Section: .. / UNIX / scanners /
| /// File Name: |
lynis-1.2.0.tar.gz |
Description:
|
Lynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems.
| | Author: | Michael Boelen | | Homepage: | http://www.rootkit.nl/projects/lynis.html | | Changes: | Multiple new tests added, various support added, and various changes. | | File Size: | 71510 | | Last Modified: | Aug 29 01:16:03 2008 |
| MD5 Checksum: | 7b66c5c9f4febd9441c0cc63ded8c345 |
|
| /// File Name: |
fwknop-1.9.7.tar.gz |
Description:
|
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.
| | Author: | Michael Rash | | Homepage: | http://www.cipherdyne.org/fwknop/ | | Changes: | Mirek Trmac from Red Hat contributed several patches so that fwknop can be bundled within the Fedora Linux distribution. Updated fwknop, fwknopd, and knoptm to import perl modules out of the /usr/lib/fwknop/ directory if it exists. Added module version output for each non-core perl module used by fwknop and fwknopd in --debug mode. Various other additions and fixes. | | File Size: | 572921 | | Last Modified: | Aug 25 20:21:55 2008 |
| MD5 Checksum: | 955a2a920aeeab655d16da212f70b5e8 |
|
| /// File Name: |
Grendel-Scan-v1.0-src.zip |
Description:
|
Grendel-Scan is an open-source web application security testing tool. It has an automated testing module for detecting common web application vulnerabilities, and features geared at aiding manual penetration tests.
| | Author: | David Byrne | | Homepage: | http://grendel-scan.com/ | | File Size: | 917014 | | Last Modified: | Aug 20 03:29:57 2008 |
| MD5 Checksum: | 15ad913facfcb8075b5b038f9cc19358 |
|
| /// File Name: |
modscan.py.txt |
Description:
|
ModScan is a new tool designed to map a SCADA MODBUS TCP based network. The tool is written in python for portability and can be used on virtually any system with few required libraries.
| | Author: | Mark Bristow | | Homepage: | http://modscan.googlecode.com/ | | File Size: | 5385 | | Last Modified: | Aug 20 03:24:40 2008 |
| MD5 Checksum: | a884da5a3df280eab12fd998cf7dbf8b |
|
| /// File Name: |
porkbind-1.3.tar.gz |
Description:
|
Porkbind is a robust and recursive DNS server vulnerability scanner which retrieves version.bind information for the nameservers and produces a report.
| | Author: | Derek Callaway | | Homepage: | http://innu.org/~super | | Changes: | Wrote in-a-bind shell script that scans random domain names from DMOZ. Implemented recursive query testing. Various other fixes and additions. | | File Size: | 43416 | | Last Modified: | Aug 18 18:18:31 2008 |
| MD5 Checksum: | 0f9eba661fd9187b6c488c8f6e587bc8 |
|
| /// File Name: |
inguma-0.0.9.1.tar.gz |
Description:
|
Inguma is a free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler.
| | Author: | Joxean Koret | | Changes: | Various bug fixes, new modules added, and a lot of new exploits. | | File Size: | 5024865 | | Last Modified: | Aug 12 23:32:24 2008 |
| MD5 Checksum: | 55407b5f254d9e8bb25cece11c8d38e7 |
|
| /// File Name: |
p0f-2.0.8-db-20080806.tar.gz |
Description:
|
p0f performs passive OS detection by watching SYN packets with tcpdump. Additionally, it is able to determine distance to the remote host, and can be used to determine the structure of a foreign or local network. When running on the gateway of a network it is able to gather huge amounts of data and provide useful statistics. On a user-end computer it could be used to track which operating systems are making each connection. p0f supports full tcpdump-style filtering expressions, and has an easily modified fingerprinting database. Note that this version is the win32 compiled version. Original code by Michal Zalewski, compiling by David Coomber.
| | Author: | Michal Zalewski,David Coomber | | Homepage: | http://lcamtuf.coredump.cx/p0f.shtml | | Changes: | Added better handling of MySQL error codes. | | File Size: | 142878 | | Last Modified: | Aug 8 14:58:33 2008 |
| MD5 Checksum: | b85bbe604ddd7cb813e7d132655ccc72 |
|
| /// File Name: |
arp-scan-1.7.tar.gz |
Description:
|
arp-scan sends ARP (Address Resolution Protocol) queries to the specified targets, and displays any responses that are received. It allows any part of the outgoing ARP packets to be changed, allowing the behavior of targets to non-standard ARP packets to be examined. The IP address and hardware address of received packets are displayed, together with the vendor details. These details are obtained from the IEEE OUI and IAB listings, plus a few manual entries. It includes arp-fingerprint, which allows a system to be fingerprinted based on how it responds to non-standard ARP packets.
