiQYxb8jRWOKY83EeuFf8reMEgHAd0wiMs_5B4voq_teB_0YZUKMxghjkcSF1FlCPn0JQTQwdhz0psxua3qc4t1izcLhHPAIIUFma1XcjO6U93xU/s1600/bluesmash+logo.gif" title="Bluesmash logo" /></a></div>
<div style="text-align: justify;">
<b>Blue|Smash</b> is a free open source <b>Bluetooth Pentest Suite,</b> powered  by <a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a> for <a href="http://www.toolwar.com/search/label/Linux" target="_blank">linux</a>. I built <b>Blue|Smash</b> to aid me in my <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">bluetooth</a>  adventures and thought others might benefit from my work . Here is a  list of some of the tools included. </div>
<ul id="main" style="text-align: justify;">
<li>Sorbo's Front-line Bluetooth sniffer.</li>
<li>A brute-force scanner</li>
<li>Mac address spoofer</li>
<li>Load's of exploits</li>
<li>Autopwn vulnerability checker</li>
<li>CSR Firmware Backup/Updater</li>
</ul>
<h3>
Download ::</h3>
<b>Linux :: </b><a class="name" href="http://sourceforge.net/projects/bluesmash/files/bluesmash/Blue-Smash-v1.0e.tar.gz/Blue-Smash-v1.0e.tar.gz/download" title="Click to download Blue-Smash-v1.0e.tar.gz">Blue-Smash-v1.0e.tar.gz</a><br />
<b>Official Website :: </b> <a class="external free" href="http://bluesmash.sourceforge.net/" rel="nofollow">http://bluesmash.sourceforge.net/</a>

Blue|Smash (Bluetooth Penetration Testing Suite) :: Tools

Blue|Smash is a free open source Bluetooth Pentest Suite, powered by python for linux . I built Blue|Smash to aid me in my bluetooth...

Blooover (J2ME Phone Autditing) :: Tools

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsTpT9cfrEeVdY-n-9KwBEegNMoVSM-KW02xdTM_5zftMZe0MF7XjeQXlKWs_21jAnKaWACK6JxwmHue-4BheAZXFM3vfoX_PrI20ajZNTvLbHyjvuCkSONRBN9o26QhHqh1lhf5AcG7Mh/s1600/blooover+logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Blooover Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsTpT9cfrEeVdY-n-9KwBEegNMoVSM-KW02xdTM_5zftMZe0MF7XjeQXlKWs_21jAnKaWACK6JxwmHue-4BheAZXFM3vfoX_PrI20ajZNTvLbHyjvuCkSONRBN9o26QhHqh1lhf5AcG7Mh/s1600/blooover+logo.png" title="Blooover Logo" /></a></div><div style="text-align: justify;"><b>Blooover</b> is a <i>J2ME Phone Auditing Tool</i>. Since <b>Adam Laurie's</b> BlueSnarf experiment and the subsequent BlueBug experiment it is proven that some <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">Bluetooth</a>-enabled phones have <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> issues. Until now, attackers need laptops for the snarfing of other people's information. Unless attackers do a long-distance-snarf, people would see that there is somebody with a laptop trying to do strange things. <b>Blooover</b> is a proof-of-concept tool that is intended to run on J2ME-enabled cell phones that appear to be comparably seamless. <b>Blooover </b>is a tool that is intended to serve as an audit tool that people can use to check whether their phones and phones of friends and employees are vulnerable.<br />
<br />
Since the application runs on handheld devices and sucks information, it has been called <b>Blooover</b> (derived from <b>Bluetooth Hoover</b>).<br />
<br />
We had some objections to release a tool that actually does a bluebug-attack before eventual victims were not in the position of doing something against it. Now, that Nokia announced a <a href="http://www.toolwar.com/search/label/Firmware" target="_blank">firmware </a>upgrade for their vulnerable models, these objections are no longer present.</div><div style="text-align: justify;"><h3>Tutorial ::</h3><h4>Installation ::</h4>When you intend to install the application, you should be using               a phone that has the Java Bluetooth API implemented. Phones with               this feature are listed on this, very useful page.<br />
Once you downloaded the file, make sure that it is called Bloover.jar               (not Blooover.zip). After this you can either transfer the application               to your phone via (1) the phone software on your pc, or (2) via               Obex Push over Bluetooth or (3) via OTA (over-the-air application               provisioning) which will use your phone's data services.</div><div style="text-align: justify;"><h3>Download ::</h3><b>Jar :: </b><a href="http://trifinite.org/Downloads/Blooover.jar" target="_blank">Blooover.jar </a></div>

Blooover (J2ME Phone Autditing) :: Tools

Blooover is a J2ME Phone Auditing Tool . Since Adam Laurie's BlueSnarf experiment and the subsequent BlueBug experiment it is proven t...

Subscribe to: Posts ( Atom )