Intrusion

RazorBack is a log analysis program that interfaces with the SNORT open source Intrusion Detection System to provide real time visual notification when an intrusion signature has been detected on the network. Snort should be configured to send data to syslog for razorback to display the data....

PushSite provides an utility to update remote site. Pushsite is intended for updating remote websites -- its like mirroring but in reverse. It only sends the changed/new files to conserve bandwidth. Of course, it has other applications too (e.g. software distribution). PushSite can detect...

psad is a collection of three lightweight system daemons (two main daemons and one helper daemon) that run on Linux machines and analyze Netfilter log messages to detect port scans and other suspicious traffic. psad incorporates many signatures from the Snort intrusion detection system to...


Platforms: *nix

ModSecurity is an FREE and GPL lincesed software for intrusion detection and prevention engine for web applications. Operating as an Apache Web server module, the purpose of ModSecurity is to increase web application security, protecting web applications from known and unknown attacks. Whats...


Platforms: *nix

Nift is graphical front-end for footprinting tools and methods already freely avaliable. Its purpose is to aid system administrators in securing their websites by allowing them to quickly check their network.. Get Nift at SourceForge.net. Fast, secure and free downloads from the largest Open...


Platforms: *nix

Nuhe is a rule based log monitoring system, which is capable of action when rules are matched againsts log(s) activity. Default Nuhe mode is to run on background (daemon), but it can also be used in foreground and log analyzer mode. Log analyzer mode just analyzes given logs and prints results to...


Platforms: *nix

LaBrea is a intrusion detection / "sticky" honey pot technology using virtual servers to detect malware. LaBrea takes over unused IP addresses, and creates virtual servers that are attractive to worms, hackers, and other denizens of the Internet. The program answers to connection attempts in a...


Platforms: *nix

Samhain is a multiplatform, open source solution for centralized file integrity checking / host-based intrusion detection on POSIX systems (Unix, Linux, Cygwin/Windows). samhain project has been designed to monitor multiple hosts with potentially different operating systems from a central...


Platforms: *nix

IPAudit monitors network activity on a network by host, protocol and port. IPAudit listens to a network device in promiscuous mode, and records every connection between two ip addresses. A unique connection is determined by the ip addresses of the two machines, the protocol used between them,...


Platforms: *nix

THC-Snooze is a framework for network traffic analysis. THC-Snooze project can be used as a sniffer or a network based intrusion detection system. It will watch the network traffic and invoke small programs ("modules" or "protocol dissectors"), which are easily written in a script language, to...


Platforms: *nix

RenaissanceCore project is a sophisticated analyzer of network traffic that detects intrusion attempts and also reduces false positives. The RenaissanceCore IDS consists of four components: a stateful IDS sensor, a graphical user interface, a database backend, and a two-way interface between...


Platforms: *nix

There are a number of excellent tools to check filesystem integrity, they are essential part of your system security. These tools allow us to detect unwanted manipulation on our system and report it to the system administrator. However, the administrator will not know about the unauthorized...


Platforms: *nix

GNU Phantom.Security is a computer-controlled security system. Phantom is designed to be a completely customizable computer controlled security system. All source code (C++/Bourne script) is included. Phantom was designed & tested on a Linux system, but I assume the C++ portions can be easily...


Platforms: *nix

PASP is a Bayesian-like spam filter that can be used as a POP3 proxy. You can run in two ways PASP. 1. Run pasp.py as a pop3 proxy and configure your pop3 email client to connect through pasp and insert a header for the email client to filter on. 2. There is support for procmail and...


Platforms: *nix

Wallix Pro Firewall prevents intruders from accessing your computer and that's the main objective for a computer firewall. It automatically detects and blocks attacks through a comprehensive examination of all inbound and outbound information to your computer. Wallix Pro offers an easy interface,...


Platforms: Windows, Windows 7

ASPPlayground.NET is based on the ASP.NET 2.0 framework and the ASP.NET AJAX framework. This version supports .NET framework 2.0, 3.0, and 3.5. Features: - Integrated Spell Checker. - New Skin & Theme feature allows user to change the entire user interface using the ASP.NET's Skin & Theme...


Platforms: Windows, ASP.NET,

If you are an Internet fan, then you probably have a lot of applications running on the desktop which are related to the Internet. These applications can include web browsers, file downloading utilities, communication applications and so on. Some of these applications can be used by hackers to...


Platforms: Windows, Windows 8, Windows 7

IceIDS is heuristic Network Intrusion Detection System (NIDS) based on calculating Student's distributions of network traffic.


Platforms: Mac

Ida, is an Apache log security analyzer written in PHP. It will scan Apache logs and report about security incidents like SQL injections, XSS attacks, path traveling and so on.


Platforms: Windows, Mac, *nix, PHP, BSD Solaris

Tcp Client Sever is a useful network utility for testing network programs, network services, firewalls and intrusion detection systems. Tcp Client Sever can also be used for debugging network programs and configuring other network tools. Depending on Client-Server mode the tool can work as a Tcp...


Platforms: Windows