Section: .. / UNIX / scanners /
| /// File Name: |
fwknop-1.8.3.tar.gz |
Description:
|
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.
| | Author: | Michael Rash | | Homepage: | http://www.cipherdyne.org/fwknop/ | | Changes: | Multiple additions, some updates, and a bug fix. | | File Size: | 471949 | | Last Modified: | Nov 26 12:08:15 2007 |
| MD5 Checksum: | 9ee3ff46a01911a095f4cec9a3ca2e3b |
|
| /// File Name: |
pkmap-0.1e.bz2 |
Description:
|
PKMap is a functional packet manipulator/injector. It currently supports ETH/IP/TCP/UDP/ICMP/(R)ARP.
| | Author: | Skrye | | Homepage: | http://www.nelaxis.org/projects/pkmap.php | | File Size: | 295859 | | Last Modified: | Nov 12 21:13:35 2007 |
| MD5 Checksum: | d506cfa2e8f10e53e15ec05f3bc293f0 |
|
| /// File Name: |
inguma-0.0.5.1.tar.gz |
Description:
|
Inguma is a free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler.
| | Author: | Joxean Koret | | Changes: | Added an exploit, modules, a tool, and password crackers. | | File Size: | 3152273 | | Last Modified: | Oct 22 23:02:29 2007 |
| MD5 Checksum: | c2476fbfc44a5e1e7d6bddf3f27888ff |
|
| /// File Name: |
joomlascan.py.txt |
Description:
|
This Joomla scanner scans for known vulnerable remote file inclusion paths and files. Written in Python.
| | Author: | d3hydr8 | | Homepage: | http://www.darkc0de.com/ | | File Size: | 11128 | | Last Modified: | Oct 18 18:09:09 2007 |
| MD5 Checksum: | c17fe74429a5f5104163a7fa4fe660dd |
|
| /// File Name: |
sqlninja-0.2.1-r1.tgz |
Description:
|
sqlninja is a small tool to exploit SQL injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable database server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a database Server when a SQL injection vulnerability has been discovered. It is written in perl and runs on Unix-like boxes.
| | Author: | icesurfer | | Homepage: | http://sqlninja.sourceforge.net | | Changes: | New flavor of bruteforce attack, auth mode detection, and various other enhancements and bug fixes. | | File Size: | 118928 | | Last Modified: | Oct 8 20:24:36 2007 |
| MD5 Checksum: | 4548b90a695eb0707fa38d6f3400cd29 |
|
| /// File Name: |
p0f-2.0.8-db-20070919.tar.gz |
Description:
|
p0f performs passive OS detection by watching SYN packets with tcpdump. Additionally, it is able to determine distance to the remote host, and can be used to determine the structure of a foreign or local network. When running on the gateway of a network it is able to gather huge amounts of data and provide useful statistics. On a user-end computer it could be used to track which operating systems are making each connection. p0f supports full tcpdump-style filtering expressions, and has an easily modified fingerprinting database. Note that this version is the win32 compiled version. Original code by Michal Zalewski, compiling by David Coomber.
| | Author: | Michal Zalewski,David Coomber | | Homepage: | http://lcamtuf.coredump.cx/p0f.shtml | | Changes: | Insufficient OS description escapes fixed. Other fixes. | | File Size: | 142600 | | Last Modified: | Sep 20 04:31:24 2007 |
| MD5 Checksum: | fb66dfbdde92a2e8f81bb057a16205b5 |
|
| /// File Name: |
fwknop-1.8.2.tar.gz |
Description:
|
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.
| | Author: | Michael Rash | | Homepage: | http://www.cipherdyne.org/fwknop/ | | Changes: | Added fwknopd server support for Mac OS X. Various other bug fixes and improvements. | | File Size: | 468355 | | Last Modified: | Sep 19 12:11:02 2007 |
| MD5 Checksum: | 06219f0e1393a00a4186089fbee30386 |
|
| /// File Name: |
inguma-0.0.3.tar.gz |
Description:
|
Inguma is a free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler.
| | Author: | Joxean Koret | | File Size: | 453764 | | Last Modified: | Sep 7 02:48:05 2007 |
| MD5 Checksum: | 64375ecfdabaf5b78eb6dd83df49e090 |
|
| /// Directory: |
/ vetescan / |
Description:
|
Unavailable.
