Razorback is a framework for an intelligence driven security solution.
It consists of a Dispatcher at the core of the system, surrounded by
Nuggets of varying types.
SWF Nugget is a Razorback Detection Nugget that scans Flash files
collected by Razorback Collector Nuggets. SWF Nugget decompresses
(as necessary) and parses Flash files to detect attacks exploiting
known vulnerabilities.
The scan results are sent back to Razorback Dispatcher to correlate
with other Razorback Nuggets.
Razorback is a framework for an intelligence driven security solution.
It consists of a Dispatcher at the core of the system, surrounded by
Nuggets of varying types.
This nugget provides logging output via syslog.
Razorback is a framework for an intelligence driven security solution.
It consists of a Dispatcher at the core of the system, surrounded by
Nuggets of varying types.
This nugget checks the VirusTotal API for the MD5 of the submitted file.
If the file is found, the short data of the alert will contain the results
from the JSON response from VirusTotal.
Razorback is a framework for an intelligence driven security solution.
It consists of a Dispatcher at the core of the system, surrounded by
Nuggets of varying types.
The Yara nugget allows modified Yara rules to dictate which flags are
set when they alert.
Revelation is a password manager for the GNOME 2 desktop, released
under the GNU GPL license. It stores accounts and passwords in a single,
secure place, and gives access to them through a user-friendly graphical
interface.
shimmer is a pair of small programs (a client and a server) that provide an
alternative to port knocking program such as tumbler and are used to hide a
valuable port (such as a hidden web server or SSH) on a public IP address.
Simple HTTP Scanner is a creation made for web site pen testing. You can
check for directories and files on the remote web server and get some
server information like the webserver running.
Graphical certification authority is an interface for managing RSA keys
and certificates, and the creation and signing of PKCS#10 requests. It
uses the OpenSSL library and a Berkeley DB for key and certificate
storage. It supports importing and exporting keys and PEM DER PKCS8
certificates, signing and revoking of PEM DER PKCS12, and selection of
x509v3 extensions. A tree view of certificates is presented.
Snort-rep is a Snort reporting tool that can produce text or HTML
output from a syslog file. The reports contain:
* Portscan summary
* Alert Summary by ID
* Alert summary by remote host and ID
* Alert summary by local host and ID
* Alert summary by local port and ID
A fork of Twitter OAuth REST API client library for Ruby