Distributed Port Scanner - The idea is that by having multiple systems from different classes of networks scan a host, detection of a portscan is more difficult by the target system. The user runs a central server which tells each client which port to scan next. Clients send the results to the server and are issued a new port to check.
36ddf2e4abf0e939d67f8fd5fdef91dd72f03d4d090dc9d239ed077690289da2
Firewall Log Daemon provides two programs, chaindaemon and tabledaemon, that you can choose between, depending on your firewall type (ipchains or iptables-netfilter). The program will start a small daemon process that parses and resolves firewall logs in real-time by reading a FIFO that syslog writes to. It will queue a batch of alerts and mail them to you. It features hostname, port, protocol, and ICMP type/code lookup, with formatted output for easy reading.
341608e80214c1d2d96ed9c1bc7701b9a9e3f9d63e7e327f0f6b47c5fa58ce2a
Kwatch is a graphical KDE 2.0 user interface for watching log files.
ad5a5605541802caf57b63effdce220945ca86513872ae276bbb623bf603e0a4
FCheck is a very stable perl script written to generate and comparatively monitor a UNIX system against its baseline for any file alterations and report them through syslog, console, or any log monitoring interface. Monitoring events can be done very frequently if a system's drive space is small enough, making it more difficult to circumvent. This is a freely-available open-source alternative to 'tripwire' that is time tested, and is easier to configure and use.
3cc342bce5b50b9352eb5694dfa6a2051bb69bc67e76e94749595b623ed298da
fwlogwatch analyzes the ipchains, netfilter, or iptables packet filter logfiles and generates text and HTML summaries. Features realtime anomaly alerting capability, an interactive report generator, and the ability to cut off attacks by adding firewall rules.
ff3d506294f8aa834cc638a4abe217428c3fd3bba6dd1eca456d9bc0c8415d00
Zorp is a new-generation modular proxy firewall suite to fine tune proxy decisions with its built in script language, fully analyze complex protocols (like SSH with several forwarded TCP connections), and utilize outband authentication techniques (unlike common practices where proxy authentication had to be hacked into the protocol).
82c05e2c8ca2d8fb361a1b7b3bb7094b57cceb060e1141c1d8d4aa3747aa6d49
Rule Set Based Access Control (RSBAC) is an open source security extension for current Linux kernels. It is based on the Generalized Framework for Access Control (GFAC) and provides a flexible system of access control implemented with the help of a kernel patch. All security relevant system calls are extended by security enforcement code. This code calls the central decision component, which in turn calls all active decision modules and generates a combined decision. This decision is then enforced by the system call extensions.
993396c972f30ed1f501f5fcb3d6e8a5cee1329a82570ff9966855f96e613233
RenAttach is an e-mail filter/processor which runs from a user's .forward file. It is designed to protect end users (particularly those using Windows) from malicious e-mail attachments. It does not scan specifically for viruses, but rather renames e-mail attachments so that they can not be accidentally executed. It handles both UUencoded and MIME-encoded attachments.
fe12d7efddcc66491ad34401500a9234c1a9d66219bf08054fc457020e033f36
MIME Defanger is a flexible MIME e-mail scanner designed to protect Windows clients from viruses and other harmful executables. It works with Sendmail 8.10 / 8.11 and will alter or delete various parts of a MIME message according to a flexible configuration file.
5ed6d6f0a7c758eb46de1d8aaba60c3f61f648fb8330ea3a671fff22ff609220
Weekly Newsletter from Help Net Security - Covers weekly roundups of security events that were in the news the past week. In this issue: Inside the stages worm, and much more.
d33df037b5bd5e34fcc5c86655e07d22a901aaa9912c341aa4091f55b64e24f8
Pine v4.30 and below allows outgoing mail to be hijacked if the alternate editor is enabled. Exploit script included.
a697070970654ece18a16dfe44b4f7ffcf5b38cb5159bafae4e725f245de46ca
Defile v.1 is a shell script which automates the secure removal of trivial files such as cookies, cache, etc., as well as old and unnecessary files such as core dumps, dead.letters, etc, it uses a package which ensures a pseudo random wiping compliant to U.S. Department of Defense standard and adds an hourly cron to ensure those files are wiped.
8a1028f7870112336bfee6af6212ee0ab01d5eefc01696e64daa91885136d8ca
Apcupsd v3.7.2 local denial of service attack. Can kill any running daemon.
98d94708575e0137e9354e702878bc24ca1f6d27866f241f5fccddfd8e165f5b
Hassan Consulting's Shopping Cart Version 1.x (cgi-bin/shop.pl) contains remote vulnerabilities, including directory transversal with file read ability, listing files, and path disclosure. Exploit URL's included.
85283352f70d94548d2b56de0d97bcf80906908ef932baf0b3a815cdc3e97361
aes-netcat is a patch with some includes for netcat 1.10 that adds an option to do password encrypted sessions using strong AES encryption. Doesn't include an AES algorithm but urls where to get them (15 candidates available).
ed8bc2a6a4d5f9d88a1001545b97ad17846aaa75720ddca22d215d0a5062f8ef
LBK is a local kernel based (kld) backdoor for FreeBSD 4.0 which provides a root shell if the TERM environment variable is set with the password.
67eb8019ac71a6bb246354172fbecdca63ee8b7be894a6de42535cdbc08cc349