Security Tools News & Tips

Active Virus Shield is a free service from AOL that protects your pc from viruses and spywares. It uses Kaspersky Advanced detection technology to help stop known and new viruses, spyware and other malware before they attack you. It has all the features of a commercial anti-virus; always-on, automatically checks for updates every hour- providing real-time scanning and protection against virus threats. Easy-to-install, works with most Windows® operating systems. (Windows 98, 2000, ME, XP & Vista).

• More information or Read user reviews...(1)

SQL Power Injector is an application created in .Net 1.1 that helps the penetration tester to find and exploit SQL injections on a web page. For now it is SQL Server, Oracle, MySQL, Sybase/Adaptive Server and DB2 compliant, but it is possible to use it with any existing DBMS when using the inline injection (Normal mode). Indeed, the normal mode is basically the SQL command that someone will put in the parameter sent to the server.

• More information or Write a review...(1)

The Secunia Personal Software Inspector (Beta) detects installed software and categorises your software as either Insecure, End-of-Life, or Up-To-Date. Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors. Highlights of The Secunia PSI: The Secunia PSI will be available free of charge; Calculates your unique Secunia System Score; Automatically scans your computer; Enables you to update Insecure/End-of-Life software; Provides Direct Download Links to security updates & patches; Detects and advises on more than 4,200 applications; Direct correlation between thousands of Secunia Advisories and your specific system and software; Secure SSL encrypted connection to Secunia.

• More information or Write a review...(1)

Linux systems, as many others in the Unix family, have a well-known lack of access control. There is a small granularity of discretionary access rights, only dividing between read, write and execute rights for file owner, and file group members. The RSBAC (Rule Set Based Access Control) framework solves this access control deficiency by giving detailed access control information, and you can implement almost any access control model in it, e.g. as a runtime registered kernel module. Also, there is a powerful logging system which makes intrusion attempts easily detectable.

• More information or Write a review...(1)

LCP is a free Windows password cracker created to replace the very popular L0phtCrack since Symantec stopped it’s development. LCP uses combination of dictionary and brute force attacks to guess the passwords. LCP can crack common passwords in matter of seconds, the more advanced passwords with numbers and characters take longer. LCP helps administrators to identify and remediate security vulnerabilities that result from the use of weak or easily guessed passwords. It also helps to recover lost passwords and to streamline migration of users to another authentication system.

• More information or Read user reviews...(2)

The Firewall Tester (FTester) is a tool designed for testing firewalls filtering policies and Intrusion Detection System (IDS) capabilities. The tool consists of two perl scripts, a packet injector (ftest) and the listening sniffer (ftestd). The first script injects custom packets, defined in ftest.conf, with a signature in the data part while the sniffer listens for such marked packets. The scripts both write a log file which is in the same form for both scripts. A diff of the two produced files (ftest.log and ftestd.log) shows the packets that were unable to reach the sniffer due to filtering rules if these two scripts are ran on hosts placed on two different sides of a firewall. Stateful inspection firewalls are handled with the ‘connection spoofing’ option. A script called freport is also available for automatically parse the log files.

• More information or Write a review...(0)

SSA (Security System Analyzer) is a free non-intrusive OVAL-Compatible policy compliance and vulnerability assessment software. It provides auditors and security officers a comprehensive solution to keep pace with security compliance requirements (patch management, vulnerability management, software inventories…). Features: OVAL-compatible product; SCAP (Security Content Automation Protocol); Perform a deep inventory audit on installed softwares and applications; Scan and map vulnerabilities using non-intrusive techniques based on schemas; Detect and identify missed patches and hotfixes; Define a patch management deployment strategy using CVSS scores.

• More information or Write a review...(1)

Using the built-in Windows administration tools to manage a medium to large Windows NT or Windows 2000/2003 network can be a challenge. Add multiple domains, hundreds or thousands of servers, workstations, and users, and before you know it, things can get out of hand. Hyena is designed to both simplify and centralize nearly all of the day-to-day management tasks, while providing new capabilities for system administration. This functionality is provided in a single, centralized, easy to use product. Used today by tens of thousands of system administrators worldwide, Hyena is the one tool that every administrator cannot afford to be without.

• More information or Write a review...(1)

Revhosts is a project for Passive information Gathering. It’s written in Python, it help pentesters to find informations (Host, VirtualHost, DNS entry, Directories, mail address, subnet,..), with very less false positive.

• More information or Write a review...(0)

Norton Smartphone Security Premier Edition (Beta) keeps your Windows Mobile 5.0 PocketPC, and Windows Mobile 5.0 Smartphone based smartphones safe. It offers: Antivirus protection: Symantec’s award-winning antivirus technology has been applied to smartphones to protect against mobile malware. AntiSpam for SMS: SMS spam messages are automatically placed in spam folder or deleted. Firewall: Controls inbound and outbound network traffic on the smartphone. Personal Data Protection: Automatically encrypt My Documents on logout. Device Password Protection: Require a password before accessing the smartphone and self-service password reset is done via a challenge question.

• More information or Write a review...(0)