Category:Misc Tools

From SecurityForest

Netcat : The network swiss army knife

A simple Unix utility which reads and writes data across network connections, using TCP or UDP protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.

http://www.atstake.com/research/tools/network_utilities/

Download - Windows (http://www.securityforest.com/downloads/nc.exe)

Download - Unix (http://www.securityforest.com/downloads/nc110.tgz)

cryptcat : netcat with encryption support

Cryptcat is a lightweight version of netcat with integrated transport encryption capabilities.

http://sourceforge.net/projects/cryptcat/

Download - Windows (http://www.securityforest.com/downloads/cryptcat.exe)

Download - Unix (http://www.securityforest.com/downloads/cryptcat_linux.tar)

socat : "netcat++" (extended design, new implementation)

socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device (serial line etc. or a pseudo terminal), a socket (UNIX, IP4, IP6 - raw, UDP, TCP), an SSL socket, proxy CONNECT connection, a file descriptor (stdin etc.), the GNU line editor (readline), a program, or a combination of two of these. These modes include generation of "listening" sockets, mamed pipes, and pseudo terminals.

http://www.dest-unreach.org/socat/

Download - Unix (http://www.securityforest.com/downloads/socat-1.4.0.3.tar.bz2)

sbd : Netcat Clone

sbd is a Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32. sbd features AES-128-CBC + HMAC-SHA1 encryption (by Christophe Devine), program execution (-e option), choosing source port, continuous reconnection with delay, and some other nice features. Only TCP/IP communication is supported.

http://tigerteam.se/software_en.shtml

Download - Unix (http://www.securityforest.com/downloads/sbd-1.36.tar.gz)

Download - Windows (http://www.securityforest.com/downloads/sbd.exe)

Download - Windows (background) (http://www.securityforest.com/downloads/sbdbg.exe)

putty - A free telnet/ssh client

PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal emulator. It is written and maintained primarily by Simon Tatham.

PuTTY (http://www.securityforest.com/downloads/putty.exe) (the Telnet and SSH client itself)

PSCP (http://www.securityforest.com/downloads/pscp.exe) (an SCP client, i.e. command-line secure file copy)

PSFTP (http://www.securityforest.com/downloads/psftp.exe) (an SFTP client, i.e. general file transfer sessions much like FTP)

Plink (http://www.securityforest.com/downloads/plink.exe) (a command-line interface to the PuTTY back ends)

Pageant (http://www.securityforest.com/downloads/pageant.exe) (an SSH authentication agent for PuTTY, PSCP and Plink)

PuTTYgen (http://www.securityforest.com/downloads/puttygen.exe) (an RSA and DSA key generation utility).

http://www.chiark.greenend.org.uk/~sgtatham/putty/

OllyDBG : Windows Debugger

OllyDbg is a 32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable.

http://home.t-online.de/home/Ollydbg/

nasm : The Netwide Assembler

NASM is an 80x86 assembler designed for portability and modularity. It supports a range of object file formats including Linux a.out and ELF, COFF, Microsoft 16-bit OBJ and Win32. It will also output plain binary files. Its syntax is designed to be simple and easy to understand, similar to Intel's but less complex. It supports Pentium, P6, MMX, 3DNow! and SSE opcodes, and has macro capability. It includes a disassembler as well.

http://sourceforge.net/projects/nasm

OSSIM : Open Source Security Information Management

OSSIM aims to unify network monitoring, security, correlation and qualification in one single tool. Using Snort, Acid, mrtg, NTOP, OpenNMS, nmap, nessus and rrdtool we want the user to have full control over every network or security aspect. License: BSD-ish

http://www.ossim.net/

SGUIL : The Analyst Console for Network Security Monitoring

Sguil (pronounced sgweel) is built by network security analysts for network security analysts. Sguil's main component is an intuitive GUI that provides realtime events from snort/barnyard. It also includes other components which facilitate the practice of Network Security Monitoring and event driven analysis of IDS alerts. License: QPL

http://sguil.sourceforge.net/

Boomerang : Decompiler

This project is an attempt to develop a real decompiler for native executables through the open source community. A decompiler takes as input an executable file, and attempts to create a high level, compilable, possibly even maintainable source file that does the same thing. It is therefore the opposite of a compiler, which takes a source file and makes an executable. License: BSD-ish/GPL

http://boomerang.sourceforge.net/