Free distributed network john the ripper software for linux

Distributed Network John The Ripper is a client/server framework that wraps around a slightly modified version of John The Ripper.
In contrast to the MPI version of John, dnetj allows the use of nodes which are of differing speeds and for nodes which do not run 24/7.
This tool was written for a number of reasons, firstly the MPI version requires an MPI installation on each node, and for the nodes to be configured together and be roughly the same speed. Also, although other distributed password crackers exist (such as djohn or medussa) they all have their own limitations.
The server loads a set of password hashes, and splits the available keyspace into "work units" of a configurable size. The clients connect and retrieve the hashes, as well as a set of work units to process. Once a client has processed some work units, it connects back to the server to submit the completed units as well as any passwords which have been cracked.
Possible uses include eg, running as a background task on all the workstations in an office.
Note, this tool is at an early stage of development and is likely to be very buggy, although it is functional. Bug reports and/or patches are strongly encouraged.
Main features:
- Distributed client/server model, any number of clients can be supported and can be brought up and down at will
- Support for any cipher supported by John 1.7.2 (additional cipher patches should be able to be applied normally)
- Keep the changes to John to a minimum, so that patches/updates can still be applied without too much fuss
- Uses the same optimized encryption routines as John
- Cracked hashes are stored in the standard john.pot format, so they can be displayed with john -show
- Passwd files sent to clients are sanitised (only the hash is sent, other fields from the passwd file are removed)
- Capability for auto client registration
- Code is intentionally kept clean to aid porting
Supported Platforms
Dnetj has been tested on the following systems:
- Linux/x86
- Linux/amd64
- Linux/sparc
- MacOSX/PPC
- MacOSX/Intel
- Solaris/x86
Version restrictions:
- Clients will sometimes crash if unable to connect to the server for a long period of time.
- Work unit size is limited to a 32bit integer number of crypts (ie: 4294967296)
- Node performance calculations wrap once the node has performed more than 4294967296 crypts, so nodes may appear to be much slower than they truly are.
- Doesnt work with NTLM, as the NTLM hash is stored in a different field of the passwd file.
- Traffic is sent in plain text (this makes debugging easier at this early stage of development)
- Makefile is very basic, and has no configure script, compilation on Solaris requires adding -lnsl -lsocket to the compile command.
Enhancements:
- Basic functionality is implemented, and dnetj is usable, but there are many things still to be implemented and a lot more testing is needed.

Distributed RSA Key Generation is a software to generate shared RSA keys. Currently, only keys for two parties using Gilboas protocol are supported. But the protocol stack is extensible, so in the future there may be other protocols supported.

Work has begun on Straubs protocol but is not finished yet, multi-party protocols like Boneh-Franklins may also be added in the far future.

Distributed Access Control System is a complete, light-weight, single sign-on and role-based access control system distributed under an open source license. It provides:
- extended authentication and role-based access control capabilities for Apache-based web services, CGI programs, and virtually any program or script;
- a wide array of flexible, modular, and efficient authentication methods, including two-factor authentication and hardware tokens;
- powerful, rule-based authorization checking that can be applied transparently to any resource or activity (such as web services, web content, and program features) by Apache-based web services and CGI programs, or virtually any program or script;
- an Apache 2.0/2.2 module, suite of CGI programs, and collection of command line tools for Unix-type platforms, such as Linux, FreeBSD, and Solaris.
Enhancements:
- This release includes an important bugfix to local_passwd_authenticate that prevents invalid passwords from being accepted.
- Some minor bugs have also been addressed, including some problems with dacs.quick(7).

Ruby Iptables NEtwork Displayer project draws an SVG from a Linux IP table generated by "iptables-save".

Distributed Checksum Clearinghouse, in short DCC, is a system of clients and servers that collect and count checksums related to mail messages. The counts can be used by SMTP servers and mail user agents to detect and reject bulk mail.
DCC servers can exchange common checksums. The checksums include values that are "fuzzy", or constant across common variations in bulk messages.
Enhancements:
- This release improves the dccifd per-user whitelist default.
- It fixes the server database size estimate.
- Old installations really should upgrade to get the MIME decoding fix.

Distributed Aide Runtime Controller is a multi-threaded Python application designed for managing AIDE installations in large heterogeneous networks.
AIDE is an open-source improvement upon the academic release of Tripwire. It can be used to detect filesystem changes in unix environments, which is useful for forensics on compromised systems and tracing illicit system configuration changes.
Darc provides a mechanism to run AIDE integrity checks across many unix systems from a single management station. It has the following features not available in a traditional AIDE installation:
- Maintaining read-only media databases on each system - not a trivial task! - is not required for day to day operations.
- Unified reporting - the admin doesnt have to read individual reports for each system.
- Integrated syslog support to notify admins when a system may have been compromised.
- Databases and configs are never written to the filesystems on the monitored hosts.
Enhancements:
- Better error handling and reporting
- HTML reports for easier navigation within the report
- Configurable timeout values for all relevant metrics - TCP connection timeouts, SFTP transfer time, AIDE run time
- Built-in support for aide database maintenance tasks (init, update) so the manual file manipulation required in 0.2 is completely eliminated.

Growler is a C++-based distributed object and event architecture. The software is written in C++, and supports serialization of C++ objects as part of its Remote Method Invocation, Event Channels, and in its Interface Definition Language.

Its primary application has been in support of interactive, distributed and collaborative visualization, computational steering, and concurrent visualization.

DNA (Deep Network Analyser) is an open, flexible, and extensible deep network analyzer server and software architecture for passively gathering and analyzing network packets, network sessions, and applications protocols.
Deep Network Analyser project is designed to be used for Internet security, network management, intrustion detection, protocol and network analysis, information gathering, and network monitoring applications.
Main features:
- Extensible Java based network sensor (processing layers 2-7)
Configurable processing and output:
- Packet flows like Ethereal
- IP Flows like CISCO netflow
- Stateful Sessions (client/server flow pairs)
- Application protocol element output
- Configurable and extensible application protocol element parsing.
- Application protocol parsing toolkit APIs allows for new protocol parser to be easily developed and extended
- Targeting based full session capture facility, like a realtime targeted TCPDump.
- Flexible targeting from IPAddr, Port tuple to Application sensitive targeting.
- Configurable and extensible output forwarding (file, DB, Streams, JMS, RMI, etc.)
- Extensible realtime collection portable to many OS/Packet processing environments
Easily adaptable to packet processing environments:
- Specialized linux drivers mechanismon
- Network Appliances
- Network Switches / Routers
- Highly mutithreaded for increased performance over multi processor environments
Enhancements:
- Adoption of OpenAdaptor(tm) as the Output Adapter mechanism.
- Support for local-only administration.
- A new targeted packet capture parser, new run scripts, and a new install mechanism.
- Many bugfixes.