nessus
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 32
Nessus 3.2 Beta
Nessus is the worlds most popular open-source vulnerability scanner used in over 75,000 organizations world-wide. more>> <<less
Download (MB)
Added: 2007-02-22 License: GPL (GNU General Public License) Price:
1592 downloads
Other version of Nessus
License:GPL (GNU General Public License)
License:GPL (GNU General Public License)
Reason for Nessus 0.5.1
Reason for Nessus is a client for Nessus and Nessus compatible servers. more>>
Reason is an application/network security scanner client for Nessus and Nessus compatible (OpenVAS etc.) servers.
In addition to an improved user interface, it provides complete session management, templates, and report generation using XSLT.
It is cross-platform, with platform specific releases available for Linux, Mac, and Windows, written in Java using SWT for a native experience, and it is open-source.
<<lessIn addition to an improved user interface, it provides complete session management, templates, and report generation using XSLT.
It is cross-platform, with platform specific releases available for Linux, Mac, and Windows, written in Java using SWT for a native experience, and it is open-source.
Download (0.43MB)
Added: 2006-03-13 License: Artistic License Price:
1326 downloads
Net::Nessus::Client 0.09
Net::Nessus::Client is a Nessus client module. more>>
Net::Nessus::Client is a Nessus client module.
SYNOPSIS
# Connect to the Nessus Server
require Net::Nessus::Client;
my $client = Net::Nessus::Client->new(host => localhost,
port => 1241,
user => joe,
password => my_password);
The Nessus program is a Client/Server application offering a framework for lots of security related scanners, so-called plugins. The idea is not to create a separate scanner for any possible security hole, but to reimplement only the most important parts and let the Nessus Server (nessusd) do the most part of the work.
Clients are typically available as GUI applications, for example based on the GTK (nessus), Java or Win32 applications. This module is another Nessus client written in Perl, but without GUI.
You start using the module by opening a connection to a Nessus Server: This will create a Nessus client object for you. This object offers methods that you can later use, for example retrieving the list of available plugins, start a scan, set preferences and so on.
<<lessSYNOPSIS
# Connect to the Nessus Server
require Net::Nessus::Client;
my $client = Net::Nessus::Client->new(host => localhost,
port => 1241,
user => joe,
password => my_password);
The Nessus program is a Client/Server application offering a framework for lots of security related scanners, so-called plugins. The idea is not to create a separate scanner for any possible security hole, but to reimplement only the most important parts and let the Nessus Server (nessusd) do the most part of the work.
Clients are typically available as GUI applications, for example based on the GTK (nessus), Java or Win32 applications. This module is another Nessus client written in Perl, but without GUI.
You start using the module by opening a connection to a Nessus Server: This will create a Nessus client object for you. This object offers methods that you can later use, for example retrieving the list of available plugins, start a scan, set preferences and so on.
Download (0.016MB)
Added: 2006-07-18 License: GPL (GNU General Public License) Price:
1199 downloads
nessquik 2.5
nessquik is a fast Web-based Nessus scanner that is intended to replace the Nessus stand alone client. more>>
nessquik is a fast Web-based Nessus scanner that is intended to replace the Nessus stand alone client.
nessquik project uses the prototype.js library to provide a responsive interface even when dealing with all of the available Nessus plugins.
Enhancements:
- A complete redesign of the interface has been done.
- Much more flexibility has been added to the interface as well.
- Scans can be stopped while they are running.
- All scan settings can be configured at creation time.
- An XML-RPC API has been added for third party developers.
- Numerous code fixes and performance enhancements have been made to every part of the system.
<<lessnessquik project uses the prototype.js library to provide a responsive interface even when dealing with all of the available Nessus plugins.
Enhancements:
- A complete redesign of the interface has been done.
- Much more flexibility has been added to the interface as well.
- Scans can be stopped while they are running.
- All scan settings can be configured at creation time.
