Tools used by security professionals
7
votes
5answers
3k views
How to detect hosts running in virtual machines with nmap?
I have to determine if a given subnet has virtual hosts.
Are there any ideas about what switches to use?
5
votes
4answers
460 views
Persisting and comparing NMAP scans
Does anyone have any good recommendations on a good tool for persisting NMAP scans to database?
It may be a tool for persisting or simply a java library for easy parsing of the nmap xml scan result ...
4
votes
4answers
3k views
Secure use of psexec or better alternative to it
I want to remotely start VMWare virtual machines (I own VMWare Workstation) and to this end I need to execute on host something like "vmrun -T ws H:\VMWare\VM1\VM1.vmx nogui" with user desktop ...
2
votes
2answers
174 views
How can I protect content distributed on a linux virtual machine?
What assets am I trying to protect?
An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
0
votes
2answers
237 views
In TrueCrypt Hidden / Normal overriding?
If I have a normal TrueCrypt volume, and I want to create a Hidden volume inside of it, how do I stop the 2 from overriding each other? Or do I just have to manually make sure the inner volume does ...
7
votes
4answers
1k views
extract from pcap all protocols found
I have some pcap files, and i would like just to get a list of protocols that are present on that pcap file. I would like it in a batch mode, not using wireshark
I think tshark is able to do it, but ...
-3
votes
2answers
663 views
Could somebody explain the basics of Wireshark to me [closed]
I've downloaded Wireshark, messed around with the GUI a bit and, honestly, I can't make head nor tail of what I am looking at.
I understand that Winpcap allows me to create a copy of every packet ...
6
votes
6answers
2k views
Good file encryption tools
Could you please help me find a good file encryption tool? The target OS is Linux, but tools for Windows are welcome, too. FOSS tools are preferred. The tool must be reliable both for the recovery of ...
2
votes
2answers
387 views
up2date tools for security audit linux / centos
I'm setting up a new CentOS 6 server and am looking into some security audit tools to validate my configuration and to point out weak spots in the server.
There are a lot of non up2date tools out ...
3
votes
1answer
2k views
Is there a sms authentication that works like 10minutemail?
I remember reading on this site a user recommending 10minutemail.com as a way to register or give email address to non-trusted websites.
Is there any similar site for disposable phone number for ...
4
votes
1answer
164 views
Data analyzer tools
I have to find information that can be located in files on a hard drive.
Are there good tools to search for specific keywords (even in the hard disk free space area ;-), detect encrypted files, detect ...
-1
votes
1answer
157 views
Can't run the Mantra Framework [closed]
I've tried to run the OWASP Mantra Security Framework which comes with as the Portable Firefox on steroids (with the FireCAT extensions) but it runs in the same profile as my FF and actually ...
6
votes
5answers
956 views
How can I remotely wipe the contents of a Linux Laptop if its been stolen?
I am currently investigating using Linux Laptops for my development team. We currently run Windows. The one advantage that keeps coming up for Windows over Linux from a system administration / ...
1
vote
3answers
4k views
What sites are still vulnerable to FireSheep?
Am doing a Firesheep Demo in a few weeks as a security awareness project. However I can't seem to get it working, and I'm wondering if it's just because the handlers it ships with are now outdated ...
0
votes
4answers
283 views
Completely wiping a HDD (i.e. nothing is recoverable) [duplicate]
Possible Duplicate:
How can I reliably erase all information on a hard drive?
I'm looking to see if there's a method that can completely wipe out the content of a HDD, so that nothing ...
2
votes
3answers
695 views
Recommendations for security gateway/firewall management tools (Juniper SRX)
I am seeking recommendations for management tools for high-end firewalls, such as the Juniper SRX3000 series. When I say "management", I mean operations, configuration management, policy management, ...
0
votes
3answers
177 views
How to rewrite config files using SNMP?
