Hackers Center - Security Tools and Texts

Dradis v2.2.0 (Win32)

2009-06-15T12:58:57.000-07:00

Dradis is an open source tool for sharing information during security assessments.
It provides a centralised repository of information to keep track of what has been done so far, and what is still ahead.

Iodine v0.5.2

2009-06-06T08:45:28.000-07:00

Iodine lets you tunnel IPv4 data through a DNS server. This can be usable in different situations where internet access is firewalled, but DNS queries are allowed.

It runs on Linux, Mac OS X, FreeBSD, NetBSD, OpenBSD and Windows and needs a TUN/TAP device. The bandwidth is asymmetrical with limited upstream and up to 1 Mbit/s downstream.

Spectools 2009-02-R1

2009-05-29T04:30:22.000-07:00

Spectrum-Tools is a set of utilities for using the Wi-Spy USB spectrum analyzer hardware from Metageek LLC. They include userspace drivers for the hardware (implemented via libusb), a graphing UI built on GTK/Cairo, network servers for remote devices, and simple utilities for developing additional tools.

Snort2pf v4.3

2009-05-29T04:25:15.000-07:00

Snort2Pf is a small Perl daemon which greps Snort's alertfile and blocks the "naughty" hosts for a given amount of time using pfctl.

Kismet 2009-05-RC2

2009-05-29T04:11:32.000-07:00

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.

Kismet identifies networks by passively collecting packets and detecting standard named networks, detecting (and given time, decloaking) hidden networks, and infering the presence of nonbeaconing networks via data traffic.

PDFResurrect v0.6 - PDF Analysis and Scrubbing Utility

2009-05-24T13:17:27.000-07:00

PDFResurrect is a tool aimed at analyzing PDF documents. The PDF format allows for previous document changes to be retained in a more recent version of the document, thereby creating a running history of changes for the document. This tool attempts to extract all previous versions while also producing a summary of changes between versions. This tool can also "scrub" or write data over the original instances of PDF objects that have been modified or deleted, in an effort to disguise information from previous versions that might not be intended for anyone else to read.

This project is released under the GNU GPLv3 license. So have at it!

Many individuals were originally consulted on this and provided suggestions, including Tele, Remad, Derez, Count, and Sunpuke. Special thanks to Brent, not really part of the 757 crew, but aided in proofreading the paper. Thanks guys!

fwknop v1.9.11 - Single Packet Authorization and Port Knocking

2009-05-24T13:10:12.000-07:00

Fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filter (fwknop supports both iptables on Linux systems and ipfw on FreeBSD and Mac OS X systems) and libpcap.

Cryptmount 4.0

2009-05-24T13:07:18.000-07:00

Cryptmount is a utility for GNU/Linux operating systems which allows an ordinary user to mount an encrypted filing system without requiring superuser privileges. It is aimed at recent Linux systems using the 2.6 kernel series.

Securing Web-Based Exams

2009-05-10T14:43:25.000-07:00

Learning management systems may offer web-based exam facilities. Such facilities
entail a higher risk to exams fraud than traditional paper-based exams. The article discusses
security issues with web-based exams, and proposes precautionary measures to reduce the risks.
A security model is presented that distinguishes supervision support, software restrictions, and
network restrictions. Solutions to security problems are tools to supervise and monitor web-
based exams, measures for exam computers with Windows and Linux, and secure network
setups in common network architectures. The article intends to raise risk awareness among
faculty in higher education, and to help technical staff to implement precautions.

Jailkit v2.7

2009-05-10T14:41:52.000-07:00

Jailkit is a set of utilities to limit user accounts to specific files using chroot() and or specific commands. Setting up a chroot shell, a shell limited to some specific command, or a daemon inside a chroot jail is a lot easier and can be automated using these utilities.

Jailkit is known to be used in network security appliances from several well known manufacturers, internet servers from several large enterprise organisations, servers from internet service providers, as well as many smaller companies and private users that need to secure cvs, sftp, shell or daemon processes.