Insecure

Outlook Attachments Security Manager allows you to define which attached files should be considered as "dangerous" for their further blocking, and which - "secure" for granting access to them. If you often send various attachments by e-mail, you have come across the situation when Microsoft...

Transec is a Java taglib component that provides a secure PIN/TAN/password input via untrusted, insecure Web browsers. Only images and coodinates are transferred to the browser. TRANSEC is a virtual keyboard that can prevent spyware or troyan attacks. Transec is self-explanatory and can be...

Plone Captchas (qPloneCaptchas) is a simple captchas implementation for Plone, designed for validation human input in insecure forms. This is a standalone implementation with static captcha images, which does not depend on captchas.net services.Plugs to: - default Plone discussion mechanism -...


Platforms: Windows, Mac, *nix, Python, BSD Solaris

MD5 has long been known to be crackable, so this module stores the hashes in a secondary table using phpass, and removes the insecure MD5 hashes in the user table.Installation - Unpack in your modules folder (usually /sites/all/modules/) and enable under Administer > Site Building > Modules. ...


Platforms: Windows, Mac, *nix, PHP, BSD Solaris

HTML Purifier is a standards-compliant HTML filter library written in PHP.HTML Purifier will not only remove all malicious code (better known as XSS) with a thoroughly audited, secure yet permissive whitelist, it will also make sure your documents are standards compliant, something only...


Platforms: PHP

Paranoid Form Validator can be used to prevent security attacks (cross-site scripting, SQL injection) carried out by submitting forms with malicious data in some cases. It works by adding extra validation to forms and raising error if unsafe data were submitted in form fields.Usually these...


Platforms: PHP

Security Review automates checking many of the configuration errors that lead to an insecure Drupal site and looks for existing vulnerabilities and attack attempts.The primary goal of the module is to elevate your awareness of the importance of securing your Drupal site. The results of some...


Platforms: PHP

RabbitWiki is a very simple, but useful Wiki.Installation- Installation is as simple as unzipping, customising Config.php (optional) and uploading.- Then either: chmod the folder called pages to 777 to allow the script access to the pages folder (Insecure but easy) or chmod the folder pages so...


Platforms: PHP

Scrubbr is a BSD-licensed database scanning tool that checks numerous database technologies for the presence of possible stored cross-site scripting attacks. The tool was partially inspired by "Scrawlr", a trimmed-down version of HP's WebInspect which was released for free after the so-called...


Platforms: Mac

Force-TLS allows web sites to tell Firefox that they should be served via HTTPS in the future; this helps secure you from accidentally negotiating an insecure session with certain sites. Force-TLS is also compatible with Strict Transport Security


Platforms: Mac

django-auto-urls is a plugin for the Django framework that tries to load template by it's file name passed in URL. It is useful in development for quick template rendering without overhead of defining urls for each template. django-auto-urls may be helpful for work with designers as designers...


Platforms: *nix

Panther is an open source, cross-platform cryptographic program that allows quick and convenient text entry, and is designed to be secretive and clandestine in nature. Panther encrypts textual data with a password so it can't be seen by prying eyes. This tool is designed to be ideal for sending...


Platforms: *nix

kuplicity is an kde-frontend for duplicity, which allows a secure (coded) incremental backup on an insecure ftp-server. The purpose is to allow unexperienced user to backup (parts of) their system without using shell-commands.


Platforms: *nix

S-Mail Agent is a one-step email encryption plug-in for any email software such as MS Outlook, Eudora, Mozilla, Outlook Express, Pegasus, TheBat!, Netscape Mail, etc. Email programs like Outlook are fast and easy-to-use, but they have one serious drawback - your messages are transmitted in plain...


Platforms: Windows

Free Secure Tunnel Service for use with Kiwi Syslog Daemon (or compatible). It receives, compresses, and securely transports syslog messages from distributed network devices to a Kiwi Syslog Daemon.With Kiwi Secure Tunnel it is possible to securely and reliably transport your syslog data across...


Platforms: Windows

Seconfig XP can configure Windows not to use TCP/IP as transport protocol for NetBIOS, SMB and RPC, thus leaving TCP/UDP ports 135, 137-139 and 445 (the most exploited Windows networking weak points) closed. This tool works only with Windows registry (it doesn't install any files/drivers...


Platforms: Windows

The ARC4 Text Encryptor allows you to encrypt and decrypt text based data using the ARC4 encryption algorithm. Wikipedia says: - In cryptography, RC4 (also known as ARC4 or ARCFOUR) is the most widely-used software stream cipher and is used in popular protocols such as Secure Sockets Layer (SSL)...


Platforms: Windows

Firewall Tuneup is a program based on the rules used by firewalls. It helps to control information shared by PCs connected on a LAN or to the Internet.Firewall Tuneup examines all the information that accesses or tries to access your PC from outside (Internet or other PCs), and decides if this...


Platforms: Windows

Crypt::DH is a Diffie-Hellman key exchange system. SYNOPSIS use Crypt::DH; my $dh = Crypt::DH->new; $dh->g($g); $dh->p($p); ## Generate public and private keys. $dh->generate_keys; $my_pub_key = $dh->pub_key; ## Send $my_pub_key to "other" party, and receive "other" ## public key...


Platforms: *nix

PGP Forwarding Server is a server that receives e-mail on behalf of a user, encrypt it automatically and sent it off the users real e-mail account. The PGP Forwarding Server has a somewhat simplistic view of the world. We have basically a part of the world where things can be transferred in...


Platforms: *nix