Tools used by security professionals

learn more… | top users | synonyms

4
votes
1answer
200 views

Data analyzer tools [closed]

I have to find information that can be located in files on a hard drive. Are there good tools to search for specific keywords (even in the hard disk free space area ;-), detect encrypted files, detect ...
1
vote
4answers
626 views

Completely wiping a HDD (i.e. nothing is recoverable) [duplicate]

Possible Duplicate: How can I reliably erase all information on a hard drive? I'm looking to see if there's a method that can completely wipe out the content of a HDD, so that nothing ...
0
votes
3answers
586 views

How to rewrite config files using SNMP?

I scanned a router and found that the community string is public. The write access is also enabled. Now I want to change the configuration of the router. Can anybody tell me about tools and tutorials ...
2
votes
2answers
247 views

Scan Novell NetWare backend with Windows servers and clients

Could anyone provide some insight on performing an internal vulnerability assessment regarding Novell NetWare as the backend with client workstations and servers running various versions of Windows? ...
5
votes
2answers
2k views

Firewall Configuration Audits

I'm looking to perform policy audits against firewall configurations and/or rulesets. This should be performed independently of any configuration management systems, ideally by operating off the ...
7
votes
4answers
772 views

What good, standard digital signature verification clients are widely or easily deployed?

I'm looking for a good way to publish data along with a digital signature (and ideally a timestamp) which is as easy as possible to verify. For example, imagine an election administrator who wants to ...
3
votes
2answers
1k views

How to see whether the pcap contains RTP traffic?

I am analyzing the traffic of a VOIP application. I started up wireshark, and made sure no other application was using internet, and then had a a voice call on the application. Wireshark captured some ...
1
vote
2answers
524 views

Are there sensors/devices to be used for reading magnetic bits of hard disk

I would like to ask about the availability of any sensor or device that can be used to read magnetic bits inside hard disks? I tried to google that but I did not see any useful thing till now. I think ...
7
votes
2answers
4k views

Tools to scan for PII [closed]

I'm looking for well known tools that will scan for any PII within a network. For example, I would like to be able to use a plug and play method, meaning I drive to a client, plug my laptop in, and ...
3
votes
3answers
293 views

Which languages are better for attacks against websites?

Which languages are better for writing tools for attacking websites, through, say, a DDOS? High level, low level, and does it even make a difference?
4
votes
1answer
410 views

How to encrypt an entire portable HDD, so that it cannot be read/written without the password for it?

I use a portable USB drive (Seagate FreeAgent Go Flex) to keep all my personal stuff, and though the HDD company does offer a password scheme to control access to it, that would work only on windows, ...
5
votes
2answers
2k views

Virus detection with Process Explorer

Can Process Explorer ( Windows apparently) detect a virus? Is it even possible?
15
votes
3answers
588 views

Are there any decent web app security scanners that can integrate with a build server?

I've spent a lot of time in TeamCity recently and the nightly code quality metrics coming from the dupe finder, FxCop and NDepend have been great. What I'd really like to do is find a decent web app ...
-2
votes
1answer
777 views

Is there a need for a simple SAAS security risk assessment application?

Apologies if this is question is not quite right for this site, I have been working on a small startup simple security risk assessment application, mainly to scratch my own itch and am looking to get ...
0
votes
1answer
268 views

System image that does not allow for recovery of deleted files?

We are working with an contractor regarding a compromised computer. The contractor has asked for a dd dump of the drive. However, my understanding is that dd would allow the contractor to recover ...
7
votes
3answers
547 views

Which resources can help me learn how to use metasploit?

I tried google search but I can't find good resources to learn how to use the metasploit framework. Where would you suggest a beginner go to learn about using metasploit?
6
votes
3answers
365 views

Are there password/passphrase guessers/crackers which can utilize facts supplied about the target?

I was just reading a discussion about cracking passwords that said the person running the tool might know things about the target like the birthday of his first girlfriend's dog but the tool won't. ...
3
votes
1answer
186 views

testing for 'Dangling Cursor'

While reading the updated Top 25 exploits in the Common Weakness Enumeration I came across an exploit that I was not familiar with. It is numbered CWE-619: Dangling Database Cursor. I was wondering ...
7
votes
4answers
958 views

Benefits of secure code review in-IDE vs. fatapp vs. webapp

For those of you who have worked with commercial secure code review tools such as: Klocwork Coverity Armorize Fortify Checkmarx Appscan Source Edition (formerly Ounce) Or perhaps a free or ...
5
votes
2answers
2k views

What tools exist to help me monitor OCSP certificate validation failures?

The discussion at Why isn't OCSP required by default in browsers? notes that many browsers by default simply ignore failure to check web site TLS certificate revocation status via the Online ...
6
votes
4answers
512 views

What kind of IT security applications do you guys run on your laptop/desktop? [closed]

I know a lot of people run different security applications on their laptops/desktops. I use Little Snitch on my Macbook Pro. I like to know where my applications are sending data and where I am ...
3
votes
1answer
2k views

Are there any tools for automated penetration testing of Silverlight applications? [closed]

I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps. Specifically, I'm looking for a tool that can cope with ...
6
votes
1answer
5k views

High concentration of UDP traffic, good or bad?

Should a network have a high concentration of UDP traffic compared to TCP traffic bad for a network especially in the context of network security? I'm looking at my organization's network protocol ...
5
votes
1answer
951 views

Tools to identify and report hacking attempts originating inside reputable organizations?

Re: Should I report hacking attempts? - Server Fault Lots of people look at their own logs for attacks from the outside. But who regularly reports such attacks back to the source? I'm mainly ...
7
votes
2answers
1k views

Classical Cryptography Tools

I'm wondering if there are any tools out there that can assist in solving classical cipher text. I'm looking into developing some tools such as frequency analysis, transposition tools and so on but ...
0
votes
2answers
417 views

is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?

Anyone have experience in a solution to manage in an integrated view this functionality ? - network forensic - SIEM - intelligence analysis and investigation Like Niksun or Solera solution do ? I'm ...
9
votes
2answers
307 views

Why is FireSheep such a big deal?

We've had WireShark and other tools for a long time before. Why does everybody make such a big deal about FireSheep?