Computer Security Resources

2010-09-29 : Cleaned up a lot of broken links

Windows anti-malware

anti-malware

GMER
Hijack This
Malwarebytes
Microsoft Security Essentials
Spybot Search&Destroy
Superantispyware
TDSSKiller - specifically for TDSS variants (by Kaspersky)
Virustotal, a web-based suspicious file scanner

update notifiers

Secunia PSI
Filehippo Update Checker

boot cds

Ultimate Boot CD for Windows

Non-intrusive Monitoring Tools

Nagios (everyone and their pet dogs use this)
Shinken (under heavy development)
Munin (site monitoring)
Monit (site monitoring)
Zabbix (site monitoring)
Zenoss (site monitoring)
Ganglia
SmokePing (latency monitoring)
PacketFence (network access control)
Snort: NIDS (standard front-end: BASE)
Suricata: NIDS
Other NIDS: Bro
Monitoring front-ends: Sguil, Prelude, OSSIM
Data collection/graphing: drraw, RRDtool, Cacti
Argus: network auditor
Arpwatch: tracks ether/ip pairs, looks for hijacking
Honeyd: flexible honeypot system
Wireshark: traffic analyzer (Ethertree)
Ettercap: switched network traffic sniffer
Kismet: 802.11a/b/g traffic sniffer
Aircrack: 802.11b WEP/WPA snifer/cracker
DNStop: TOP-like display of DNS traffic

Active/Network Monitoring/Testing

Metasploit: exploit generating framework (and Blog)
Nmap: Nmap port scanner
Burpsuite: Web application assessment
Skipfish (don't miss MZ's other cool stuff too)
THC-IPv6: IPv6 stack vulnerability toolkit
Socat: netcat on steroids (ipv6, ssl, socks) - v2 beta is amazing
TCPReplay: replays tcpdump traffic
Firesheep (FF session hijacking plugin)
Nessus: network service assessment (uses THC-Hydra)
Nikto: Web server assessment (uses libwhisker)
Wikto: Web server assessment
w3af: Web app assessment
Wapiti: Web application fuzzer
WebScarab: Web application assessment
WAFP: web app fingerprinter
sqlmap: Automated SQL Injection tester (python)
Complemento: notably, LetDown which DoSes TCP stacks
Dsniff: network tools
PHoss: sniff logins
sslsniff: SSL MITM attacks
SSLScan: checks a website's supported SSL cyphersuites and its certificate
Hyenae: packet generator
Scapy: python-based packet generator
iftop: top for bandwidth usage
Yersinia: attacks DHCP, CDP, HSRP, STP, DTP, VTP
iperf: TCP/UDP bandwidth measuring tool
CAIDA tools list: various network metric tools
Flowgrind: measures throughput and other metrics
Thrulay-ng: Path bandwidth/latency measure
ISIC: IP/IPv6 stack tester
ISR-Evilgrade: software update MITM attacks
UPnPscan: scans for UPnP devices
voip hopper
Videojak
UCsniff

System Tools / Security

Spike / Spike Proxy:
Zzuf: generic file/network input fuzzer
Peach: Fuzzer for all sorts of applications
Fuzzgrind: automated application fuzzer
sqlmap: sql injection tester
John the Ripper: Password cracker (crypt, MD5, AFS, NTLM)
Distributed John (requires JTR): Parallelizer for JTR
Pwdump: windows password tool
Tenshi: advanced log monitoring and notification
Curuncula: rootkit detector (for linux)
Chkrootkit: tries to check for some rootkits and trojans
AIDE: file integrity monitor (like the commercial Tripwire)
LSOF: LiSts Open Files and sockets
Rsync: local/remote file synchronization
Aria2: multi-proto, multi-source file downloader
SKPD: dump running processes to files
Origami: ruby framework for manipulating PDF files
METASM: ruby asm/debugger

Radare
IDA Pro
Ratproxy: semi-passive web application audit tool
MITMProxy HTTP proxy w/ssl-on-the-fly
OWASP Zed Attack Proxy (dl)

