Top : Computers : Software : Operating Systems : Linux : Projects :
Security
Categories
| Distributions @ Firewalls @ PAM Password Auditing |
Websites
Freeware PGP, Pretty Good Privacy interoperable encryption software package. CTC is Rot13 for PGP.
site exerpt
CTC PGP-compatible encryption software C is a collection freeware PGP-interoperable encryption software package developed by Ian Miller and Mr. Tines. CTC does not stand for anything; it is Rot13 PGP The currently released components are CTClib a ANSI-C library by both authors. Current release:...Tool that interactively builds a firewall using ipfwadm, ipchains, or netfilter/iptables firewalling. [GPL]
site exerpt
Mason the automated firewall builder for Linux If you have not checked out Mason, I highly recommend it. Mason is a Linux based firewall, but none like you've ever used. In short, you put Mason into learning mode and run the services to the Internet you wish...A packet sniffing tool, based on the Berkeley packet capture library; that prints complete data-link, network, and transport layer header information for all packets it sees.
site exerpt
IPgrab Pgrab is a verbose packet sniffer for UNIX hosts. Links: Manual: ipgrab-0.9.8.pdf Latest stable release: ipgrab-0.9.8.tar.gz Daily tarball of CVS tree Detailed project page Web access to the CVS tree Visit the author's homepage Subscribing to our mailing lists: Announcements...Performs logging of incoming IP packets by utilizing a multi-threaded approach. Administrators can perform filtering of captured packets.
site exerpt
ippl IP Protocols Logger Latest development version is: ippl 1.99.5. News Download the latest stable version Download the Debian GNU/Linux package (stable version) Download the latest Debian GNU/Linux package Download the RPM package* Browse the development directory Browse the archive directory the packages are...A network scanner that detects Microsoft Windows shares using the SMB protocol.
ftp://ADM.isp.at/ADM/ADMsmb-v0.2.tgz
A generic IP network transaction auditing tool that performs network monitoring.
site exerpt
Unix Network Monitoring Tools While it is only available for Sun platforms, it is written entirely in C, and comes pre-built. Netlog version 2.1 Netlog is a C library that can be linked into an existing network application to provide some instrumentation of network...A set of network diagnostic tools, such as an enhanced replacement for traceroute.
ftp://ftp.inr.ac.ru/ip-routing/iputils-current.tar.gz
Offers file integrity verification via digital fingerprints.
ftp://ftp.buivi.com/pub/bsign/
Hummer is a complex tool that lets you distribute security and intrusion detection information between several hosts. Therefore, it can be used to detect sophisticated attacks where multiple attackers and targets are mixed and matched.
site exerpt
Hummer Project Center for Secure and Dependable Software The trend towards a strong interdependence among networks has serious security implications. Not only does the compromise of one network adversely affect resources needed by others, but the compromised network may be part of a multi-network attack targeting other systems....Performs emulation of other operating systems and vulnerabilities not found on the host; in order to deceive and solicit invaild attempts of exploitation by malicious individuals.
site exerpt
Copy the distribution file to a convenient directory (an empty one) and unpack, unzip, untar, or whatever else you have to do to get to the files into that directory. For example, if you get it as a tar file,...Adds the ability for a network administrator to set packet filtering rules via a web page interface. unsecure from an external source, but very easy to use for intranet management.
site exerpt
DNi v0.7 function tripodShowPopup var bName=navigator.appName; var bVer=parseInt(navigator.appVersion var now new Date var popupURL adm/ad/popup_source.shtml var popupName TripodPopup if (bName Netscape bVer=3 var popupWin window.open popupName toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=0,width=755,height=200,left=200,top=550 else var popupWin window.open popupName toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=0,width=745,height=185,left=200,top=500 if (popupWin popupWin.blur popupWin.location popupURL else var nopopImg=d.createElement IMG...A BSD-based firewall with source included. This binaries main value is that it is perfect for beginners learning how firewalls are developed.
http://drawbridge.tamu.edu/
Suite aimed at turning a minimally configured consumer PC into a standalone internet firewall; complete with address translation, proxying, and IP packet forwarding.
http://edge.fireplug.net
A protocol analyzer that supports ethernet, Token Ring, SLIP, PPP, ISDN, and loopback.
site exerpt
EPAN Ethernet Protocol Analyzer N is a protocol analyzer for ethernet networks. The program allows you to display the received frames either in an overview mode or in a frame detail mode. It is also possible to create a few statistics (frame size distribution,...A tool for automatically debugging databases by performing a zone transfer of a current zone. Inspects individual records for inconsistencies, and generates warnings or errors where appropriate.
site exerpt
dnswalk a DNS database debugger I finally got off my butt and registered dnswalk at SourceForge. It's now distributed under the Artistic License. There is now a CVS repository up and running. I am taking requests from anyone who wishes to work seriously on dnswalk....Network protocol analyzer for Unix that allows examination of data from a live network, or from a capture file on disk.
