ToolWar | Information Security (InfoSec) Tools

XSSYA v2.0 (Cross Site Scripting Vulnerability Confirmation) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="XSSYA" border="0" height="331" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNyLNtuNpGkSYVXv-zl0SWTmpu-N6hsMjZKUMWHY9Yr3-POS5ttLGClLCyeE9UKcizHkGBuH-983P6_jdBjo6CSewy_F_t5UcNwzj63_46CmPuWVQDysRaMutNYvz6cp9a2otmjHFyIcjA/s1600-rw/XSSYA+Screenshot.png" title="XSSYA Screenshot" width="640" /></div>
<br />
<div style="text-align: justify;">
<b>XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation)</b> written in <a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a> scripting language confirm the <a href="http://www.toolwar.com/search/label/XSS" target="_blank">XSS Vulnerability</a> in two method first work by execute the payload encoded to bypass <a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> Application Firewall which is the first method  request and response if it respond 200 it turn to Method 2 which search that payload decoded in web page HTML code if it confirmed get the last step which is execute document.cookie to get the cookie. </div>
<br />
<h3>
Key Features:</h3>
<ul>
<li>Support HTTPS</li>
<li>After Confirmation (execute payload to get cookies)</li>
<li>Can be run in (Windows - Linux)</li>
<li>Identify 3 types of WAF (Mod_Security - WebKnight - F5 BIG IP)</li>
<li>XSSYA Continue Library of Encoded Payloads To Bypass WAF (Web Application Firewall)</li>
<li>Support Saving The Web HTML Code Before Executing</li>
<li>the Payload Viewing the Web HTML Code into the Screen or Terminal</li>
</ul>
<h3>
What's New: </h3>
(XSSYA v 2.0 has more payloads; library contains 41 payloads to enhance detection level XSS scanner is now removed from XSSYA to reduce false positive. URLs to be tested used to not allow any character at the end of the URL except (/ - = -?) but now this limitation has been removed.<br />
<br />
<div style="text-align: justify;">
Custom Payload 1 – You have the ability to Choose your Custom Payload Ex: and you can encode your custom payload with different types of encodings like (B64 – HEX – URL_Encode –- HEX with Semi Columns). (HTML Entities à Single & Double Quote only - brackets – And – or Encode all payload with HTML Entities) This feature will support also XSS vulnerability confirmation method which is you choose you custom payload and custom Encoding execute if response 200 check for same payload decoded in HTM code page. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
HTML5 Payloads XSYSA V2.0 contains a library of 44 HTLM5 payloads XSSYA have a Library for the most vulnerable application with XSS – Cross site scripting and this library counting (Apache – WordPress – PHPmy Admin) If you choose application it give the CVE Number version of Apache which is affected and the link for CVE for more details so it will be easy to search for certain version that is affected with XSS. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
XSSYA has the feature to convert the IP address of the attacker to (Hex, Dword, Octal) to bypass any security mechanism or IPS that will be exist on the target Domain. XSSYA check is the target is Vulnerable to XST (Cross Site Trace) which it sends custom Trace Request and check if the target domain is Vulnerable the request will be like this: </div>
<br />TRACE / HTTP/1.0 <br />Host: demo.testfire.net <br />Header1: < script >alert(document.cookie);<br />
<h3>
Tutorials:</h3>
<b>User Guide:</b> <a href="http://labs.dts-solution.com/xssya-forget-the-browser-for-xss-by-yehia-mamdouh/" target="_blank">Click Here</a><br />
<h3>
Download:</h3>
<b>Python: </b><a href="https://github.com/yehia-mamdouh/XSSYA-V-2.0/archive/master.zip" target="_blank">XSSYA v2.0</a>

XSSYA v2.0 (Cross Site Scripting Vulnerability Confirmation) :: Tools

XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation) written in python scripting language confirm the XSS Vulnerabili...

Distributed Network Attack (DNA) :: Framework

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Distributed Network Attack (DNA)" border="0" height="356" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgN1ZMHUWsjTC9Dt1gSGHwIb7uX_fVP2wEVefcDrl4xAEhFWtrS40MMQJeHNbsyJpHPAyBuMo5re53V-mtj7tDVo_foJL2k5V5G6MGzC34betwn72UCVNwMKUzShO9IwPYFmaiSd_gp0vu3/s1600-rw/Distributed+Network+Attack+(DNA).jpg" title="Distributed Network Attack (DNA)" width="640" /></div>
<b>Distributed Network Attack (DNA)</b> is a new approach to <i>recovering password protected files</i>. 
     In the past, recoveries have been limited to the processing 
     power of one machine. <b>Distributed Network Attack (DNA)</b> uses the power of machines across 
     the <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> or across the world to decrypt <a href="http://www.toolwar.com/search/label/Password" target="_blank">passwords</a>. The DNA 
     Server is installed in a central location where machines running 
     the <b>Distributed Network Attack (DNA)</b> Client can access it over the network. DNA Manager coordinates 
     the attack, assigning small portions of the key search to machines 
     distributed throughout the network. The DNA Client will run 
     in the background, only taking unused processor time. <b>Distributed Network Attack (DNA)</b> is used in many different environments to provide specific,  <b>password <a href="http://www.toolwar.com/search/label/Cracking" target="_blank">cracking</a></b> related functions. <b><i>For example</i></b>, law enforcement and  corporate <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> professionals can use <b>PRTK and DNA</b> in <i>computer  <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensic</a> investigations</i> to access password-protected files. IT  administrators can use <b>DNA</b> to recover system passwords, while individual  users can use PRTK and DNA to recover lost passwords to personal files.  These two products provide access to passwords for a large number of  popular software applications. <b>DNA</b> uses multiple machines across the  network or across the world to conduct key space and dictionary <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attacks</a>.  In many cases, this makes use of time those computers would normally be  idle, saving the cost of additional hardware. Many organizations find  that the cost of additional hardware is justified for a secure,  dedicated password recovery lab. </div>
<div style="text-align: justify;">
<br />
<div class="ui-tabs-panel ui-widget-content ui-corner-bottom" id="dna-features">
<div class="featurewrapper">
<div class="FeatureRow">
<b>Distributed Network Attack® (DNA®) Features ::</b><br />
<ul class="square">
<li>Leverage graphic processing units on Microsoft Windows machines with CUDA-enabled GPUs.</li>
<li>Easy to read Statistics and Graphs</li>
<li>Add user dictionaries</li>
<li>Optimization for password attacks for specific <a href="http://www.toolwar.com/search/label/Language" target="_blank">languages</a></li>
<li>Customize user dictionaries</li>
<li>Stealth client installation functionality</li>
<li>Automatic Client update when updating the DNA Server</li>
<li>Control which clients work on certain jobs</li>
</ul>
</div>
</div>
</div>
<b>DNA® Worker Minimum Requirements :: </b><br />
<ul class="square">
<li>Operating System:</li>
</ul>
<ul class="square"><ul class="square">
<li><a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>® XP/2000</li>
<li>Macintosh OSX 10.3.9/10.4.x</li>
<li><a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a> Red Hat/Fedora Core 4</li>
<li>Solaris</li>
</ul>
</ul>
<ul class="square">
<li>Processor:</li>
</ul>
<ul class="square"><ul class="square">
<li>Intel Pentium® III/P4/AMD Athlon™</li>
<li>Power PC G4/G5</li>
<li>Sparc</li>
</ul>
</ul>
<ul class="square">
<li>RAM: 1 Gb</li>
<li>Hard Disk Space: 40 Gb</li>
</ul>
</div>
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/EJxrRbrf12I?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ghaOJoJ08cw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://marketing.accessdata.com/acton/attachment/4390/u-001a/0/-/-/-/-/" target="_blank">Distributed Network Attack (DNA) version 7.0.0 (.iso)</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.accessdata.com/">http://www.accessdata.com/</a>
</div>

Distributed Network Attack (DNA) :: Framework

Distributed Network Attack (DNA) is a new approach to recovering password protected files . In the past, recoveries have been limi...

FoxAnalysis :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="foxanalysis" border="0" height="224" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVTDAJNO0D95q-mKwQdBNLvakgBNChOBpQ_8FNmp-9XPaB1EP7GnnXjRpGJLVcciK30kxboEHPaEyJ2oM4BBEI-vOw5Rn3pXrlGEDdzrvTeNjtvq4xwfgk94K7aIhI6uXVzqCj3gWENmhf/s640-rw/foxanalysis.jpg" title="foxanalysis" width="640" /></div>
<b>FoxAnalysis Plus</b> is a software tool for <i>extracting, viewing and analysing internet         history</i><b> </b>from the <b>Mozilla Firefox web browser</b>. The main features are described below:     </div>
<div style="text-align: justify;">
  </div>
<div style="text-align: justify;">
<b><span class="heading">Extract History</span>                  ::</b><br />
<span class="description2">Extract history regarding bookmarks, cookies, downloads,                     favicons, form entries, logins, saved sessions and website visits. </span>                 <span class="heading"> </span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b><span class="heading">Case Files</span>                  ::</b><br />
<span class="description2">Each Firefox profile analysed can be saved to a Case file                     for further analysis at a later date. </span>                 <span class="heading"> </span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b><span class="heading">Supports Firefox versions 3 to 24</span>                  ::</b><br />
<span class="description2">Extract history generated from Firefox versions 3 to 24 (new                     versions are added regularly). </span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span class="description2"><b><span class="heading">Cache ::</span></b>                 <br />
<span class="description">The built-in image viewer can be used to view images from                     the cache. Images, web pages and other files from the cache can also be extracted.</span></span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span class="description2"><span class="description"><b><span class="heading">Saved Sessions ::</span></b>                 <br />
Analyse current and last session data such as open windows and tabs, cookies and                 text typed into forms. Session data not displayed within a table can be analysed                 using the tree viewer. </span></span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span class="description2"><span class="description"><b><span class="heading">Web History Timeline ::</span></b>                 <br />
Website visits can be viewed in a navigable timeline structure for easily viewing                 the time and order that websites were visited. </span></span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span class="description2"><span class="description"><b><span class="heading">Web Page Reconstruction ::</span></b>                 <br />
Web pages stored in the cache can be reconstructed using other resource files from                 the cache. This allows the web page to be viewed in the state it was originally                 accessed. A report is also provided summarising how the web page was reconstructed. </span></span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span class="description2"><span class="description"><b><span class="heading">Filtering ::</span></b>                 <br />
Analyse the extracted data with filtering by keyword, date range, download status,                 website visit or selection. Lists of keyword filters can also be saved and loaded. </span></span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span class="description2"><span class="description"><b><span class="heading">Reporting ::</span></b>                 <br />
Generate reports in HTML, CSV and XML format. </span></span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span class="description2"><span class="description"><b><span class="heading">Time Zone and DST Settings ::</span></b>                 <br />
Convert UTC timestamps to any time zone and apply custom daylight saving settings.              </span></span></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
<b><span class="description2"><span class="description">Tutorials ::</span></span></b></h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/eeJBXOGNCi8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
<b><span class="description2"><span class="description"> </span></span></b></h3>
<h3 style="text-align: justify;">
<b><span class="description2"><span class="description">Download ::</span></span></b><span class="description2"><span class="description"> </span></span></h3>
<div style="text-align: justify;">
<span class="description2"><span class="description"><b>Windows ::</b> <a href="http://forensic-software.co.uk/Downloads/FoxAnalysisPlusTrial.aspx" target="_blank">FoxAnalysis Trial</a></span></span></div>
<div style="text-align: justify;">
<span class="description2"><span class="description"><b>Official Website ::</b> <a href="http://forensic-software.co.uk/" target="_blank">http://forensic-software.co.uk/ </a></span></span><span class="description2"> </span></div>

FoxAnalysis :: Tools

FoxAnalysis Plus is a software tool for extracting, viewing and analysing internet history from the Mozilla Firefox web browser...

