|
(Page 8 of 14) < Prev 3 4 5 6 7 8 9 10 11 12 13 Next > Platform: IRIX fts-rvscan Added 2001-10-22 rvscan is a remote vulnerability scanner. It checks for a number of recent remote vulnerabilities in a variety of Unixes. Unlike most commercial scanners, it uses real exploits to check for the vulnerabilities. Subinfo Added 2001-10-22 Subinfo is a shell script which utilizes nslookup to dump all information about a domain, and its subdomains. Courtney Added 2001-10-22 Courtney is a "ids" system, which monitors for SATAN probes and attacks. It receives its input from tcpdump, counting the number of new services a machine originates within a time window. If the threshold is exceeded by a host, it is flagged as a potential SATAN host. scan-detector Added 2001-10-22 Scan-detector is a simple detector for automated scans of TCP/ UDP ports on a host. It works by opening a socket on specified ports, and watches for a connection. When a connection is established, the host name, source port, destination host, destination port, and a number of other pieces of information are logged. Flog ftpd log analyzer Added 2001-10-22 Flog is a simple ftpd log file analysis tool. It generates basic statistics about traffic and server utilization, which it outputs to a file. Domain Walking Tool Added 2001-10-22 This simple utility is an sh(1) shell script which allows you to walk first level domains and down. Imapd Vulnerability Scanner Added 2001-10-22 This Imapd scanner searches for and exploits hosts which are vulnerable to the imapd buffer overflow vulnerability. In particular the imapd vulnerability which was posted to the Bugtraq mailing list on July 17, 1998 by Anonymous (nobody@REPLAY.COM). A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to be executed will be run with root privilege. Imap supports a command 'AUTHENTICATE' which specifies the type of authentication mechanism to be used to open a mailbox. The value passed to the authenticate command is copied into a buffer of size 1024. The maximum size of this value, however, it 8192 characters. A failure to bound the read value to 1024 results in a buffer overflow. This particular tool is built to exploit Linux X86 platforms. SRP - Secure Remote Password Protocol Added 2001-10-22 SRP stands for the Secure Remote Password protocol, and it represents a new mechanism for performing secure password-based authentication and key exchange over any type of network. SRP offers both security and convenience improvements over authentication techniques currently in use. Cfdecrypt Added 2001-10-22 CFDECRYPT: Decrypt Cold Fusion templates encrypted with CFCRYPT fping Added 2001-10-22 fping is a ping(1) like program which uses the Internet Control Message Protocol (ICMP) echo request to determine if a host is up. fping is different from ping in that you can specify any number of hosts on the command line, or specify a file containing the lists of hosts to ping. Instead of trying one host until it timeouts or replies, fping will send out a ping packet and move on to the next host in a round-robin fashion. If a host replies, it is noted and removed from the list of hosts to check. If a host does not respond within a certain time limit and/or retry limit it will be considered unreachable. Browse by category |
|
|
Privacy Statement |