| | Total Files: | 22 | | Last Modified: | Sep 5 21:25:27 2007 |
|
| /// Directory: |
/ nss / |
Description:
|
Unavailable.
| | Total Files: | 17 | | Last Modified: | Sep 5 21:25:24 2007 |
|
| /// File Name: |
sqlninja-0.1.3.tgz |
Description:
|
sqlninja is a small tool to exploit SQL injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable database server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a database Server when a SQL injection vulnerability has been discovered. It is written in perl and runs on Unix-like boxes.
| | Author: | icesurfer | | Homepage: | http://sqlninja.sourceforge.net | | Changes: | A faster bruteforce engine plus a bunch of small fixes and improvements. | | File Size: | 116340 | | Last Modified: | Aug 30 04:00:30 2007 |
| MD5 Checksum: | 14fe8f89f7d86230311e0b71c194b886 |
|
| /// File Name: |
synscan-5.0b8.tar.gz |
Description:
|
SynScan is a fast half-open port scanner. This tool will send TCP packets with the SYN flag to any block of destination addresses at very high speed. SynScan endeavors to send traffic as fast as the host network interface can support.
| | Author: | John Anderson,mu-b | | Homepage: | http://www.digit-labs.org/files/tools/synscan/ | | File Size: | 54499 | | Last Modified: | Aug 27 11:34:07 2007 |
| MD5 Checksum: | 87468a1403d84c08d685615eaafc2128 |
|
| /// File Name: |
XSSscan.py.txt |
Description:
|
XSSscan is a cross site scripting scanner that can take output from google or can search one site. It is written in Python.
| | Author: | d3hydr8 | | Homepage: | http://darkcode.h1x.com/ | | File Size: | 10418 | | Last Modified: | Aug 27 11:21:15 2007 |
| MD5 Checksum: | 0942141932f5941ff35ace8f4070be4f |
|
| /// File Name: |
squeeza-0.21.tar.gz |
Description:
|
squeeza is a tool helps exploits SQL injection vulnerabilities in broken web applications. Its functionality is split into creating data on the database (by executing commands, copying in files, issuing new SQL queries) and extracting that data through various channels (dns, timing, http error messages).
| | Author: | Haroon Meer,Marco Slaviero | | Homepage: | http://www.sensepost.com/ | | Related File: | dc-15-meer_and_slaviero-WP.pdf | | File Size: | 30941 | | Last Modified: | Aug 11 18:19:09 2007 |
| MD5 Checksum: | 9e7e713bad29eb8ba4bbf1568225ffed |
|
| /// File Name: |
ndisc6-0.9.3.tar.bz2 |
Description:
|
ndisc consists or two small command line tools (ndisc and rdisc) that perform ICMPv6 Neighbor Discovery and ICMPv6 Router Discovery respectively. It is primarily meant for IPv6 networking diagnostics or to detect rogue IPv6 nodes or routers on an Ethernet segment.
| | Author: | Remi Denis-Courmont | | Homepage: | http://people.via.ecp.fr/~rem/ndisc/ | | Changes: | Updated gettext. Some other minor changes. | | File Size: | 183916 | | Last Modified: | Aug 8 21:18:23 2007 |
| MD5 Checksum: | 5524ea45f371ff7d40638ad3e15d80a8 |
|
| /// File Name: |
SQLPowerInjectorSourceCodev1.2.rar |
Description:
|
SQL Power Injector is a graphical application created in C# .Net 1.1 that helps the penetration tester to inject SQL commands on a web page. Its main strength is its capacity to automate tedious blind SQL injection with several threads. Released under the Clarified Artistic License.
| | Author: | Francois Larouche | | Homepage: | http://www.sqlinjector.com/ | | File Size: | 2334557 | | Last Modified: | Jul 17 03:40:11 2007 |
| MD5 Checksum: | 58abb0581d20fdfdb496ddf0e66eb0ca |
|
| /// File Name: |
proxyScan-0.2.tgz |
Description:
|
proxyScan.pl is a security penetration testing tool to scan for hosts and ports through a Web proxy server. Features include various HTTP methods such as GET, CONNECT, HEAD as well as host and port ranges.