Juli (MITM) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="MITM Attack Security" border="0" height="305" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO8ISFmjA0ekD7MPO8ICWGwpqxp0xB5sjipk9sIvcZyXydEZ4YA3TdPy0DID6206FpnsQF94cYahJVQlvRI8mFhifxNHnoqQe8lRrQSzD1Nb0FulPIAmHltwTkMP-pCvxsLo32-8Gk8M3K/s1600-rw/Parasite-Attack-MITM.jpg" title="MITM Attack Security" width="640" /></div>
<br />
A simple automated perl script for MiTM ( man-in-the-middle ) attacks. <br />
<h4>
</h4>
<h4>
Requirements:</h4>
<ul class="task-list">
<li>Linux ( I tested it on Ubuntu 14.04 LTS )</li>
<li>Perl</li>
<li>sslstrip <a href="https://github.com/moxie0/sslstrip">https://github.com/moxie0/sslstrip</a>
</li>
<li>arpsoof ( from dsniff can be found here <a href="http://www.monkey.org/%7Edugsong/dsniff/">http://www.monkey.org/~dugsong/dsniff/</a> )</li>
</ul>
<h4>
Usage:</h4>
Script must be runned as a root user<br />

<ul class="task-list">
<li>
sudo juli.pl interface targetip</li>
</ul>
<b>Download:</b><br />
<b>Linux: <a href="https://github.com/em616/Juli" target="_blank">Juli.pl</a></b>

Juli (MITM) :: Tools

A simple automated perl script for MiTM ( man-in-the-middle ) attacks. Requirements: Linux ( I tested it on Ubuntu 14.04 LTS ) Per...

Orbot (Tor for Android Devices) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="orbot logo" border="0" height="312" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5RYmrfY-dbfDYpMMg0kD6ucxTAaijL-WLejZZ5J8cNhrGhCl0Y07Wnk3u8L2K65SE63V51dEeDhwL_hVod55CRBWkisVhoF5PHttLmmDBqNtI-0OLlkc9RkbWIcFGN0qHryBxqCyEOEI-/s640-rw/orbot+logo.png" title="orbot logo" width="640" /></div>
<div style="text-align: justify;">
<b>Orbot</b> is a <b>free proxy app</b> that empowers other apps to use the <i> internet more securely</i>. <b>Orbot</b> uses Tor to <a href="http://www.toolwar.com/search/label/Encryption" target="_blank">encrypt</a> your Internet traffic  and then hides it by bouncing through a series of computers around the  world. <a href="http://www.toolwar.com/search/label/Tor" target="_blank"><b>Tor</b></a> is <a href="http://www.toolwar.com/search/label/Free" target="_blank">free</a> software and an open <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> that helps you defend  against a form of network surveillance that threatens personal freedom  and privacy, confidential business activities and relationships, and  state security known as traffic <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a>.</div>
<div style="text-align: justify;">
<b>Orbot</b> is the only app that creates a truly private internet  connection. As the New York Times writes, “when a communication arrives  from Tor, you can never know where or whom it’s from.” Tor won the 2012  Electronic Frontier Foundation (EFF) Pioneer Award.</div>
<div style="text-align: justify;">
<br />
<b>ACCEPT NO SUBSTITUTES</b>: <b>Orbot</b> is the safest way to use the Internet on  <a href="http://www.toolwar.com/search/label/Android" target="_blank">Android</a>. Period. <b>Orbot</b> bounces your encrypted traffic several times  through computers around the world, instead of connecting you directly  like <a href="http://www.toolwar.com/search/label/Proxy" target="_blank">VPNs and proxies</a>. This process takes a little longer, but the  strongest privacy and identity protection available is worth the wait.</div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Dcf5sh99ze0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
 </h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Android Play Store ::</b> <a href="https://market.android.com/details?id=org.torproject.android" target="_blank">Orbot</a> </div>
<div style="text-align: justify;">
<b>Direct Download :: </b><a href="https://guardianproject.info/releases/orbot-latest.apk" target="_blank">Orbot.apk</a></div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
</div>
</div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: left;">
<b>Official Website :: </b><a href="https://guardianproject.info/apps/orbot/">https://guardianproject.info/apps/orbot/</a></div>
<div class="separator" style="clear: both; text-align: left;">
<b>
</b></div>
<b> </b></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>

Orbot (Tor for Android Devices) :: Tools

Orbot is a free proxy app that empowers other apps to use the internet more securely . Orbot uses Tor to encrypt your Internet traff...

Capstone (Disassembly Framework) :: Framework

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="capstone disassembler" border="0" height="320" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWQQc6jFFxBdew0SfkMRlTH0TSgVUzxWMCN6bSY2mxV-tcDnKFolrpjaOf0Dka2oqp6Dqs2WxUlRC3bh3ktMzdkyxqvc8ahRHCzUCVN4KF4Oz0IbzNy4CjtjcOnIZ_MH9cDNFmxMXRprqN/s320-rw/Capstone+Disassembler.png" title="capstone disassembler" width="320" /></div>
<b>Capstone </b>is a lightweight multi-platform, multi-architecture <a href="http://www.toolwar.com/search/label/Assembler/Disassembler" target="_blank">disassembly</a> <a href="http://www.toolwar.com/search/label/Framework" target="_blank">framework</a>. Our target is to make <b>Capstone</b> the ultimate disassembly engine for binary analysis and <a href="http://www.toolwar.com/search/label/Reverse" target="_blank">reversing</a> in the <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> community.<br />
<h3>
Features</h3>
</div>
<ul style="text-align: justify;">
<li>Support hardware architectures: ARM, ARM64 (aka ARMv8), Mips & X86.</li>
<li>Clean/simple/lightweight/intuitive architecture-neutral API. </li>
<li>Provide details on disassembled instruction (called “decomposer” by others).</li>
<li>Provide some semantics of the disassembled instruction, such as list of implicit registers read & written.</li>
<li>Implemented in pure C language, with bindings for Python, Ruby, OCaml, C#, Java and GO available.</li>
<li>Native support for Windows & *nix (including MacOSX, Linux, *BSD platforms).</li>
<li>Thread-safe by design.</li>
<li>Distributed under the open source BSD license</li>
</ul>
<h3>
 </h3>
<h3>
Tutorials ::</h3>
<b>Text Tutorials :: </b><a href="http://www.capstone-engine.org/documentation.html" target="_blank">Click Here </a><br />
<h3>
Download ::</h3>
<b>Windows ::</b> <a href="http://www.capstone-engine.org/download/1.0/capstone-1.0-win32.zip" target="_blank">Capstone v1 (Win32)</a><br />
<b>Linux :: <a href="http://www.blogger.com/goog_1808671360">C</a></b><a href="http://www.capstone-engine.org/download/1.0/capstone-1.0_i386.deb" target="_blank">apstone-1.0_i386.deb</a><br />
<b>Official Website :: </b><a href="http://www.capstone-engine.org/">http://www.capstone-engine.org/</a><br />
<div class="separator" style="clear: both; text-align: left;">
<a href="http://www.capstone-engine.org/download/1.0/capstone-1.0-win32.zip" target="_blank"></a></div>

Capstone (Disassembly Framework) :: Framework

Capstone is a lightweight multi-platform, multi-architecture disassembly framework . Our target is to make Capstone the ultimate disass...

Mandiant Redline (Memory and File Analysis) :: Tools

<div class="separator" style="clear: both; text-align: center;">
 <img alt="Mandiant Redline Logo" border="0" height="233" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi85inxEf7aGj9rwDfJlLA1TZjt029HkuPRCGRhLSQHEAM3zBvwbuLTQ5KRk0_EUdzGhbt6PbzzhpzYo2kQigms2_eBtiT3rOaRdXb8fjaQlF-7JuBE_st3IAFkZd3E5dxJ-TJdPkeBzB0X/s400-rw/Memoryze+Logo.png" title="Mandiant Redline Logo" width="400" /></div>
<div style="text-align: justify;">
<b>Redline, Mandiant’s</b> premier free tool, provides<i> host investigative</i> 
capabilities to users to find signs of <i>malicious activity through memory
 and file analysis</i>, and the development of a threat assessment profile. 
 With <b>Redline,</b> users can:</div>
<ul style="text-align: justify;">
<li>Thoroughly audit and collect all running processes and drivers 
from <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory</a>, file system metadata, <a href="http://www.toolwar.com/search/label/Registry" target="_blank">registry</a> data, event logs, <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> 
information, services, tasks, and <a href="http://www.toolwar.com/search/label/Web" target="_blank">web</a> history.</li>
<li>Analyze and view imported audit data, including narrowing and 
filtering results around a given timeframe using <b>Redline’s</b> Timeline 
functionality with the TimeWrinkle™ and TimeCrunch™ features.</li>
<li>Streamline memory analysis with a proven workflow for analyzing <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> based on relative priority.</li>
<li>Identify processes more likely worth investigating based on the <b>Redline</b> Malware Risk Index (MRI) score.</li>
<li>Perform Indicator of Compromise (IOC) <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a>. Supplied with a set 
of IOCs, the Redline Portable Agent is automatically configured to 
gather the data required to perform the IOC analysis and an IOC hit 
result review. </li>
</ul>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
In addition, <b>Redline</b> can be used in conjunction with <b>Mandiant for Intelligent Response®(MIR®)</b> and <b>Mandiant for Security Operations™:</b></div>
<div style="text-align: justify;">
</div>
<ul style="text-align: justify;">
<li>Investigators can open audits gathered in Mandiant for 
Intelligent Response (MIR) directly in Redline to quickly identify a 
malicious process and create an IOC based on the analysis. MIR can use 
this IOC to quickly sweep a <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> to identify all other systems 
running the same or similar malware.</li>
<li>Mandiant for Security Operations users can open triage collections 
directly in Redline in order to perform in-depth <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a> allowing the 
user to establish a timeline and the scope of an incident.</li>
</ul>
<b>Mandiant Redline 1.11</b> includes various changes to improve your user 
experience, and adds support for <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> 8 and 2012. A redesigned find 
panel remains open and offers users the ability to search and filter on a
 specific column. You can also filter lists by multiple tags at the same
 time and choose whether to include only items that do or do not have a 
comment. Finally, the Redline Collector now provides beta support for 
gathering Windows 2012 and Windows 8 data..<br />
<br />
<br />
<b>Supported Operating Systems:</b> Windows XP, Windows Vista, Windows 7, Windows 8 (32-bit and 64-bit)<br />
<br />
<h3>
Tutorials ::</h3>
<b>User Guide :: </b><a href="http://www.mandiant.com/library/Redline1.11_UserGuide.pdf">Mandiant Redline 1.11 (PDF)</a><br />
<b>Redline Blog :: </b><a href="https://www.mandiant.com/blog/tag/redline/" target="_blank">Mandiant Redline Blog </a><br />
<br />
<h3>
Download ::</h3>
<b>Windows :: </b><a href="https://www.mandiant.com/library/Redline-1.11.msi" target="_blank">Mandiant Redline v1.11</a><b><br /></b><br />
<b>Official Website ::</b> <a href="https://www.mandiant.com/resources/download/redline">https://www.mandiant.com/resources/download/redline</a>

