Slurpie is a passwd file cracker similar to CrackerJack and John the Ripper
except that it can be run in a distributed environment (multiple computers
aka nodes).
slush - SSL remote shell
slush is a simple telnet-like application which communicates over a
secure SSL channel. It uses X509 certificates for authentication and
can be compiled with TCP wrappers support (service name "slushd").
slush is *alpha* software. Use it at your own risk.
smtpscan is a remote SMTP server version detector. It can be used to
guess which mail software is used on a remote server, that may hide its
SMTP banner.
This program is designed to log smurf attacks and the broadcasts used.
Essentially it is just an ICMP echo reply logger with the following twists:
- Logging only begins after passing a certain threshold rate of packets/sec
and kilobytes/sec. This prevents the logging of innocent ping replies.
- Only the /24 is logged, and it is only logged once per attack.
This program creates a set of HTML pages to allow you to quickly and
conveniently navigate around output files of the Snort intrusion
detection system (http://www.snort.org/). The reports summarize the
incidents logged in the snort alert file.
spass is a random password generator written by Guy Rutenberg
Not all web applications are built in the same ways, and hence, many
must be analyzed individually. SPIKE Proxy is a professional-grade
tool for looking for application-level vulnerabilities in web
applications. SPIKE Proxy covers the basics, such as SQL Injection and
cross-site-scripting, but it's completely open Python infrastructure
allows advanced users to customize it for web applications that other
tools fall apart on.
Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on
a web application that uses Microsoft SQL Server as its back-end.
Its main goal is to provide a remote shell on the vulnerable DB server,
even in a very hostile environment. It should be used by penetration
testers to help and automate the process of taking over a DB Server when
a SQL Injection vulnerability has been discovered.
SSHBlock is a daemon to monitor a syslog log for break-in attempts using
SSH, and to automatically block bad hosts by adding lines to /etc/hosts.allow
(TCP Wrappers). Several thresholds are pre-defined, to be able to block those
trying many attempts within a longer or shorter period.
Orthrus is a C library and user interfaces for RFC 2289,
"A One-Time Password System (OTP)", also known as OPIE or S/Key.