| | Author: | Ed Blanchfield | | Homepage: | http://www.e-things.org/ | | File Size: | 3849 | | Last Modified: | Jul 11 21:59:03 2007 |
| MD5 Checksum: | 8bfa5e39fa502b98dde95206b5b9bfc8 |
|
| /// File Name: |
proxyScan-0.1.txt |
Description:
|
proxyScan.pl is a security penetration testing tool to scan for hosts and ports through a Web proxy server. Features include various HTTP methods such as GET, CONNECT, HEAD as well as host and port ranges.
| | Author: | Ed Blanchfield | | Homepage: | http://www.e-things.org/ | | File Size: | 8516 | | Last Modified: | Jul 6 23:43:33 2007 |
| MD5 Checksum: | db9451d3fae8cc6c831acdaba82e22d5 |
|
| /// File Name: |
ISR-sqlget-1.0.0.tar.gz |
Description:
|
ISR-sqlget is a blind SQL injection tool developed in Perl. It supports 20 databases, has various evasions features, SSL and proxy support, and more.
| | Author: | Francisco Amato | | Homepage: | http://www.infobyte.com.ar/ | | File Size: | 377955 | | Last Modified: | Jun 26 18:17:13 2007 |
| MD5 Checksum: | a1a319ae430c48d8e051b78587bf6550 |
|
| /// File Name: |
sqlninja-0.1.2.tgz |
Description:
|
sqlninja is a small tool to exploit SQL injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable database server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a database Server when a SQL injection vulnerability has been discovered. It is written in perl and runs on Unix-like boxes.
| | Author: | icesurfer | | Homepage: | http://sqlninja.sourceforge.net | | Changes: | Test mode added. Debug option added. Other minor changes. | | File Size: | 115337 | | Last Modified: | Jun 21 15:12:10 2007 |
| MD5 Checksum: | 70e8b71f7501c177afcd213077e68c23 |
|
| /// File Name: |
pixy_3_01.zip |
Description:
|
Pixy is an open source vulnerability scanner that audits PHP applications for SQL injection and cross site scripting vulnerabilities. It is written in Java and also performs automatic resolution of file inclusions.
| | Homepage: | http://www.seclab.tuwien.ac.at/ | | File Size: | 2006858 | | Last Modified: | Jun 21 15:02:52 2007 |
| MD5 Checksum: | 8c51e382de00a28c654cd8b76187eddb |
|
| /// File Name: |
p0f-2.0.8-win32.zip |
Description:
|
p0f performs passive OS detection by watching SYN packets with tcpdump. Additionally, it is able to determine distance to the remote host, and can be used to determine the structure of a foreign or local network. When running on the gateway of a network it is able to gather huge amounts of data and provide useful statistics. On a user-end computer it could be used to track which operating systems are making each connection. p0f supports full tcpdump-style filtering expressions, and has an easily modified fingerprinting database. Note that this version is the win32 compiled version. Original code by Michal Zalewski, compiling by David Coomber.
| | Author: | Michal Zalewski,David Coomber | | Homepage: | http://lcamtuf.coredump.cx/p0f.shtml | | File Size: | 79334 | | Last Modified: | Jun 19 16:31:06 2007 |
| MD5 Checksum: | dacece154deb4a4c4a28b21176ba3308 |
|
| /// File Name: |
Samotny_pi3.c |
Description:
|
Port scanner that can perform SYN, FIN, NULL, and XMAS scans with options to perform them very slowly and in decoy mode.
| | Author: | Adam Zabrocki | | Homepage: | http://www.pi3.int.pl | | File Size: | 36692 | | Last Modified: | Jun 6 19:05:00 2007 |
| MD5 Checksum: | 75dac2e1d8779e76e98820be54354de5 |
|
| /// File Name: |
fwknop-1.8.1.tar.gz |
Description:
|
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.
| | Author: | Michael Rash | | Homepage: | http://www.cipherdyne.org/fwknop/ | | Changes: | Added support for ipfw firewalls. Added init script for FreeBSD systems. Various other additions and updates. | | File Size: | 457093 | | Last Modified: | Jun 6 18:33:35 2007 |
| MD5 Checksum: | f5f3fb0c51d46c306ee9a94525f3b015 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
