Ophcrack is one of the more effective password hack tools that runs via Windows, Mac and Linux installations or on a Live CD, and it can be used to crack almost any Windows. They're included in the Live CD, can automatically be retrieved from the Windows executable, or downloaded from the Ophcrack website. The password is what makes your network, web accounts and email accounts safe from unauthorized access. These password cracking tools are proof that your passwords.

Security Audit Tools: Perform a 'Security Risk Assessment' on your system with the following tools. System Audits: • - Scan system for Trojans, worms and exploits. • Root kit detection: • - detect rootkits by detecting falsified output and similar anomalies. The ps check should work on anything with /proc.

Also uses netstat. • - scans for rootkits, back doors and local exploits • • - root kit detector daemon. Intended to catch someone installing a rootkit or running a packet sniffer. • - Perl script to scan filesystems and search for suspicious looking directories • - UNIX security checks. Programs and shell scripts which perform security checks. Checks include file and directory permissions, passwords, system scripts, SUID files, ftp configuration check. • - Security Auditor's Research Assistant - network security vulnerability scanner for SQL injections, remote scans, etc.

(follow-on to the SATAN analysis tool) • - Commercial support Network Vulnerability Audits: • - Remote security scanner - This is my favorite security audit tool!! Checks service exploits and vulnerabilities. •: Open Vulnerability Assessment System. A branch of Nessus which is more free of licensing restrictions • - IP network transaction auditing tool.

This daemon promiscuously reads network datagrams from a specified interface, and generates network traffic status records • - Intrusion analysis. Identifies malicious or unauthorized access attempts.

• - CGI script analyzer to find security deficiencies. Wireless: • - wireless LAN (WLAN) tool that recovers encryption keys. • Application Security Audit: • - app security tests. Can be integrated with Continuous Integration (CI) builds • - Coverage of over 100 generic application vulnerabilities, such as SQL injection and cross-site scripting (XSS), and all vulnerabilities in the OWASP top 10 •: • - test for SQL Injection vulnerabilities. • - web-app security tests for sql injections, XSS holes, Broken Authentication and Session Management and site security • - Trace and time http response/requests. Security test web applications by modifying POST parameters. • - SSL Validation • - Open Web Application Security Project • - find web applications security vulnerabilities • • - security tool for semi-automated testing of web applications.

Port Scanners: Used to identify computer network services available for exploit. • - Port scanner and security scanning and investigation tool • - GUI front-end to NMAP • - KDE front-end • - Diff nmap scans to find changes to systems on the network. • - nmap post processing to 3-d VRML • - log scans to database • - processes NMap and OpenVAS output to generate a report. Requires OpenOffice. • - fast portscanner Also see to automate UnicornScans.

• - C++ Port Scanner will try to connect on every port you define for a particular host. • - passive OS fingerprinting. • Web/http scan: • - web server scanner.

CGI, vulnerability checks. Not a stealthy tool.

For security tests. Portscanning Information: • - types of scans explained.

Network Sniffers: Linux Tools for Network Examination. • - network tools for auditing and penetration testing. • - full network protocol sniffer/analyzer • - curses based IP LAN monitor • - network monitor and data acquisition • - Voice Over Mis-configured Internet Telephones - Use TCP dump of VOIP stream and convert to WAV file. Cisco Call Manager depends on MS/SQL server and are thus vulnerable to SQL Slammer attacks. • - 802.11a/b/g wireless network detector, sniffer and intrusion detection system. • - Passive IP discovery and fingerprinting tool. Sits on a segment of a network to discover unique IPs and identify them.

• - Framework for analyzing and testing the deployed networks and systems. Designed to take advantage of some weakness in different Layer 2 protocols: Spanning Tree Protocol (STP), Cisco Discovery Protocol (CDP), Dynamic Trunking Protocol (DTP), Dynamic Host Configuration Protocol (DHCP), Hot Standby Router Protocol (HSRP), IEEE 802.1q, Inter-Switch Link Protocol (ISL), VLAN Trunking Protocol (VTP). • YoLinux.com. Hacker Tools: Password crackers: (can also be part of a vulnerability audit) • - weak password detection. Crypt, Kerberos AFS, MS/Windows LM.

