Biohazaard & security tools

"The problems are still there. They will always be there. The root of the matter stems from people wanting to conduct business and commerce in a secure fashion when the foundation they want to do this on was never intended to be a secure commerce setting."
Dr Mudge dans une interview avec Kitetoa

DESCRIPTION D'UNE ATTAQUE DE DENI DE SERVICE, Denial of Service, DoS, autrement dit la victime est submergée d'informations incohérentes jusqu'à la saturation @GIBSON RESEARCH CORPORATION : grc.com/dos/grcdos.htm

Happy anniversaire Le 19 juillet 2001, un virus d'une nouvelle génération frappait le web en bloquant pas moins de 300 000 serveurs Windows Nt4 en quelques heures.

Diggin em Walls - Detection of Firewalls, and Probing networks behind firewalls. 1 - 2 - 3 @NEWORDER

ZONEALARM - see also ... http://zonelog.co.uk/links.html ... - Alerte de sécutirté sur Zone Alarm from securityfocus (plus valable avec version actuelle?) : securityfocus.com/archive/1/225205 - HOME : zonelabs.com
Autre question, mystèrieuse, <?xml version="1.0"?> <securitypolicy version="1"> <lockupinfo server="147.208.130.167" enable="true"/> </securitypolicy>, VSCONFIG.XML, fichier compris dans une install standard... A quoi ca sert? réponse de ZA dans son forum, si ça sert c'est que vous faites face à des sérieux problèmes!!! Gasp!

THE CENTER FOR INTERNET SECURITY - cisecurity.org
Benchmarks and scoring tools. - SECURITIES SOFTWARE TECHNOLOGIES - Cerberus Internet scanner - securitysoftwaretech.com/cis/

SECURITE SUR INTERNET... COMMENT SURFER EN PAIX! chez.com/winterminator - une page perso en français, a little quick & dirty

Ettercap - multipurpose sniffer/interceptor/logger for switched LAN. It supports active and passive dissection of many protocols (even ciphered ones) and includes many feature for network and host analysis. -

APTools is a utility that queries ARP Tables and Content-Addressable Memory (CAM) for MAC Address ranges associated with 802.11b Access Points. - aptools.sourceforge.net -

TCPDump/LIBPCAP
This page was started to collect various patches that have been floating around for LBL's tcpdump and libpcap programs, and to continue the work needed on both projects.

Ethereal - Sniffing the glue that holds the Internet together
Ethereal is a free network protocol analyzer for Unix and Windows. It allows you to examine data from a live network or from a capture file on disk. You can interactively browse the capture data, viewing summary and detail information for each packet. Ethereal has several powerful features, including a rich display filter language and the ability to view the reconstructed stream of a TCP session.

Nmap ("Network Mapper") is an open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (ports) they are offering, what operating system (and OS version) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap runs on most types of computers, and both console and graphical versions are available. Nmap is free software, available with full source code under the terms of the GNU GPL.

eEye Digital Security - nmapNT - nmap is a the most customizable network scanner ever. It has various options to perform stealth scans, ping scans, UDP scans, as well as a handful of other scan types.

Atelier Web Security Port Scanner - Download - The defensive position is only as strong as the weakest link. Microsoft and others invest millions in security and are still quite vulnerable. - Traditional tools provide a degree of automated protection. However, when an experienced hacker is committed to enter your computer he will most likely succeed.

To learn the tools, tactics, and motives of the blackhat community, and share those lessons learned - project.honeynet.org

dsniff - collection of tools for network auditing and penetration testing.
dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected SSH and HTTPS sessions by exploiting weak bindings in ad-hoc PKI.

Stealth HTTP Security Scanner - Stealth 2.0 is a Vulnerability Assessment Software that currently provides more than 18000 security checks. It is effective at reducing the exposure of an web server to potential attacks.

WinPcap: the Free Packet Capture Architecture for Windows - WinPcap is an architecture for packet capture and network analysis for the Win32 platforms. It includes a kernel-level packet filter, a low-level dynamic link library (packet.dll), and a high-level and system-independent library (wpcap.dll, based on libpcap version 0.6.2).
http://datanerds.net/~mike/netgroup-serv.polito.it/winpcap/misc/links.htm

Active Network Monitor - is a tool for the day-to-day monitoring of computers in the network. Active Network Monitor runs under Windows NT/2000/XP and allows Systems Administrators to gather information from all the computers (even from the Windows 9x/Me computers) in the network without installing server-side applications on these computers.

Shortcoming and Challenges in the restriction of Internet Retransmissions of Over-the-air Television content to Canadian Internet Users
http://cyber.law.harvard.edu/people/edelman/pubs/jump-091701.pdf

TAMO SOFT - COMMVIEW utility, scan and reports net port activity - tamos.com

Ten Practical Security Steps for Resource Limited IT Staffs by GeodSoft: Make frequent backups, stored securely, and test them. - Have IT staff follow good password procedures. - Use a modern firewall with a tight custom rule set. - Protect files with appropriate access permissions. - Turn off all unneeded services. - Prevent Internet access to shared file systems. - Prevent single login, remote administrative access. - Automatically audit systems for signs of intrusion. - Apply security updates to your systems. - Don't install anything you don't expect to use.

Exploiting design flaws in the Win32 API for privilege escalation. Or... Shatter Attacks - How to break Windows. Shatter attacks - more

Wyrm Software - AdTropis' Site - wyrmsoft.tzo.net - IP address e-mailer - IP address ICQ notifier - Registry Editor - guess what next :)

horizon's page -From a Unix neophyte / CS student / hacker. The following is some of the code and articles that I have written, as well as links to resources I consider to be useful out there on the net. packetstorm.widexs.nl/groups/horizon

packer

New Infection Vectors for Malware :: http://www.securityfocus.com/infocus/1615

Threat profiling Microsoft SQL Server : NGSoftware

XProbes2 - A "fuzzy" approach to remote active OS fingerprinting - Ofir Arkin & Fyodor Yarochkin

SQL Slammer - http://www.robertgraham.com/journal/030126-sqlslammer.html

The Spread of the Sapphire/Slammer Worm - http://www.silicondefense.com/research/sapphire/

Ten Immutable Laws of Security par Micro$oft

pivx.com/larholm/unpatched/ - Unpatched IE security holes - This page is a list of vulnerabilities that remain unpatched, it is our hope that the increased awareness brought forth may help further the research necessary to properly secure them. -

DShield.org - Distributed Intrusion Detection System
http://www1.dshield.org/port_report.php?port=1337&Submit=Submit

wormwatch.org

Real School case : Hunt for a new trojan (Internet) - http://www.kuro5hin.org/story/2003/9/3/6257/30997

die.net - Online since 1996, die.net hosts the collective non-commercial 'net projects of a few dozen friends in the U.S.

"U don't like spam and other lamer behavior?! Kick them!"

Sputum.com : Anti-Spam Tactical Operations HQ

The SubGenius Police, Usenet Tactical Unit (Mobile)
welcomes you to
The Anti-Spam Anti-PortalTM
"we provide the content others link to!"

Spambot Beware
Written by Greg Sabino Mullane. Last update December 19, 1999.

HOAXBUSTER.COM
Première ressource francophone sur les canulars du web

SPAMHAUS
Where does spam come from? Who's supporting the spammers?
Welcome to The Spamhaus Project. Spamhaus tracks the Internet's worst Spammers, known Spam Gangs and Spam Support Services, and works with ISPs and Law Enforcement Agencies to identify and remove persistent spammers from the Internet.

Why Am I Getting All This Spam?
Unsolicited Commercial E-mail Research
Six Month Report
Center for Democracy & Technology
March 2003