Intrusion Detection Systems Comparison

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS (host-based intrusion detection), log monitoring and SIM/SIEM together in a simple, powerful and open source solution. OSSEC HIDS performs log analysis, file integrity checking, policy...

IpDnsResolver is a very simple and fast program that easily lets you find your own IP address, resolve hostnames to IP addresses and IP addresses to hostnames using the DNS. The tool is designed with a user-friendly interface and is easy to use.

Whois Tool is a client utility that communicates with WHOIS servers located around the world to obtain domain registration information. Whois supports IP address queries and automatically selects the appropriate whois server for IP addresses. This tool will lookup information on a domain, IP...


Platforms: Windows

GFI LANguard System Integrity Monitor (S.I.M.) is a utility that provides intrusion detection by checking whether files have been changed, added or deleted on a Windows 2000/XP system. If this happens, it alerts the administrator by email. Because hackers need to change certain system files to...


Platforms: Windows

DnsEye is monitoring network traffic by capturing Domain Name System DNS packets in network and displays the host names resolve information. The program allows to monitor requested URLs in network, to open it in browser and save captured DNS name list in the file. The tool is designed with a...


Platforms: Windows

DhcpExplorer tool allows you to discover DHCP servers on your local subnet or LAN. This is useful for locating servers that are not supposed to be on your network ( rogue DHCP servers ) as well as checking the expected output of known servers. DHCP Explorer broadcasts on the local physical subnet...


Platforms: Windows

HTTP traffic generator allows to generate a good amount of http traffic for testing web applications, web servers, intrusion detection system and their resistance to HTTP attacks. You can specify the requests count and interval between two requests. The generated requests are sent to the...


Platforms: Windows

Nessus project is the worlds most popular open-source vulnerability scanner used in over 75,000 organizations world-wide. Many of the worlds largest organizations are realizing significant cost savings by using Nessus to audit business-critical enterprise devices and applications. The "Nessus"...


Platforms: *nix

ClarkConnect is a powerful yet easy-to-use software package that transforms off-the-shelf server hardware into a dedicated Internet firewall, gateway or server. ClarkConnect is a great solution for schools, businesses, organizations, and home offices. ClarkConnect transforms standard PC...


Platforms: *nix

Raw Fake AP is a program that emulates valid IEEE 802.11 access points using wireless raw injection. Raw Fake AP application aims to create both beacon and probe response frames and could be used to "hide" real networks from novice wardrivers or for testing wireless intrusion detection systems..


Platforms: *nix

It is known that the browser helper objects are loaded each time the browser is started up. Such objects run in the same memory context as the browser and can perform any action on the available windows and modules. For ex., a browser helper object can install hooks to monitor messages and...


Platforms: Windows

ArpCacheWatch monitors Windows ARP cache and allows to send an ARP request to obtain the physical address that corresponds to the specified destination IP address. The ARP cache contains IP/MAC translations so that every time an IP packet are to be sent, the MAC address doesn't have to queried...


Platforms: Windows

Kismet application is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic. Kismet identifies networks by passively collecting...


Platforms: *nix

Packit is a network auditing tool that allows you to monitor, manipulate, and inject customized IP traffic into your network. This can be valuable for testing firewalls, intrusion detection systems, port scanning, and general TCP/IP auditing.


Platforms: *nix

IeCacheExplorer displays the details of all cookies that Internet Explorer stores on your computer and reads all information from the history file on your computer, displays the list of all URLs that you have visited. It also allows you to clear history, delete cookies and temporary internet...


Platforms: Windows

Snort project is a "lightweight" intrusion detection technology in comparison to commercially available systems. Snort really isnt very hard to use, but there are a lot of command line options to play with, and its not always obvious which ones go together well. This file aims to make using...


Platforms: *nix

RegistryProt is a 100% free, standalone, compact, low-level realtime registry monitor and protector, that adds another dimension to Windows security and intrusion detection. By monitoring important locations and keys in the Windows system registry, RegistryProt will alert whenever a key is added...


Platforms: Windows

Fragroute intercepts, modifies, and rewrites egress traffic destined for a specified host, implementing most of the attacks described in the Secure Networks "Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection" paper of January 1998. Fragroute features a simple...


Platforms: *nix

Snort Report is an add-on module for the Snort Intrusion Detection System. Snort Report add-on provides realtime reporting from the MySQL database generated by Snort. It has been tested on Redhat 6.2, 7.0, 7.1, and OpenBSD 2.9.. Symmetrix Technologies is a complete network integrator and...


Platforms: *nix

Network Security Toolkit is a bootable ISO live CD and its based on Fedora Core 2. The toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86 platforms. The main intent of developing this toolkit was to provide the...


Platforms: *nix