Skip to main content

THE BEST OPEN SOURCE SECURITY TOOLS



THE BEST OPEN SOURCE SECURITY TOOLS


 THE BEST OPEN SOURCE SECURITY TOOL 


THE BEST OPEN SOURCE SECURITY TOOLS:-
====================================







Security is an important part of an Administrator's job.This article presents what I believes are the 10 most useful security tools.

1. NMAP :- Nmap is an source tool created by Gordon Fyodor Lyon that supports port scanning, operating system detection, various detection and more. Nmap can be useful to both Network Administrators and Hackers! This versatile tool for network mapping lets you learn many things about your hosts and their status. Network scanning is very useful for both checking and improving your network security. It's considered a good practice to periodically run Nmap and check for possible changes to its output.

2. Tcpdump and Wireshark :- Tcpdump is avery capable command-line utility that allows you to capture network data. It is based on libpcap, which is an open source C/C++ library for network traffic capture. You can capture your traffic using tcpdump but you can analyse it later using Wireshark --another powerful tool that every Linux or Network Administrator should know that. The following Tcpdump command captures the traffic of the entire 10.10.10.0/24 network.

# tcpdump net 10.10.10.0/24

Wireshark also captures packets, and analyses and displays them in a human-readable format. Wireshark allows you to follow a TCP/IP 'conversation' between two machines, view the data of the packets, etc. I suggest that you first start by learning Display Filters.

For TCPDump Visit Here - http://www.rohitpatel.in/2013/02/tcpdump-tips-tricks.html

3. Nessus Security Scanner :- Nessus is a vulnerability scanning program that can scan for the following type of vulnerabilities :
⦁ Default or blank passwords.
⦁ Dos Attacks against the TCP/IP stack using invalid packets.
⦁ Various misconfigurations, including old software versions and open mail relay.
Various vulnerabilities that may allow a hacker to damage a system.
Nessus is free of charge for personal use.

4. Your Firewall :- A properly configured firewall can protect your network from possible threats; it will keep external attackersout of your network. You should not forget to check the log files of your firewall software or hardware for odd error messages.

5. SQLMap :- Nowadays, almost every website uses a database to store and retrieve data. SQLMap is an open source penetration-testing tool for detecting and exploiting SQL injection flaws. It supports MySQL, Oracle, DB2, SQLite, PostgreSQL, Firebird and Sybase.

6. Aircrack-ng :- Aircrack-ng is a set of tools for auditing wireless networks. It Supports WEP and WPA-PSK key-cracking. Your wireless network interface should support raw monitoring mode in order to work with it. It can capture 802.11a, 802.11b, 802.11g traffic.

7. Telnet :- The initial purpose of Telnet was to allow users to connect and control machines remotely. the Telnet protocol uses a plain-text TCP connection to transmit and recieve data --so when SSH, which uses encrypted and secure connections, was introduced, administrators switched from telnet to SSH. Using Telnet to connect to a POP3 server or a website is better for troubleshooting because you see raw output, including control data, and therefore you can better comprehend the problem itself.

8. Log Files :- This is not an actual tool, but log files are a very useful source of security-related messages that you should regularly check for abnormal messages. It is recommended that you can create small scripts, in your preferred scripting language, to extract unusual messages from your log files. The following grep -w command displays the sudo related information found in the system.log file :

#  grep -w sudo system.log

9. The 'John the Ripper' password cracker :- Weak passwords are the No 1 security threat, so it is part of your job as a UNIX Administrator to check for weak or empty password, and protect your Linux machines. The 'John the Ripper' utility can check if a password is easy to guess by trying to crack it using the brute-force method.

* Summary :- All the tools mentioned are very handy for system and network admins and I think that you should add them to your arsenal of tools. When checking the security of a machine or a network, I suggest that you start with Nmap--and never forget that those tools are also available to attackers.

