SecTools http://secure2s.net/tools Secure2S Security Tool Sets Blog Wed, 29 Aug 2007 14:11:25 +0000 http://wordpress.org/?v=2.1.2 en Fping http://secure2s.net/tools/2006/06/24/fping/ http://secure2s.net/tools/2006/06/24/fping/#comments Sat, 24 Jun 2006 09:24:30 +0000 Jalal Rohani http://www.secure2s.net/tools/2006/06/24/fping/ Fping : A parallel ping scanning program fping is a ping(1) like program which uses the Internet Control Message Protocol (ICMP) echo request to determine if a host is up. fping is different from ping in that you can specify any number of hosts on the command line, or specify a file containing the lists of hosts to ping. Instead of trying one host until it timeouts or replies, fping will send out a ping packet and move on to the next host in a round-robin fashion. If a host replies, it is noted and removed from the list of hosts to check. If a host does not respond within a certain time limit and/or retry limit it will be considered unreachable.
These icons link to social bookmarking sites where readers can share and discover new web pages.
  • del.icio.us
  • Reddit
  • Slashdot
  • Technorati
  • YahooMyWeb
  • Digg
]]> http://secure2s.net/tools/2006/06/24/fping/feed/ Fport http://secure2s.net/tools/2006/06/23/fport/ http://secure2s.net/tools/2006/06/23/fport/#comments Fri, 23 Jun 2006 20:04:56 +0000 Jalal Rohani http://www.secure2s.net/tools/2006/06/23/fport/ Fport : Foundstone’s enhanced netstat Fport reports all open TCP/IP and UDP ports on the machine you run it on and shows what application opened each port. So it can be used to quickly identify unknown open ports and their associated applications. It only runs on Windows, but many UNIX systems now provided this information via netstat (try ‘netstat -pan’ on Linux). Here is a PDF-Format SANS article on using Fport and analyzing the results.
These icons link to social bookmarking sites where readers can share and discover new web pages.
  • del.icio.us
  • Reddit
  • Slashdot
  • Technorati
  • YahooMyWeb
  • Digg
]]> http://secure2s.net/tools/2006/06/23/fport/feed/ Arpwatch http://secure2s.net/tools/2006/06/23/arpwatch/ http://secure2s.net/tools/2006/06/23/arpwatch/#comments Fri, 23 Jun 2006 19:54:29 +0000 Jalal Rohani http://www.secure2s.net/tools/2006/06/23/arpwatch/ Arpwatch : Keeps track of ethernet/IP address pairings and can detect certain monkey business Arpwatch is the classic ARP man-in-the-middle attack detector from LBNL’s Network Research Group. It syslogs activity and reports certain changes via email. Arpwatch uses LibPcap to listen for ARP packets on a local ethernet interface.
These icons link to social bookmarking sites where readers can share and discover new web pages.
  • del.icio.us
  • Reddit
  • Slashdot
  • Technorati
  • YahooMyWeb
  • Digg
]]> http://secure2s.net/tools/2006/06/23/arpwatch/feed/ LSoF http://secure2s.net/tools/2006/06/23/lsof/ http://secure2s.net/tools/2006/06/23/lsof/#comments Fri, 23 Jun 2006 19:21:23 +0000 Jalal Rohani http://www.secure2s.net/tools/2006/06/23/lsof/ LSoF : LiSt Open Files This Unix-specific diagnostic and forensics tool lists information about any files that are open by processes currently running on the system. It can also list communications sockets open by each process. For a Windows equivalent, check out Process Explorer from Sysinternals.
These icons link to social bookmarking sites where readers can share and discover new web pages.
  • del.icio.us
  • Reddit
  • Slashdot
  • Technorati
  • YahooMyWeb
  • Digg
]]> http://secure2s.net/tools/2006/06/23/lsof/feed/ Perl / Python / Ruby http://secure2s.net/tools/2006/06/23/perl-python-ruby/ http://secure2s.net/tools/2006/06/23/perl-python-ruby/#comments Fri, 23 Jun 2006 18:12:40 +0000 Jalal Rohani http://www.secure2s.net/tools/2006/06/23/perl-python-ruby/ Perl / Python / Ruby : Portable, general-purpose scripting languages While many canned security tools are available on this site for handling common tasks, scripting languages allow you to write your own (or modify existing ones) when you need something more custom. Quick, portable scripts can test, exploit, or even fix systems. Archives like CPAN are filled with modules such as Net::RawIP and protocol implementations to make your tasks even easier.
These icons link to social bookmarking sites where readers can share and discover new web pages.
  • del.icio.us
  • Reddit
  • Slashdot
  • Technorati
  • YahooMyWeb
  • Digg
]]> http://secure2s.net/tools/2006/06/23/perl-python-ruby/feed/ Ping/telnet/dig/traceroute/whois/netstat http://secure2s.net/tools/2006/06/23/pingtelnetdigtraceroutewhoisnetstat/ http://secure2s.net/tools/2006/06/23/pingtelnetdigtraceroutewhoisnetstat/#comments Fri, 23 Jun 2006 15:49:53 +0000 Jalal Rohani http://www.secure2s.net/tools/2006/06/23/pingtelnetdigtraceroutewhoisnetstat/ Hping2 and Netcat.
These icons link to social bookmarking sites where readers can share and discover new web pages.
  • del.icio.us
  • Reddit
  • Slashdot
  • Technorati
  • YahooMyWeb
  • Digg
]]> http://secure2s.net/tools/2006/06/23/pingtelnetdigtraceroutewhoisnetstat/feed/