Network Tools / Security
- Snort: NIDS (standard front-end: BASE)
- Other NIDS: Bro, Shoki
- Monitoring front-ends:
Sguil,
Prelude,
OSSIM
- Data collection/graphing:
drraw,
RRDtool,
Cricket,
Cacti
- Argus: network auditor
- Arpwatch: tracks ether/ip pairs, looks for hijacking
- Honeyd: flexible honeypot system
- Nessus: network service assessment (uses THC-Hydra)
- Nikto: Web server assessment (uses libwhisker)
- Wikto: Web server assessment
- WebScarab: Web application assessment
- Aircrack: 802.11b WEP/WPA sniifer/cracker
- Pwdump: windows password tool
- NBTScan: NetBIOS scanner
- Nmap: Nmap port scanner
- Dsniff: network tools
- Paketto Keiretsu: network tools, less evil than dsniff
- Wireshark (Ethereal): traffic analyzer (Ethertree)
- Socat: netcat on steroids (ipv6, ssl, socks)
- Ettercap: switched network traffic sniffer
- Kismet: 802.11a/b/g traffic sniffer
- Ngrep: grep, for network traffic
- Scapy: python-based packet generator
- TCPReplay: replays tcpdump traffic
- Yersinia: attacks DHCP, CDP, HSRP, STP, DTP, VTP
- various NLANR network tools
- Thrulay: Path bandwidth/latency measure
- ISIC: IP/IPv6 stack tester
- Rain: Craft semi-custom packets, replicate common stack attacks
- UPnPscan: scans for UPnP devices
System Tools / Security
Cryptographic Software
- General:
- OpenSSH: secure remote shell access
- puTTY: secure remote shell access (Windows)
- OpenSSL: standard cryptographic library
- Stunnel: SSL wrapper for ordinary network applications
- Kerberos: network cryptographic authentication system
- Tunnelling:
- anoNet: uses OpenVPN and quagga
- OpenVPN: uses openssl for network tunnelling, uses tun/tap
- IPSec: The not-so-gold standard, requires proto 50/51 accessibility
- PPTP: inflexible, requires GRE accessibility, less secure
- Messaging:
- Email:
- GnuPG / PGP: public key file/email encryption
- Enigmail for Thunderbird
- GPGMail for Apple's Mail
- Mixmaster: type I/II remailer client/server implementation
- MixMinion: type III remailer client/server implementation
- Disk Crypto:
- TrueCrypt: encrypted (deniable/stego) storage containers
- LUKS: Linux Unified Key Setup - disk crypto (Linux)
- Anonymous/Semi-anon Networks
- Secure File Transfer
News
Networking
Languages
Other Resources
Lists
Email and Anti-Spam strategies
Browsers
Linux Distributions
Windows
Administration
Physical Security
Commercial Pen-testing stuff