Tools used by security professionals
8
votes
3answers
879 views
Can anyone suggest good open source tools for scanning source code for vulnerabilities?
I'm particularly looking ones which detect vulnerabilities in C/C++ code. I've seen a bunch of proprietary tools but no open source ones.
11
votes
2answers
2k views
Smartphone / GSM Sniffer
This question would be in the category of SmartPhone Sniffers.
So we have sniffers that can show the packets that are being sent across a wired or wireless (802.11) network. I am just performing a ...
11
votes
2answers
781 views
What should be included in a jump bag and how often should it be reviewed?
What items should be included in a jump bag? How often do you review your jump bag?
11
votes
3answers
699 views
Starting with sandbox development
I am looking for some security related project in which I can contribute and also learn something. Since I am new with this stuff It will be better if that project is less complex and digestible for a ...
6
votes
5answers
957 views
How can I remotely wipe the contents of a Linux Laptop if its been stolen?
I am currently investigating using Linux Laptops for my development team. We currently run Windows. The one advantage that keeps coming up for Windows over Linux from a system administration / ...
4
votes
3answers
240 views
How to evaluate a password manager?
How can we quantify the trade-off between password aggregation and convenience?
Password managers such as lastpass are convenient, but aggregation of passwords into a common store may reduce ...
4
votes
3answers
614 views
Are there any tools that focus on shellcode analysis?
Shellcode presents certain challenges for disassembly. It often self-modifies, jumps to the stack (where the shellcode will likely be placed), and relies on certain unusual tricks that standard ...
1
vote
3answers
4k views
What sites are still vulnerable to FireSheep?
Am doing a Firesheep Demo in a few weeks as a security awareness project. However I can't seem to get it working, and I'm wondering if it's just because the handlers it ships with are now outdated ...
19
votes
6answers
779 views
Backing up sensitive data - pitfalls and best practices
Obviously, securely backing up sensitive data is a challenge. A remote backup is important for surviving a variety of disasters. What are some of the "gotcha's" lurking out there, and what best ...
13
votes
6answers
2k views
Lightweight Live Pen-test OS
Does anyone know of any lightweight OSs that are great for Pen-testing? I would love to have a very lightweight live OS that I can boot off a USB and try some pen-testing against some of my ...
22
votes
6answers
304 views
How to keep an eye on upgrades, patches and security issues for used open-source libraries?
For a project with many open-source libraries as a part of it, I began to search for information source concerning all upgrades and security issues. The kind of sources I gathered are either ...
7
votes
5answers
3k views
How to detect hosts running in virtual machines with nmap?
I have to determine if a given subnet has virtual hosts.
Are there any ideas about what switches to use?
7
votes
2answers
211 views
Why is FireSheep such a big deal?
We've had WireShark and other tools for a long time before. Why does everybody make such a big deal about FireSheep?
5
votes
2answers
789 views
What tools exist to help me monitor OCSP certificate validation failures?
The discussion at Why isn't OCSP required by default in browsers? notes that many browsers by default simply ignore failure to check web site TLS certificate revocation status via the Online ...
5
votes
1answer
521 views
Tools to identify and report hacking attempts originating inside reputable organizations?
Re: Should I report hacking attempts? - Server Fault
Lots of people look at their own logs for attacks from the outside. But who regularly reports such attacks back to the source? I'm mainly ...
4
votes
1answer
164 views
Data analyzer tools
I have to find information that can be located in files on a hard drive.
Are there good tools to search for specific keywords (even in the hard disk free space area ;-), detect encrypted files, detect ...
7
votes
3answers
872 views
How to recover securely deleted data
Since we all know files are recoverable with programs after being deleted from the recycling bin, everyone is told to do secure wipes by putting random data over the files you're deleting on the disk ...
7
votes
4answers
443 views
What good, standard digital signature verification clients are widely or easily deployed?
I'm looking for a good way to publish data along with a digital signature (and ideally a timestamp) which is as easy as possible to verify.
For example, imagine an election administrator who wants to ...
6
votes
3answers
585 views
Who (which process) is calling curl?
On my mac (Lion), I know that curl is bing used by some unknown process to communicate with a server.
Basically I installed little Snitch and find out that "somebody" is using curl periodically.
...
4
votes
1answer
1k views
Are there any tools for automated penetration testing of Silverlight applications?
I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.
Specifically, I'm looking for a tool that can cope with ...
0
votes
4answers
283 views
Completely wiping a HDD (i.e. nothing is recoverable) [duplicate]
Possible Duplicate:
How can I reliably erase all information on a hard drive?
I'm looking to see if there's a method that can completely wipe out the content of a HDD, so that nothing ...