Mandiant Redline (Memory and File Analysis) :: Tools

Redline, Mandiant’s premier free tool, provides host investigative capabilities to users to find signs of malicious activity throug...

Microsoft's Network Monitor (Capturing and Protocol Analysis of Network Traffic) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuFsGavVKjtg1dEaRPRUk32xdWIKamQW4Z316g0h_uszkMWNGQsKf4s1b6LprmWBYZ5WnOg38bBpcuJjEQQGQuK7HkywR3J1kJzcPIYR7FEZKbW1rI6kIMDrqpJjnmw7Kcbd8Aa_qiQehH/s1600/Microsoft+Network+Monitor+Sceenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Microsoft Network Monitor Screenshot" border="0" height="377" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuFsGavVKjtg1dEaRPRUk32xdWIKamQW4Z316g0h_uszkMWNGQsKf4s1b6LprmWBYZ5WnOg38bBpcuJjEQQGQuK7HkywR3J1kJzcPIYR7FEZKbW1rI6kIMDrqpJjnmw7Kcbd8Aa_qiQehH/s1600-rw/Microsoft+Network+Monitor+Sceenshot.jpg" title="Microsoft Network Monitor Screenshot" width="640" /></a></div>
<div style="text-align: justify;">
<b>Microsoft's Network Monitor</b> is a tools that allow <b>capturing and protocol analysis of network traffic</b>. Network Monitor 3 is a <a href="http://www.toolwar.com/search/label/Protocol" target="_blank">protocol analyzer</a>.  It enables you to capture, to
 view, and to analyze <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> data. You can use it to help troubleshoot 
problems with applications on the network.    This article 
contains download and support information, installation notes, and 
general usage information about Network Monitor 3. Network Monitor 3.4 
is the latest version.</div>
<div style="text-align: justify;">
<b>Network Monitor 3 </b> is a complete overhaul of the earlier Network Monitor 2.<var>x</var> version. Some key features of Network Monitor 3 include the following:</div>
<ul style="text-align: justify;">
<li>Script-based parser model with frequent updates </li>
<li>Concurrent  live capture sessions</li>
<li>Support for Windows 7</li>
<li>Support for 32-bit platforms and for 64-bit platforms </li>
<li>Support for network conversations and process tracking</li>
<li> API to access capture and parsing engine</li>
<li> <a href="http://www.toolwar.com/search/label/Wireless" target="_blank">Wireless</a> Monitor Mode Capturing</li>
</ul>
<div class="toggle-area" style="display: block; text-align: justify;">
<div class="system-requirements">
<div class="supported-os">
<b>Supported Operating System ::</b></div>
<div itemprop="operatingSystems">
<a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> 7, Windows 8, Windows Server 2003 
Service Pack 2, Windows Server 2003 Service Pack 2 x64 Edition, Windows 
Server 2008, Windows Server 2008 R2, Windows Server 2008 R2 for 
Itanium-based Systems, Windows Server 2012, Windows Vista 64-bit 
Editions Service Pack 1, Windows Vista Service Pack 1, Windows XP 
64-bit, Windows XP Service Pack 3
                        </div>
<ul class="htmldetails other-requirements">
Hardware ::
<ul>
<li>1 GHz or greater CPU</li>
<li>1 GB or greater <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory</a></li>
<li>60 MB free hard disk space plus extra room for capture files</li>
</ul>
</ul>
</div>
</div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Installation Instruction :: </b> </div>
<div style="text-align: justify;">
The Network <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">Monitor</a> core engine has been decoupled from the parser set.

To install the full <b>Network Monitor 3.4</b> product:
</div>
<ul style="text-align: justify;">
<li>Run the setup.exe for the platform you are installing.</li>
<li>You will be prompted first to install the core engine. Follow the installation
directions. Make sure you close existing instances of netmon.exe, nmcap.exe
and any running NMAPI applications.</li>
<li>Next you will be prompted to install the parser package. Follow the
installation directions:</li>
</ul>
<div style="text-align: justify;">
<b>
To uninstall the full Network Monitor 3.4 product ::</b></div>
<ul style="text-align: justify;">
<li>Go to Add/Remove Programs in Control Panel</li>
<li>Uninstall both <b>Microsoft Network Monitor 3.4</b> and Microsoft Network Monitor: Network Monitor
Parsers 3.4</li>
</ul>
<b>Network Monitor Blog ::</b> <a href="http://go.microsoft.com/fwlink/?LinkID=92890" target="_blank">Click Here</a><br />
<b>Network Monitor Blog ::</b> <a href="http://go.microsoft.com/fwlink/?LinkID=151800" target="_blank">Click Here</a><br />
<br />
<b>Video Tutorial :: </b> <a href="http://www.youtube.com/watch?v=jsShLK5bhoY" target="_blank">Click Here</a><br />
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: <a href="https://www.microsoft.com/en-in/download/details.aspx?id=4865" target="_blank">Network Monitor 3.4</a> (x86 & x64)</b><a href="http://www.microsoft.com/en-us/download/details.aspx?id=4865" target="_blank"></a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.microsoft.com/en-us/download/details.aspx?id=4865">http://www.microsoft.com/en-us/download/details.aspx?id=4865</a></div>
<div style="text-align: justify;">
<br /></div>
</div>

Microsoft's Network Monitor (Capturing and Protocol Analysis of Network Traffic) :: Tools

Microsoft's Network Monitor is a tools that allow capturing and protocol analysis of network traffic . Network Monitor 3 is a proto...

