ToolWar | Information Security (InfoSec) Tools

SSLsplit (MITM Attack against SSL/TLS) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="sslsplit" border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiKnDa1SmFAz2I_uUyfY8OE-KawIYa9Rk7T3wbyfUM42-zCwgo1Hs18FThDil200FpKE2OdkcCO9Uvk0_lHGNieQuDLgJxQVuvj7VN0Yhxbtky5w-AyzRHrrqWZB4Qrf8q5dafKyblfRnO/s1600/SSLsplit.jpg" title="sslsplit" width="400" /></div>
<div style="text-align: justify;">
<span style="font-family: inherit;"><b>SSLsplit</b> is a tool for <b><a href="http://www.toolwar.com/search/label/MITM" target="_blank">man-in-the-middle attacks</a> against SSL/TLS</b> encrypted
<a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> connections.  Connections are transparently intercepted through a
network address translation engine and redirected to SSLsplit.  <b>SSLsplit</b>
terminates SSL/TLS and initiates a new SSL/TLS connection to the original
destination address, while logging all data transmitted.  SSLsplit is intended
to be useful for network <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensics</a> and <a href="http://www.toolwar.com/search/label/Penetration" target="_blank">penetration testing</a>.</span></div>
<br />
<div style="text-align: justify;">
<span style="font-family: inherit;"><b>SSLsplit </b>supports plain TCP, plain SSL, HTTP and HTTPS connections over both
IPv4 and IPv6.  For SSL and HTTPS connections, SSLsplit generates and signs
forged X509v3 certificates on-the-fly, based on the original server certificate
subject DN and subjectAltName extension.  <b>SSLsplit</b> fully supports Server Name
Indication (SNI) and is able to work with RSA, DSA and ECDSA keys and DHE and
ECDHE cipher suites.  <b>SSLsplit </b>can also use existing certificates of which the
private key is available, instead of generating forged ones.  <b>SSLsplit</b> supports
NULL-prefix CN certificates and can deny OCSP requests in a generic way.
SSLsplit removes HPKP response headers in order to prevent public key pinning.</span></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Installation ::</b></div>
<div style="text-align: justify;">
SSLsplit is or will be available as a package or port on the following systems:</div>
<ul style="text-align: justify;">
<li>OpenBSD: security/sslsplit</li>
<li>Arch Linux AUR: sslsplit</li>
<li>Fedora: sslsplit</li>
<li>Kali: sslsplit</li>
<li>Backtrack: sslsplit</li>
</ul>
<div style="text-align: justify;">
<b>To install from source:</b></div>
<div style="text-align: justify;">
<pre><code class=" ruby">make
make <span class="keymethods">test</span>       <span class="comment"># optional unit tests</span>
make install    <span class="comment"># optional install</span>
</code></pre>
</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Usage ::</b></div>
<div style="text-align: justify;">
<pre><code class=" sql">% sslsplit -h
<span class="keyword">Usage</span>: sslsplit [options...] [proxyspecs...]
  -c pemfile  use CA cert (<span class="keyword">and</span> <span class="keyword">key</span>) <span class="keyword">from</span> pemfile <span class="keyword">to</span> sign forged certs
  -k pemfile  use CA <span class="keyword">key</span> (<span class="keyword">and</span> cert) <span class="keyword">from</span> pemfile <span class="keyword">to</span> sign forged certs
  -C pemfile  use CA chain <span class="keyword">from</span> pemfile (intermediate <span class="keyword">and</span> root CA certs)
  -K pemfile  use <span class="keyword">key</span> <span class="keyword">from</span> pemfile <span class="keyword">for</span> leaf certs (<span class="keyword">default</span>: generate)
  -t certdir  use cert+chain+<span class="keyword">key</span> PEM files <span class="keyword">from</span> certdir <span class="keyword">to</span> target <span class="keyword">all</span> sites
              matching the common <span class="keyword">names</span> (non-matching: generate if CA)
  -O          deny <span class="keyword">all</span> OCSP requests <span class="keyword">on</span> <span class="keyword">all</span> proxyspecs
  -P          passthrough SSL connections if they cannot be split because <span class="keyword">of</span>
              client cert auth <span class="keyword">or</span> <span class="keyword">no</span> matching cert <span class="keyword">and</span> <span class="keyword">no</span> CA (<span class="keyword">default</span>: <span class="keyword">drop</span>)
  -g pemfile  use DH <span class="keyword">group</span> params <span class="keyword">from</span> pemfile (<span class="keyword">default</span>: keyfiles <span class="keyword">or</span> auto)
  -G curve    use ECDH named curve (<span class="keyword">default</span>: secp160r2 <span class="keyword">for</span> non-RSA leafkey)
  -Z          disable SSL/TLS compression <span class="keyword">on</span> <span class="keyword">all</span> connections
  -s ciphers  use the given OpenSSL cipher suite spec (<span class="keyword">default</span>: <span class="keyword">ALL</span>:-aNULL)
  -e engine   specify <span class="keyword">default</span> NAT engine <span class="keyword">to</span> use (<span class="keyword">default</span>: ipfw)
  -E          list available NAT engines <span class="keyword">and</span> exit
  -u <span class="keyword">user</span>     <span class="keyword">drop</span> <span class="keyword">privileges</span> <span class="keyword">to</span> <span class="keyword">user</span> (<span class="keyword">default</span> if run <span class="keyword">as</span> root: nobody)
  -j jaildir  chroot() <span class="keyword">to</span> jaildir (<span class="keyword">default</span> if run <span class="keyword">as</span> root: /var/empty)
  -p pidfile  <span class="keyword">write</span> pid <span class="keyword">to</span> pidfile (<span class="keyword">default</span>: <span class="keyword">no</span> pid file)
  -l logfile  <span class="keyword">connect</span> log: log one line summary per <span class="keyword">connection</span> <span class="keyword">to</span> logfile
  -L logfile  content log: <span class="keyword">full</span> data <span class="keyword">to</span> file <span class="keyword">or</span> named pipe (excludes -S)
  -S logdir   content log: <span class="keyword">full</span> data <span class="keyword">to</span> separate files <span class="keyword">in</span> dir (excludes -L)
  -d          daemon mode: run <span class="keyword">in</span> background, log error messages <span class="keyword">to</span> syslog
  -D          debug mode: run <span class="keyword">in</span> foreground, log debug messages <span class="keyword">on</span> stderr
  -V          print version information <span class="keyword">and</span> exit
  -h          print <span class="keyword">usage</span> information <span class="keyword">and</span> exit
  proxyspec = type listenaddr+port [natengine|targetaddr+port|<span class="string">"sni"</span>+port]
  e.g.        http <span class="number">0.0</span>.<span class="number">0.0</span> <span class="number">8080</span> www.roe.ch <span class="number">80</span>  # http/<span class="number">4</span>; static hostname dst
              https ::<span class="number">1</span> <span class="number">8443</span> <span class="number">2001</span>:db8::<span class="number">1</span> <span class="number">443</span>   # https/<span class="number">6</span>; static address dst
              https <span class="number">127.0</span>.<span class="number">0.1</span> <span class="number">9443</span> sni <span class="number">443</span>     # https/<span class="number">4</span>; SNI DNS lookups
              tcp <span class="number">127.0</span>.<span class="number">0.1</span> <span class="number">10025</span>              # tcp/<span class="number">4</span>; <span class="keyword">default</span> NAT engine
              ssl <span class="number">2001</span>:db8::<span class="number">2</span> <span class="number">9999</span> pf          # ssl/<span class="number">6</span>; NAT engine <span class="string">'pf'</span>
Example:
  sslsplit -k ca.<span class="keyword">key</span> -c ca.pem -P  https <span class="number">127.0</span>.<span class="number">0.1</span> <span class="number">8443</span>  https ::<span class="number">1</span> <span class="number">8443</span></code></pre>
</div>
<div style="text-align: justify;">
<code class=" sql"><span style="font-family: "Courier New",Courier,monospace;"><b><span style="font-weight: normal;"><span class="number"><br /></span></span></b></span>
</code></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Requirements ::</h3>
<div style="text-align: justify;">
SSLsplit depends on the OpenSSL and libevent 2.x libraries.
The build depends on GNU make and a POSIX.2 environment in <code>PATH</code>.
The (optional) unit tests depend on the check library.</div>
<div style="text-align: justify;">
SSLsplit currently supports the following operating systems and NAT engines:</div>
<ul style="text-align: justify;">
<li>FreeBSD: pf rdr and divert-to, ipfw fwd, ipfilter rdr</li>
<li>OpenBSD: pf rdr-to and divert-to</li>
<li>Linux: netfilter REDIRECT and TPROXY</li>
<li>Mac OS X: ipfw fwd and pf rdr (experimental)</li>
</ul>
<h3>
Download ::</h3>
<b>Linux :: </b><a href="http://mirror.roe.ch/rel/sslsplit/sslsplit-0.4.8.tar.bz2" target="_blank">SSLsplit v0.4.8</a> (.tar.bz2)<b><br /></b><br />
<b>Official Website ::</b> <a href="http://www.roe.ch/SSLsplit">http://www.roe.ch/SSLsplit</a><br /><code class=" ruby"><span class="comment"></span>
</code>

SSLsplit (MITM Attack against SSL/TLS) :: Tools

SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. Connections are transparently interc...