Cryptographic Software

General:
- OpenSSH: secure remote shell access
- puTTY: secure remote shell access (Windows)
- OpenSSL: standard cryptographic library
- Stunnel: SSL wrapper for ordinary network applications
- Kerberos: network cryptographic authentication system
- OpenVPN: uses openssl for network tunnelling, uses tun/tap
- IPSec: The Oracle of net encryption, requires proto 50/51 accessibility
- PPTP: inflexible, requires GRE accessibility, less secure
Messaging:
- Pidgin (Gaim): Multiplatform IM (Jabber/AIM/Yahoo/MSN/IRC/SILC)
- Off-The-Record (OTR) Messaging: encrypted, deniable IM
  plugin for Pidgin, proxy for others
- Skype (duh)
- SILC: Secure Internet Live Conferencing
- IHU: VOIP crypt
Email:
- GnuPG / PGP: public key file/email encryption
- Enigmail for Thunderbird
- GPGMail for Apple's Mail
- Mixmaster: type I/II remailer client/server implementation
- MixMinion: type III remailer client/server implementation
Disk Crypto:
- TrueCrypt: encrypted (deniable/stego) storage containers
- LUKS: Linux Unified Key Setup - disk crypto (Linux)
Crypto Networks (also see: Anon Network Portal)
- Tor (wiki)
- I2P
- Freenet: Java, distributed data store
- Retroshare: Private distributed sharing/chat/etc.
- CryptoHeaven: private distributed sharing/chat/email (java)
- anoNet: uses OpenVPN and quagga
- t4p: f2f peer net
- gnunet: p2p
- cspace: p2p
Secure File Transfer
- Fugu (Mac)
- gFTP
- sshfs + fuse
- Duplicity
- Rsyncrypto

Freedom

News/Blogs

Diagnostics

Qualys SSL Server Test

Vulnerability Mitigation

Virtualbox
VMware
Xen
KVM (linux)

AppArmor (linux)
SELinux (linux)
RSBAC (linux)
TrustedBSD (freebsd)
grsecurity (linux)
Naxsi (nginx security module)
EMET (windows)
Sandboxie (windows)
SuRun (windows)
IBM tutorial on setting up secure (virtualized) containers using LSMs (linux)
IBM tutorial on using LXC tools for containers (linux)

Automated intelligence summaries

Networking

Languages to get things done

Languages for fun

Io
Boo

Other Resources

SystemRescueCD (gentoo-based linux CD)
Backtrack Linux (funded by Offensive Security)
Evercookie (super regenerating cookies)
Packetstorm
Dradis: an http-based information-sharing tool
Offensive Computing
OpenRCE
Honeynet Project
SecDev.org, tools
Gray-World.net
Uninformed

Lists

Email and Anti-Spam strategies

Browsers

Chrome (webkit-based)
Firefox (gecko-based)
Collusion web tracking detection (for firefox)

Free, Usable Operating Systems

Neat OS Projects

FreeDOS
ReactOS (windows clone)
Haiku (BeOS clone)
Plan 9

Load Testing

ApacheBench2 (part of apache httpd)
Siege
Tsung
Sysbench

Neat other stuff

Protocol Buffers (google)
vmtouch: show and alter VM caching
Seeks: P2P distributed search engine
Swarm
Repast
SPIN ltl model checking
Data stores (comparison)
Web server survey
Forban lan-local file transfer
Namebench finds fastest nameservers
RSBAC Security Models
Raptor Codes (tornado / fountain / LT FEC)

Neat OpenSource Cluster Tech

Cassandra (dbms)
Ceph (fs)
Finagle (jvm async rpc)
Spark
Disco
R3
Hadoop (fs and other stuff)
Mesos
Shark
Lustre (fs)
Eucalyptus

Code

Github
Bitbucket
Gitorious (hosted or self-hosted)
Gitlab (self-hosted git platform)

Messaging

Nirvana
ZeroMQ
QPID (AMPQ)
RabbitMQ (AMPQ)

Windows Tools

Sysinternals (now MS property)

Administration

Puppet is probably the safest choice, for those not wanting to spend much time comparing alternatives.

Puppet (rb)
Chef (wiki) (rb)
Babushka (rb) (minor)
Ansible (py) (minor)
Vagrant (VM administration)
cfengine (wiki)
Salt
Flapjack
Cucumber-Nagios

Physical Security

Data Mining

KNIME: Intel and data mining
Orange
RapidMiner

Other commercial stuff

Maltego: Intelligence/Forensics data gathering application
Xanalys LinkExplorer