site exerpt
Ethereal: A Network Protocol Analyzer Ethereal is used by network professionals around the world for troubleshooting, analysis, software and protocol development, and education. It has all of the standard features you would expect in a protocol analyzer, and several features not seen in any other...Datagram sniffer for the Linux operating system.
http://members.ozemail.com.au/~peterhawkins/gnusniff.html
icmpquery is a tool for sending and receiving ICMP queries for the destinations address mask and current time.
site exerpt
Security stuff Security stuff icmpquery.c (the most up to date one)...An advanced TCP/IP packet filter suitable for use in firewall environments. Can be loaded as a module or compiled into the kernel.
site exerpt
IP Filter TCP/IP Firewall/NAT Software Filter is a software package that can be used to provide network address translation (NAT) or firewall services. To use, it can either be used as a loadable kernel module or incorporated into your UNIX kernel; use as a loadable...Helps inexperienced Linux network administrators perform IP masquerading and firewalling on a small network easier.
http://www.wolfenet.com/~jhardin/ipfwadm.html
Vexira Antivirus for Linux workstations and servers. A complete virus defense system designed for easy and dependable virus prevention on Linux systems.
site exerpt
Central Command Linux antivirus, free computer virus protection, school discount Command is one of the leading antivirus companies in the United States and Canada. We produce corporate antivirus solutions, linux virus scanner, email virus scanner and other network antivirus software. Our mission is to save clients time and money by...IPTraf is a console-based network statistics utility that gathers TCP connection paket and byte counts, interface statistics, and activity indicators. Also captures all TCP/UDP packets.
site exerpt
IPTraf An IP Network Monitor Announcing the release of IPTraf 3.0.0, the newest major release featuring an improved filtering system, and wider network interface support. It's available on SEUL's official download site. ZDNet: Police Your Network Traffic with IPTraf ZDNet UK has an article on...Strong user authentication and access control for Linux environments in a fully integrated system using PAM modules.
http://www.stadrin.com
The ultimate resource for securing your linux workstation/server.
site exerpt
Hacking And Computer Security If you are tired of having viruses then this site can help you to stop it happening with information on various different virus protection packages and help with deciding which one would be best for you. There is also information...Linux Pluggable Authentication Modules (PAM) is a flexible mechanism for authenticating users using alternative authentication schemes.
site exerpt
A Linux-PAM page This is the primary distribution site for the Linux-PAM (Pluggable Authentication Modules for Linux) project The ftp version of this site is ftp ftp.kernel.org/pub/linux/libs/pam At the time of writing (at least) the following vendors/distributions/etc support PAM using the Linux-PAM sources...Protocol LAN analyzer that can monitor various interfaces: ISDN, PPP, Token Ring, standard: loopback, 10baseT Ethernet.
site exerpt
IPv4.it COLD Your LAN analyzer D is both a network analysis tool and a protocol analyzer. It is distributed freely, so its usage is free and the package is freely available. COLD is a network monitoring and protocol analyzing tool which allows to study, maintain...The famed Computer Oracle and Password System is a suite of tools that can automatically detect configuration problems or holes in your system.
site exerpt
COPS home page I put together in a short time that goes over some of the FAQ's concerning COPS. To actually get a copy of the latest version (1.04 you can get it in compressed or gzip'd form: compressed COPS gzip'd COPS To...Free software package for booting x86 PCs over networks.
site exerpt
EtherBoot.org Etherboot is a software package for creating ROM images that can download code over an Ethernet network to be executed on an x86 computer. Many network adapters have a socket where a ROM chip can be installed. Etherboot is code...A log analysis program that interfaces with the SNORT open source Intrusion Detection System to provide real time visual notification when an intrusion signature has been detected on the network.
site exerpt
RazorBack Snort Network Intrusion Detection Front-End Open Source Statistics on the hits to the sourceforge site and our own webserver are available from this link Snare Statistics.Snare Generator Version 1.2 is now availableSnare for Windows Vers 2.5.1 now availableSnare for Tru64 now available to selected usersSnare Server Release...Allows the user to take over the IP address of another machine in the user's LAN via ARP spoofing.
site exerpt
fake Fake has been designed to switch in backup servers on a LAN. In particular it has been designed to backup Mail, Web and Proxy servers during periods of both unscheduled and scheduled down time. Fake allows you to take over...A network scanner that uses spoofed source address packets. Mainly used to test firewall rules and to perform advanced TCP/IP related attacks like the idle scan.
site exerpt
hping security tool home page The interface is inspired to the ping(8) unix command, but hping isn't only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel,...Cheops is a complex network utility integration tool that offers network topographic visualization.
site exerpt
Cheops Network User Interface It is designed to be the network equivalent of a swiss-army knife, unifying your network utilities. Cheops does for the network what a file manager does for your filesystem. Cheops is in need of a new maintainer. I have been...