Security Tools News & Tips

Paros Proxy is a security tool for web application vulnerability assessment. It is free of charge and completely written in Java. Through Paros’s proxy nature, all HTTP and HTTPS data between server and client, including cookies and form fields, can be intercepted and modified. It includes a web traffic recorder, web spider, hash calculator, and a scanner for testing common web application attacks such as SQL injection and cross-site scripting.

• More information or Write a review...(1)

SME Server is an open-source Linux server distribution based on CentOS. It is a secure and out-of-the-box Server/Gateway solution. Installation and basic configuration of SME Server takes less than 20 minutes, and every configuration option can be set via a web-based interface. SME Server only includes what is necessary, which translates into the entire ISO being less than 450MB. Stability comes from using proven, supported rpm packages and from an update system that notifies you with available updates. SME Server already has everything necessary to provide the core services most people need to network Linux, Macintosh, and Windows systems. It includes preconfigured Email Server (with anti-virus and anti-spam), Web Server, DNS Server, File Server, Print Server and Internet Gateway (Proxy, Router and simple Firewall).

• More information or Write a review...(0)

A very fast network logon cracker which support many different services. Number one of the biggest security holes are passwords, as every password security study shows. Hydra is a parallized login cracker which supports numerous protocols to attack. Currently this tool supports: TELNET, FTP, HTTP, HTTPS, HTTP-PROXY, SMB, SMBNT, MS-SQL, MYSQL, REXEC, RSH, RLOGIN, CVS, SNMP, SMTP-AUTH, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, LDAP2, LDAP3, Postgres, Teamspeak, Cisco auth, Cisco enable, LDAP2, Cisco AAA.

• More information or Write a review...(0)

WebScarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. It is written in Java, and is thus portable to many platforms. WebScarab has several modes of operation, implemented by a number of plugins. In its most common usage, WebScarab operates as an intercepting proxy, allowing the operator to review and modify requests created by the browser before they are sent to the server, and to review and modify responses returned from the server before they are received by the browser. WebScarab is able to intercept both HTTP and HTTPS communication. The operator can also review the conversations (requests and responses) that have passed through WebScarab.

• More information or Write a review...(0)