Simple Packet Sender- SRS (Packet Crafting) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7BUKKw498tOZ31MifYW6bPLuJau7rdayfP5pA059VWTSs2bX9U8wBoL0uzzMGPCSIx2uJ2Zd0U3siY6mMaSIHGNiuByoH6wcWmPvKxDi_QhXGorMs_JAvn14nckZgM-3C0XybRLTQpiVN/s1600/tcp-ipv4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Simple Packet sender screenshot" border="0" height="285" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7BUKKw498tOZ31MifYW6bPLuJau7rdayfP5pA059VWTSs2bX9U8wBoL0uzzMGPCSIx2uJ2Zd0U3siY6mMaSIHGNiuByoH6wcWmPvKxDi_QhXGorMs_JAvn14nckZgM-3C0XybRLTQpiVN/s1600/tcp-ipv4.png" title="Simple Packet sender screenshot" width="320" /></a></div>
<div style="text-align: justify;">
<b>Simple Packet Sender (SPS)</b> is a linux <b>packet crafting tool</b>. Supports IPv4, IPv6 including extension
 headers, and tunneling IPv6 over IPv4. Written in C on <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a> with <a href="http://www.toolwar.com/search/label/GUI" target="_blank">GUI</a> 
built using GTK+ and released under GPLv3. Does not require pcap.</div>
<h3 style="text-align: justify;">
<b>Features:</b></h3>
<div style="text-align: justify;">
<a href="http://www.toolwar.com/search/label/Packet" target="_blank">Packet</a><a href="http://www.toolwar.com/search/label/Packet" target="_blank"> crafting</a> and sending one, multiple, or flooding IPv4 and IPv6 
packets of type TCP, ICMP, or UDP (or cycle through all three). All 
values within ethernet frame can be modified arbitrarily. Supports IPv4 
header options, TCP header options, and TCP, ICMP and UDP data as well, 
input from either: keyboard as UTF-8/ASCII, keyboard as hexadecimal, or 
from file. IPv6 support includes: hop-by-hop, "first" and "last" destination, 
routing, authentication, and encapsulating security payload (ESP) 
extension headers. For those without access to a native IPv6 <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a>, 
IPv6 packets can be transmitted over IPv4 (6to4).</div>
<div style="text-align: justify;">
Packet fragmentation for IPv4, IPv6, and 6to4. Assumed maximum 
transmission unit (MTU) can be changed if unusual fragment sizes are 
needed. IP addresses and port numbers can be randomized. A configurable traceroute function, which supports TCP, ICMP, and UDP packets with all the features mentioned above. View packets in hexadecimal/ASCII representation, in both unfragmented and fragmented forms. All packet settings can be saved to and loaded from file. IP and ASN delegation functions, including: country name/code search 
and reverse-search, autonomous system (AS) number search by country and 
reverse-search,  IPv4 and IPv6 address delegation search and 
reverse-search.</div>
<div style="text-align: justify;">
ARP (IPv4) and Neighbor Discovery (IPv6) for querying a LAN for MAC addresses of local nodes.</div>
<div style="text-align: justify;">
Retrieve MAC address and current MTU setting of any attached network interface. Domain name resolution and <a href="http://www.toolwar.com/search/label/Reverse" target="_blank">reverse</a> resolution.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<b>Wiki ::</b> <a href="http://sourceforge.net/p/simplepacket/wiki/Home/" target="_blank">Click Here</a></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="https://sites.google.com/site/simplepacketsender/sps-4.2.tar.gz?attredirects=0" target="_blank">Simple Packet Sender</a> (.tar.gz)<b><br /></b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="https://sites.google.com/site/simplepacketsender/">https://sites.google.com/site/simplepacketsender/</a></div>

Simple Packet Sender- SRS (Packet Crafting) :: Tools

Simple Packet Sender (SPS) is a linux packet crafting tool . Supports IPv4, IPv6 including extension headers, and tunneling IPv6 over I...

Rootkit Hunter (Rootkit Scanner) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<b><img alt="rootkit hunter logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmAKcX4SzdyaNdf4DapqpG3d1wMIQl85Bf0MAAPmJDtEku0X-3BPe_s9_ozZkwyHMyJrfIXdORod7eI9TGZejFbegPFldu185F6m872hTfpFEgo8CPqIQPMyFm9ltA2FzzD6V9PhSLSoVP/s1600/Rkhunter.jpg" title="rootkit hunter logo" /></b></div>
<b>Rootkit Hunter</b> is <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanning tool</a> to ensure you for about 99.9%* you're clean of nasty <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a>. This tool <i>scans for <a href="http://www.toolwar.com/search/label/Rootkit" target="_blank">rootkits</a>, backdoors and local exploits</i> by running tests like:<br />
<br />
    - MD5 <a href="http://www.toolwar.com/search/label/Hash" target="_blank">hash</a> compare<br />
    - Look for default files used by rootkits<br />
    - Wrong file permissions for binaries<br />
    - Look for suspected strings in LKM and KLD modules<br />
    - Look for hidden files<br />
    - Optional scan within plaintext and binary files<br />
<br />
<b>Rootkit Hunter</b> is released as GPL licensed project and free for everyone to use.* No, not really 99.9%.. It's just another security layer<br />
<br />
<b>System requirements:</b><br />
    - Compatible operating system (see 'Supported operating systems')<br />
    - Bourne Again Shell (BASH)<br />
<br />
<b>Supported operating systems ::</b><br />
- Most <a href="http://www.toolwar.com/search/label/Distribution" target="_blank">Linux distributions</a><br />
- Most *BSD distributions</div>
<div style="text-align: justify;">
<h3>
Tutorial ::</h3>
<b>Scanning Techniques :: </b><a href="http://www.rootkit.nl/articles/rootkit_scanning_techniques.html" target="_blank">Click Here</a><br />
<b>Documentations :: </b><a href="http://www.rootkit.nl/files/rootkit_documentation.html" target="_blank">Click Here</a><br />
<b>Video Tutorial ::</b>  <br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/5ngeBpeRros?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
</div>
<div style="text-align: justify;">
<h3>
Download ::</h3>
</div>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://sourceforge.net/projects/rkhunter/files/latest/download" target="_blank">RootKit Hunter v1.4.0</a> (.tar.gz)<b>
</b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.rootkit.nl/projects/rootkit_hunter.html">http://www.rootkit.nl/projects/rootkit_hunter.html</a></div>

Rootkit Hunter (Rootkit Scanner) :: Tools

Rootkit Hunter is scanning tool to ensure you for about 99.9%* you're clean of nasty tools . This tool scans for rootkits , backdoo...

Lynis (Security and System Auditing) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPJSrg2v61K-1SHIewex9MB7DLBAqrgKTy2REJhuc1jyKxL99Tia_vx44VmSeUWWxbHdgZtEVAjWn5GUbxWD9dLfe1o2Suta4Ww_ZgfvwIITFiR8JkMpR5A-ZkTq17LVggAJlfumpTReoW/s1600/lynis-screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="lynis screenshot" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPJSrg2v61K-1SHIewex9MB7DLBAqrgKTy2REJhuc1jyKxL99Tia_vx44VmSeUWWxbHdgZtEVAjWn5GUbxWD9dLfe1o2Suta4Ww_ZgfvwIITFiR8JkMpR5A-ZkTq17LVggAJlfumpTReoW/s320/lynis-screenshot.png" title="lynis screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>Lynis</b> is a <b><i>Security and system auditing tool</i> </b>to harden <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a> systems. <b>Lynis</b> is an <b>auditing tool </b>for Unix/Linux (specialists). It scans the  <a href="http://www.toolwar.com/search/label/System" target="_blank">system</a> and available software and performs many individual <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a>  checks. It determines the hardening state of the machine and <a href="http://www.toolwar.com/search/label/Detect" target="_blank">detects</a>  security issues. Beside security related information it will also scan  for general system information, installed packages and possible  configuration errors. <b>Lynis</b> is a <a href="http://www.toolwar.com/search/label/Security" target="_blank">security tool</a> to audit and harden Unix and Linux based  systems. It scans the system by performing many security control checks,  looks for installed software and determines compliance to standards. Also will it detects security issues and errors in configuration. At the  end of the scan it will provide the warnings and suggestions to help  you improving the security defense of your systems.<br />
<br />
This software aims in assisting automated  auditing, hardening, software patch management, <a href="http://www.toolwar.com/search/label/Vulnerability" target="_blank">vulnerability</a> and  <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> scanning of Unix/Linux based systems. It can be run without  prior installation, so inclusion on read only storage is possible (<a href="http://www.toolwar.com/search/label/USB" target="_blank">USB</a>  stick, cd/dvd).<br />
<br />
<b>Lynis </b>assists auditors in performing Basel II, GLBA, HIPAA, PCI DSS and SOx (Sarbanes-Oxley) compliance audits.<br />
<br />
<b>Intended audience:</b><br />
Security specialists, penetration testers, system auditors, system/network managers.<br />
<br />
<b>Examples of audit tests:</b><br />
- Available authentication methods<br />
- Expired SSL certificates<br />
- Outdated software<br />
- User accounts without password<br />
- Incorrect file permissions<br />
- Configuration errors<br />
- Firewall auditing<br />
<br />
<b>Current state:</b><br />
Stable releases are available, development is active.<br />
<h3>
Tutorials :: </h3>
<b>Documentation :: </b><a href="http://www.rootkit.nl/files/lynis-documentation.html" target="_blank">Click Here</a> </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/FgkC4k1kJaE?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<h3>
<b>Download </b></h3>
<b>Linux ::</b> <a href="http://cisofy.com/files/lynis-1.4.0.tar.gz" target="_blank">Llynis-1.4.0</a> (.tar.gz)</div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://www.rootkit.nl/projects/lynis.html" target="_blank">http://www.rootkit.nl/projects/lynis.html </a></div>
</div>

Lynis (Security and System Auditing) :: Tools

Lynis is a Security and system auditing tool to harden Linux systems. Lynis is an auditing tool for Unix/Linux (specialists). It sca...

PuTTY (SSH and Telnet Client) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="putty logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3zvoJcKewErjVHSTjvbSDUjRlAnvLx8DNoFccuOvxFsCFHnuKCMJYOJ1NrhyfEBId03fqOnulo2MIoeDxqIbix4vgflC093Md_UhkccEcdQQ4NZiRT5mNwvddKjRoz6N4izQD-ufOng6j/s1600/putty+logo.png" title="putty logo" /></div>
<div style="text-align: justify;">
<b>PuTTY</b> is a free <b>implementation of Telnet and SSH for Windows and Unix</b> platforms, along with an <code>xterm</code> terminal emulator. It is written and maintained primarily by Simon Tatham. </div>
<div style="text-align: justify;">
<b>PuTTY</b> is a free and <i>open-source terminal emulator</i>, serial console and <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> file transfer application. It supports several network <a href="http://www.toolwar.com/search/label/Protocol" target="_blank">protocols</a>, including SCP, SSH, Telnet and rlogin. The name "<b>PuTTY</b>" has no definitive meaning, though "tty" is the name for a terminal in the Unix tradition, usually held to be short for Teletype.<br />
<br />
<b>PuTTY</b> was originally written for Microsoft <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>, but it has been ported to various other operating systems. Official ports are available for some Unix-like platforms, with work-in-progress ports to Classic Mac OS and <a href="http://www.toolwar.com/search/label/Mac" target="_blank">Mac</a> OS X, and unofficial ports have been contributed to platforms such as Symbian and Windows Mobile.<br />
</div>
<h3 style="text-align: justify;">
Tutorials :: </h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/9CZphjhQxIQ?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe" target="_blank">PuTTY x86</a> <b>(.exe)</b></div>
<div style="text-align: justify;">
<b>Unix :: </b><a href="http://the.earth.li/~sgtatham/putty/latest/putty-0.63.tar.gz" target="_blank">PuTTY</a><b> (.tar.gz)</b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/">http://www.chiark.greenend.org.uk/~sgtatham/putty/</a></div>

PuTTY (SSH and Telnet Client) :: Tools

PuTTY is a free implementation of Telnet and SSH for Windows and Unix platforms, along with an xterm terminal emulator. It is written ...

FruityWiFi (Wireless Auditing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="FruityWiFi Screenshot" border="0" height="311" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1JHrHssrXvjVxrIiXhQ2a_6Nw0cQ6Io_oxLac-3nYxXA0ztQBVccfe8XxahD3MDwUa0nN_AyCnTwyNYqRew1esXzke6jIE0oEZJ9-UqWX7VbnNqecm1eywx_ksuFf4SRuUs0ISrTb68ij/s320/FruityWiFi+Screenshot.JPG" title="FruityWiFi Screenshot" width="320" /></div>
<div style="text-align: justify;">
<b>FruityWifi</b> is a <i>wireless network auditing tool</i> based in the <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">wifi</a> 
Pineapple. The application can be installed in any Debian based system 
adding the extra packages. Tested in Debian, <a href="http://www.toolwar.com/2013/09/kali-linux-toolwar.html" target="_blank">Kali Linux</a>, Kali Linux ARM 
(Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi).</div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<b> Wiki :: </b><a href="https://github.com/xtr4nge/FruityWifi/wiki" target="_blank">Click Here</a></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="https://github.com/xtr4nge/FruityWifi/archive/master.zip" target="_blank">FruityWiFi</a></div>

FruityWiFi (Wireless Auditing) :: Tools

FruityWifi is a wireless network auditing tool based in the wifi Pineapple. The application can be installed in any Debian based syst...