| | Author: | Roy Hills | | Homepage: | http://www.nta-monitor.com/tools/arp-scan/ | | File Size: | 344771 | | Last Modified: | Aug 1 17:46:09 2008 |
| MD5 Checksum: | a9927dba2b1dbdfd1c3b3bb09615fc14 |
|
| /// File Name: |
porkbind-1.2.tar.gz |
Description:
|
Porkbind is a robust and recursive DNS server vulnerability scanner which retrieves version.bind information for the nameservers and produces a report.
| | Author: | Derek Callaway | | Homepage: | http://innu.org/~super | | Changes: | Prints out version string every time even if it is not parsable, Removed the -f command line option, Updated porkbind.conf with all the latest CERT advisories for BIND, and more. | | File Size: | 38019 | | Last Modified: | Jul 30 23:53:27 2008 |
| MD5 Checksum: | 4253288959d7ac8386fe2432cae1aaad |
|
| /// File Name: |
fwknop-1.9.6.tar.gz |
Description:
|
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.
| | Author: | Michael Rash | | Homepage: | http://www.cipherdyne.org/fwknop/ | | Changes: | Added the ability to explicitly run major classes of tests 46 with two new command line arguments to the fwknop_test.pl script. Updated the fwknop client to randomize the UDP source port for default SPA packet generation. Various other updates and additions. | | File Size: | 566465 | | Last Modified: | Jul 24 12:23:37 2008 |
| MD5 Checksum: | 9734c99a1c0b28b1522ce50396405d54 |
|
| /// File Name: |
wpacrack.py.txt |
Description:
|
Python script that cracks a 256-bit WPA-PSK hash (64 char) using wpa_passphrase and a wordlist.
| | Author: | d3hydr8 | | Homepage: | http://www.darkc0de.com/ | | File Size: | 1500 | | Last Modified: | Jul 10 18:48:16 2008 |
| MD5 Checksum: | f526e7dcfd3f3a9583738f494b0791d1 |
|
| /// File Name: |
pktanon-1.2.0-dev.tar.gz |
Description:
|
PKtAnon performs network trace anonymization. It is highly configurable and uses anonymization profiles. Anonymization profiles allow for mapping of arbitrary anonymization primitives to protocol attributes, thus providing high flexibility and easy usability. A huge number of anonymization primitives and network protocols are supported and ready to use for online and offline anonymization.
| | Author: | Christoph Mayer | | Homepage: | http://www.tm.uka.de/pktanon | | File Size: | 160561 | | Last Modified: | Jun 30 11:50:42 2008 |
| MD5 Checksum: | 6e62d3f5495216ac5d24dd82b3025314 |
|
| /// File Name: |
dnsenum1.2.tar.gz |
Description:
|
dnsenum is a perl script that enumerates DNS information from a domain, attempts zone transfers, performs a brute force dictionary style attack, and then performs reverse look-ups on the results. It has been completely revamped.
| | Author: | Filip Waeytens | | Changes: | Various bugs and code clean up. | | File Size: | 12413 | | Last Modified: | Jun 23 18:17:04 2008 |
| MD5 Checksum: | 59d92826d06119a21f197ea7fd8bcb17 |
|
| /// File Name: |
bsqlbf-v2.1.zip |
Description:
|
Bsqlbf was originally written by A. Ramos from www.514.es and was intended to exploit blind sql injection against mysql backend database. This is a modified version of the same tool. It supports blind sql injection against the following databases: MS-SQL, MY-SQL, PostgresSQL, and Oracle.
| | Author: | Sumit Siddharth | | Homepage: | http://notsosecure.com/ | | File Size: | 8664 | | Last Modified: | Jun 23 03:59:24 2008 |
| MD5 Checksum: | 4112eeb244251498680c145ca8209a05 |
|
| /// File Name: |
fwknop-1.9.5.tar.gz |
Description:
|
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.
