Wednesday, August 3, 2011

Security tools

http://www.thoughtcrime.org/software.html

googlesharing
GoogleSharing is a special kind of anonymizing proxy service, designed for a very specific threat. It ultimately aims to provide a level of anonymity that will prevent Google from tracking your searches, movements, and what websites you visit.

wpacracker
wpacracker is a WPA cloud cracking service. Upload a pcap file with a WPA handshake in it, and wpacracker will launch a dictionary attack from a 135 million word dictionary across a 400CPU cluster. While a job of that size would take over 5 days on a contemporary dual-core desktop machine, on our cluster it takes an average of 20minutes.

knockknock
knockknock is a simple, secure, and stealthy port knocking implementation that does not use libpcap or bind to a socket interface.

tortunnel
tortunnel is a partial Onion Proxy implementation designed for building single-hop circuits through TOR exit nodes.

sslstrip
sslstrip is a tool that demonstrates the HTTPS stripping attacks which I presented at Black Hat DC 2009.

firemole
Firemole is an extension that allows you to configure SSL-encrypted links to proxy servers. It supports multiple concurrent proxies that are chosen by URL filters that users can configure. No more SSH tunnels.

barada
An Android application and corresponding PAM module that provide SecureID style two-factor authentication without the use of specialized hardware or the hassle of setting up special authentication services.

nellynomore
A tool for converting NellyMoser encoded FLV files to WAV.

sslsniff
A tool that will do a man-in-the-middle attack on SSL connections and, if vulnerable, exploit the BasicConstraints Internet Explorer vulnerability.

fakeroute
A small Linux app that, when run, makes your machine appear to be anywhere you specify on the internet.

libprofiler
A lightweight JVMPI library that will profile thread contention points in Java code. I think I wrote this because most of the existing "enterprise" profilers did not allow you to profile for thread contention points, and those that did were too heavy-weight to accurately execute high performance server apps. I'm not sure whether this is still relevant or not.

mset
A small X11 application that renders the Mandelbrot Set and lets you zoom around in it. I originally wrote this when I was 17, after seeing Arthur C. Clark on PBS.