WormTrack (Network IDS) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="wormtrack " border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS_UOobtkh2f05uE8fyvAf88MMYAlPr8YiidihA2xGZvHZMsYhmnbVhGG_lwY9beh6w82FX9GdK-B4yEJK56j-SYiyBfKseSVHH6hyc4cS5aWRJgwp1oGurg46HM1l9BIs7JRt2d_jPsWn/s1600/WormTrack.jpg" title="wormtrack " width="400" /></div>
<b>WormTrack</b> is a <b>Network based intrusion detection system (NIDS)</b> designed 
to identify scanning activity on the <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a>, in particular of <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanning</a> 
worms (horizontal scanning of the network). It attempts to do that 
WITHOUT having any type of privileged access to the network equipment, 
for example a MONITOR port on a switch. It also doesn't require a 
constant updating of its signature engine, as new threats are released, 
since it is based on <a href="http://www.toolwar.com/search/label/Detect" target="_blank">detection</a> of anomalous  activity - which all Worms,
 that propagate through the network, would exhibit in order to survive 
and spread efficiently. A <b>Network IDS </b>which allows detection of scanning worms on a Local Area 
Network by <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">monitoring</a> of anomalous ARP traffic. This allows detection of
 scanning threats on the network, without having a privileged access on a
 Switch to set up a dedicated Monitor PORT, nor does it require a 
constant updating of the rules engine to address new threats. </div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>General Info & Configuration :: </b><a href="http://code.google.com/p/wormtrack/wiki/GeneralInfo" target="_blank">Click Here</a> </div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://wormtrack.googlecode.com/files/wormtrack-0.1.tar.gz" target="_blank">WormTrackv0.1</a> (.tar.gz)<b><br /></b></div>
<div style="text-align: justify;">
<b>Source Website ::</b><a href="http://code.google.com/p/wormtrack/" target="_blank"> http://code.google.com/p/wormtrack/</a></div>

WormTrack (Network IDS) :: Tools

WormTrack is a Network based intrusion detection system (NIDS) designed to identify scanning activity on the network , in particular o...

Pytbull (IDS/IPS Testing) :: Framework

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
 <img alt="pytbull ids mode" border="0" height="291" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBUJPMHKujz46n6sRck2NZDM075hEsNEerHmckZ-25awz2AFXTsWET-KZg7ngqkBZi0hpKmBHgm9_EwaLliZYrhmFPjNhRYcjqM3beHBHH4szekg9xDZKMPb1parSaCEd4KfgunPEj-e4f/s1600/pytbull-ids-mode.png" title="pytbull ids mode" width="400" /></div>
<b>Pytbull</b> is an <b>Intrusion Detection/Prevention System (IDS/IPS) testing framework</b> for <i><a href="http://www.toolwar.com/2013/09/snort-tools_7.html" target="_blank">Snort</a> and Suricata.</i> We all know the greatness of these two projects. Even though it concentrates on Snort and Suricata, it can possibly be used to test the <a href="http://www.toolwar.com/search/label/Detect" target="_blank">detection</a> and blocking capabilities of other <b><a href="http://www.toolwar.com/search/label/IDS" target="_blank">IDS</a>/<a href="http://www.toolwar.com/search/label/IPS" target="_blank">IPS</a></b> also. You can also use it to compare IDS/IPS, or compare their configuration modifications or to simply check/validate configurations. The <a href="http://www.toolwar.com/search/label/Frameworks" target="_blank">framework</a> is well equipped with about 300 tests grouped in 8 testing modules, such as:You've just set up your Intrusion Detection/Prevention System  (IDS/IPS) and feel "Now I'm secure". But how can you be so sure? And how  much do you trust your IDS/IPS?</div>
<div style="text-align: justify;">
The only way to ensure your <b>IDS/IPS</b> detects and blocks unwanted  traffic is to test it with specific payloads and <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a>, but this job can  take hours or even days...</div>
<div style="text-align: justify;">
Why all this pain? Here is where pytbull comes in!</div>
<div style="text-align: justify;">
<b>Pytbull</b> is a <a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a> based flexible IDS/IPS <a href="http://www.toolwar.com/search/label/Testing" target="_blank">testing</a> framework  shipped with more than 300 tests, grouped in 9 modules, covering a large  scope of attacks (clientSideAttacks, testRules, badTraffic,  fragmentedPackets, multipleFailedLogins, evasionTechniques, shellCodes,  denialOfService, pcapReplay)</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/_zS1f-F9niw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="https://downloads.sourceforge.net/project/pytbull/pytbull-2.0.tar.bz2" target="_blank">Pytbull v2.0</a> (.tar.bz2)</div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://pytbull.sourceforge.net/ </div>

Pytbull (IDS/IPS Testing) :: Framework

Pytbull is an Intrusion Detection/Prevention System (IDS/IPS) testing framework for Snort and Suricata. We all know the greatness o...

Autopsy (Digital Investigation Analysis) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="Autopsy logo" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf21td83eNESL_QTE9NjV-ZSQnqexy4JbWFatUW-4KkqydKjwnSYKqQmPFBy6cnZG7rQZEG7X211P1v_klRTAzd3_Ee5pDqpYn3sfpupP4ff-ao6WwTUaeq8fqKi0PgJQiwb-loD4CvqrI/s1600/autopsy+logo.jpg" title="Autopsy logo" width="200" /></div>
<div style="text-align: justify;">
<b>Autopsy</b> is a graphical interface to the <a href="http://www.toolwar.com/search/label/CLI" target="_blank"><i>command line</i></a> <b>digital investigation analysis tools</b> in <a href="http://www.toolwar.com/2014/01/the-sleuth-kit-tsk-forensics-framework.html" target="_blank"> The Sleuth Kit</a>. Together, they can analyze <i>Windows and UNIX</i> disks and file systems (NTFS, FAT, UFS1/2, Ext2/3).</div>
<div style="text-align: justify;">
<b>The Sleuth Kit </b>and <b>Autopsy</b> are both Open Source and run on UNIX platforms (you can use Cygwin to run them both on <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>). As <b>Autopsy</b> is HTML-based, you can connect to the <b>Autopsy</b> server from any platform using an HTML browser. Autopsy provides a "File Manager"-like interface and shows details about deleted data and file system structures.</div>
<h3 style="text-align: justify;">
<span style="font-size: small;">Analysis Modes</span></h3>
<ul style="text-align: justify;">
<li>A <b>dead analysis</b> occurs when a dedicated <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a> system is used to examine the data from a suspect system. In this case, <b>Autopsy</b> and The Sleuth Kit are run in a trusted environment, typically in a lab. Autopsy and TSK support raw, Expert Witness, and AFF file formats. </li>
<li>A <b>live analysis</b> occurs when the suspect <a href="http://www.toolwar.com/search/label/System" target="_blank">system</a> is being analyzed while it is running. In this case, <b>Autopsy</b> and The Sleuth Kit are run from a CD in an untrusted environment. This is frequently used during incident response while the incident is being confirmed. After it is confirmed, the system can be acquired and a dead analysis performed. </li>
</ul>
<h3 style="text-align: justify;">
Evidence Search Techniques</h3>
<ul style="text-align: justify;">
<li><b>File Listing</b>: Analyze the files and directories, including the names of deleted files and files with Unicode-based names.</li>
<li><b>File Content</b>: The contents of files can be viewed in raw, hex, or the ASCII strings can be extracted. When data is interpreted, Autopsy sanitizes it to prevent damage to the local analysis system. Autopsy does not use any client-side scripting languages.</li>
<li><b>Hash Databases</b>: Lookup unknown files in a <a href="http://www.toolwar.com/search/label/Hash" target="_blank">hash</a> database to quickly identify it as good or bad. Autopsy uses the NIST <i>National Software Reference Library (NSRL)</i> and user created databases of known good and known bad files </li>
<li><b>File Type Sorting</b>: Sort the files based on their internal signatures to identify files of a known type. Autopsy can also extract only graphic images (including thumbnails). The extension of the file will also be compared to the file type to identify files that may have had their extension changed to hide them.</li>
<li><b>Timeline of File Activity</b>: In some cases, having a timeline of file activity can help identify areas of a file system that may contain evidence. Autopsy can create timelines that contain entries for the Modified, Access, and Change (MAC) times of both allocated and unallocated files.</li>
<li><b>Keyword Search</b>: Keyword searches of the file system image can be performed using ASCII strings and grep regular expressions. Searches can be performed on either the full file system image or just the unallocated space. An index file can be created for faster searches. Strings that are frequently searched for can be easily configured into Autopsy for automated searching. </li>
<li><b>Meta Data Analysis</b>: Meta Data structures contain the details about files and directories. Autopsy allows you to view the details of any meta data structure in the file system. This is useful for recovering deleted content. Autopsy will search the directories to identify the full path of the file that has allocated the structure.</li>
<li><b>Data Unit Analysis</b>: Data Units are where the file content is stored. Autopsy allows you to view the contents of any data unit in a variety of formats including ASCII, hexdump, and strings. The file type is also given and Autopsy will search the meta data structures to identify which has allocated the data unit. </li>
<li><b>Image Details</b>: File system details can be viewed, including on-disk layout and times of activity. This mode provides information that is useful during data recovery. </li>
</ul>
<h3 style="text-align: justify;">
Case Management</h3>
<ul style="text-align: justify;">
<li><b>Case Management</b>: Investigations are organized by <i>cases</i>, which can contain one or more <i>hosts</i>. Each host is configured to have its own time zone setting and clock skew so that the times shown are the same as the original user would have seen. Each host can contain one or more file system images to analyze. </li>
<li><b>Event Sequencer</b>: Time-based events can be added from file activity or IDS and firewall logs. Autopsy sorts the events so that the sequence of incident events can be more easily determined. </li>
<li><b>Notes</b>: Notes can be saved on a per-host and per-investigator basis. These allow you to make quick notes about files and structures. The original location can be easily recalled with the click of a button when the notes are later reviewed. All notes are stored in an ASCII file. </li>
<li><b>Image Integrity</b>: It is crucial to ensure that files are not modified during analysis. Autopsy, by default, will generate an MD5 value for all files that are imported or created. The integrity of any file that Autopsy uses can be validated at any time. </li>
<li><b>Reports</b>: Autopsy can create ASCII reports for files and other file system structures. This enables you to quickly make consistent data sheets during the investigation.</li>
<li><b>Logging</b>: Audit logs are created on a case, host, and investigator level so that actions can be easily recalled. The exact Sleuth Kit commands that are executed are also logged.</li>
<li><b>Open Design</b>: The code of Autopsy is open source and all files that it uses are in a raw format. All configuration files are in ASCII text and cases are organized by directories. This makes it easy to export the data and archive it. It also does not restrict you from using other tools that may solve the specific problem more appropriately.</li>
<li><b>Client Server Model</b>: Autopsy is HTML-based and therefore you do not have to be on the same system as the file system images. This allows multiple investigators to use the same server and connect from their personal systems.</li>
</ul>
<div style="text-align: justify;">
<b>Autopsy</b> is written in <a href="http://www.toolwar.com/2013/09/perl-language.html" target="_blank">Perl</a> and runs on the same UNIX platforms as <a href="http://www.toolwar.com/2014/01/the-sleuth-kit-tsk-forensics-framework.html" target="_blank">The Sleuth Kit</a>:</div>
<ul style="text-align: justify;">
<li><a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a></li>
<li><a href="http://www.toolwar.com/search/label/Mac" target="_blank">Mac OS X</a></li>
<li>Open & FreeBSD</li>
<li>Solaris</li>
<li>Cygwin (you cannot use the win32 executables that can be downloaded from this site, you must build in Cygwin) </li>
</ul>
<h3>
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/RUgmkvt2WNg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
 </h3>
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://sourceforge.net/projects/autopsy/files/autopsy/3.0.8/autopsy-3.0.8-32bit.msi/download" target="_blank">Autopsy 3.0.8x32</a> (.msi) | <a href="http://sourceforge.net/projects/autopsy/files/autopsy/3.0.8/autopsy-3.0.8-64bit.msi/download" target="_blank">Autopsy 3.0.8x64</a> (.msi)<br />
<b>Linux :: </b><a href="http://sourceforge.net/projects/autopsy/files/autopsy/2.24/autopsy-2.24.tar.gz/download" target="_blank">Autopsy 2.08</a> (.tar.gz)<br />
<b>Official Website :: </b><a href="http://www.sleuthkit.org/autopsy/index.php" target="_blank">http://www.sleuthkit.org/autopsy/index.php </a>

