WIDZ version 1.5 is a proof of concept IDS system for 802.11 that guards an AP(s) and Monitors local frequencies for potentially malevolent activity. It detects scans, association floods, and bogus/Rogue AP's. It can easily be integrated with SNORT or RealSecure.
bba8b890ad9df45e6ae49f336a63ff99c182541545f7c64b5f1175fb906b5632
Proxychains is a command line tool for Linux and Solaris which allows TCP tunneling trough one or multiple (chained) HTTP proxies.
3001047568c857efbd33c86231094ba5d90d5523e4bb6f8c456c4e8c7fc9153c
This paper describes FILE stream overflow vulnerabilities and illustrates how they can be exploited. The author uses a FILE stream overflow in dvips as a case study.
1ba52e016c0392136d39eef96e00aa376e076ea025a6eab55d090bf725634635
proDETECT 0.1 BETA is an open source scanner that uses an ARP packet analyzing technique to detect network adapters which are in promiscuous mode. This tool can therefore be used by security administrators to detect sniffers in a LAN. It can be scheduled for regular scanning over periods and includes advanced reporting capabilities. This is the source code package, the binary package is available WinPcap.
8c220e4a8ece0b3345779c7d664763941acede1e82e154c85b9dcb3123eb34e3
Ettercap 0.6.9 is a network sniffer/interceptor/logger for switched LANs. It uses ARP poisoning and the man-in-the-middle technique to sniff all the connections between two hosts. Features character injection in an established connection - you can inject characters to server (emulating commands) or to client (emulating replies) while maintaining an established TCP connection! Integrated into a easy-to-use and powerful ncurses interface.
26fc8397c8baae41d13085e0d784640916bbe906b44ba5a9166f126f7cda2252
FWReport 1.0.0 is a log parser and reporter for IPTables. It generates daily and monthly summaries of the log files, allowing admins to free up substantial time, maintain better control over security of the network, and reduce the likelihood that attacks will go unnoticed.
4733e349da3d5359a1ead6e850b3715845498392bf612582792c369c45bcd4cd
Chkrootkit v0.39a locally checks for signs of a rootkit. Chkrootkit includes ifpromisc.c to check and see if the interface is in promisc mode, chklastlog.c to check lastlog for deletions, and chkwtmp.c to check wtmp for deletions, strings.c for quick and dirty strings replacement, check_wtmpx.c to check for wtmpx deletions and the files chkproc.c and chkdirs.c to check for LKM trojans. Tested on Linux 2.0.x, 2.2.x and 2.4.x, FreeBSD 2.2.x, 3.x and 4.x, OpenBSD 2.6, 2.7, 2.8, 2.9, 3.0 and 3.1, NetBSD 1.5.2 and Solaris 2.5.1, 2.6 and 8.0.
c6290a41059d4f3660b135a3cbecaae68e5ad29c3168843f77373a5d6691a710