Intrusion Detection Tools

Ida, is an Apache log security analyzer written in PHP. It will scan Apache logs and report about security incidents like SQL injections, XSS attacks, path traveling and so on.

check_openmanage is an intelligent plugin. It will by itself discover which hardware components are present in the server and monitor them. It does this because it assumes that most systems administrators are lazy, and are not interested in configuring the plugin to match different server models,...

Tomahawk is a command line tool for testing network-based intrusion prevention systems (NIPS). To date, the tools for testing NIPS have been expensive and limited in functionality. They are typically designed for testing other products, such as switches (e.g., SmartBits/ IXIA), server...


Platforms: *nix

Packit is a network auditing tool that allows you to monitor, manipulate, and inject customized IP traffic into your network. This can be valuable for testing firewalls, intrusion detection systems, port scanning, and general TCP/IP auditing.


Platforms: *nix

ARPSpoofDetector performs active and passive detection of ARP spoofing and IP (IPv4) address collision. The program can send healing packets with regular ARP information. ARPSpoofDetector is new GPL project initialized by NetMasters.CZ customers (specially 100MEGA Distribution). We didnt find...


Platforms: *nix

scanlogd is a TCP port scan detection tool, originally designed to illustrate various attacks an IDS developer has to deal with, for a Phrack Magazine article (see below). Thus, unlike some of the other port scan detection tools out there, scanlogd is designed to be totally safe to use. This...


Platforms: *nix

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS (host-based intrusion detection), log monitoring and SIM/SIEM together in a simple, powerful and open source solution. OSSEC HIDS performs log analysis, file integrity checking, policy...


Platforms: Windows, XP, 2003, Windows Vista, 7, 7x64

Free monitor tool is a free edition of AthTek NetWalk. It has the same features with AthTek NetWalk Enterprise Edition, except for a few limitations. You can use this free monitor tool in your network management for 4 hours a day. Also you can use it to capture packets which are less than 50MB...


Platforms: Windows

CrocoPat manipulates relations of any arity, including graphs (which are binary relations). Its simple and expressive query and manipulation language is based on first-order predicate calculus.The implementation is based on the data structure binary decision diagram (BDD), which is well-known as...


Platforms: C and C plus plus

Share alarm is a tool that allows you to see parameters of the workstation which tries to establish a connection with your computer.The remote workstation, user, path, OS, permissions of the accessed folder, connection time will available via this tool .The tool is designed with a user-friendly...


Platforms: Windows

Whois Tool is a client utility that communicates with WHOIS servers located around the world to obtain domain registration information. Whois supports IP address queries and automatically selects the appropriate whois server for IP addresses. This tool will lookup information on a domain, IP...


Platforms: Windows

IpDnsResolver is a very simple and fast program that easily lets you find your own IP address, resolve hostnames to IP addresses and IP addresses to hostnames using the DNS. The tool is designed with a user-friendly interface and is easy to use.


Platforms: Windows

It is known that the browser helper objects are loaded each time the browser is started up. Such objects run in the same memory context as the browser and can perform any action on the available windows and modules. For ex., a browser helper object can install hooks to monitor messages and...


Platforms: Windows

DnsEye is monitoring network traffic by capturing Domain Name System DNS packets in network and displays the host names resolve information. The program allows to monitor requested URLs in network, to open it in browser and save captured DNS name list in the file. The tool is designed with a...


Platforms: Windows

IeCacheExplorer displays the details of all cookies that Internet Explorer stores on your computer and reads all information from the history file on your computer, displays the list of all URLs that you have visited. It also allows you to clear history, delete cookies and temporary internet...


Platforms: Windows

DhcpExplorer tool allows you to discover DHCP servers on your local subnet or LAN. This is useful for locating servers that are not supposed to be on your network ( rogue DHCP servers ) as well as checking the expected output of known servers. DHCP Explorer broadcasts on the local physical subnet...


Platforms: Windows

NADetector monitors and analyzes the network traffic and displays statistical information pertaining to each IP address pair and protocol, helping network administrators and users troubleshoot network problems. The main purpose of NADetector is to allow you to collect statistical information...


Platforms: Windows

Ip2CountryResolver allows you to identify the country by given IP Address. If you are doing business on the Internet and you want to know where your users are from, you've found the right place! Ip2CountryResolver will help you to find and identify visitor's geographical location country and...


Platforms: Windows

ArpCacheWatch monitors Windows ARP cache and allows to send an ARP request to obtain the physical address that corresponds to the specified destination IP address. The ARP cache contains IP/MAC translations so that every time an IP packet are to be sent, the MAC address doesn't have to queried...


Platforms: Windows

Registry Auditor gives you a quick look at the Adware, malware and spyware installed on your computer including parasites and trojans. Registry Auditor tells you by colored icons ( green icon - safe, yellow icon - unknown, red icon - harmful ) whether specific Objects are known to be safe or...


Platforms: Windows