Autopsy (Digital Investigation Analysis) :: Tools

Autopsy is a graphical interface to the command line digital investigation analysis tools in The Sleuth Kit . Together, they can anal...

Oryon C Portable (Intelligence Investigations) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Oryon C Portable Logo" border="0" height="207" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9kco19KpeXKaOauklNcyR7Mqb7aJToI227Jp6oVRMqzmUOFIlCx9AYR3LMlp8AGhOmyEa0UPcI5NByrn9hNG9fuAw57vrtUBXHIMsrLXi-W0kkuu8ZML7Dl0gTJV-ElkjIiF733Q5Kh1k/s1600/Oryon+c+Prortable.png" title="Oryon C Portable Logo" width="400" /></div>
<b>Oryon C Portable</b> is a <a href="http://www.toolwar.com/search/label/Browser" target="_blank"><b>web browser</b></a> designed to <i>assist researchers</i> in 
conducting <b>Open Source Intelligence investigations</b>. <b>Oryon</b> comes with 
dozens of pre-installed <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a> and a select set of links cataloged by 
category – including those that can be found in the OI Shared Resources.<br />
<br />
<b>Specification ::</b><br />
<br />
- Based on SRWare Iron version 31.0.1700.0 (Chromium)<br />
- More than 70 pre-installed tools to support investigators in their everyday work<br />
- More than 600 links to specialized sources of information and online investigative tools<br />
- Additional privacy protection features<br />
-
 A ready to use opml file containing a sorted collection of information 
sources in the fields such as: OSINT, Intelligence, InfoSec, defense, 
and more.<br />
<br />
<b>Version Info ::</b><br />
0.1 Initial release<br />
<br />
<b>Type ::</b><br />
Portable. No need to install, you can start using straightaway in your desktop, pendrive, etc.<br />
<br />
<b>Platform ::</b><br />
<a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> : XP, Vista, 7 x32 & x64<br />
<br />
<b>License ::</b><br />
Various Open Source Licenses</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Documentation ::</b> <a href="http://osintinsight.com/Documentation.pdf" target="_blank">Click Here</a></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://sourceforge.net/projects/oryon/files/latest/download" target="_blank">Oryon C Portable-v0.1</a><b> (.exe)</b></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://osintinsight.com/oryon.php">http://osintinsight.com/oryon.php</a></div>
<div style="text-align: justify;">
<b>Submitted By ::</b> OSINTINSIGHT</div>

Oryon C Portable (Intelligence Investigations) :: Tools

Oryon C Portable is a web browser designed to assist researchers in conducting Open Source Intelligence investigations . Oryon comes...

MobiSec (Mobile Penetration Testing) :: Distribution

<div class="separator" style="clear: both; text-align: center;">
<img alt="MobiSec Logo" border="0" height="290" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjW59x4V_GWksXI63xJZsmQMOSfrNW-Ii9BKcCHQs0KpNexigf5nqIW5Pt5JcSmZpM7Uxe08zCrygo5pOcxAKd1lXE3ahraIJm1PGjx0zhX1wk_aVJwBdE77smzaA_kljI8pBqlY8MP4d_L/s1600/MobiSec+Logo.jpg" title="MobiSec Logo" width="400" /></div>
<div style="text-align: justify;">
The <b>MobiSec</b> Live Environment <b>Mobile Testing open source project</b> is a live     environment for testing <a href="http://www.toolwar.com/search/label/Phone" target="_blank">mobile</a> environments, including devices, applications, and     supporting infrastructure. The purpose is to provide attackers and defenders the     ability to test their mobile environments to identify design weaknesses and     vulnerabilities.</div>
<div style="text-align: justify;">
<b>MobiSec</b> provides a single environment for testers to leverage the best of all     available open source <a href="http://www.toolwar.com/search/label/Phone" target="_blank">mobile testing tools</a>, as well as the ability to install     additional <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a> and platforms, that will aid the penetration tester through the     testing process as the environment is structured and organized based on an     industry-proven testing <a href="http://www.toolwar.com/search/label/Frameworks" target="_blank">framework</a>. Using a live environment provides penetration     testers the ability to boot the <b>MobiSec</b> Live Environment on any Intel-based system     from a DVD or USB flash drive, or run the test environment within a virtual machine.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>MobiSec</b> is a <b>bootable Linux distribution</b> that penetration testers,  ethical hackers, and other information <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> pros can use to evaluate  and analyze mobile devices, applications, and supporting  infrastructures. Created by <b>SecureIdeas</b>, the <b>MobiSec framework</b> lets you  test mobile environments to identify design weaknesses and  vulnerabilities, all with the goal of improving security. Instead of you  having to download countless tools, install them in your own  environment, and then troubleshoot interoperability issues, the <b>MobiSec</b>  team has done all of that work for you, pulling together best-of-breed  free tools for mobile device and infrastructure <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a> into one handy  distribution.</div>
<div style="text-align: justify;">
The <b>MobiSec</b> Live Environment includes the following capabilities:</div>
<ul style="text-align: justify;">
<li>Creates a single environment for testers to leverage the best of all available open source mobile testing tools</li>
<li>Allows installation of additional tools and platforms</li>
<li>Assists the penetration tester throughout the testing process as  the environment is structured and organized based on an industry-proven  testing framework</li>
<li>Provides penetration testers the ability to boot the MobiSec Live  Environment on any x86- or x64-based system from a DVD or <a href="http://www.toolwar.com/search/label/USB" target="_blank">USB flash  drive</a>, or run the test environment within a <a href="http://www.toolwar.com/search/label/Virtual" target="_blank">virtual machine</a></li>
</ul>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/n1GlXOvBuqg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://sourceforge.net/projects/mobisec/files/latest/download" target="_blank">MobiSec 1.1</a> (.iso)</div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://mobisec.professionallyevil.com/</div>

MobiSec (Mobile Penetration Testing) :: Distribution

The MobiSec Live Environment Mobile Testing open source project is a live environment for testing mobile environments, including d...

Hash Generator :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZKNgtee5QHJGMGG92lCWQPH2SaGSQWkH7KAlwkyK4tjl3Itrr147UV_LtlnMCsUVww02j3tEs-H2HT3DkjYpYeV88yv8cN-a6PJEycM5CpRpWEWPIo7uUTb4GShD3wXyZfPfIMUconqd1/s1600/hash+generator+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="hash generator screenshot" border="0" height="322" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZKNgtee5QHJGMGG92lCWQPH2SaGSQWkH7KAlwkyK4tjl3Itrr147UV_LtlnMCsUVww02j3tEs-H2HT3DkjYpYeV88yv8cN-a6PJEycM5CpRpWEWPIo7uUTb4GShD3wXyZfPfIMUconqd1/s400/hash+generator+screenshot.jpg" title="hash generator screenshot" width="400" /></a></div>
<b>Hash Generator</b> is the <i>FREE universal <a href="http://www.toolwar.com/search/label/Hash" target="_blank">hash</a> generator tool</i> which automates the generation of <i>14 different type of hashes</i> or checksums. It support most of the popular hashes including MD5 family, SHA family, BASE64, LM, NTLM, CRC32, ROT13, RIPEMD, ALDER32, HAVAL, WHIRLPOOL etc.<br />
<br />
<b>Hash Generator</b> can even generate hash for the file as well as text input also. User can directly enter or paste any text from clipboard and generate hash. It also supports 'Drag & Drop interface' which allows you to quickly drag files onto the <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> for hash generation.<br />
<br />
<b>Hashes or checksums</b> are mainly used for file integrity verification. Often files downloaded from Internet are checked with MD5/SHA256 hash to make sure file is not tempered. Hashes are also used in <a href="http://www.toolwar.com/search/label/Encryption" target="_blank">encryption</a> and storage of <a href="http://www.toolwar.com/search/label/Password" target="_blank">password</a> as well as other sensitive data to protect it from the spying eyes. <b>HashGenerator</b> helps in quickly computing or verifying the hash for any such file or password text.<br />
<br />
It works on wide range of platforms starting from <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> XP to latest operating system Windows 8.</div>
<div style="text-align: justify;">
<h2>
Features ::</h2>
<ul>
<li>Generate hashes for 15+ popular algorithms including MD5, SHA256, BASE64.</li>
<li>Create Hash for either the File or custom Text.</li>
<li>'Drag & Drop' feature to quickly drag files onto the tool.</li>
<li>Shell Context Menu to quickly generate hash by simply right clicking on any file.</li>
<li>Option to to selectively copy the hash from the displayed list.</li>
<li>Save the generated hash list to HTML/TEXT/XML file</li>
<li>Simple, Easy to Use <a href="http://www.toolwar.com/search/label/GUI" target="_blank">GUI Interface</a>.</li>
<li>Completely Portable Tool which also comes with Installer for local Installation & Uninstallation.  </li>
</ul>
</div>
<div style="text-align: justify;">
<h3>
<br />
</h3>
</div>
<div style="text-align: justify;">
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ImBdB0aPjMs?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
</div>
<div style="text-align: justify;">
<h3>
Download ::</h3>
</div>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://securityxploded.com/download.php#hashgenerator" target="_blank">Hash Generator v3.0</a><b><br /></b></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://securityxploded.com/hashgenerator.php">http://securityxploded.com/hashgenerator.php</a><b><br /></b></div>

Hash Generator :: Tools

Hash Generator is the FREE universal hash generator tool which automates the generation of 14 different type of hashes or checksums. ...