• - password hacker, dictionary, brute force incremental. Exploits: • • Exploit framework: • - Exploit launcher, test and development tool Other Links: • • - command line TCP/IP packet assembler/analyzer. Supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel. • - Can be used to performs a lot of tasks, like testing of firewall rules, (spoofed) port scanning. Security Infrastructure Software Tools: • - attack detection and defense • PortSentry: basic theory - - • • • - File system data integrity checking tool • - intrusion detection and prevention. Rules to inspect and detect anomaly signatures. • - Hardening perl scripts to lock down a system and increase its security.

Can perform an assessment of a system's configuration ( bastille --assess). It queries the administrator as to the expected level of security expected for various system components and then configures the system (./InteractiveBastille).

• - Bootable live CD Linux distro preconfigured for penetration testing. • - analyzes iptables log messages to detect port scans and other suspicious traffic. • - IP packet logger.

Log anomalies • - secure authentication • - remote login. SSH is more popular. • • Secure connections SSH (shell) and SSL (socket layer): • - Open Source version - Requires: • - Secure Socket Layer • - Commercial versions SSH1 and SSH2 • - Frequently Asked Questions • MS/Windows clients: • - Telnet, SSH, SCP, SFTP client • • - Wietse Venema • • - cryptographic toolkit • - encryption Commercial Vendors: • - Encryption and secure commerce. • authentication servers • - Secure online storage, file sharing and distribution, email, instant messaging. Free Linux client but it is a commercial for fee service.

(less than 2MB storage is free) • - Texas A+M Tiger Commercial support • - - TIS Internet firewall toolkit • - Intrusion detection •. Anti-Virus Software: This has typically been the domain of the Microsoft Windows and Outlook products and NOT Linux but Linux administrators running SAMBA file servers often must be aware of these viruses.

There are according to Symantec 68 Linux specific viruses and worms including the Ramen worm which attempts to attack unpatched rpc.statd, wuftpd, and LPRng. Anti-Virus products: • • • • - Workstation/Server/eMail gateway protection • • • - Sophos Anti-Virus for Linux • • • Mail-Gear: (up to and including version 1.2.x) • • • - Internet Gateway - detect/scan SMTP, HTTP and FTP • - Clam anti-virus. Open source virus protection for mail servers.

Virus info: • - Carnegie Mellon University's Software Engineering Institute - security vulnerability research. • - Anti-virus / Anti-spyware / Anti-spam Product Developers Consortium • - commercial security support • - real and hoaxes Virus email alert: • •. DoD/DoE NISPOM Chapter 8 computer security configuration for Linux: NISPOM (National Industry Security Program Operating Manual) chapter 8 is a computer security requirement developed by the US DoD (Department of Defense - US) and DoE (Department of Energy) and published by the DSS (Defense Security Service) which US defense contractors are required to meet when processing classified data on computers in a classified environment.

Linux as issued by major distros defaults do not meet this requirement. 40 Hadith For Islamic Schools Pdf Writer. Use the following software packages/configurations: • Use central authentication server (LDAP or NIS) with the proper security policies. • Meet reporting requirements: This auditing and reporting requirement can be met using Snare. This requires a kernel patch (or use of one of the kernels [RHEL3 or RHEL4] downloaded from the Snare home page.) and the running of a Snare audit daemon. It meets C-2 reporting requirements and records logins/logoffs, file and directory access, access denial. Newer Linux distributions running auditd (RHEL4, FC3+) can get compliant results.. • Grant admin privileges without giving root password.

Granular delegation of root privileges. File and directory access control. • Virus scanner. (See above list) Links: • - YoLinux Tutorial • [pdf]. Books: 'Hacking Linux Exposed' by Brian Hatch, James B. Lee, George Kurtz ISBN #, McGraw-Hill (2nd edition) From the same authors of 'Hacking Exposed'. 'Maximum Linux Security: A Hacker's Guide to Protecting Your Linux Server and Workstation' by Anonymous and John Ray ISBN #, Sams Covers not only audit and protection methods but also investigates and explains the attacks and how they work.

'Network Intrusion Detection: An Analyst's Handbook' by Stephen Northcutt, Donald McLachlan, Judy Novak ISBN #, New Riders Publishing 'SSH, the Secure Shell: The Definitive Guide' by Daniel J. Barrett, Richard Silverman ISBN #, O'Reilly & Associates 'Computer Security Incident Handling Step by Step' by Stephen Northcutt ISBN # 'Snort 2.1 Intrusion Detection, Second Edition' by Jay Beale, Caswell ISBN #, Syngress 'Ethereal Packet Sniffing' by Angela D.