WAIDPS (Wireless Auditing and IDS/IPS) :: Tools

<div class="MsoNormal" style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiP2brw15uNZM6cni3F7-EtWQHYhj-0aNTw7yRP5neqqvJNHGdMiVN1N_0W3-Viquk330eFmeUtUUvL8svfYNwbfTIeN9EHznj0wezjqVUp-xF_BlO8Gs1EjB_PoXg6gp8JdoTV0ztUiuyz/s1600/WAIDPS.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="281" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiP2brw15uNZM6cni3F7-EtWQHYhj-0aNTw7yRP5neqqvJNHGdMiVN1N_0W3-Viquk330eFmeUtUUvL8svfYNwbfTIeN9EHznj0wezjqVUp-xF_BlO8Gs1EjB_PoXg6gp8JdoTV0ztUiuyz/s1600-rw/WAIDPS.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<span style="font-family: Arial;"><b>WAIDPS</b> (Wireless Auditing, Intrusion Detection and Prevention System) is an open source <b>wireless swissknife</b> written in <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> and work on <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a> environment. This is a multipurpose tools designed for audit (<a href="http://www.toolwar.com/search/label/Penetration" target="_blank">penetration testing</a>) networks, detect wireless intrusion (WEP/WPA/WPS attacks) and also intrusion prevention (stopping station from associating to access point). Apart from these, it will harvest all <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">WiFi</a> information in the surrounding and store in databases. This will be useful when it comes to auditing a <a href="http://www.toolwar.com/search/label/Network" target="_blank">network </a>if the access point is ‘MAC filtered’ or ‘hidden SSID’ and there isn’t any existing client at that moment. </span></div>
<div class="MsoNormal" style="text-align: justify;">
</div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;"><b>WAIDPS</b> may be useful to penetration testers, <a href="http://www.toolwar.com/search/label/Wireless" target="_blank">wireless</a> trainers, law enforcement agencies and those who is interested to know more about wireless auditing and protection. The primarily purpose for this script is to detect intrusion. Once wireless detect is found, it display on screen and also log to file on the attack. Additional features are added to current script where previous WIDS does not have are :</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">automatically save the attack packets into a file</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">interactive mode where users are allow to perform many functions</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">allow user to analyse captured packets</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">load previously saved pcap file or any other pcap file to be examine</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">customizing filters</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">customize detection threshold (sensitivity of IDS in detection)</span></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-align: justify;">
</div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">At present, <b>WAIDPS</b> is able to detect the following wireless attacks and will subsequently add other detection found in the previous WIDS.</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">Association / Authentication flooding</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">Detect mass deauthentication which may indicate a possible WPA attack for handshake </span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">Detect possible WEP attack using the ARP request replay method</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">Detect possible WEP attack using chopchop method</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">Detect possible WPS pin bruteforce attack by Reaver, Bully, etc.</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">Detection of Evil-Twin</span></div>
<div class="MsoNormal" style="margin-left: 0.75in; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Symbol; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;">·<span style="font-family: 'Times New Roman'; font-size: 7pt;">         </span></span><span style="font-family: Arial;">Detection of Rogue Access Point</span></div>
<div class="MsoNormal" style="text-align: justify;">
</div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">The whole structure of the <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">Wireless Auditing</a>, <a href="http://www.toolwar.com/search/label/IDS" target="_blank">Intrusion Detection</a> & <a href="http://www.toolwar.com/search/label/IPS" target="_blank">Prevention System</a> will comprise of </span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">Harvesting WiFi Information         [Done]</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">Intrusion Detection                         [Done]</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">Intrusion Prevention                       [Done]</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">Auditing (Testing network)            [Done]</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">Other additional item include analyzing of packets, display of captured dump, display network barchart and much more.</span></div>
<div class="MsoNormal" style="text-align: justify;">
</div>
<div class="MsoNormal" style="text-align: justify;">
<b><span style="font-family: Arial;">Requirements</span></b></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">No special equipment is required to use this script as long as you have the following :</span></div>
<div class="MsoNormal" style="text-align: justify;">
</div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">   1. Root access (admin)</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">   </span><span style="font-family: Arial;">2. Wireless interface which is capable of monitoring and injection</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">   </span><span style="font-family: Arial;">3. Python 2.7 installed </span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">   </span><span style="font-family: Arial;">4. <a href="http://www.toolwar.com/2013/09/aircrack-ng-12-beta.html" target="_blank">Aircrack-NG suite</a>installed</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">   </span><span style="font-family: Arial;">5. TShark installed</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">   </span><span style="font-family: Arial;">6 TCPDump installed</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: Arial;">   </span><span style="font-family: Arial;">7 Mergecap installed (for joining pcap files)</span></div>
<div style="text-align: justify;">
<span style="font-family: Arial;">   </span><span style="font-family: Arial;">8 xterm  installed</span></div>
<div style="text-align: justify;">
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<b><span style="font-weight: normal;"><span style="font-family: Arial;"><b>Structure of WAIDS’ Display :: </b></span></span></b></div>
<div class="MsoNormal">
<span style="font-family: Arial;">Before starting with the detail description of the whole application, WAIDPS display structures are separated in several parts. For better understanding, the structures are as below.</span></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<b><span style="font-family: Arial;">WiFi-Harvesting Module</span></b></div>
<div class="MsoNormal">
<span style="font-family: Arial;">- Collecting/Storing of Access Points/Stations details and the relationship with each other. [<b>Access Points / Wireless Clients Listing</b>]</span></div>
<span style="font-family: Arial;">- Displaying of unassociated station information and its probe </span></div>
<div style="text-align: justify;">
<span style="font-family: Arial;">[<b>Unassociated Stations</b>]</span> <br />
<div class="MsoNormal">
<span style="font-family: Arial;">- Allowing user to enter MAC addresses / Names to be monitored </span></div>
<div class="MsoNormal">
<span style="font-family: Arial;">[<b>Monitoring Panel</b>]</span></div>
<span style="font-family: Arial;">- Association of stations to access point, station switch from one access point to another, station acting as both a wireless client and access point, etc </span></div>
<div style="text-align: justify;">
<span style="font-family: Arial;">[<b>Association/Connection Alert</b>]</span> <br />
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<b><span style="font-family: Arial;">Intrusion Detection</span></b></div>
<div class="MsoNormal">
<span style="font-family: Arial;">- Capture/Analyzing of packets </span></div>
<div class="MsoNormal">
<span style="font-family: Arial;">- Displaying of Station/Access Point MAC addresses and detected suspicious data count [<b>Suspicious Activity Listing</b>]</span></div>
<div class="MsoNormal">
<span style="font-family: Arial;">- Displaying of analysed WEP/WPA/WPS attack pattern and its detail [<b>Attack Detected</b>]</span></div>
<div class="MsoNormal">
</div>
</div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Screenshots ::  </b><a href="http://syworks.blogspot.in/2014/04/waidps-wireless-auditing-intrusion.html" target="_blank">Click Here</a><br />
<b>Text & Image Tutorial :: </b><a href="http://syworks.blogspot.in/2014/04/waidps-wireless-auditing-intrusion.html" target="_blank">Click Here</a><br />
<b>Installation Tutorial::</b><br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/aGTQAWoeujA?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<span id="goog_894600077"></span><span id="goog_894600078"></span>
</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>More Video Tutorials: </b> <a href="https://www.youtube.com/watch?v=s7kzQqOY3X0&index=2&list=PLrekpjW7JwW-T0CeXP8GwudtJmTJ6KZ8O" target="_blank">Click Here</a></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="https://github.com/SYWorks/waidps/archive/master.zip" target="_blank">WAIDPS</a><b> (.py)</b></div>
<div style="text-align: justify;">
<b>Source ::</b> <a href="https://github.com/SYWorks/waidps" target="_blank">https://github.com/SYWorks/waidps</a> </div>
<div style="text-align: justify;">
<b>Submitted By :: </b>SYChua</div>

WAIDPS (Wireless Auditing and IDS/IPS) :: Tools

WAIDPS (Wireless Auditing, Intrusion Detection and Prevention System) is an open source wireless swissknife written in Python and wo...

Detekt :: Malware Detection Tool against Government Surveillance

<div class="separator" style="clear: both; text-align: justify;">
<img alt="detekt" border="0" height="280" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhev1ECdbJcOGLhQL5rphVoj1Ux8wBh3wGbWoySuzKDc4CdDPi5_A0kU4YBambTUqKZPghRdvmePb2aFihp_n_8vHEbCjhc9MbMcXYyPKs6gK7h0tUCeqyuiR8ONVh-AS7WUIAu_Kv_yhaD/s1600-rw/detekt-1d.png" title="Detekt" width="640" /></div>
<div style="text-align: justify;">
<b>Detekt</b> is a <b>free tool</b> that scans your <b>Windows computer for traces of 
known surveillance spyware</b> used to target and monitor human rights 
defenders and journalists around the world. It is important to underline that if <b>Detekt </b>does not find trace of 
spyware on a computer, it does not necessarily mean that none is 
present. Some spyware will likely be updated in response to the release 
of <b>Detekt </b>in order to avoid detection. In addition, there may be 
existing versions of spyware, from these or other providers, which are 
not detected by this tool.</div>
<div style="text-align: justify;">
In recent years we have witnessed a huge growth in the adoption and 
trade in communication surveillance technologies. Such spyware provides 
the ability to read personal emails, listen-in skype conversations or 
even remotely turn on a computers camera and microphone without its 
owner knowing about it.</div>
<div style="text-align: justify;">
Some of this software is widely available on the 
Internet, while some more sophisticated alternatives are made and sold 
by private companies based in industrialized countries to state law 
enforcement and intelligence agencies in countries across the world.</div>
<div style="text-align: justify;">
There is little to no regulation currently in place to 
safeguard against these technologies being sold or used by repressive 
governments or others who are likely to use them for serious human 
rights violations and abuses.</div>
<div style="text-align: justify;">
<strong>How widely do governments use surveillance technology?</strong></div>
<div style="text-align: justify;">
Governments
 are increasingly using surveillance technology, and targeted 
surveillance in particular, to monitor the legitimate activities of 
human rights activists and journalists. <span>Powerful software 
developed by companies allows governments and intelligence agencies to 
read personal emails, listen-in on Skype conversations or even remotely 
turn on a computers camera and microphone without its owner knowing 
about it.</span></div>
<div style="text-align: justify;">
<span>In many cases, the information they gather 
through those means is used to detain, imprison and even torture 
activists into confessing to crimes. It's impossible,
 however, to give an accurate estimate of how many people are affected 
by this surveillance spyware. This is because the companies that build 
and sell such software market themselves on their ability to hide it 
from users. Recent research has shown that known spyware has been found present in dozens of countries, covering all regions of the world. <b>Detekt</b>
 is the first public tool that will assist activists, journalists and 
civil society groups to scan their computers for spyware.</span></div>
<h3 style="text-align: justify;">
<span>Download:  </span></h3>
<div style="text-align: justify;">
<b><span>Windows:: </span></b><span><a href="https://github.com/botherder/detekt/releases/download/v1.2/detekt.exe" target="_blank">Detekt v1.2</a> (.exe)</span></div>
<div style="text-align: justify;">
<span><b>Source Code:: </b>https://github.com/botherder/detekt/archive/v1.2.zip<b> </b></span></div>
<div style="text-align: justify;">
<span><b>Official Website::</b> https://resistsurveillance.org/</span></div>

Detekt :: Malware Detection Tool against Government Surveillance

Detekt is a free tool that scans your Windows computer for traces of known surveillance spyware used to target and monitor human righ...

NoGoToFail :: Network Traffic Security Testing Tool

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrZyKNhyphenhyphenNN1-cYypGXqoLUErO5y7F-od5ou1fO4m9ViAXljsDDnINyDGBvdk1SGRfYbZnVDNBvg_-b7pOI4JTOSKEGfSxfYai6pY0-f5hP_4TTJuvyLdgBbo3Ef4pUS5ylCqFhZZx2SvwW/s1600/NoGotofail+toolwar.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="272" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrZyKNhyphenhyphenNN1-cYypGXqoLUErO5y7F-od5ou1fO4m9ViAXljsDDnINyDGBvdk1SGRfYbZnVDNBvg_-b7pOI4JTOSKEGfSxfYai6pY0-f5hP_4TTJuvyLdgBbo3Ef4pUS5ylCqFhZZx2SvwW/s1600-rw/NoGotofail+toolwar.jpg" width="640" /></a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Nogotofail</b> is a <b>network security testing tool</b> designed to help developers and
<a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> researchers spot and fix weak TLS/SSL connections and sensitive
cleartext traffic on devices and applications in a flexible, scalable, powerful way.
It includes testing for common SSL certificate verification issues, HTTPS and TLS/SSL
library bugs, SSL and STARTTLS stripping issues, cleartext issues, and more.</div>
<div style="text-align: justify;">
<b>Google</b> is committed to increasing the use of TLS/SSL in all applications and services. But “HTTPS everywhere” is not enough; it also needs to be used correctly. Most platforms and devices have secure defaults, but some applications and libraries override the defaults for the worse, and in some instances we’ve seen platforms make mistakes as well. As applications get more complex, connect to more services, and use more third party libraries, it becomes easier to introduce these types of mistakes.<br />The Android Security Team has built a tool, called <b>nogotofail</b>, that provides an easy way to confirm that the devices or applications you are using are safe against known TLS/SSL vulnerabilities and misconfigurations. <b>Nogotofail</b> works for <a href="http://www.toolwar.com/search/label/Android" target="_blank">Android</a>, iOS, <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>, <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>, Chrome OS, OSX, in fact any device you use to connect to the Internet. There’s an easy-to-use client to configure the settings and get notifications on Android and Linux, as well as the attack engine itself which can be deployed as a router, VPN server, or proxy.<br />We’ve been using this tool ourselves for some time and have worked with many developers to improve the security of their apps. But we want the use of TLS/SSL to advance as quickly as possible. Today, we’re releasing it as an open source project, so anyone can test their applications, contribute new features, provide support for more platforms, and help improve the security of the Internet.</div>
<h3 style="text-align: justify;">
<b>Download ::</b></h3>
<div style="text-align: justify;">
<b>Python:</b> <a href="https://github.com/google/nogotofail/archive/dev.zip" target="_blank">nogotofail</a> (Github)</div>
<div style="text-align: justify;">
<b>Official Website:</b> https://github.com/google/nogotofail</div>

NoGoToFail :: Network Traffic Security Testing Tool

Nogotofail is a network security testing tool designed to help developers and security researchers spot and fix weak TLS/SSL connect...