TCPXtract (Network Traffic Extracting) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="tcpxtract" border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAqmL04htFo4cwsqJf60ruYKJbVcXmUbnsVr1NDB1wzSsk8wfB8iamSOsfzWyNH0v1iebn8mHNvwO-8axc4WJdJLZmoXI_3x0tQUpTiPg4Prr5CYbJTMM3xExj4w9FAXAXPlvmmPMw3Wm6/s1600/tcpxtract.jpg" title="tcpxtract" width="400" /></div>
<b>tcpxtract</b> is a tool for <b>extracting files from network traffic</b> based on file signatures. Extracting files based on file type headers and footers (sometimes called <i>"carving"</i>) is an age old data <a href="http://www.toolwar.com/search/label/Recovery" target="_blank">recovery</a> technique. Tools like <a href="http://www.toolwar.com/2013/11/foremost-tools.html" target="_blank">Foremost</a> employ this technique to recover files from arbitrary data streams. <b>Tcpxtract</b> uses this technique specifically for the application of intercepting files transmitted across a <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a>. Other <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a> that fill a similar need are driftnet and EtherPEG. driftnet and <b>EtherPEG</b> are tools for <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">monitoring</a> and extracting graphic files on a network and is commonly used by network administrators to police the internet activity of their users. The major limitations of driftnet and EtherPEG is that they only support three filetypes with no easy way of adding more. The search technique they use is also not scalable and does not search across <a href="http://www.toolwar.com/search/label/Packet" target="_blank">packet</a> boundries. <b>tcpxtract</b> features the following:<br />
<ul>
<li>Supports 26 popular file formats out-of-the-box. New formats can be added by simply editing its config file.</li>
<li>With a quick conversion, you can use your old Foremost config file with tcpxtract.</li>
<li>Custom written search algorithm is lightning fast and very scalable.</li>
<li>Search algorithm searches across packet boundries for total coverage and forensic quality.</li>
<li>Uses libpcap, a popular, portable and stable library for network data capture.</li>
<li>Can be used against a live network or a tcpdump formatted capture file. </li>
</ul>
<br />
<h3>
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/uLQokDjcivU?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<h3>
Download :: </h3>
<b>Linux :: </b><a href="http://prdownloads.sourceforge.net/tcpxtract/tcpxtract-1.0.1.tar.gz?download" target="_blank">tcpxtract v1.01</a> (.tar.gz)<b> </b><br />
<b>Official Website ::</b> <a href="http://tcpxtract.sourceforge.net/">http://tcpxtract.sourceforge.net/</a></div>

TCPXtract (Network Traffic Extracting) :: Tools

tcpxtract is a tool for extracting files from network traffic based on file signatures. Extracting files based on file type headers and...

Revealer Toolkit (Forensics) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="Computer Forensics" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8e3p7c82cxcOtvuuFyaZfuwteN-5PuOGb4hjr_eqQM0XsdOx3B6JtMf0p2-3aV7hm2q1UkbKhCdPSeBde9jJsffYi7TsG-AJJ7pmNgOPo-OkvXlubRiq52JKd9tI0FQb1R6NnbPKhXF-V/s400/computer-forensics.jpg" title="Computer Forensics" width="400" /></div>
<div style="text-align: justify;">
<strong>Revealer Toolkit</strong> is a <a href="http://www.toolwar.com/search/label/Frameworks" target="_blank">framework</a> and simple 
scripts for <b>computer forensics</b>. It uses Brian Carrier's <a href="http://www.toolwar.com/2014/01/the-sleuth-kit-tsk-forensics-framework.html" target="_blank">The Sleuth Kit</a> 
as the backbone, as well as other <a href="http://www.toolwar.com/search/label/Free" target="_blank">free tools</a>. </div>
<div style="text-align: justify;">
The aim of the <b>
Revealer Toolkit</b> is to automate rutinary tasks and to manage sources and
 results from another perspective than the usual forensic frameworks. It
 will be specially useful in cases with several computers and digitals 
forensic sources.  </div>
<div style="text-align: justify;">
RVT is developed and actively tested by computer <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensic</a> investigators working at EVIDENTIA  and INCIDE, spanish companies sited at the beautiful city of Barcelona.</div>
<h3 style="text-align: justify;">
Introduction to version 0.2.1</h3>
<div style="text-align: justify;">
The current state of the project can be described as a <i>proof of concept</i>,
 that is, RVT version 0.2 proofs that the objectives we are looking for 
are reachable, but further work is necessary in order to have a stable 
version. </div>
<div style="text-align: justify;">
Therefore, RVT v0.2 can be used to automate computer 
forensic tasks on a group of several digital forensic images, but the 
code is still buggy, some tasks have to be run manually, and the 
interface has to be improved.</div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Wiki :: </b><a href="http://code.google.com/p/revealertoolkit/w/list" target="_blank">Click Here </a><b><br /></b></div>
<div style="text-align: justify;">
<b>Revealer User Guide ::</b> <a href="http://revealertoolkit.googlecode.com/files/RVT-userGuide.pdf" target="_blank">Click Here</a> (.pdf)</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows ::</b> <a href="http://revealertoolkit.googlecode.com/files/RVT_v0.2.1.zip" target="_blank">Revealer Toolkit 0.2.1 </a></div>
<div style="text-align: justify;">
<b>Source Website ::</b> <a href="http://code.google.com/p/revealertoolkit/" target="_blank">http://code.google.com/p/revealertoolkit/</a></div>

Revealer Toolkit (Forensics) :: Framework

Revealer Toolkit is a framework and simple scripts for computer forensics . It uses Brian Carrier's The Sleuth Kit as the backbo...

BTCrack (Bluetooth PIN Bruteforce) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="BTCrack" border="0" height="230" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj39dSDx3Q16NiYxmcXH5VHD94Rf39rMa2VbZdwWfgE1bGbxiL6ggWB3LlGMiWqtUEy-sERyTTMmrpe5-288pBCgS_JBX0EP0tVZtj9XKe0NYZThTtOjEnY2deWAo9osu8t-u4ofVRIHhUo/s320/BTCrack.jpg" title="BTCrack" width="320" /></div>
<div style="text-align: justify;">
<span class="style3"><b>BTCrack</b> is the worlds first <i><a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">Bluetooth</a> Pass phrase 
(PIN) bruteforce  tool</i>, <b>BTCrack</b> will bruteforce the Passkey and the Link
 key from  captured pairing* exchanges.</span></div>
<div style="text-align: justify;">
<span class="style3"><b>BTcrack</b> was demoed and realeased at Hack.lu 2007 and 23C3 in 
Berlin, the video of the presentation is available on Google Video .</span><span class="style3"><br />
          To capture the pairing data it is  necessary to have a <i>
Professional Bluetooth <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">Analyzer</a></i> : FTE (BPA 100, BPA  105, others), 
Merlin OR  flash a CSR based consumer USB  dongle with special <a href="http://www.toolwar.com/search/label/Firmware" target="_blank">firmware</a>.</span></div>
<div style="text-align: justify;">
<span class="style3"><span class="style3"><b>Speed Comparison :</b><br />
·        P4 2Ghz - Dual Core     200.000 keys/sec</span><br />
· <span class="style3">FPGA E12 @ 50Mhz      7.600.000 keys/sec<br />
·
            FPGA E12 @ 75Mhz     10.000.000 keys/sec<br />
· FPGA E14             30.000.000 keys/sec<br />
<br />
<b>Changes :</b><br />
· 1.0 First release<br />
· 1.1 Intermediate Release <br />
  E12 + E14 FPGA Support ( http://www.picocomputing.com)<br />
  Splash Screen <br />
  Process Priority <br />
  Speed increase (+15%)<br />
</span> </span></div>
<h3 style="text-align: justify;">
<span class="style3">Tutorials ::</span></h3>
<div style="text-align: justify;">
<span class="style3"><b>Video ::</b> <a href="http://vimeo.com/3256789" target="_blank">Click Here </a></span></div>
<h3 style="text-align: justify;">
<span class="style3">Download ::</span></h3>
<div style="text-align: justify;">
<b><span class="style3">Windows :: </span></b><a href="http://secdev.zoller.lu/btcrack.zip" target="_blank"><span class="style3">BTCrack (.zip)</span></a><b><span class="style3"><br /></span></b></div>
<div style="text-align: justify;">
<b><span class="style3">Official Website :: </span></b><a href="http://www.g-sec.lu/products.html"><span class="style3">http://www.g-sec.lu/products.html</span></a>
            </div>

BTCrack (Bluetooth PIN Bruteforce) :: Tools

BTCrack is the worlds first Bluetooth Pass phrase (PIN) bruteforce tool , BTCrack will bruteforce the Passkey and the Link key from...

iPhone Analyzer :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="iphone analysis" border="0" height="265" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyVrxfsAbT1zhDHt5nIp-4u2AZSwoZbbGPfy91RQmjyHX4TU-0qcH4M5fHpd1PuEVma0RI6zVJLki1tJcwrYoHZ3x9BTvqnrE-LvuJsFDLDqOG_K8IX0B0eufoAkJj5cB1qEqlO8f79Kjw/s1600/iphone+analysis.jpg" title="iphone analysis" width="400" /></div>
</div>
<div style="text-align: justify;">
<b>iPhone Analzyer</b> allows you to <i>forensically examine or recover date from 
in iOS device</i>. It principally works by <i>importing backups</i> produced by 
iTunes or third party software, and providing you with a rich interface 
to explore, <i><a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyse</a> and recover data</i> in human readable formats. Because 
it works from the backup files everything is <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensically</a> safe, and no 
changes are made to the original data.</div>
<h3 style="text-align: justify;">
<span style="font-size: small;">Features ::</span></h3>
<ul style="text-align: justify;">
<li>Supports iOS 2, iOS 3, iOS 4 and iOS 5 devices</li>
<li>Multi-platform (<a href="http://www.toolwar.com/search/label/Java" target="_blank">Java</a> based) product, supported on <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>, <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> and <a href="http://www.toolwar.com/search/label/Mac" target="_blank">Mac</a></li>
<li>Fast, powerful search across device including regular expressions</li>
<li>Integrated mapping supports visualisation of geo-tagged information,
 including google maps searches, photos, and cell-sites and <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">wifi</a> 
locations observed by the device (the infamous "locationd" data)</li>
<li>Integrated support for text messages, voicemail, address book 
entries, photos (including metadata), call records and many many others</li>
<li>Recovery of "deleted" sqlite records (records that have been tagged 
as deleted, but have not yet been purged by the device can often be 
recovered),/li>
</li>
<li>Integrated visualisation of plist and sqlite files</li>
<li>Includes support for off-line mapping, supporting mapping on computers not connected to the Internet</li>
<li>Support for KML export and direct export to Google Earth</li>
<li>Browse the device file structure, navigate directly to key files or 
explore the device using concepts such as "who", "when", "what" and 
"where".</li>
<li>Analyse jail broken device directly over SSH without need for backup (experimental)</li>
<li class="feature">iPhone Backup Browsing</li>
<li class="feature">Native file viewing (plist, sqlite, etc)</li>
<li class="feature">Searching including regular expressions</li>
<li class="feature">ssh access for <a href="http://www.toolwar.com/search/label/Jailbreak" target="_blank">jailbroken</a> phones (beta)</li>
<li class="feature">Reports</li>
<li class="feature">Restore files</li>
<li class="feature">Recover backups</li>
<li class="feature">View all iPhone photos</li>
<li class="feature">examine address book, sms and loads of others</li>
<li class="feature">find and recover passwords</li>
<li class="feature">Export files to local filesytem </li>
<li class="feature"><a href="http://www.toolwar.com/search/label/Online" target="_blank">Online</a> and offline mapping</li>
<li class="feature">Geo track where a device has been</li>
<li class="feature">IOS5 and earlier versions supported</li>
<li class="feature">IOS6 is only partially supported (several known problems) </li>
</ul>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>User Manual (PDF) ::</b><a href="http://www.crypticbit.com/files/ipa_user_guide.pdf" target="_blank"> Click Here </a></div>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>JAR :: </b><a href="http://sourceforge.net/projects/iphoneanalyzer/files/latest/download" target="_blank">iPhone Analyzer (.jar)</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.crypticbit.com/zen/products/iphoneanalyzer">http://www.crypticbit.com/zen/products/iphoneanalyzer</a></div>

