-
Arpwatch : Keeps track of ethernet/IP address pairings and can detect certain monkey business Arpwatch is the classic ARP man-in-the-middle attack detector from LBNL’s Network Research Group. It syslogs activity and reports certain changes via email. Arpwatch uses LibPcap to…
-
Ike-scan
Ike-scan : VPN detector/scanner Ike-scan exploits transport characteristics in the Internet Key Exchange (IKE) service, the mechanism used by VPNs to establish a connection between a server and a remote client. It scans IP addresses for VPN servers by sending…
-
RKHunter
RKHunter : An Unix Rootkit Detector RKHunter is scanning tool that checks for signs of various pieces of nasty software on your system like rootkits, backdoors and local exploits. It runs many tests, including MD5 hash comparisons, default filenames used…
-
Angry IP Scanner
Angry IP Scanner : IP address and port scanner Angry IP Scanner is a small open source Java application which performs host discovery (“ping scan”) and port scans. The old 2.x release was Windows-only, but the new 3.X series runs…
-
Firewalk
Firewalk : Advanced traceroute Firewalk employs traceroute-like techniques to analyze IP packet responses to determine gateway ACL filters and map networks. This classic tool was rewritten from scratch in October 2002. Note that much or all of this functionality can…
-
RainbowCrack
RainbowCrack : An Innovative Password Hash Cracker The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for…
-
LSoF
LSoF : LiSt Open Files This Unix-specific diagnostic and forensics tool lists information about any files that are open by processes currently running on the system. It can also list communications sockets open by each process. For a Windows equivalent,…