Intrusion

barnyard is a fast output system for Snort. The "generic" notes for putting this thing together are below. You can see here the short version. 1.) ./configure 2.) make 3.) make install 4.) Edit the included barnyard.conf with specific details for your system 5.) barnyard -? 7.) Have fun!...

LEAF Bering-uClibc is the successor of the Bering distribution. Replacing glibc with uClibc a significantly smaller distribution is possible. All packages are ipv6-ready and based on the latest sources. It also provides a new and enhanced package management. LEAF Bering-uClibc is available for...

PushSite provides an utility to update remote site. Pushsite is intended for updating remote websites -- its like mirroring but in reverse. It only sends the changed/new files to conserve bandwidth. Of course, it has other applications too (e.g. software distribution). PushSite can detect...


Platforms: *nix

Ossim stands for Open Source Security Information Management. OS-SIMs goal is to provide a comprehensive compilation of tools which, when working together, grant a network/security administrator with detailed view over each and every aspect of his networks/hosts/physical access...


Platforms: *nix

BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system. BASE is a web interface to perform analysis of...


Platforms: *nix

WallFire is a very general and modular firewalling application based on Netfilter or any kind of low-level framework. It will enable to manage every aspect of a firewall administration, from configuration to monitoring, intrusion detection, etc... WallFire will provide command line and...


Platforms: *nix

IPAudit monitors network activity on a network by host, protocol and port. IPAudit listens to a network device in promiscuous mode, and records every connection between two ip addresses. A unique connection is determined by the ip addresses of the two machines, the protocol used between them,...


Platforms: *nix

GNU Phantom.Security is a computer-controlled security system. Phantom is designed to be a completely customizable computer controlled security system. All source code (C++/Bourne script) is included. Phantom was designed & tested on a Linux system, but I assume the C++ portions can be easily...


Platforms: *nix

Deep Network Analyzer is an flexible, open and extensible deep network analyzer (software server) and architecture for gathering and analyzing network packets, network sessions and applications protocols, passively off enterprise class networks. DNA is designed to be used for Internet Security,...


Platforms: *nix

PASP is a Bayesian-like spam filter that can be used as a POP3 proxy. You can run in two ways PASP. 1. Run pasp.py as a pop3 proxy and configure your pop3 email client to connect through pasp and insert a header for the email client to filter on. 2. There is support for procmail and...


Platforms: *nix

Raw Fake AP is a program that emulates valid IEEE 802.11 access points using wireless raw injection. Raw Fake AP application aims to create both beacon and probe response frames and could be used to "hide" real networks from novice wardrivers or for testing wireless intrusion detection systems..


Platforms: *nix

ipaudit-web logs network activity, maintains traffic summaries, and presents Web-accessible graphs and reports. ipaudit-web logs network activity, maintains traffic summaries, and presents Web-accessible graphs and reports. It is useful for identifying heavy bandwidth users, DoS attacks, and...


Platforms: *nix

Trinux is a ramdisk-based Linux distribution that boots from a single floppy or CD-ROM, loads it packages from an HTTP/FTP server, a FAT/NTFS/ISO filesystem, or additional floppies. Trinux contains the latest versions of popular Open Source network security tools for port scanning, packet...


Platforms: *nix

Nift is graphical front-end for footprinting tools and methods already freely avaliable. Its purpose is to aid system administrators in securing their websites by allowing them to quickly check their network.. Get Nift at SourceForge.net. Fast, secure and free downloads from the largest Open...


Platforms: *nix

psad is a collection of three lightweight system daemons (two main daemons and one helper daemon) that run on Linux machines and analyze Netfilter log messages to detect port scans and other suspicious traffic. psad incorporates many signatures from the Snort intrusion detection system to...


Platforms: *nix

Kismet application is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic. Kismet identifies networks by passively collecting...


Platforms: *nix

Network Security Toolkit is a bootable ISO live CD and its based on Fedora Core 2. The toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86 platforms. The main intent of developing this toolkit was to provide the...


Platforms: *nix

ARPSpoofDetector performs active and passive detection of ARP spoofing and IP (IPv4) address collision. The program can send healing packets with regular ARP information. ARPSpoofDetector is new GPL project initialized by NetMasters.CZ customers (specially 100MEGA Distribution). We didnt find...


Platforms: *nix

ClarkConnect is a powerful yet easy-to-use software package that transforms off-the-shelf server hardware into a dedicated Internet firewall, gateway or server. ClarkConnect is a great solution for schools, businesses, organizations, and home offices. ClarkConnect transforms standard PC...


Platforms: *nix

Nessus project is the worlds most popular open-source vulnerability scanner used in over 75,000 organizations world-wide. Many of the worlds largest organizations are realizing significant cost savings by using Nessus to audit business-critical enterprise devices and applications. The "Nessus"...


Platforms: *nix