iPhone Analyzer :: Tools

iPhone Analzyer allows you to forensically examine or recover date from in iOS device . It principally works by importing backups pr...

RegistryDecoder (Windows Registry Forensics) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="registrydecoder icon" border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMIhBRUMLX-a4LG7hoynF82A7nZ5ngAu4onGUOBohjYbLn-IK4dmej-52Gm9WbEUW3G_GW8-L8FWNEUG7vINlaxS0WNP8AiLqL_PFc5P8OfHcpf-3A5H4yMIdRnaZIx6-GlK3wDOKDOHhm/s1600/registrydecoder.png" title="registrydecoder icon" width="400" /></div>
<span itemprop="description" style="font-size: small;"><b>RegistryDecoder</b> is a automated <i>Acquisition, Analysis, and Reporting of Registry</i> Contents</span><span style="font-size: small;">. <b>Registry Decoder</b> provides a single tool in which to perform <i>browsing,
 searching, <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a>, and reporting of <a href="http://www.toolwar.com/search/label/Registry" target="_blank">registry</a> hive</i> contents. All 
functionality is exposed through an intuitive <a href="http://www.toolwar.com/search/label/GUI" target="_blank">GUI</a> interface and 
accommodates even novice investigators. <b>Registry Decoder</b> also acts as a great resource for new research and experimenting within the registry.</span><br />
<div style="text-align: justify;">
<span style="font-size: small;"><b>Digital <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensics</a></b> deals with the analysis of artifacts on all types of 
digital devices. One of the most prevalent analysis techniques performed
 is that of the registry hives contained in Microsoft <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> operating 
systems. <b> Registry Decoder</b> was developed with the purpose of providing a
 single <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> for the acquisition, analysis, and reporting of registry 
contents.</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: small; line-height: 115%;"><b>Registry
 Decoder</b> consists of two components, the first of which is a tool for 
<a href="http://www.toolwar.com/search/label/Online" target="_blank">online</a> acquisition of registry files from a running machine.
 To safely acquire files from a running machine, we ‘freeze’ a copy of 
the current registry files using the System Restore Facility. This 
places the files into a read-only location and ensures that the 
operating system will not have the files opened (which would prevent 
them from being copied to external storage).</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: small; line-height: 115%;">Beyond
 the current set of registry files, the acquisition component can also 
acquire historical files from the running system. These historical files
 are acquired from XP machines through the <a href="http://www.toolwar.com/search/label/System" target="_blank">System </a>Restore Point facility
 and through the Volume Shadow Service on Vista and Windows 7 machines.</span></div>
<div style="text-align: justify;">
<span style="font-size: small;"><br /></span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: small; line-height: 115%;">The
 analysis section of the offline component contains a number of powerful
 features. The first feature is Search, which allows for powerful 
searching across <a href="http://www.toolwar.com/search/label/Registry" target="_blank">registry</a> hives. The searching abilities include:</span></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<ul style="text-align: justify;">
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Filtering by hive keys, name, and data</span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Filtering by the last write time of keys</span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Searching individual terms or with a newline delimited search term file</span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Exact or wildcard based search</span><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Viewing of search results</span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Automated reporting of search contents to HTML, PDF, or XLS</span></li>
</ul>
<br />
<h3>
Tutorials ::</h3>
<b>Text Tutorial (PDF) :: </b><a href="http://registrydecoder.googlecode.com/files/RegistryDecoder-Offline-Analysis-Instructions-v1.1.pdf" target="_blank">Click Here </a><br />
<b>FAQ ::</b> <a href="http://code.google.com/p/registrydecoder/wiki/FAQ" target="_blank">Click Here </a><br />
<br />
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://registrydecoder.googlecode.com/files/regedcoderR103.zip" target="_blank">RegistryDecoder (.zip)</a><b><br /></b><br />
<b>Official Website :: </b><a href="http://www.registrydecoder.com/">http://www.registrydecoder.com/</a><b><br /></b>

RegistryDecoder (Windows Registry Forensics) :: Tools

RegistryDecoder is a automated Acquisition, Analysis, and Reporting of Registry Contents . Registry Decoder provides a single tool in w...

USB Write Blocker :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9ZByi54hPn7v04uGKEx2jZaQJOJ1rWCNJmv7Zr8uE_ZOfRrNCt2Z1LCPloZKSVKaop7SYqwJcf8ZTvfLubORAFC7237Z94KhSvUkruBb7ClH7ZnFTsBpq98xmVmio5dylc1uSgOr2rrLu/s1600/USB+Blocker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9ZByi54hPn7v04uGKEx2jZaQJOJ1rWCNJmv7Zr8uE_ZOfRrNCt2Z1LCPloZKSVKaop7SYqwJcf8ZTvfLubORAFC7237Z94KhSvUkruBb7ClH7ZnFTsBpq98xmVmio5dylc1uSgOr2rrLu/s1600/USB+Blocker.jpg" width="400" /></a></div>
<b>USB Write blocker</b> is an application that will use the <a href="http://www.toolwar.com/search/label/Windows" target="_blank">windows</a> <a href="http://www.toolwar.com/search/label/Registry" target="_blank">registry</a> to write <b>block USB devices</b>. It is a useful <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> for those who wish to view the contents of USB drives without making changes to the files metadata or timestamps. This is a critical feature in the fields of digital and computer <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensics</a> as well as eDiscovery where time stamps play a crucial role in the validity of evidence.</div>
<div style="text-align: justify;">
An added feature of <b>USB Write-Blocker</b> is the ability to see the application status in your task bar when you hover over its icon with your mouse. </div>
<div style="text-align: justify;">
<br /></div>
<span class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" data-hs-cos-general-type="widget" data-hs-cos-type="rich_text" id="hs_cos_wrapper_module_13657563409421086"><span style="font-size: small;"><b>DSi USB Write-Blocker Utility – Compatible Operating Systems:</b></span>
</span><br />
<ul><span class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" data-hs-cos-general-type="widget" data-hs-cos-type="rich_text" id="hs_cos_wrapper_module_13657563409421086">
<li>Windows XP (w/SP2 and Higher, 32bit & 64bit)</li>
<li>Windows Vista (32bit & 64bit)</li>
<li>Windows 7 (32bit & 64bit)</li>
</span></ul>
<span class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" data-hs-cos-general-type="widget" data-hs-cos-type="rich_text" id="hs_cos_wrapper_module_13657563409421086">
</span><br />
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://cdn2.hubspot.net/hub/252640/file-71226249-zip/USBWriteBlocker.zip" target="_blank">USB Write Blocker (.zip)</a><b><br /></b></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://dsicovery.com/">http://dsicovery.com/</a></div>

USB Write Blocker :: Tools

USB Write blocker is an application that will use the windows registry to write block USB devices . It is a useful tool for those who...

DumpIt (Memory Dumper) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhl1bY2gWBxFbDW6zcu5qqN5pd8LX2USAWKhJjUlLmtBS1KoN1FMMaR3s8W1oHCYpWEuPHEbHidQAWflYj5GdkPp4Q-pEW29n_qEHr12TYWvtkt0W84JFga96n0xFyymp6wnhs0Bt6O4A0a/s1600/System-Memory-icon.png" style="margin-left: 1em; margin-right: 1em;"><img alt="dumpit icon" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhl1bY2gWBxFbDW6zcu5qqN5pd8LX2USAWKhJjUlLmtBS1KoN1FMMaR3s8W1oHCYpWEuPHEbHidQAWflYj5GdkPp4Q-pEW29n_qEHr12TYWvtkt0W84JFga96n0xFyymp6wnhs0Bt6O4A0a/s1600/System-Memory-icon.png" title="dumpit icon" /></a></div>
<br />
<b>DumpIt</b> is a fusion of two trusted <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a>, win32dd and win64dd, combined  into one one executable. <b>DumpIt</b> is designed to be provided to a  non-technical user using a removable USB drive. The person needs to  simply double-click the <b>DumpIt</b> executable and allow the tool to run. <b> DumpIt</b> will then take the snapshot of the host’s physical <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory</a> and  save it to the folder where the <b>DumpIt</b> executable was located.</div>
<div style="text-align: justify;">
Memory <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensics</a> is becoming an essential aspect of digital forensics  and incident response. When a system is believed to have been  compromised or infected, the investigator needs a convenient way to take  a memory snapshot of the host. <b>DumpIt</b>, a new tool from <b>MoonSols</b>, makes this very easy, even if the person in front of the affected computer isn’t technical.</div>
<div style="text-align: justify;">
The user can then provide the investigator with the USB key, which  will contain the memory snapshot file. The administrator can use free  memory forensics tools such as The <a href="http://www.toolwar.com/2013/09/volatility-framework.html" target="_blank">Volatility Framework,</a> Mandiant Redline and HB Gary Responder Community Edition to examine the memory file’s contents for malicious artifacts.</div>
<div style="text-align: justify;">
<b>DumpIt</b> provides an easy way of obtaining a memory image of a <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>  system even if the investigator is not physically sitting in front of  the target computer. It’s so easy to use, even a naive user can do it.  It’s not appropriate for all scenarios, but it will definitely make  memory acquisition easier in many situations.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials :: </h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/SEs4ZAolED0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
 </h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows ::  </b><a href="https://github.com/thimbleweed/All-In-USB/blob/master/utilities/DumpIt/DumpIt.exe?raw=true" target="_blank">DumpIt.exe</a><br />
<b>Official Website :: </b><a href="http://www.moonsols.com" rel="nofollow" target="_blank">http://www.moonsols.com/</a></div>
<div style="text-align: justify;">
</div>

