|
Bro
|
|
Hits: 40 |
|
Date added: 09/19/2007 |
|
Bro is an open-source, Unix-based Network Intrusion Detection System (NIDS) that passively monitors network traffic and looks for suspicious activity. Bro detects intrusions by first parsing network traffic to extract is application-level semantics and then executing event-oriented analyzers that compare the activity with patterns deemed troublesome. Its analysis includes detection of specific attacks (including those defined by signatures, but also those defined in terms of events) and unusual activities (e.g., certain hosts connecting to certain services, or patterns of failed connection attempts).
Bro uses a specialized policy language that allows a site to tailor Bro's operation, both as site policies evolve and as new attacks are discovered. If Bro detects something of interest, it can be instructed to either generate a log entry, alert the operator in real-time, execute an operating system command (e.g., to terminate a connection or block a malicious host on-the-fly). In addition, Bro's detailed log files can be particularly useful for forensics.
Bro targets high-speed (Gbps), high-volume intrusion detection. By judiciously leveraging packet-filtering techniques, Bro is able to achieve the necessary performance while running on commercially available PC hardware, and thus can serve as a cost-effective means of monitoring a site's Internet connection. |
|
|
|
|
|
Burp Proxy Win
|
|
Hits: 7 |
|
Date added: 08/10/2006 |
|
Burp proxy allows an attacker to find application vulnerabilities by monitoring and manipulating critical parameters and other data transmitted by the application. By modifying browser requests in various ways, burp proxy can be used to take assessments such as SQL injection, cookie subversion, privilege escalation, session hijacking, directory traversal and buffer overflows. |
|
|
|
|
|
|
Cable Modem Sniffer
|
|
Hits: 7 |
|
Date added: 02/26/2006 |
|
Sniff information from your cable modems gateway. |
|
|
|
|
|
|
CDPsniffer
|
|
Hits: 2 |
|
Date added: 08/28/2005 |
|
CDPsniffer is a small perl only Cisco discovery protocol (CDP) decoding sniffer. It sniffs the network traffic, picks out the cdp packets and prints out the decoded protocol contents. |
|
|
|
|
|
|
Cisco PIX Firewall password calculator
|
|
Hits: 7 |
|
Date added: 02/27/2006 |
|
Cisco PIX firewalls, as every other Cisco device, let you insert the password for the enable mode and telnet access directly in their encrypted form using the commands:
- enable password **************** encrypted
- passwd **************** encrypted
where the string **************** is the encrypted form of a known cleartext password.
This program produces the encrypted form of PIX passwords without the need to access the device.
Networks and security administrators can use it to write authentication informations in the firewall's configuration files completely off-line. |
|
|
|