The Sleuth Kit (TSK - Forensics) :: Framework

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
 <img alt="the sleuth kit logo" border="0" height="166" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPBlwuWRltXOU2hEze6gjFS1OxwMM7HIYQuU4ElDgNsV8TmyWm9VYKauKsZbzStobxPbL4KSrUSqGxKXIYhNU4IluquGMQPe90Q6zRuGBMq_N92DQ2PK4G6lfCg8iLWGVDyVT8B8THFPHd/s1600-rw/the+sleuth+kit+logo.gif" title="the sleuth kit logo" width="200" /></div>
<b>The Sleuth Kit</b> is a C++ library and collection of open source file 
system <a href="http://www.toolwar.com/search/label/Forensics" target="_blank"><b>forensics tools</b></a> that allow you to, among other things, view 
allocated and deleted data from NTFS, FAT, FFS, EXT2, Ext3, HFS+, and 
ISO9660 images. <br />
<b>The Sleuth Kit® (TSK)</b> is a library and collection of command line <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a> that allow you to investigate disk images. The core functionality  of <b>TSK</b> allows you to <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyze</a> volume and file system data. The plug-in  <a href="http://www.toolwar.com/search/label/Frameworks" target="_blank">framework</a> allows you to incorporate additional modules to analyze file  contents and build automated systems. The library can be incorporated into larger digital forensics tools and the <a href="http://www.toolwar.com/search/label/CLI" target="_blank">command  line</a> tools can be directly used to find evidence. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
There are three different packages for each <b>The Sleuth Kit® (TSK) </b>release.</div>
<ul style="text-align: justify;">
<li><b>sleuthkit-X.X.X.tar.gz</b>: This is the source code release of  TSK core and framework that you must compile on your computer. This is  most commonly used on non-<a href="http://www.toolwar.com/search/label/Windows" target="_blank">windows</a> systems.</li>
<li><b>sleuthkit-X.X.X-win32.zip</b>: This is the compiled windows release of TSK core. This has executables and libraries that allow you to run this on windows.</li>
<li><b>sleuthkit-X.X.X-framework-win32.zip</b>: This is the compiled  windows release of the framework. It has the tsk_analyzeimg program that  allows you to run the framework on a disk image.</li>
</ul>
<div style="text-align: justify;">
<br /></div>
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/YybBQycLL9w?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/3ieolkMJxJk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
<b>Windows (x86) :: </b><a class="name" href="http://sourceforge.net/projects/sleuthkit/files/sleuthkit/4.1.2/sleuthkit-4.1.2-win32.zip/download" title="Click to download sleuthkit-4.1.2-win32.zip">Sleuthkit-4.1.2-win32.zip</a> | <a class="name" href="http://sourceforge.net/projects/sleuthkit/files/sleuthkit/4.1.2/sleuthkit-4.1.2-framework-win32.zip/download" title="Click to download sleuthkit-4.1.2-framework-win32.zip">Sleuthkit-4.1.2-framework-win32.zip</a>
<b> </b><br />
<b>Linux :: </b><a class="name" href="http://sourceforge.net/projects/sleuthkit/files/sleuthkit/4.1.2/sleuthkit-4.1.2.tar.gz/download" title="Click to download sleuthkit-4.1.2.tar.gz">Sleuthkit-4.1.2.tar.gz</a> <br />
<b>Official Website :: </b> <a href="http://www.sleuthkit.org/sleuthkit/">http://www.sleuthkit.org/sleuthkit/</a>

The Sleuth Kit (TSK - Forensics) :: Framework

The Sleuth Kit is a C++ library and collection of open source file system forensics tools that allow you to, among other things, vie...

Crypto Implementations Analysis Toolkit :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="Crypto Implementation Analysis Toolkit (CIAT)" border="0" height="240" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAZPIwVYWPyohkcKc1fGGaHZAcyEw0BoiIWqylgFCnmnY1VjNEgNvH1QOaOPUW0oKzjIUDWaaT-w2W0NnTovjr_7z_6iDQDsIk1zJ32bIxlmbcNT-H9milmKcnN3YE4dztJDAY7SjbM_Ll/s1600-rw/Crypto+Implementation+Analysis+Toolkit+(CIAT).png" title="Crypto Implementation Analysis Toolkit (CIAT)" width="400" /></div>
<div style="text-align: justify;">
The <b>Cryptographic Implementations Analysis Toolkit (CIAT)</b> is 
compendium of command line and graphical tools whose aim is to help in 
the detection and analysis of encrypted byte sequences within files 
(executable and non-executable). </div>
<br />
<h3>
Download :: </h3>
<b>Linux & Windows :: </b><a href="http://sourceforge.net/projects/ciat/files/latest/download" target="_blank">Crypto Implementation Analysis Toolkit (CIAT) (.zip)</a><b> </b><br />
<b>Official Website :: </b><a href="http://ciat.sourceforge.net/">http://ciat.sourceforge.net/</a>

Crypto Implementations Analysis Toolkit :: Framework

The Cryptographic Implementations Analysis Toolkit (CIAT) is compendium of command line and graphical tools whose aim is to help in th...