- An XML-RPC API has been added for third party developers.
- Numerous code fixes and performance enhancements have been made to every part of the system.
Download (0.80MB)
Added: 2007-07-07 License: GPL (GNU General Public License) Price:
840 downloads
Nessj 0.7.0
Nessj is an application/network security scanner client for Nessus and Nessus compatible (OpenVAS, etc.) servers. more>>
Nessj is an application/network security scanner client for Nessus and Nessus compatible (OpenVAS, etc.) servers.
In addition to an improved user interface, Nessj provides session management with templates, report generation using XSLT including charts/graphs, and vulnerability trending
<<lessIn addition to an improved user interface, Nessj provides session management with templates, report generation using XSLT including charts/graphs, and vulnerability trending
Download (0.55MB)
Added: 2006-08-03 License: Artistic License Price:
1180 downloads
strobe-classb 1.8
strobe-classb is a small and fast network scanner for Linux. more>>
strobe-classb is a small and fast network scanner for Linux. It works best on kernel 2.0.36. It was originally designed for scanning for open e-mail relays on your LAN. Version 1.8 works on Linux 2.0.35 and later and Linux 2.2.8 and later.
Also here is RH5.0-5.2-patchscript - a script to fix a problem in RedHat 5.0 to 5.2s relaying rulesets where certain envelope recipients could be used to trick the anti-relaying rulesets.
relay-check.pl is included as an example use of the program. It is how I use the program - to scan my Universitys class B network on a regular basis to detect spam relays, which I then use list-hosts.pl to list sorted by network so that I can notify the individual network admins.
I also use this program to detect other, more serious security problems locally. I will not be releasing any of the code I use for this (both because it isnt "production-quality" and because I find so much with these checks that I dont want others to use them). Consider relay-check.pl to be the example of how the code *should* be used, and develop what checks you wish to use locally. If you want a security scanner, http://www.nessus.org/ seems quite promising.
Each perl script has brief documentation at the start of it. If you do not understand this documentation then read the code. If you do not understand the code then you should not be running the program.
<<lessAlso here is RH5.0-5.2-patchscript - a script to fix a problem in RedHat 5.0 to 5.2s relaying rulesets where certain envelope recipients could be used to trick the anti-relaying rulesets.
relay-check.pl is included as an example use of the program. It is how I use the program - to scan my Universitys class B network on a regular basis to detect spam relays, which I then use list-hosts.pl to list sorted by network so that I can notify the individual network admins.
I also use this program to detect other, more serious security problems locally. I will not be releasing any of the code I use for this (both because it isnt "production-quality" and because I find so much with these checks that I dont want others to use them). Consider relay-check.pl to be the example of how the code *should* be used, and develop what checks you wish to use locally. If you want a security scanner, http://www.nessus.org/ seems quite promising.
Each perl script has brief documentation at the start of it. If you do not understand this documentation then read the code. If you do not understand the code then you should not be running the program.
Download (0.012MB)
Added: 2006-07-06 License: GPL (GNU General Public License) Price:
1207 downloads
OSSIM 0704 (VMOSSIM)
OSSIM aims to unify network monitoring, security, correlation, and qualification in one single tool. more>>
OSSIM aims to unify network monitoring, security, correlation, and qualification in one single tool. The project combines Snort, BASE, NTOP, Nagios, nmap, nessus, and rrdtool to provide the user with full control over every aspect of networking or security.
Main features:
- Arpwatch, used for mac anomaly detection.
- P0f, used for passive OS detection and os change analisys.
- Pads, used for service anomaly detection.
- Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort, the IDS, also used for cross correlation with nessus.
- Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
- Tcptrack, used for session data information which can grant useful information for attack correlation.
- Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
- Nagios. Being fed from the host asset database it monitors host and service availability information.
- Osiris, a great HIDS.
Enhancements:
- VMOSSIM is a fully working OSSIM environment packaged into a VMWare image.
