Auditing

Keeping computer systems secure with the most recent patches and hotfixes is one of the most important tasks of network administartors. Patch management is a regular process and must be performed as frequently as possible to make ensure that all security patches are up-to-date. Regular...

Network Inventory Advisor is an agent-free utility which brings you fast and reliable PC network inventory. It excellently performs scanning of Windows, Mac OS X and Linux and provides IT managers with rich functionality for an easy software licenses audit. With Network Inventory Advisor...

Annvix is a secure Linux server distribution. The goal is to provide an easy-to-use server distribution with high security features including a secure kernel, gcc with SPP stack protection patches, and secure defaults for all services. It also includes unique features such as running all...


Platforms: *nix

Babel Enterprise is an audit tool, focused on evaluating Operating System base security. Babel Enterprise evaluate the security level, or hardening, from a wide range of Operating Systems. Babel Enterprise run several audit probes and checks to give a photograph of the current system security...


Platforms: *nix

The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working...


Platforms: *nix

With this tool you can test if your tcp-server can handle gibberish. For example a webserver: with this tool you can test your webserver if can handle if someone sends gibberish instead of an http-request. Usage: ./gibberish -t/-u -a/-b hostname portnr -t: tcp -u: udp -a: ascii -b: binary...


Platforms: *nix

The Argus Open Project is focused on developing network activity audit strategies that can do real work for the network architect, administrator and network user. LATEST NEWS Mon Jun 19 10:44:52 EDT 2006 *argus-3.0.0 testing has started! Welcome to the Argus Open Project, home of Argus, the...


Platforms: *nix

sh2log is a PTY sniffing program that captures all keystrokes and console output of physical and virtual consoles. sh2log works in userland and does not require the installation of a kernel module. Consequently, it can be run on a wide range of different UNIX platforms. It provides ready-to-use...


Platforms: *nix

MfGames.Utility is a collection of useful C# classes that have no dependencies outside of the core libraries. The MfGames.Utility library for C# and VB.NET is a general purposes library that contains many useful functions, but requires no additional libraries outside of itself and the core..


Platforms: *nix

SLAD is a tool for performing local security checks against GNU/Linux systems. SLAD has been primarily developed for the BOSS project to work together with Nessus to enhance its local scanning capabilities. For example, scanning for weak passwords with a tool like John-the-Ripper is something...


Platforms: *nix

KCPentrix project is Live CD design to be a standalone Penetration testing toolkit for pentesters and security analysts. KCPenTrix based on SLAX, a Slackware live cd and gentoo,auditor and whoppix. The Powerful modularity which KCPenTrix uses, allow us easily customize our version, and...


Platforms: *nix

ArgusEye is a GUI for some of the features of Argus. Argus is a powerful suite of tools for transaction-based network auditing. The project aims at supporting daily work with Argus by providing a graphical user interface. Goals: - A GUI to help in the daily work with Argus - Scalable for...


Platforms: *nix

DNSA and DNSA-NG are swiss knife tools for Linux designed to test several DNS security issues. The most important one is a full wifi support using 2 cards: - The first in monitor mode which capture 802.11 traffic - The second associated to the AP and injecting DNS forged packets Host-ap...


Platforms: *nix

grsecurity is a complete security system for Linux 2.4 that implements a detection/prevention/containment strategy. It prevents most forms of address space modification, confines programs via its Role-Based Access Control system, hardens syscalls, provides full-featured auditing, and implements...


Platforms: *nix

stephanie is a program for hardening OpenBSD for multiuser environments. Mmmmm, OpenBSD. Functional, secure, free. With an emphasis on security and integrated cryptography, it carries an excellent reputation for plain old "you-just-cant-hack-this-ness". Not perfect, but nothing is, at least...


Platforms: *nix

NeWBIE LiveCD is a NetBSD based distro geared towards the desktop user. It includes software for Web browsing, chatting, multimedia, and document editing. This acronym NeWBIE is pronounced just like the word "newbie" and stands for (Ne)tBSD (W)are (B)urned (I)n (E)conomy. Newbie is a NetBSD...


Platforms: *nix

Fenris is a suite of tools suitable for code analysis, debugging, protocol analysis, reverse engineering, forensics, diagnostics, security audits, vulnerability research and many other purposes. The main logical components are: - Fenris: high-level tracer, a tool that detects the logic used...


Platforms: *nix

THC-Snooze is a framework for network traffic analysis. THC-Snooze project can be used as a sniffer or a network based intrusion detection system. It will watch the network traffic and invoke small programs ("modules" or "protocol dissectors"), which are easily written in a script language, to...


Platforms: *nix

MacStumbler is a small utility to emulate the functionality of projects like netstumbler, bsd-airtools, and kismet. It's meant purely for educational or auditing purposes, although many people enjoy using these types of programs to check out how many WiFi (wireless) networks are in their area,...


Platforms: Mac

A collaboration between the open source community and Rapid7, Metasploit software helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments, providing true security risk intelligence. Capabilities include smart...


Platforms: Windows