DriveCrypt (Disk Encryption) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJG1cJGABe9up2Ykue6hyZD7gWDJwSIxIEt8NeFLzGON-W0RfSsZEyBnePNOIAohuBuGfUEy9DwcvZLs_u7ZwvBxLWlSStcVz4Ew7DqEz1pzfA34LzP_7M-ZJWaPTX-ELgYeVKUfJfQ7HA/s1600/DeviceCrypt+Image.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="DeviceCrypt Image" border="0" height="291" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJG1cJGABe9up2Ykue6hyZD7gWDJwSIxIEt8NeFLzGON-W0RfSsZEyBnePNOIAohuBuGfUEy9DwcvZLs_u7ZwvBxLWlSStcVz4Ew7DqEz1pzfA34LzP_7M-ZJWaPTX-ELgYeVKUfJfQ7HA/s1600-rw/DeviceCrypt+Image.jpg" title="DeviceCrypt Image" width="320" /></a></div>
<div style="text-align: justify;">
<span class="style_5"><b>DRIVECRYPT</b>
<i> securely and easily protects all proprietary data</i> on notebooks and 
desktop computers 100% of the time without users having to think about 
<a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a>. Any organization, from a small company to a large 
international firm with thousands of users in the field, can effectively
 protect business plans, client lists, product specifications, 
confidential corporate memos, stock information, and much more with this
 <b>disk <a href="http://www.toolwar.com/search/label/Encryption" target="_blank">encryption</a></b> product.</span><br />
<table border="0" cellpadding="0" cellspacing="1" style="height: 269px; width: 100%px;"><tbody>
<tr><td><br />
<div class="style_5" style="text-align: justify;">
<span class="style_title_3">With
 its Traveller modus functionality, <b>DriveCrypt</b> is the ideal solution to 
encrypt <a href="http://www.toolwar.com/search/label/USB" target="_blank">USB</a> disks and Pen drives without needing to install the software
 on the computer.</span></div>
<div class="style_title_3">
<br />
<span class="style_title_1"><b> How           DriveCrypt`s On-the-fly Encryption Works ::</b><br />
            </span></div>
<div class="style_5">
<br /></div>
<div style="text-align: justify;">
<span class="style_5"> As data is read from the hard disk, <b>DeviceCrypt</b>
 automatically decrypts the data before it is loaded into <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory</a>. When 
data is written back to the hard disk, it is automatically re-encrypted.
 The disk encryption/ decryption process is completely transparent to 
the user or any application program -the data is caught "on the fly" as 
it transfers back and forth between the hard disk and memory. 
Consequently, users don't need to remember to decrypt or re-encrypt 
their data, or change the normal operation of the PC. In addition, only 
individual files are decrypted at any one time, not the whole hard disk.</span></div>
</td>
            <td align="center" valign="top"><div style="text-align: center;">
<br /></div>
<div class="style_5" style="text-align: center;">
<br /></div>
</td>
        </tr>
</tbody>
</table>
<h3>
<span class="style_title_1"><b>DriveCrypt Key Features ::</b></span></h3>
<h3>
<span class="style_title_1">
</span></h3>
<div class="style_5">
<span class="style_5"><b>
1. Strong Cryptography ::</b><br />
</span></div>
<div class="style_5" style="text-align: justify;">
<span class="style_5">1344 Bit Military Strength <b>disk   encryption</b>
 using the best and most proven <a href="http://www.toolwar.com/search/label/Cryptography" target="_blank">cryptography</a> algorithms such   as AES, 
Blowfish, Tea 16, Tea 32, Des, Triple Des, Misty 1 and Square. <br />
</span><br />
<b> 2. Easy to Install, Deploy & Use ::<br />
</b></div>
<div class="style_5" style="text-align: justify;">
<span class="style_5"><b>DeviceCrypt</b> data   encryption software requires minimal administration and user training. <b>Disk encryption</b> is completely transparent, requiring no change   in the way users work with the computer.</span></div>
<div class="style_5">
<span class="style_5"> </span><span class="style_title_1"></span><span class="style_5"><br />
<b> 3. Maximize Your Security,   Minimize Your Risk </b>::<br />
</span></div>
<div class="style_5" style="text-align: justify;">
<b><span class="style_5">
 </span></b><span class="style_5">DRIVECRYPT protects your data with very fast and a   true "on the fly" 
disk encryption process. Other products that claim to be "on   the fly" 
decrypt an entire file and load it into memory, creating significant   
security risks. <b>DriveCrypt</b> </span><span class="style_5">file encryption   software</span><span class="style_5">
 is smarter and more secure because it decrypts only the specific   
portion of a file that is in use. Unprotected data never resides on a 
DriveCrypt   encrypted hard drive. </span><b><span class="style_5"><br />
</span></b><span class="style_5"><br />
</span></div>
<span class="style_5"></span><span class="style_5"><b>4. Disk Partition and file volume   encryption :: </b>(Partition encryption with DriveCrypt standard edition only) <br />
</span>
<br />
<div class="style_5" style="text-align: justify;">
<span class="style_5">DRIVECRYPT
 allows both, the encryption of an entire Hard Disk partition,   as well
 as the creation of a <a href="http://www.toolwar.com/search/label/Virtual" target="_blank">virtual</a> container file that will store all the   
encrypted information.</span></div>
<div class="style_5" style="text-align: justify;">
<br /></div>
<div class="style_5" style="text-align: justify;">
<span class="style_5"><b>5. Invisible Containers :: </b>(DriveCrypt   standard edition only)<br />
The <b>DriveCrypt</b> Standard edition has the ability to   create an INVISIBLE
 disk INSIDE a container or partition. This way you define   two 
<a href="http://www.toolwar.com/search/label/Password" target="_blank">passwords</a> for a container. The invisible disks password gives you access
 to   your working disk, which is hidden in the unused area of your 
"outer" disk,   while another password gives you access to the pre-setup
<b> DriveCrypt </b>volume in   which you only store data that you would want 
others to believe is the only data   in the container or partition. This
 is very useful in cases where an aggressor   may force you to reveal 
the DriveCrypt disk's password: By revealing the   password of the first
 or "outer" disk, the aggressor will ONLY see the "prepared   data": IE 
data you put in there, before creating the hidden disk, while he will   
not be able to see or get evidence that there is another invisible 
container   that securely stores confidential data on the disk. <br />
</span><span class="style_5"><br />
<b> 6. Hide data into   music files </b></span><span class="style_5">::<br />
Using special so called "Steganographic" functionalities,   DRIVECRYPT 
allows you to hide all your sensitive information into music files.   
Just authorized users will be able to access secret information, anyone 
else   will only find harmless music on the computer… <br />
</span></div>
<span class="style_5"><b>7. Easily encrypts Pen-Drives and USB disks on a container   or partition level. </b>::<br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5">With the HOT 
Disk option, DriveCrypt can also   optionally automatically request the 
users authentication data as soon as the   USB device is inserted. When 
the USB disk is removed from the computer, all the   data are 
automatically inaccessible to unauthorized persons.</span></div>
<span class="style_5"><br />
<b> 8.   Improved Password Security ::</b><br />
DRIVECRYPT allows administrators to configure   several password settings: <br />
- Master Password Settings <br />
- Restricted   second user Passwords <br />
- Second user Password Expiration <br />
- Console   Lock-Out Password <br />
</span><span class="style_5"><br />
</span><span class="style_5"><b> 9. Password Sniffing Protection</b></span> ::<br />
<span class="style_5"></span><br />
<div style="text-align: justify;">
<span class="style_5">
DRIVECRYPT   integrates special functionalities that prevent passwords 
from being sniffed by   Hackers or Trojan horses such as Back Orifice, 
SubSeven etc...</span></div>
<span class="style_5"><br />
</span><span class="style_5"><b> 10.   No-Evidence Encryption </b>::<br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5">DRIVECRYPT 
container files do not have any file   header that indicates it is a 
DriveCrypt encrypted file. Therefore, without   knowing the right 
passphrase, it is impossible to prove that a large container   file on 
the computer is a DriveCrypt virtual disk container.</span></div>
<span class="style_title_1"></span><span class="style_title_1"></span><span class="style_5"><br />
<b> 11.   Administrator Password Control (keyfiles) ::</b><br />
DRIVECRYPT allows system   Administrators to assign different passwords to different users. <br />
</span><span class="style_title_1"></span><span class="style_5"><br />
</span><span class="style_5"><b> 12.   Anti Dictionary or Brute Force Attack mechanism </b></span>::<br />
<div style="text-align: justify;">
<span class="style_5">DRIVECRYPT makes
   Dictionary or Brute Force attacks against encrypted volumes much 
harder than any   of the actual competitor products by dramatically 
slowing down these processes.</span></div>
<span class="style_title_1"></span><span class="style_5"><br />
<b> 13. Easy and fast hotkey control </b>::<br />
DRIVECRYPT allows the most   used commands like mount or dismount 
encrypted volumes… to be rapidly accessed   trough Hotkeys and/or the 
toolbar. <br />
</span><span class="style_title_1"><span class="style_5"></span></span><span class="style_title_1"><span class="style_5"></span></span><span class="style_5"><br />
<b> 14. Second User Access </b>::<br />
DRIVECRYPT allows the creation of a master password, as well as   different lower rights second user passwords (keyfiles). <br />
</span><span class="style_title_1"></span><span class="style_title_1"></span><span class="style_5"><br />
</span><span class="style_5"><b> 15.   Forgotten user password recovery </b>::<br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5">DRIVECRYPT 
allows administrators using   the master password, to access an 
encrypted disk even if the user has forgotten   his user password. This 
ensures that a company can restore a user password if   forgotten. 
DriveCrypt prevents loss of valuable data from user's workstations   and
 notebooks by allowing three methods of encrypted data access: the 
Master   Password, the user password (keyfile) and/or hardware device 
access such as   optional fingerprint-/Smartcard Readers or USB Token 
devices.</span></div>
<span class="style_title_1"></span><span class="style_title_1"></span><span class="style_5"><br />
</span><span class="style_5"><b> 16.   Eliminate the Danger Of Unattended Computers ::</b><br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5">DRIVECRYPT 
provides an   automatic and/or manual lock-out feature that locks out 
the user's console and   displays a password-protected screen saver. 
This lock-out functionality can be   activated manually or automatically
 after a specified period of computer   inactivity. The computer remains
 secure even when left unattended. To restore   the screen and unlock 
the keyboard, the password for the current user or Master   Password 
must be entered.</span></div>
<span class="style_title_1"></span><span class="style_title_1"></span><span class="style_5"><br />
<b> 17. Secure Disk Deletion (Disk Wiping) ::</b><br />
DRIVECRYPT allows you to wipe the free space on a disk. This ensures   that deleted files will never be recovered by special disk tools. <br />
</span><span class="style_title_1"></span><span class="style_5"><br />
</span><span class="style_5"><b> 18.   Encrypted Volume Resizing (DriveCrypt Standard edition) ::</b><br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5">An Encrypted   
Volume may, with time, become too small or too big, for the amount of 
data it   has to contain. Therefore, DriveCrypt offers you a 
Volume-Resize functionality.   This will allow you to easily adapt a 
volume to your needs at any time, and   optimise the Hard Disk space.</span></div>
<span class="style_title_1">
</span><span class="style_5"><br />
<b> 19. External Hardware Support ::</b><br />
DRIVECRYPT supports optional external hardware devices such as:   Fingerprint and Smartcard reader, as well as USB token. <br />
</span><span class="style_title_1"></span><span class="style_5"><br />
</span><span class="style_5"><b>20. Works on   any Storage Medium </b>::<br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5">DRIVECRYPT works
 on any kind of Hard Disk, and   removable medium such as Floppy-, Zip-,
 Jazz-, Sygate-, CD-Rom, DVD- Drives etc… and manages up to 16 TERABITE 
of encrypted data (Standard edition) or 4   GB (Home Edition)</span></div>
<span class="style_title_1"></span><span class="style_title_1"></span><span class="style_title_1"></span><span class="style_5"><br />
</span><span class="style_5"><b> 21. Installation is Easy and Safe ::</b><br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5">The   
installation is easy and fast. During installation, the administrator 
simply   selects the drives to be encrypted, the encryption method he 
would like to use   and the master password. DRIVECRYPT will then make 
the rest and crypt the   selected disks.</span></div>
<span class="style_title_1"></span><span class="style_title_1"></span><span class="style_5"><br />
</span><span class="style_5"><b> 22. Encrypted Data is Easily Recovered ::</b><br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5">If a   user 
leaves the organization, the encrypted data on the PC is easily 
recovered   and restored to a decrypted state by the administrator using
 the Master Password   or the Local Administrator Password.</span></div>
<span class="style_title_1"><span class="style_5"></span></span><span class="style_title_1"></span><span class="style_title_1"><span class="style_5"></span></span><span class="style_5"><br />
<b> 23. No Backdoors present ::</b><br />
</span>
<br />
<div style="text-align: justify;">
<span class="style_5"> DriveCrypt does
 NOT include any backdoor. Encrypted data are only   accessible by the 
legitimate users. Neither the vendor nor any other entities   are able 
to break DriveCrypt <b>disk encryption</b>. <br />
</span><span class="style_5"></span></div>
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<h3>
<span class="style_5">Download ::</span></h3>
</div>
<div style="text-align: justify;">
<b><span class="style_5">Windows :: </span></b><span class="style_5"><a href="http://www.securstar.com/downloads.php?option=download" target="_blank">DeviceCrypt (30 Days Trial)</a> | Windows 7 & Windows 8 Compatible</span><b><span class="style_5"> </span></b></div>
<div style="text-align: justify;">
<b><span class="style_5">Price :: </span></b><span class="style_5">82$</span><b><span class="style_5"><br /></span></b></div>
<div style="text-align: justify;">
<span class="style_5"><b>Official Website :: </b><a href="http://www.securstar.com/products_drivecrypt.php">http://www.securstar.com/products_drivecrypt.php</a> </span></div>

DriveCrypt (Disk Encryption) :: Tools

DRIVECRYPT securely and easily protects all proprietary data on notebooks and desktop computers 100% of the time without users having...

NIELD (Network Forensics) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="Network Forensics" border="0" height="300" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiv5UkdWZtYhJYA6juKwBWqbScPIAPAkUhoLvGVeVrnlB4umNPTnorlKGSInBzLSy5Faqe9YyG7bXA-bWiHYnBzqN5Tu9v9dATd-eeiHXBlHWrgZjE8-jsyhz7TnGf6q93Y-6Tm_4WPr1RJ/s400-rw/Network+Forensics.jpg" title="Network Forensics" width="400" /></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>NIELD (Network Interface Events Logging Daemon)</b> is a tool that 
receives notifications from the kernel through the netlink socket, and 
generates logs related to interfaces, neighbor cache(ARP,NDP), IP 
address(IPv4,IPv6), routing, FIB rules, traffic control.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Installation :: </b><a href="http://nield.sourceforge.net/install.html" target="_blank">Click Here </a></div>
<div style="text-align: justify;">
<b>Help :: </b><a href="http://nield.sourceforge.net/man.html" target="_blank">Click Here</a> </div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://sourceforge.net/projects/nield/files/nield-0.4.0/nield-0.4.0.tar.gz/download" target="_blank">NIELD 0.4.0 (.tar.gz)</a></div>
<div style="text-align: justify;">
<b>Source :: </b><a href="http://nield.sourceforge.net/index.html">http://nield.sourceforge.net/index.html</a></div>

NIELD (Network Forensics) :: Tools

NIELD (Network Interface Events Logging Daemon) is a tool that receives notifications from the kernel through the netlink socket, and...