* Web Links / Bibliography :-
⦁ Wireshark : www.wireshark.org/
⦁ TCPDump and libpcap site : www.tcpdump.org/
⦁ Internetworking with TCP/IP, Volume 1, Douglas E. Comer, Prentice Hall
⦁ John the Ripper password cracker : www.openwall.com/john/
⦁ Nessus : www.nessus.org/
⦁ SQLMap : www.sqlmap.org/
⦁ Aircrack-ng : www.aircrack-ng.org/
⦁ Telnet RFC : www.tools.ietf.org/html/rfc854/
⦁ Nmap : www.nmap.org/


FEED






Share









SUPPORT















VISIT COUNTER !!




ROHIT PATEL
 


Labels:

Comments

Post a Comment

Popular posts from this blog

Hacking via Cloning Site Using Kali Linux

Hacking via Cloning Site Using Kali Linux Hacking via Cloning Site Using Kali Linux  SET Attack Method : SET stands for Social Engineering Toolkist , primarily written by  David Kennedy . The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. SET was designed to be released with the  http://www.social-engineer.org  launch and has quickly became a standard tool in a penetration testers arsenal. The attacks built into the toolkit are designed to be targeted and focused attacks against a person or organization used during a penetration test. Actually this hacking method will works perfectly with DNS spoofing or Man in the Middle Attack method. Here in this tutorial I’m only writing how-to and step-by-step to perform the basic attack , but for the rest you can modified it with your own imagination. In this tutorial we will see how this attack methods can owned your com...
Post a Comment
Read more

Defacing Sites via HTML Injections (XSS)

Defacing Sites via HTML Injections Defacing Sites via HTML Injections What Is HTML Injection: "HTML Injection" is called as the Virtual Defacement Technique and also known as the "XSS" Cross Site Scripting. It is a very common vulnerability found when searched for most of the domains. This kind of a Vulnerability allows an "Attacker" to Inject some code into the applications affected in order to bypass access to the "Website" or to Infect any particular Page in that "Website". HTML injections = Cross Site Scripting, It is a Security Vulnerability in most of the sites, that allows an Attacker to Inject HTML Code into the Web Pages that are viewed by other users. XSS Attacks are essentially code injection attacks into the various interpreters in the browser. These attacks can be carried out using HTML, JavaScript, VBScript, ActiveX, Flash and other clinet side Languages. Well crafted Malicious Code can even hep the ...
Post a Comment
Read more

Hacking DNN Based Web Sites

Hacking DNN Based Web Sites Hacking DNN Based Web Sites Hacking DNN (Dot Net Nuke) CMS based websites is based on the Security Loop Hole in the CMS. For using that exploit we will see the few mentioned points which illustrates us on how to hack any live site based on Dot Net Nuke CMS. Vulnerability : This is the know Vulnerability in Dot Net Nuke (DNN) CMS. This allows aone user to Upload a File/Shell Remotely to hack that Site which is running on Dot Net Nuke CMS. The Link's for more Information regarding this Vulnerability is mentioned below -                                  http://www.exploit-db.com/exploits/12700/ Getting Started : Here we will use the Google Dork to trace the sites that are using DNN (Dot Net Nuke) CMS and are vulnerable to Remote File Upload. How To Do It : Here, I an mentioning the few points on how to Search for the existing Vulnerability in DNN. Let'...
Post a Comment
Read more

Excellent tricks and techniques of Google Hacks

Frontpage.. very nice clean search results listing !! I magine with me that you can steal or know the password of any web site designed by "Frontpage". But the file containing the password might be encrypted; to decrypt the file download the program " john the ripper". To see results; just write in the ( http://www.google.com/ ) search engine the code: "# -FrontPage-" inurl:service.pwd ============================================== This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics. To see results; just write in the ( http://www.google.com/ ) search engine the code: "AutoCreate=TRUE password=*" ============================================== This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net. To see results; just write in the ( http://www.google.co...
Post a Comment
Read more

Hacking via BackTrack using SET Attack Method

Hacking via BackTrack using SET Attack Method Hacking via BackTrack using SET Attack  1. Click on Applications, BackTrack, Exploit Tools, Social Engineering Tools, Social Engineering Toolkit then select set.
Post a Comment
Read more