Home

General Information

About the Author

About the Book

Reviews

Purchasing the Book

Presentations by the Author

Book Signings

 

Security Resources

Tools

Web Sites

Mailing Lists

Books

Papers/Articles

 

Security Subject Areas

Firewalls

Intrusion Detection Systems

Encryption

Steganography

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Tools

Tool Location Function
Achilles
http://www.digizen-security.com
Edit HTTP sessions
Adig http://nscan.hypermart.net/index.cgi?index=dns Advanced dig for Windows
Adore
http://www.packetstormsecurity.com/UNIX/penetration/rootkits
Kernel level rootkits
AppScan http://www.sanctuminc.com Web site scanner (commercial)
Authforce http://kapheine.hypa.net/authforce/index.php Attempts to guess passwords for HTTP
Back Orifice 2000
http://www.bo2k.com
Remote control trojan program
Brute_ssl http://www.packetstormsecurity.com/Exploit_Code_Archive/brute_ssl.c Guesses passwords for SSL
Brute_web http://www.packetstormsecurity.com/Exploit_Code_Archive/brute_web.c Guesses passwords for the web
Cheops
http://www.marko.net/cheops/
ICMP mapping tool
Chkrootkit ftp://ftp.pangeia.com.br/pub/seg/pac Checks for rootkits on systems
Covert_TCP
http://www.packetstormsecurity.com
Hiding data in the TCP/IP headers
CPU Hog
Local DOS attack
Crack
Unix password cracking
Default passwords http://security.nerdnet.com Default passwords for many platforms
Dsniff
http://www.monkey.org/~dugsong/dsniff
Advanced sniffer suite
DumpSec
http://www.systemtools.com/somarsoft
Gathers data through Null session
Enum
http://razor.bindview.com
Gathers data through Null session
Ethereal http://www.ethereal.com Freeware sniffer for NT and Unix
Fast Lane http://www.fastlanetech.com NT password filtering tool
Firewalk
Determines rules for a firewall
Fragrouter
Fragments IP packets
GetAdmin
http://www.infowar.co.uk/mnemonix/utils.htm
Elevates access on NT
Hunt
Session Hijacking tool
Hypnopaedia http://www.packetstormsecurity.com/Crackers/hypno.zip Guesses POP3 email passwords
IIS Unicode
IIS exploit
IMAP Buffer Overflow
http://www.packetstormsecurity.com
Buffer overflow to gain root access
IP Watcher
http://www.engarde.com
Commercial session hijacking tool
ITS4
Automated security reviewer
Jizz
http://www.rootshell.com
DNS cache poisoning
John the ripper
http://www.openwall.com/john
Password cracker for multi OS's
Jolt2
http://razor.bindview.com
Denial of service tool
Juggernaut
http://www.rootshell.com
Session hijcaking tool
Knark
http://www.packetstormsecurity.com/UNIX/penetration/rootkits
Kernel level rootkit
Land
http://www.packetstormsecurity.com/9901-exploits/eugenics.pl
Denial of service attack
Linux boot disk http://home.eunet.no/~pnordah/ntpasswd/bootdisk.html Linux boot disk for NT
Loki
http://www.phrack.com/Archives/phrack51.tgz
Creates a covert channel
L0phtcrack (LC) http://www.atstake.com Password cracker for NT/2000
Log files ftp://ftp.technotronic.com/unix/log-tools Tools for editing log files
Lrk5
http://www.packetstormsecurity.com/UNIX/penetration/rootkits
Rootkit
Mendex http://www.packetstormsecurity.com Exploits trust relationship
Nessus
http://www.nessus.org
Vulnerability scanner
NetBus
http://www.netbus.org
Trojan program for NT
NetCat
http://www.l0pht.com/users/10pht/nc110.tgz
Listen and connects to ports
NetMeeting Buffer Overflow
http://www.packetstormsecurity.com
Buffer overflow for netmeeting
Nmap
http://www.insecure.org/nmap
Port scanner
NTFSDOS http://www.packetstormsecurity.com/NT/hack/ntfsdos.zip Allows DOS to read an NTFS partition
NT Rootkit
http://www.rootkit.com
Rootkit for NT
PalmCrack http://www.noncon.org/noncon/download.html Password cracker for palmpilot
Pandora http://www.nmrc.org/pandora Password cracker for Novell
Password Guardian http://www.georgiasoftworks.com NT password filtering tool
Ping of death
http://www.packetstormsecurity.com
Denial of service attack
Ports http://www.simovits.com/nyheter9902.html List of common trojan ports
Pwdump3 http://www.ebiz-tech.com/pwdump3 Dumps passwords from NT and 2000
Queso
http://www.apostols.org/projectz/queso