Mandiant Memoryze (Live Memory Forensic) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="Memoryze Logo" border="0" height="233" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhP6Kiq6DL8HvQGQr0mM99tRZ4IPEArJ8MAgMScreZuK6ooQ73__V7_InhX_VZ_JTI3i6HMxlsvJ6HheaMaVEey7VHFt_4UHW_vW8sSMttY7brLEr-rMCOR-jWHctlRSlXt85RjFwYA_CZ2/s400-rw/Memoryze+Logo.png" title="Memoryze Logo" width="400" /></div>
<div style="text-align: justify;">
<b>Mandiant’s Memoryze</b> is free<i> <b>memory forensic software</b></i> that helps 
incident responders <b><i>find evil in live memory.</i></b> <b>Memoryze</b> can acquire 
and/or analyze <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory</a> images, and on live systems, can include the 
paging file in its <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a>.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Mandiant’s Memoryze</b> features:</div>
<ul style="text-align: justify;">
<li>image the full range of <a href="http://www.toolwar.com/search/label/System" target="_blank">system</a> memory (not reliant on API calls).</li>
<li>image a process’ entire address space to disk. This includes a process’ loaded DLLs, EXEs, heaps and stacks.</li>
<li>image a specified driver or all drivers loaded in <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory</a> to disk.</li>
<li>enumerate all running processes (including those hidden by rootkits). For each process, Memoryze can:</li>
<ul>
<li>report all open handles in a process (for example, all files, registry keys, etc.).</li>
<li>list the virtual address space of a given process including:</li>
<ul>
<li>displaying all loaded DLLs.</li>
<li>displaying all allocated portions of the heap and execution stack.</li>
</ul>
<li>list all <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> sockets that the process has open, including any hidden by rootkits.</li>
<li>specify the functions imported by the EXE and DLLs.</li>
<li>specify the functions exported by the EXE and DLLs.</li>
<li>hash the EXE and DLLs in the process address space (MD5, SHA1, SHA256.  This is disk based.)</li>
<li>hash the EXE and DLLs in the process address space. (This is a MemD5 of the binary in memory).</li>
<li>verify the digital signatures of the EXE and DLLs. (This is disk based.)</li>
<li>output all strings in memory on a per process basis.</li>
</ul>
<li>identify all drivers loaded in memory, including those hidden by rootkits. For each driver, Memoryze can: </li>
<ul>
<li>specify the functions the driver imports.</li>
<li>specify the functions the driver exports.</li>
<li><a href="http://www.toolwar.com/search/label/Hash" target="_blank">hash</a> the driver. (MD5, SHA1, SHA256. this is disk based.)</li>
<li>verify the digital signature of the driver (This is disk based.)</li>
<li>output all strings in memory on a per driver base.</li>
</ul>
<li>report device and driver layering, which can be used to intercept network <a href="http://www.toolwar.com/search/label/Packet" target="_blank">packets</a>, keystrokes and file activity.</li>
<li>identify all loaded kernel modules by walking a linked list.</li>
<li>identify hooks (often used by rootkits) in the System Call Table, 
the Interrupt Descriptor Tables (IDTs) and driver function tables (IRP 
tables).</li>
</ul>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Mandiant’s Memoryze can perform all these functions on live 
system memory or memory image files – whether they were acquired by 
Memoryze or other memory acquisition tools. </b></div>
<div style="text-align: justify;">
Memoryze officially supports:</div>
<ul style="text-align: justify;">
<li><a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> 2000 Service Pack 4 (32-bit)</li>
<li>Windows XP Service Pack 2 and Service Pack 3 (32-bit)</li>
<li>Windows Vista Service Pack 1 and Service Pack 2 (32-bit)</li>
<li>*Windows Vista Service Pack 2 (64-bit)</li>
<li>Windows 2003 Service Pack 2 (32-bit and 64-bit)</li>
<li>Windows 7 Service Pack 0 (32-bit and 64-bit)</li>
<li>*Windows 2008 Service Pack 1 and Service Pack 2 (32-bit)</li>
<li>Windows 2008 R2 Service Pack 0 (64-bit)</li>
<li>*Windows 8 Service Pack 0 (32-bit and 64-bit)</li>
<li>*Windows Server 2012 Service Pack 0 (64-bit)</li>
</ul>
<div style="text-align: justify;">
* means support for a new operating system without experience on millions of host</div>
<div style="text-align: justify;">
In order to visualize Memoryze’s output, please download Redline™ or 
use an XML viewer.  Redline is Mandiant’s premier <a href="http://www.toolwar.com/search/label/Free" target="_blank">free</a> tool for 
investigating hosts for signs of malicious activity through memory and 
file <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a>, and the development of a threat assessment profile.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials :: </h3>
<b>Youtube ::</b><a href="http://www.youtube.com/watch?v=NskrZmwwV5s" target="_blank"><b> </b>Click Here</a><br />
<b>Forum :: </b><a href="https://forums.mandiant.com/" target="_blank">Mandiant Memoryze Forum</a> <br />
<b>User Guide ::  </b><a href="http://www.mandiant.com/library/MemoryzeUserGuide.pdf" target="_blank">Memoryze User Guide PDF</a><br />
<h3 style="text-align: justify;">
 </h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="https://www.mandiant.com/library/MemoryzeSetup3.0.msi" target="_blank">Mandiant Memoryze 3.0</a><b><br /></b></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="https://www.mandiant.com/resources/download/memoryze">https://www.mandiant.com/resources/download/memoryze</a></div>
<div style="text-align: justify;">
<br /></div>

Mandiant Memoryze (Live Memory Forensic) :: Tools

Mandiant’s Memoryze is free memory forensic software that helps incident responders find evil in live memory. Memoryze can acquire ...

PeePDF (PDF Analysis, Forensics, Creation and Modification) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdfssXOHi8T0g4PNVG2niVEqC8bGVS2bQv8_wc0aLv8WDhBJ6Qf4HmwrkQoJlcQQtkcpLkUrvaJT9SEivG30mCR9_7y4Shf87TpVzinYYtGUbSzmXiSqszzlHsUI0d9T1VuVnq7P5KubfM/s1600/PeePDF.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="PeePDF Analysis" border="0" height="400" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdfssXOHi8T0g4PNVG2niVEqC8bGVS2bQv8_wc0aLv8WDhBJ6Qf4HmwrkQoJlcQQtkcpLkUrvaJT9SEivG30mCR9_7y4Shf87TpVzinYYtGUbSzmXiSqszzlHsUI0d9T1VuVnq7P5KubfM/s1600-rw/PeePDF.jpg" title="PeePDF Analysis" width="400" /></a></div>
<b>PeePDF</b> is a <b>Python tool to explore PDF files</b> in  order to find out if the file can be harmful or not. The aim of this <a href="http://www.toolwar.com/search/label/Tools" target="_blank"> tool</a> is to provide all the necessary components that a <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a>  researcher could need in a <a href="http://www.toolwar.com/search/label/PDF" target="_blank">PDF analysis</a> without using 3 or 4 tools to  make all the tasks. With peepdf it's possible to see all the objects in  the document showing the suspicious elements, supports all the most used  filters and encodings, it can parse different versions of a file,  object streams and encrypted files. With the installation of PyV8 and Pylibemu it provides <b>Javascript and shellcode <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a></b> wrappers too. Apart of this it's able to create new PDF files and to modify/obfuscate existent ones. </div>
<div style="text-align: justify;">
<br />
The main functionalities of peepdf are the following: </div>
<div style="text-align: justify;">
<h3>
<b> Analysis: </b></h3>
</div>
<ul style="text-align: justify;">
<li> Decodings: hexadecimal, octal, name objects </li>
<li> More used filters </li>
<li> References in objects and where an object is referenced </li>
<li> Strings search (including streams) </li>
<li> Physical structure (offsets) </li>
<li> Logical tree structure </li>
<li> Metadata </li>
<li> Modifications between versions (changelog) </li>
<li> Compressed objects (object streams) </li>
<li> Analysis and modification of Javascript (PyV8): unescape, replace, join </li>
<li> Shellcode analysis (Libemu python wrapper, pylibemu) </li>
<li> Variables (set command) </li>
<li> Extraction of old versions of the document </li>
<li> Easy extraction of objects, Javascript code, shellcodes (>, >>, $>, $>>) </li>
<li> Checking hashes on <a href="http://www.toolwar.com/2013/12/virustotal-analyze-files-and-urls-tools.html" target="_blank"><b>VirusTotal</b></a> </li>
</ul>
<div style="text-align: justify;">
<b> Creation/Modification: </b></div>
<ul style="text-align: justify;">
<li> Basic PDF creation </li>
<li> Creation of PDF with Javascript executed wen the document is opened </li>
<li> Creation of object streams to compress objects </li>
<li> Embedded PDFs </li>
<li> Strings and names obfuscation </li>
<li> Malformed PDF output: without endobj, garbage in the header, bad header... </li>
<li> Filters modification </li>
<li> Objects modification </li>
</ul>
<div style="text-align: justify;">
<b> Execution modes: </b></div>
<ul style="text-align: justify;">
<li> Simple command line execution </li>
<li> <b>Powerful interactive console</b> (colorized or not) </li>
<li> Batch mode </li>
</ul>
<div style="text-align: justify;">
<b> TODO: </b></div>
<ul style="text-align: justify;">
<li> Embedded PDFs analysis </li>
<li> Improving automatic Javascript analysis </li>
<li> GUI </li>
</ul>
<h3>
Tutorials :: </h3>
<b>PeePDF Installation :: </b><a href="http://code.google.com/p/peepdf/wiki/Installation" target="_blank">Click Here</a><b><a href="http://code.google.com/p/peepdf/wiki/Installation" target="_blank"> </a></b><br />
<b>PeePDF Execution :: </b><a href="http://code.google.com/p/peepdf/wiki/Execution" target="_blank">Click Here</a><br />
<b>PeePDF Commands ::  </b><a href="http://code.google.com/p/peepdf/wiki/Commands" target="_blank">Click Here</a><br />
<b>PDF Forensics and Analysis eBook</b> :: <a href="https://www.amazon.com/dp/B00LSF1TU6" target="_blank">Click Here</a> <br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/T1GcheLaY5M?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
<b>Linux | Windows :: </b><a href="http://peepdf.googlecode.com/files/peepdf_0.2-BlackHatVegas.zip" target="_blank">peepdf v0.2</a> (.zip)<b> | </b><a href="http://peepdf.googlecode.com/files/peepdf_0.2-BlackHatVegas.tar.gz" target="_blank">peepdf v0.2</a> (.tar.gz)
<b> </b><br />
<b>Source Website ::</b> <a href="http://code.google.com/p/peepdf/">http://code.google.com/p/peepdf/</a>

PeePDF (PDF Analysis, Forensics, Creation and Modification) :: Tools

PeePDF is a Python tool to explore PDF files in order to find out if the file can be harmful or not. The aim of this tool is to prov...