I scanned a router and found that the community string is public. The write access is also enabled. Now I want to change the configuration of the router. Can anybody tell me about tools and tutorials ...
2
votes
2answers
168 views
Scan Novell NetWare backend with Windows servers and clients
Could anyone provide some insight on performing an internal vulnerability assessment regarding Novell NetWare as the backend with client workstations and servers running various versions of Windows?
...
5
votes
2answers
906 views
Firewall Configuration Audits
I'm looking to perform policy audits against firewall configurations and/or rulesets. This should be performed independently of any configuration management systems, ideally by operating off the ...
7
votes
4answers
443 views
What good, standard digital signature verification clients are widely or easily deployed?
I'm looking for a good way to publish data along with a digital signature (and ideally a timestamp) which is as easy as possible to verify.
For example, imagine an election administrator who wants to ...
4
votes
2answers
454 views
How to see whether the pcap contains RTP traffic?
I am analyzing the traffic of a VOIP application. I started up wireshark, and made sure no other application was using internet, and then had a a voice call on the application. Wireshark captured some ...
3
votes
2answers
2k views
Testing clean urls with sqlmap
Is it possible to test for SQL injection vulnerabilities with using sqlmap with a url that is using mod rewrite (or something like it) to make the urls clean?
I know how to test my sites that have ...
2
votes
2answers
250 views
Are there sensors/devices to be used for reading magnetic bits of hard disk
I would like to ask about the availability of any sensor or device that can be used to read magnetic bits inside hard disks? I tried to google that but I did not see any useful thing till now. I think ...
1
vote
0answers
179 views
What hardware tools are useful to detect cyber crimes? [closed]
As the title says, I would ask about some tools or sensors that are available to be used to detect cyber crimes, specially I am looking for sensors that can be used to read and recover data from ...
11
votes
5answers
670 views
Convenient cross-platform help on checking secure hashes like SHA-256
It is often helpful to be able to obtain a good cryptographic checksum of a file, e.g. the SHA-256 hash. This can be used to verify file integrity, so long as you have a reliable source for the hash.
...
6
votes
2answers
898 views
Tools to scan for PII
I'm looking for well known tools that will scan for any PII within a network. For example, I would like to be able to use a plug and play method, meaning I drive to a client, plug my laptop in, and ...
2
votes
3answers
225 views
Which languages are better for attacks against websites?
Which languages are better for writing tools for attacking websites, through, say, a DDOS? High level, low level, and does it even make a difference?
4
votes
1answer
302 views
How to encrypt an entire portable HDD, so that it cannot be read/written without the password for it?
I use a portable USB drive (Seagate FreeAgent Go Flex) to keep all my personal stuff, and though the HDD company does offer a password scheme to control access to it, that would work only on windows, ...
4
votes
2answers
806 views
Virus detection with Process Explorer
Can Process Explorer ( Windows apparently) detect a virus? Is it even possible?
6
votes
4answers
350 views
Criteria for Evaluating Static Analysis Tools
As with any tools purchase part of the outcome is in how good the evaluation criteria are, so I'd be interested to hear any criteria people might use when assessing Security static analysis tools.
...
12
votes
3answers
293 views
Are there any decent web app security scanners that can integrate with a build server?
I've spent a lot of time in TeamCity recently and the nightly code quality metrics coming from the dupe finder, FxCop and NDepend have been great.
What I'd really like to do is find a decent web app ...
11
votes
2answers
2k views
Smartphone / GSM Sniffer
This question would be in the category of SmartPhone Sniffers.
So we have sniffers that can show the packets that are being sent across a wired or wireless (802.11) network. I am just performing a ...
-2
votes
1answer
450 views
Is there a need for a simple SAAS security risk assessment application?
Apologies if this is question is not quite right for this site, I have been working on a small startup simple security risk assessment application, mainly to scratch my own itch and am looking to get ...
0
votes
1answer
170 views
System image that does not allow for recovery of deleted files?