| | Author: | Michael Rash | | Homepage: | http://www.cipherdyne.org/fwknop/ | | Changes: | Various updates and additions. Removed legacy knopmd.conf file since knopmd uses the fwknop.conf file instead. | | File Size: | 561965 | | Last Modified: | Jun 13 12:44:48 2008 |
| MD5 Checksum: | 425c54c86f60f71a58891443fec57be0 |
|
| /// File Name: |
inth-v0.2.tgz |
Description:
|
This code utilizes the p0f derived OS signature database of disco to actively fingerprint operating systems. It is able to fingerprint hosts based on a single SYN-ACK received from a probed port, and as such can be used to identify multiple hosts NAT Masquerading behind a single IP.
| | Author: | skrye | | File Size: | 22947 | | Last Modified: | Jun 9 18:41:52 2008 |
| MD5 Checksum: | a8fd06ab8f79804d5d8ea6a3c0fc72e3 |
|
| /// File Name: |
fwknop-1.9.4.tar.gz |
Description:
|
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.
| | Author: | Michael Rash | | Homepage: | http://www.cipherdyne.org/fwknop/ | | Changes: | Added two new port randomization options. Various module additions and bug fixes. | | File Size: | 570223 | | Last Modified: | Jun 2 17:47:32 2008 |
| MD5 Checksum: | bccaa8abe6e807d41378b46b379edc7b |
|
| /// File Name: |
haxssl.tgz |
Description:
|
This Ruby code will test a specified Host's SSL certificate against the Debian-based blacklist of keys (RSA 2048 and DSA 1024) generated during the period where openssl on Debian-based installs suffered from a weakness in random number generation. Note that the blacklist is embedded in the code so the file is about 23 MB.
| | Author: | Cody Tubbs | | Related File: | dsa-1571-1.txt | | File Size: | 13052186 | | Related CVE(s): | CVE-2008-0166 | | Last Modified: | May 29 14:12:08 2008 |
| MD5 Checksum: | 96666f341f89b312294862723156679c |
|
| /// File Name: |
lynis-1.1.3.tar.gz |
Description:
|
Lynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems.
| | Author: | Michael Boelen | | Homepage: | http://www.rootkit.nl/projects/lynis.html | | File Size: | 55617 | | Last Modified: | May 27 19:38:11 2008 |
| MD5 Checksum: | bf6984cd11846353a32dd979971d20c5 |
|
| /// File Name: |
sqlninja-0.2.3.tgz |
Description:
|
sqlninja is a small tool to exploit SQL injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable database server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a database Server when a SQL injection vulnerability has been discovered. It is written in perl and runs on Unix-like boxes.
| | Author: | icesurfer | | Homepage: | http://sqlninja.sourceforge.net | | Changes: | Added metasploit module and makescr.pl. | | File Size: | 124338 | | Last Modified: | May 27 18:21:29 2008 |
| MD5 Checksum: | daa9e815aa82d9f3859fb416e6eda1d0 |
|
| /// File Name: |
volatile.txt |
Description:
|
Volatile is an automatic SQL injection exploitation tool that takes advantage of applications discovered in search results and attempts to leverage xp_cmdshell.
| | Author: | rfds,hash | | Homepage: | http://www.rfdslabs.com.br/ | | File Size: | 8176 | | Last Modified: | May 22 01:46:10 2008 |
| MD5 Checksum: | c65ad112959ae126db862ae0b8b75f8c |
|
| /// File Name: |
sp_2.0.zip |
Description:
|
SQL Playground (SP) is a tool written in Perl that aims to exploit SQL injection vulnerabilities while presenting itself in a command line shell. Full paper provided to explain use.
| | Author: | real | | File Size: | 16174 | | Last Modified: | Apr 23 12:41:47 2008 |
| MD5 Checksum: | 8a7582ef7cdb8c929e8ad1d44c9b6017 |
|
| /// File Name: |
blindsql.tgz |
Description:
|
Blind SQL injection tool for MySQL servers using a true-false method. You can obtain MySQL information and extract data from tables without the use of quotes.
| | Author: | Pepelux | | Homepage: | http://www.enye-sec.org/ | | File Size: | 6850 | | Last Modified: | Apr 11 14:41:39 2008 |
| MD5 Checksum: | c2da36dbe2c1b79886994cd3815ae15c |
|
| /// File Name: |
fwknop-1.9.3.tar.gz |
Description:
|
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.
| | Author: | Michael Rash | | Homepage: | http://www.cipherdyne.org/fwknop/ | | Changes: | Added MASQUERADE and SNAT support. Added hex_dump() feature. Some minor bug fixes. | | File Size: | 557119 | | Last Modified: | Apr 7 23:06:39 2008 |
| MD5 Checksum: | 0a13e94474284d1568cded14ba1f03f0 |
|
|
|
|
|