GoldenEye (DoS Testing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="ddos icon" border="0" height="240" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJOQnS__a36My3QgFrkkZZnKbMa2sQ5wymnzD-TYPn2-Hi3HzwaqF7hyphenhyphenimikRz5C7uJ3EQc2UHSYhjBNDc4TDogFEdp8zIL-ab7q41TBZPSowkU6qXuTkKbYPg3QOuCHEa5gb1WjXFL0js/s1600-rw/ddos+logo.jpg" title="ddos icon" width="400" /></div>
<div style="text-align: justify;">
<b>GoldenEye</b> is a <b>HTTP DoS test tool</b>. This software is distributed under the <i>GNU General Public License</i> version 3 (GPLv3). <b>GoldenEye</b> is a <b><acronym title="HyperText Transfer Protocol">HTTP</acronym>/S
 Layer 7 <a href="http://www.toolwar.com/search/label/DDoS" target="_blank">Denial-of-Service</a> Testing Tool</b>. It uses KeepAlive (and 
Connection: keep-alive) paired with Cache-Control options to persist 
socket connection busting through caching (when possible) until it 
consumes all available sockets on the <acronym title="HyperText Transfer Protocol">HTTP</acronym>/S server.</div>
<div style="text-align: justify;">
This project started by the influence of Barry Shteiman who created HULK, a Proof-of-concept <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> that I decided to improve which later became <b>GoldenEye</b>. Kudos for you Barry! This software is written in purely<a href="http://www.toolwar.com/search/label/Python" target="_blank"> Python</a>.</div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<b>Usages :: </b></div>
<pre><span style="font-family: "Courier New",Courier,monospace;"><code> USAGE: ./goldeneye.py <url> [OPTIONS]

OPTIONS:
     Flag           Description                     Default
     -t, --threads      Number of concurrent threads                (default: 500)
     -m, --method       HTTP Method to use 'get' or 'post'  or 'random'         (default: get)
     -d, --debug        Enable Debug Mode [more verbose output]         (default: False)
     -h, --help         Shows this help</code></span></pre>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b><span style="font-size: small;"><span style="font-weight: normal;">Python :: <a href="https://github.com/jseidl/GoldenEye/archive/master.zip" target="_blank">GoldenEye</a><b> (.py)</b></span></span></b></div>
<div style="text-align: justify;">
<b>Source Website ::</b>  <a href="https://github.com/jseidl/GoldenEye">https://github.com/jseidl/GoldenEye</a></div>

GoldenEye (DoS Testing) :: Tools

GoldenEye is a HTTP DoS test tool . This software is distributed under the GNU General Public License version 3 (GPLv3). GoldenEye is ...

KillerBee (Exploiting ZigBee and IEEE 802.15.4 Networks) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="KillerBee Image" border="0" height="329" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7xn4xzkvBYoqeDLAxh3GYVmNcCIj8wfF43o7uU-YZX4qDFqdlP91terOVNJqb8Zo0hS94LsqWhLGHvoJXzHFJkVYwmnD8YzrW6f-H_ndMaXeF-7iquPRYHz01XL2GKY3V2yXWvycWpApy/s1600-rw/KillerBee+Image.jpg" title="KillerBee Image" width="640" /></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>KillerBee</b> is a Python based <a href="http://www.toolwar.com/search/label/Frameworks" target="_blank">framework</a> and tool set for <b>exploring and 
exploiting the security of ZigBee and IEEE 802.15.4 networks.</b>  Using 
<b>KillerBee</b> tools and a compatible IEEE 802.15.4 radio interface, you can 
eavesdrop on ZigBee networks, replay traffic, attack cryptosystems and 
much more.  Using the <b>KillerBee framework</b>, you can build your own <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a>,
 implement ZigBee fuzzing, emulate and attack end-devices, routers and 
coordinators and much more. </div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Install on Linux :: </b><a href="https://code.google.com/p/killerbee/wiki/InstallLinuxBackTrack" target="_blank">Click Here</a></div>
<div style="text-align: justify;">
<b>Install on Mac :: </b><a href="https://code.google.com/p/killerbee/wiki/InstallOSX" target="_blank">Click Here</a></div>
<b>Wiki :: </b><a href="https://code.google.com/p/killerbee/w/list" target="_blank">Click Here</a><br />
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux | Mac :: </b><a href="https://killerbee.googlecode.com/files/killerbee_1_0.tar" target="_blank">KillerBee v1.0</a> (.tar.gz)</div>
<div style="text-align: justify;">
<b>Source Website :: </b><a href="https://code.google.com/p/killerbee/">https://code.google.com/p/killerbee/</a></div>

KillerBee (Exploiting ZigBee and IEEE 802.15.4 Networks) :: Framework

KillerBee is a Python based framework and tool set for exploring and exploiting the security of ZigBee and IEEE 802.15.4 networks. ...

Harden SSL/TLS (Hardening the SSL/TLS Settings) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBa17UaBE6_uLqnW3ha9asqX4KU8sGA56AJGGz8D7fPGp9nBAaaoDCCwmqxykTCZs8Di69HPGMkJ8b5wW92qTpCqWQnIy3q6OKPLyPPF5vl45IRxFdQDeGnSTcaOtCoPF6pbpocWlvptjD/s1600/Harden+SSL-TLS.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Harden SSL/TLS" border="0" height="266" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBa17UaBE6_uLqnW3ha9asqX4KU8sGA56AJGGz8D7fPGp9nBAaaoDCCwmqxykTCZs8Di69HPGMkJ8b5wW92qTpCqWQnIy3q6OKPLyPPF5vl45IRxFdQDeGnSTcaOtCoPF6pbpocWlvptjD/s400-rw/Harden+SSL-TLS.png" title="Harden SSL/TLS" width="400" /></a></div>
<div style="text-align: justify;">
<b>Harden SSL/TLS</b> allows <i>hardening the SSL/TLS settings</i> of <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> 
2000,2003,2008,2008R2, XP,Vista,7. It allows locally and remotely set 
SSL policies allowing or denying certain ciphers/hashes or complete 
ciphersuites.
</div>
<div style="text-align: justify;">
<b>Harden SSL/TLS</b> tool specific allows setting policies with regards to what 
ciphers and <a href="http://www.toolwar.com/search/label/Protocol" target="_blank">protocols</a> are available to applications that use SCHANNEL 
crypto interface. A lot of windows applications do use this interface, 
for instance Google Chrome as well as Apple Safari are a few of these. 
By changing the settings you can indirectly control what ciphers these 
applications are allowed to use. 
</div>
<br />
<br />
<span class="style3"><b>Advanced mode </b><br />
          · re-enable ECC P521 mode on Windows7 and 2008R2<br />
          · Set TLS Cache size and timeout<br />
          </span><span class="style3"><br /></span>
<br />
<h3>
Tutorials ::</h3>
<b>Documentations & Video Tutorial :: </b><a href="http://www.g-sec.lu/products.html" target="_blank">Click Here</a><br />
<br />
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://www.g-sec.lu/sslharden/HardenSSL.zip" target="_blank">Harden SSL/TLS (Beta)</a><b><br /></b><br />
<b>Official Website :: </b><a href="http://www.g-sec.lu/products.html">http://www.g-sec.lu/products.html</a>

Harden SSL/TLS (Hardening the SSL/TLS Settings) :: Tools

Harden SSL/TLS allows hardening the SSL/TLS settings of Windows 2000,2003,2008,2008R2, XP,Vista,7. It allows locally and remotely set...

Sandcat Browser (Web Penetration Testing) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTNeBldokTCCp2sKPEkIFaDYKilr89PbQIxdeIWaz7JEOT9ziJ36DF-zxINRCMAbUy_Rc-T4mqfPDm3Xl4N6chlKsO3pt3ex66r0qn8tqjYWzD6SbtSiTx3GHA8JDP2E633tsV5RAGFdVa/s1600/sandcat+browser+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="sandcat browser screenshot" border="0" height="310" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTNeBldokTCCp2sKPEkIFaDYKilr89PbQIxdeIWaz7JEOT9ziJ36DF-zxINRCMAbUy_Rc-T4mqfPDm3Xl4N6chlKsO3pt3ex66r0qn8tqjYWzD6SbtSiTx3GHA8JDP2E633tsV5RAGFdVa/s400-rw/sandcat+browser+screenshot.png" title="sandcat browser screenshot" width="400" /></a></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Sandcat Browser</b> is the fastest web browser combined with the fastest scripting language packed with features for pen-testers<b>. Sandcat Browser</b> is a freeware portable pen-test oriented multi-tabbed  web browser with extensions support developed by the Syhunt team. The <b> Sandcat Browser</b> is built on top of Chromium, the same engine that powers the Google Chrome browser, and uses the Lua programming language to provide extensions and scripting support. </div>
<div class="vspace" style="text-align: justify;">
Some of its unique features include: </div>
<ul style="text-align: justify;">
<li><b>Live HTTP Headers</b> — built-in live headers with a dedicated cache per tab and support for preview extensions </li>
<li><b>Sandcat Console</b> — an extensible command line console; Allows you to easily run custom commands and scripts in a loaded page </li>
<li><b>Resources</b> tab  — allows you to view the page resources, such as JavaScript files and other web files. </li>
<li><b>Page Menu</b> extensions — allows you to view details about a page and more. </li>
<li><b>Pen-Tester Tools</b> — Sandcat comes with a  multitude of pen-test oriented extensions. This includes a Fuzzer, a  Script Runner, HTTP & XHR Editors, Request Loader, Request Replay  capabilities and more. </li>
</ul>
<div class="vspace" style="text-align: justify;">
Features inherited from Chromium include: </div>
<ul style="text-align: justify;">
<li><b>Multi-Process Architecture</b> — each tab is its own process </li>
<li><b>Developer Tools</b> — in addition to the Chromium Developer Tools, Sandcat comes with a Source Code Editor and its own JavaScript and Lua consoles. </li>
</ul>
<h3 style="text-align: justify;">
<b> </b></h3>
<h3 style="text-align: justify;">
<b>Tutorials ::</b></h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/xdeXF4F4T_Q?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
<b>Download ::</b></h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.syhunt.com/pub/downloads/sandcat-browser-4.4.exe" target="_blank">Sandcat v4.4</a><b> </b></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://www.syhunt.com/?n=Sandcat.Browser">http://www.syhunt.com/?n=Sandcat.Browser</a><b>
</b></div>
<h3 style="text-align: justify;">
</h3>
<div style="text-align: justify;">
</div>

Sandcat Browser (Web Penetration Testing) :: Framework

Sandcat Browser is the fastest web browser combined with the fastest scripting language packed with features for pen-testers . Sandcat...

Subscribe to: Comments ( Atom )