"racoon2" is a system to exchange and to install security parameters
for the IPsec.
Currently the system supports the following specification:
Internet Key Exchange (IKEv2) Protocol
draft-ietf-ipsec-ikev2-17.txt
Kerberized Internet Negotiation of Keys (KINK)
draft-ietf-kink-kink-06.txt
PF_KEY Key Management API, Version 2
RFC2367
The Internet Key Exchange (IKE)
RFC2409
Ratproxy is a semi-automated, largely passive web application security audit
tool. It is meant to complement active crawlers and manual proxies more
commonly used for this task, and is optimized specifically for an accurate and
sensitive detection, and automatic annotation, of potential problems and
security-relevant design patterns based on the observation of existing,
user-initiated traffic in complex web 2.0 environments.
gpgr is a very light interface to the command-line GPG (GNU Privacy
Guard) tool which is soley concerned with making it as easy as
possible to encrypt files with one (or more) public keys. It does
not provide any major key management tools and does not support
decryption.
scanlogd is a TCP port scan detection tool, originally designed to illustrate
various attacks an IDS developer has to deal with. Unlike some of the other
port scan detection tools out there, scanlogd is designed to be totally safe
to use.
-Roman Bogorodskiy
<bogorodskiy@inbox.ru>
Shishi is a free implementation of the Kerberos 5 network security system.
The goals of this project are:
* Full standards compliance.
* Thread safe library.
* Internationalization, both for client messages but also for non-ASCII
username and passwords.
* Integrate with existing password management systems (/etc/passwd, PAM,
SASL).
* Clean room implementation with clear copyright and license.
This program is designed to log smurf attacks and the broadcasts used.
Essentially it is just an ICMP echo reply logger with the following twists:
- Logging only begins after passing a certain threshold rate of packets/sec
and kilobytes/sec. This prevents the logging of innocent ping replies.
- Only the /24 is logged, and it is only logged once per attack.
ssl-admin was designed to create a user-friendly, menu-driven interface
to the OpenSSL programs.
ssl-admin will help you do the following tasks with SSL certificates:
* Create your own CA certificate.
* Create new Certificate Signing Requests
* Sign existing Certificate Signing Requests
* Manage Certificate Revokation Lists
* Export configurations and certificates for OpenVPN.
Switzerland is a tool for testing networks, ISPs, and firewalls developed
by the Electronic Frontier Foundation (www.eff.org). It will spot IP
packets which are forged or modified between clients, inform you, and
give you copies of the modified packets.
WebScarab is a framework for analysing applications that communicate
using the HTTP and HTTPS protocols. In its most common usage,
WebScarab operates as an intercepting proxy, allowing the user to
review and modify requests created by the browser before they are
sent to the server, and to review and modify responses returned
from the server before they are received by the browser.
Yersinia is a layer 2 vulnerability scanner with support for the
following protocols:
Cisco Discovery Protocol (CDP)
Dynamic Host Configuration Protocol (DHCP)
Dynamic Trunking Protocol (DTP)
Hot Standby Router Protocol (HSRP)
IEEE 802.1q
Spanning Tree Protocol (STP, RSTP)
Virtual Trunking Protocol (VTP)