DumpIt (Memory Dumper) :: Tools

DumpIt is a fusion of two trusted tools , win32dd and win64dd, combined into one one executable. DumpIt is designed to be provided to...

iScan Online :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="iscan logo online " border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeslw6s4bc1vdJpAy_EBblVvuVFaHURRWxOkNzjUnX9V89kGe-adrQQhV7XBSPrnczstoi85guEuodmRteZGABDY-ALPPiGYapmKUWj2XLLvFzmZ0CHTSFwsYTyffYtCtRHMwmzMDQPNqj/s1600/iscan+online+logo.png" title="iscan logo online " /></div>
<div style="text-align: justify;">
<b>iScan Online</b> is the <i>vulnerability scanning solutions for  Computing and Mobility.</i> <b>iScan Online</b> delivers its <i><a href="http://www.toolwar.com/search/label/Vulnerability" target="_blank">vulnerability</a> <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanning</a></i>   through a <b>browser plugin, native mobile app</b> or alternatively as a  downloadable <a href="http://www.toolwar.com/search/label/CLI" target="_blank">CLI</a> executable.<br />
<br />
For BYOD environments, HTML and  Javascript snippets are provided to scan any laptop or <a href="http://www.toolwar.com/search/label/Phone" target="_blank">mobile device</a>  connecting to a network and/or <a href="http://www.toolwar.com/search/label/Web" target="_blank">web </a>application.<br />
<br />
Data is submitted  to the cloud console where HTML, CSV and <a href="http://www.toolwar.com/search/label/PDF" target="_blank">PDF</a> reports are available.  JSON data is readily available with the RESTful API.<br />
<br />
Supported  platforms covered for vulnerability and data discovery scanning are:   <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>, <a href="http://www.toolwar.com/search/label/Mac" target="_blank">Mac OS X</a>, <a href="http://www.toolwar.com/search/label/Android" target="_blank">Android</a> and Apple iOS. Desktops, Servers, Smartphones  and Tablets supported.</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/SIIbrXW8ZMg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download ::</h3>
</div>
<div style="text-align: justify;">
<b>Android (Play Store) ::</b> <a href="https://play.google.com/store/apps/details?id=com.iscanonline.iscanandroid" target="_blank">https://play.google.com/store/apps/details?id=com.iscanonline.iscanandroid </a></div>
<div style="text-align: justify;">
<b>Official Website & Online Plugins ::</b> <a href="https://www.iscanonline.com/" target="_blank">https://www.iscanonline.com/</a></div>
<div style="text-align: justify;">
<b>Submitted By ::</b> iScan Online </div>

iScan Online :: Tools

iScan Online is the vulnerability scanning solutions for Computing and Mobility. iScan Online delivers its vulnerability scanning ...

Online WPA Cracker :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="Online WPA Cracker" border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSmdubWGqFisiXciHXWMNqbzJid7x4tE646m-C7noA59c7XPjGE_Jnf4t355ONsqnrxiJPMxfZiRfTzU-JdePPpXC1NssgADwfwCRBhpw2sWJtVDShAmLwEvXoHWQW4oS36K1F6h6d5R7G/s640/Online+WPA+Cracker.jpg" title="Online WPA Cracker" width="640" /></div>
<div style="text-align: justify;">
<b>Online WPA Cracker</b> is a online <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> that <a href="http://www.toolwar.com/search/label/Cracking" target="_blank">crack</a> you <b>WPA <a href="http://www.toolwar.com/search/label/Encryption" target="_blank">encryption</a></b> but you have to pay for it. An online <b>WPA cracking tool</b> which automates the process of <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attacking</a> a
<i> WPA capture</i>. The site has a wordlist which boasts of 540 million words 
ranging from 8 -25 characters in length and the entire <a href="http://www.toolwar.com/search/label/Testing" target="_blank">testing</a> is 
completed in less than 2 hours. This is a excellent resource for people 
who do not have the CPU power or the time to attack a capture on their 
own. There is a small fee of 10 dollars US which is asked for by the 
providers of the service.
</div>
<br />
<b>Online Tool Link :: </b><a href="http://tools.question-defense.com/wpa-password-cracker/">http://tools.question-defense.com/wpa-password-cracker/</a><br />

Online WPA Cracker :: Tools

Online WPA Cracker is a online tool that crack you WPA encryption but you have to pay for it. An online WPA cracking tool which auto...

Hook Analyzer (Malware Analysis and Cyber Intelligence) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="Hook Analyser 3.0" border="0" height="324" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0OmIirqGeQmdgB2nH4Gn-Cqwf17KXdZUVLYFVDBGbtK70u1NfT5MPvoVYbSj89mfPHKKK9qJbxCL4tIc_vpxb7syDkjmX59Dk7oizgHoIhfCoQ6GvkGLEhf5EwK0_GI4yov3373V6Ljyz/s640/Hook+Analyser+3.0.png" title="Hook Analyser 3.0" width="640" /></div>
<div style="text-align: justify;">
<b>Hook Analyser</b> is a <i>malware analysis</i> and <i>cyber intelligence</i> (gathering and analysis) utility. As well as <b>Hook Analyzer</b> performs spawn and hook to application, hook to a specific running application process, perform static <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> analysis, application crash <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a>, EXE extractor from process, and cyber threat intelligence.<br />
<b><br />
The project/utility has six (6) key functionalities -</b><br />
<b>1.         Spawn and Hook to Application</b> - This feature allows analyst to  spawn an application, and hook into it. The module performs the  following -<br />
a.        PE validation<br />
b.        Static <a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> analysis.<br />
c.        Other options (such as pattern search or dump all)<br />
d.        Type of hooking (Automatic, Smart or manual)<br />
e.        Spawn and hook<br />
<br />
With the ‘hook’ module, there are three types of hooking being supported –<br />
<br />
a)        Automatic – The tool will parse the application import tables, and based upon that will hook into specified APIs<br />
b)        Manual – On this, the tool will ask end-user for each API, if it needs to be hooked.<br />
c)        Smart – This is essentially a subset of automatic hooking however, excludes uninteresting APIs.<br />
<br />
<b>2.         Hook to a specific running process</b>- The option allows analyst to  hook to a running (active) process. The module performs the following  operations –<br />
<br />
a.        List all running process<br />
b.        Identify the running process executable path.<br />
c.        Perform static malware analysis on executable (fetched from process executable path)<br />
d.        Other options (such as pattern search or dump all)<br />
e.        Type of hooking (Automatic, Smart or manual)<br />
f.         Hook to a specific running process<br />
g.        Hook and continue the process<br />
<br />
<b>3.         Static Malware Analysis -</b> This module is one of the most  interesting and useful module of <b>Hook Analyzer</b>, which performs scanning  on PE or <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> executable (and DLLs) to identify potential malware  traces. <br />
<br />
a.        PE file validation<br />
b.        CRC and timestamps validation<br />
c.        PE properties such as Image Base, Entry point, sections, subsystem<br />
d.        TLS entry <a href="http://www.toolwar.com/search/label/Detect" target="_blank">detection</a>.<br />
e.        Entry point verification (if falls in suspicious section)<br />
f.        Suspicious entry point detection<br />
g.        Packer detection<br />
h.         Signature trace (extended from malware analyzer project), such  as Anti VM aware, debug aware, keyboard hook aware etc. This particular  function searches for more than 20 unique malware behaviors (using  100’s of signature).<br />
i.        Import Intel scanning.<br />
j.        Deep search (module) <br />
k.        Online search of MD5 (of executable) on Threat Expert.<br />
l.        String dump (ASCII)<br />
m.        Executable file information<br />
n.        Hexdump<br />
o.        PEfile info dumping<br />
p.        ...and more.<br />
<br />
<b>4.         Application crash analysis</b> - This module enables <a href="http://www.toolwar.com/search/label/Exploitation" target="_blank">exploit</a>  researcher and/or application developer to analyse memory content when  an application crashes. This module essentially displays data in  different <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory</a> register (such as EIP).<br />
<br />
<br />
<b>5.         Exe extractor</b> - This module essentially extracts executables  from running process/s, which could then be further analyzed using Hook Analyzer, Malware Analyzer or other solutions. This module is  potentially useful for incident responders<br />
<br />
<br />
<b>6.        Cyber  Threat Intelligence </b>- This module is being created to gather and analyze  information related to Cyber Threats and <a href="http://www.toolwar.com/search/label/Vulnerability" target="_blank">vulnerabilities</a>. The module  can be run using HookAnalyser.exe (via Option 6), or can be run  directly.<br />
<br />
The module present information on a web browser (with dashboard alike representation). It has three (3) presentations - <br />
•        Threat Vectors - by Country (through url.txt - provided)<br />
•        Threat Vectors - by Geography (through url.txt - provided)<br />
•        Vulnerability / Threat Feed (through rss.txt)</div>
<div style="text-align: justify;">
<b><br />
</b></div>
<h3 style="text-align: justify;">
<b>Tutorials :: </b></h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/msYo7pPsu6A?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<b>
</b></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/sdnRP90weT4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
<b>Download ::</b></h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="https://docs.google.com/file/d/0B4eYJx0xZdQAcDlvS3JhcmxmMjQ/edit" target="_blank">Hook Analyzer v3.0</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://hookanalyser.com/">http://hookanalyser.com/</a></div>
<div style="text-align: justify;">
<b>Submitted By :: </b>Beenu Arora </div>

Hook Analyzer (Malware Analysis and Cyber Intelligence) :: Tools

Hook Analyser is a malware analysis and cyber intelligence (gathering and analysis) utility. As well as Hook Analyzer performs spawn ...

dotDefender (Web Application Firewall) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="dotdefender logo" border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNgB-QvtDSLba1_oj3raWHinKyPHlXi03q3ECtSO3gJ48vp-5nB4zTE6VeGXuf2zMoyT4qML8f8UFcVw3vF3eTqukbzuWA2BuOh0SMj7nVWNE42TjUn1Ljvis_vmEN16ihNYTUeLwR-dwx/s640/dotDefender+logo.jpg" title="dotdefender logo" width="640" /></div>
<br />
<b>dotDefender</b> is the market-leading software <b>Web Application Firewall  (WAF)</b>. <b>dotDefender</b> boasts enterprise-class <a href="http://www.toolwar.com/search/label/Security" target="_blank">security,</a> advanced  integration capabilities, easy maintenance and low total cost of  ownership (TCO). <b>dotDefender</b> is the perfect choice for protecting your  website and <a href="http://www.toolwar.com/search/label/Web" target="_blank">web</a> applications today. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
<b>Tutorials :: </b></h3>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/DKlTdoIiaSU?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
<b>Download ::</b> </h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.applicure.com/downloads/5.12%20no%20SP/DotDefender%20Install%2032Bit%20v5.12.13275%20msi.exe" target="_blank">dotDefender V5.12</a></div>
<div style="text-align: justify;">
<b>Debian :: </b><a href="http://www.applicure.com/downloads/5.12/Linux/i386/dotDefender-5.12.Linux.i386.deb.bin.gz" target="_blank">dotDefender V5.12</a></div>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://www.applicure.com/downloads/5.12/Linux/i386/dotDefender-5.12.Linux.i386.gen.bin.gz" target="_blank">dotDefender V5.12</a></div>
<b>RPM :: </b><a href="http://www.applicure.com/downloads/5.12/Linux/i386/dotDefender-5.12.Linux.i386.rpm.bin.gz" target="_blank">dotDefender V5.12</a>
<b> </b><br />
<b>Official Website :: </b><a href="http://www.applicure.com/">http://www.applicure.com/</a>

dotDefender (Web Application Firewall) :: Tools

dotDefender is the market-leading software Web Application Firewall (WAF) . dotDefender boasts enterprise-class security, advanced ...