OS fingerprinting
Rbone http://www.packetstormsecurity.com Exploits trust relationship
RDS exploit
http://www.wiretrip.net/rfp/p/doc.asp?id=1&iface=2
Gains access on an IIS server
RedButton
http://packetstorm.securify.com
Acquires information from an NT system
Redir
http://oh.verio.com/~sammy/hacks
Packet redirector
Reverse WWW shell
Covert channel
Rstatd
http://www.packetstormsecurity.com
Buffer overflow
Rootkits
http://www.packetstormsecurity.com/UNIX/penetration/rootkits
Rootkits
Sam Spade
http://www.samspade.org
General reconnaissance tool
Sechole
http://www.ntshop.net
Elevation of privileges
Silk Rope http://www.netninja.com/bo/index.html Wrapper programs for creating trojans
Slint http://www.l0pht.com/slint.html Source code security check
Smurf
http://www.packetstormsecurity.com
Denial of service attack
Smurf amplifier http://www.netscan.org List of smurf amplifiers
Smurf amplifier http://www.pulltheplug.com/broadcast2.html List of smurf amplifiers
Smurf defenses http://www.pentics.net/denial-of-service/white-papers/smurf.cgi Defending against the smurf attack
Sneakin http://www.packetstormsecurity.com Reverse telnet covert channel
Sniffit
http://reptile.rug.ac.be/~coder/sniffit/sniffit.html
Sniffer
Snort http://www.snort.org IDS/sniffer
Solaris rootkit
http://thc.inferno.tusculum.edu/files/thc/slkm-1.0.html
Solaris rootkit
Somarsoft http://www.packetstormsecurity.com/NT/audit/nt.remotely.crack.nt.passwords.zip Remotely guesses NT passwords
SSPing
http://www.packetstormsecurity.com
Denial of service attack
StackGuard http://www.angelfire.com/sk/stackshield Creates more secure stacks
Strongpass http://ntsecurity.nu/toolbox NT password filtering
SYN Flood
http://www.packetstormsecurity.com
Denial of service attack
Targa
http://www.packetstormsecurity.com
Denial of service tool
TBA
http://www.l0pht.com/~kingpin/pilot.html
War dialer for a palm pilot
THC
http://thc.inferno.tusculum.edu
War dialer
THC Login Hacker
http://thc.inferno.tusculum.edu
War dialer scripting language
Tini
http://ntsecurity.nu/toolbox/tini
Backdoor listener
Tooltalk buffer overflow
http://www.securityfocus.com
Buffer overflow for gaining root access
TFN2K
http://www.packetstormsecurity.com/distributed/
DDOS tool
Trinoo
http://www.packetstormsecurity.com/distributed/
DDOS tool
Tripwire http://www.tripwire.com File integrity checker
TTY watcher
ftp://coast.cs.purdue.edu/pub/tools/unix/ttywatcher
Session hijacking tool
Web-based reconnaissance http://nettool.false.net Web-based reconnaissance
Web-based reconnaissance http://members.tripod.com/mixtersecurity/evil.html Web-based reconnaissance
Web-based reconnaissance http://www.network-tools.com Web-based reconnaissance
Web-based reconnaissance http://www.cotse.com/refs.htm Web-based reconnaissance
Web-based reconnaissance http://sucide.netfarmers.net Web-based reconnaissance
Web-based reconnaissance http://www.jtan.com/resources/winnuke.html Web-based reconnaissance
Web-based reconnaissance http://www.securityspace.com Web-based reconnaissance
Web-based reconnaissance http://crypto.yashy.com Web-based reconnaissance
Web-based reconnaissance http://www.grc.com/x/ne.dll?bh0bkyd2 Web-based reconnaissance
Web-based reconnaissance http://privacy.net/analyze Web-based reconnaissance
Web-based reconnaissance http://www.webtrends.net/tools/security/scan.asp Web-based reconnaissance
Web-based reconnaissance http://www.doshelp.com/dostest.htm Web-based reconnaissance
Web-based reconnaissance http://www.dslreports.com/r3/dsl/secureme Web-based reconnaissance
Whisker
http://www.wiretrip.net/rfp
CGI vulnerability scanner
Windump
http://netgroup-serv.polito.it/windump
TCP dump for Windows
Winnuke
http://www.anticode.com
DOS for Windows
Winzapper
http://ntsecurity.nu/toolbox/winzapper
NT log editing tool
World Wide Web Security FAQ http://www.w3.org/Security/Faq/www-security-faq.html World Wide Web security FAQ
Xavier http://www.btinternet.com/~lithiumsoft Guesses application passwords
Zombie Zapper http://razor.bindview.com/tools/ZombieZapper_form.shtml Puts DDOS zombies to sleep