We are working with an contractor regarding a compromised computer. The contractor has asked for a dd dump of the drive. However, my understanding is that dd would allow the contractor to recover ...
4
votes
4answers
3k views
Does setting a WiFi AP to channel 14 avoid the most common detection methods used in Europe or the Americas?
The legally allowable band for WiFI in the US covers channels 1-11. Europe goes to 13, Japan to 14. I suspect that most tools use the WiFi driver of the machine and only scan for the channels it is ...
7
votes
3answers
393 views
Which resources can help me learn how to use metasploit?
I tried google search but I can't find good resources to learn how to use the metasploit framework.
Where would you suggest a beginner go to learn about using metasploit?
6
votes
3answers
199 views
Are there password/passphrase guessers/crackers which can utilize facts supplied about the target?
I was just reading a discussion about cracking passwords that said the person running the tool might know things about the target like the birthday of his first girlfriend's dog but the tool won't.
...
4
votes
4answers
871 views
Comparing penetration testing suites
I've been using Backtrack for a while now. I was wondering if there is anything better, or on par with, that is worth looking into. Thoughts?
4
votes
1answer
114 views
testing for 'Dangling Cursor'
While reading the updated Top 25 exploits in the Common Weakness Enumeration I came across an exploit that I was not familiar with. It is numbered CWE-619: Dangling Database Cursor.
I was wondering ...
11
votes
3answers
697 views
Starting with sandbox development
I am looking for some security related project in which I can contribute and also learn something. Since I am new with this stuff It will be better if that project is less complex and digestible for a ...
5
votes
4answers
533 views
Benefits of secure code review in-IDE vs. fatapp vs. webapp
For those of you who have worked with commercial secure code review tools such as:
Klocwork
Coverity
Armorize
Fortify
Checkmarx
Appscan Source Edition (formerly
Ounce)
Or perhaps a free or ...
5
votes
2answers
789 views
What tools exist to help me monitor OCSP certificate validation failures?
The discussion at Why isn't OCSP required by default in browsers? notes that many browsers by default simply ignore failure to check web site TLS certificate revocation status via the Online ...
7
votes
4answers
418 views
What kind of IT security applications do you guys run on your laptop/desktop?
I know a lot of people run different security applications on their laptops/desktops. I use Little Snitch on my Macbook Pro. I like to know where my applications are sending data and where I am ...
4
votes
1answer
1k views
Are there any tools for automated penetration testing of Silverlight applications?
I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.
Specifically, I'm looking for a tool that can cope with ...
15
votes
4answers
1k views
Open-source penetration-test automation
Has anyone built a metascript, or a `script of scripts' useful during a penetration-test?
Do you use Metasploit RC files? A network vulnerability scanner in a special way? A command-line, custom, or ...
6
votes
1answer
2k views
High concentration of UDP traffic, good or bad?
Should a network have a high concentration of UDP traffic compared to TCP traffic bad for a network especially in the context of network security?
I'm looking at my organization's network protocol ...
9
votes
2answers
420 views
Tools and methodologies to share pentest and/or source code analysis results
I would like to hear from you which tools (commercial and open source) do you use to share results during collaborative penetration test or source code/binary analysis. Well-known Dradis framework ...
5
votes
1answer
521 views
Tools to identify and report hacking attempts originating inside reputable organizations?
Re: Should I report hacking attempts? - Server Fault
Lots of people look at their own logs for attacks from the outside. But who regularly reports such attacks back to the source? I'm mainly ...
3
votes
2answers
572 views
What is the proper priority/mix of (people, tools and technology, processes) to optimize defense?
I'm curious if people have different views on this and why.
Update based on comments:
Defend enterprises.
Quotes:
"Long-time blog readers should know that I don't rely on tools to defend my ...
11
votes
2answers
781 views
What should be included in a jump bag and how often should it be reviewed?
What items should be included in a jump bag? How often do you review your jump bag?