GDB GNU Debugger :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="gdb logo" border="0" height="255" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtcV7G_5LSgJmJVC3QAj64NTirUIMtUbntKldesIZ8v0GBoSxbgoqxPZo67Icvw7I_Ppk27F8UIyqslHsk26Gp3S1WOVzXcwuYbEQ35s36pYuxP41VWN0UWFH3WO3x0clk7PGxh3yFsKYf/s400/gdb-logo.png" title="gdb logo" width="400" /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>GDB, the GNU Project <a href="http://www.toolwar.com/search/label/Debugger" target="_blank">debugger</a></b>, allows you to see what is going on `inside' another program while it executes -- or what another program was doing at the moment it crashed.  </div>
<div style="text-align: justify;">
<b>GDB </b>can do four main kinds of things (plus other things in support of these) to help you catch bugs in the act:  </div>
<ul style="text-align: justify;">
<li>Start your program, specifying anything that might affect its behavior. </li>
<li>Make your program stop on specified conditions. </li>
<li>Examine what has happened, when your program has stopped. </li>
<li>Change things in your program, so you can experiment with correcting the effects of one bug and go on to learn about another. </li>
</ul>
<div style="text-align: justify;">
The program being debugged can be written in Ada, C, C++, Objective-C, Pascal (and many other <a href="http://www.toolwar.com/search/label/Language" target="_blank">languages</a>).  Those programs might be executing on the same machine as GDB (native) or on another machine (remote).  GDB can run on most popular UNIX and Microsoft <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> variants.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials :: </h3>
<div style="text-align: justify;">
<b>Video Tutorials ::</b> </div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/sCtY--xRUyI?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/k-zAgbDq5pk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Text Tutorials :: </b><a href="http://sourceware.org/gdb/current/onlinedocs/gdb/" target="_blank">Click Here</a> <br />
<h3>
Download :: </h3>
<b>Linux ::</b> <a href="ftp://sourceware.org/pub/gdb/releases/gdb-7.6.tar.gz" target="_blank">GDB v7.6.tar.gz</a>
<b> </b><br />
<b>Official Site :: </b><a href="http://www.gnu.org/">http://www.gnu.org/</a>

GDB GNU Debugger :: Tools

GDB, the GNU Project debugger , allows you to see what is going on `inside' another program while it executes -- or what another pr...

Download Evad3rs iOS 7 Jailbreak :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="ios7 jailbreak evasi0n" border="0" height="409" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNRNM6nxbhcUPeFYKnRs6aocugfnb4Eyv1QgsoBjdOn3e2tqOvvzsueVrOX-u4nvJc5bVZyUhSj-8h10e9SocWn-EVvNC6iEKWvWuZysK1oj-NLYzwNoNn-WnQpMRzpK478Be-0UQCM42n/s640/iOS-7-jailbreak-iPhone.png" title="ios7 jailbreak evasi0n" width="640" /></div>
<br />
<b>Evasi0n Jailbreaking <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a></b> available for <b>Apple iOS</b> 7 users. This <i>jailbreak utility/tool</i> made by <b>Evad3rs team</b> after 3 months of iOS 7 launched. <b>evasi0n</b> is available for <a href="http://www.toolwar.com/search/label/OS" target="_blank">Mac</a> and <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>, and is untethered. Here are the requirements posted on the evasi0n website:</div>
<ul style="text-align: justify;">
<li>A computer, running Windows (XP minimum), Mac OS X (10.6 minimum) or <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a> (x86 / x86_64)</li>
<li>iTunes installed if you’re running Windows</li>
<li>An iPhone, iPad or iPod running iOS 7.0 through 7.0.4 (you may check in Settings / General / About => Version)</li>
<li>A USB cable to connect the device to the computer</li>
</ul>
<div style="text-align: justify;">
<b>evasi0n7</b> is an untethered <b>jailbreak</b> which supports iOS 7, iOS 7.0.1, iOS 7.0.2, iOS 7.0.3, iOS 7.0.4.</div>
<div style="text-align: justify;">
It is compatible with the following iOS 7.x.x devices:</div>
<ul style="text-align: justify;">
<li>iPhone 5s, iPhone 5c, iPhone 5, iPhone 4S, iPhone 4, iPhone 3GS</li>
<li>iPad Air, iPad 4, iPad 3, iPad 2</li>
<li>Retina iPad mini, iPad mini</li>
<li>iPod touch 5G</li>
</ul>
<h3>
Tutorials ::</h3>
<div style="text-align: center;">
<b><span style="font-size: small;">Procedure of jailbreaking iOS7 on iPhone 4 :: </span></b> </div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/gdic3SbuwK8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<h3>
Download :: </h3>
<b>Windows :: </b><a href="https://evad3rs.box.com/s/hzapsnk73mbrs770z50y" target="_blank">Download Evasi0n iOS7</a><b>
</b>
<b> </b><br />
<b>Mac :: </b><a href="https://evad3rs.box.com/s/q4xydmi2qzgqdhqr35i0" target="_blank">Download Evasi0n iOS7</a>
<b> </b><br />
<b>Official Website :: </b><a href="http://evasi0n.com/">http://evasi0n.com/</a>

Download Evad3rs iOS 7 Jailbreak :: Tools

Evasi0n Jailbreaking tools available for Apple iOS 7 users. This jailbreak utility/tool made by Evad3rs team after 3 months of iOS 7...

Beast-Check (SSL/TLS BEAST Vulnerability Check) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPX99p7OpWXx86CRPoDgco35kA8zXAjBG_l0dAQqBWT0feEqj9A1w1aPOcGpyS0DbdryxrvPzF4dTTNWY5ygzT9bP3hy9j04M3iACwFr6i2ykH2cC2G1p5-gauXZ_gz_9gWFAsUToI4Bik/s1600/beast-check+vulnerability+scanner.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="beast-check vulnerability scanner" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPX99p7OpWXx86CRPoDgco35kA8zXAjBG_l0dAQqBWT0feEqj9A1w1aPOcGpyS0DbdryxrvPzF4dTTNWY5ygzT9bP3hy9j04M3iACwFr6i2ykH2cC2G1p5-gauXZ_gz_9gWFAsUToI4Bik/s640/beast-check+vulnerability+scanner.jpg" title="beast-check vulnerability scanner" width="640" /></a></div>
<div style="text-align: justify;">
<b>Beast-Chec</b>k is a small <i>perl script</i> that <i>checks a target server</i> whether it is <i><b>prone to  BEAST <a href="http://www.toolwar.com/search/label/Vulnerability" target="_blank">vulnerability</a></b></i> via target preferred cipher. It assumes no  workaround (i.e. EMPTY FRAGMENT) applied in target server. Some sources  said this workaround was disabled by default for compatibility reasons.  This may be the reason why RC4 ciphersuite was widely chosen as highest  preferred ciphersuite for the primary workaround. </div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<span style="font-size: large;">Uses ::  </span></div>
<pre class="prettyprint"><span class="pln">$ </span><span class="pun">./</span><span class="pln">beast</span><span class="pun">.</span><span class="pln">pl
</span><span class="pun">===============================================</span><span class="pln">

port </span><span class="pun">=</span><span class="pln"> </span><span class="lit">443</span><span class="pln"> </span><span class="kwd">by</span><span class="pln"> </span><span class="kwd">default</span><span class="pln"> </span><span class="pun">{</span><span class="pln">optional</span><span class="pun">}</span></pre>
<pre class="prettyprint"><span class="pun"> </span></pre>
<div class="prettyprint">
<span style="font-family: inherit;"><span style="font-size: small;"><span class="pun"><b>Example :: Scanning Google</b></span></span></span></div>
<pre class="prettyprint"><span class="pun"><b><span class="pln"> </span></b></span></pre>
<pre class="prettyprint"><span style="background-color: white;"><span class="pun"><span class="pln">$ </span><span class="pun">./</span><span class="pln">beast</span><span class="pun">.</span><span class="pln">pl www</span><span class="pun">.</span><span class="pln">google</span><span class="pun">.</span><span class="pln">com
</span><span class="pun">===============================================</span><span class="pln">

SSL</span><span class="pun">/</span><span class="pln">TLS BEAST </span><span class="typ">Vulnerability</span><span class="pln"> </span><span class="typ">Check</span><span class="pln">
 </span><span class="kwd">by</span><span class="pln"> YGN </span><span class="typ">Ethical</span><span class="pln"> </span><span class="typ">Hacker</span><span class="pln"> </span><span class="typ">Group</span><span class="pun">,</span><span class="pln"> http</span><span class="pun">:</span><span class="com">//yehg.net/</span><span class="pln">
</span><span class="pun">===============================================</span><span class="pln">
</span><span class="typ">Target</span><span class="pun">:</span><span class="pln"> www</span><span class="pun">.</span><span class="pln">google</span><span class="pun">.</span><span class="pln">com</span><span class="pun">:</span><span class="lit">443</span><span class="pln">
</span><span class="com">## The target is NOT vulnerable to BEAST attack. ##</span><span class="pln">
</span><span class="typ">Protocol</span><span class="pun">:</span><span class="pln"> TLS v1</span><span class="typ">Server</span><span class="pln"> </span><span class="typ">Preferred</span><span class="pln"> </span><span class="typ">Cipher</span><span class="pun">:</span><span class="pln"> ECDHE</span><span class="pun">-</span><span class="pln">RSA</span><span class="pun">-</span><span class="pln">RC4</span><span class="pun">-</span><span class="pln">SHA</span><span class="typ">Vulnerable</span><span class="pun">:</span><span class="pln"> NO</span>  </span></span></pre>
<pre class="prettyprint"><span style="background-color: white;"><span class="pun"> </span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/4uCn1bjEC7s?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<pre class="prettyprint"><span style="background-color: white;"><span class="pun"> </span></span></pre>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b><span style="font-size: small;">Linux & Windows :: </span></b><a href="http://beast-check.googlecode.com/files/beast.pl" target="_blank">Beast-Check </a>(Perl Script)</div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://yehg.net/">http://yehg.net/</a></div>

Beast-Check (SSL/TLS BEAST Vulnerability Check) :: Tools

Beast-Chec k is a small perl script that checks a target server whether it is prone to BEAST vulnerability via target preferred ciphe...

Subscribe to: Posts ( Atom )