- Its got most of the plugins enabled and is intended for uncomplicated and fast deployment, as well as for demonstration and testing purposes.
- It incudes a set of image management scripts not included with the main OSSIM distribution, which alleviates access to OSSIM by not-so-skilled users.
<<lessMain features:
- Arpwatch, used for mac anomaly detection.
- P0f, used for passive OS detection and os change analisys.
- Pads, used for service anomaly detection.
- Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort, the IDS, also used for cross correlation with nessus.
- Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
- Tcptrack, used for session data information which can grant useful information for attack correlation.
- Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
- Nagios. Being fed from the host asset database it monitors host and service availability information.
- Osiris, a great HIDS.
Enhancements:
- VMOSSIM is a fully working OSSIM environment packaged into a VMWare image.
- Its got most of the plugins enabled and is intended for uncomplicated and fast deployment, as well as for demonstration and testing purposes.
- It incudes a set of image management scripts not included with the main OSSIM distribution, which alleviates access to OSSIM by not-so-skilled users.
Download (MB)
Added: 2007-04-24 License: GPL (GNU General Public License) Price:
600 downloads
Network Security Toolkit 1.5.0
Network Security Toolkit is a bootable ISO live CD and its based on Fedora Core 2. more>>
Network Security Toolkit is a bootable ISO live CD and its based on Fedora Core 2.
The toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86 platforms.
The main intent of developing this toolkit was to provide the network security administrator with a comprehensive set of Open Source Network Security Tools. The majority of tools published in the article: Top 75 Security Tools by insecure.org are available in the toolkit.
What we find rather fascinating with NST is that we can transform most x86 systems (Pentium II and above) into a system designed for network traffic analysis, intrusion detection, network packet generation, wireless network monitoring, a virtual system service server, or a sophisticated network/host scanner.
This can all be done without disturbing or modifying any underlying sub-system disk. NST can be up and running on a typical x86 notebook in less than a minute by just rebooting with the NST ISO CD. The notebooks hard disk will not be altered in any way.
NST also makes an excellent tool to help one with all sorts of crash recovery troubleshooting scenarios and situations.
Enhancements:
- We are pleased to announce the latest NST release: v1.5.0. This release is based on Fedora Core 5 using the Linux kernel 2.6.18. Here are some of the highlights for this release: the NST Web User Interface (WUI), has been greatly enhanced and cleaned up; extensive additions to managing and analyzing network packet captures; the ability to setup and manage printers; the ability to easily mount many different supported file system types; the ability to manage the NST as a file server (both NFS and CIFS); the addition of the Inprotect package (a Nessus manager); the addition of the Zabbix package (another network resource monitoring tool - similar to Nagios)....
<<lessThe toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86 platforms.
The main intent of developing this toolkit was to provide the network security administrator with a comprehensive set of Open Source Network Security Tools. The majority of tools published in the article: Top 75 Security Tools by insecure.org are available in the toolkit.
What we find rather fascinating with NST is that we can transform most x86 systems (Pentium II and above) into a system designed for network traffic analysis, intrusion detection, network packet generation, wireless network monitoring, a virtual system service server, or a sophisticated network/host scanner.
This can all be done without disturbing or modifying any underlying sub-system disk. NST can be up and running on a typical x86 notebook in less than a minute by just rebooting with the NST ISO CD. The notebooks hard disk will not be altered in any way.
NST also makes an excellent tool to help one with all sorts of crash recovery troubleshooting scenarios and situations.
Enhancements:
- We are pleased to announce the latest NST release: v1.5.0. This release is based on Fedora Core 5 using the Linux kernel 2.6.18. Here are some of the highlights for this release: the NST Web User Interface (WUI), has been greatly enhanced and cleaned up; extensive additions to managing and analyzing network packet captures; the ability to setup and manage printers; the ability to easily mount many different supported file system types; the ability to manage the NST as a file server (both NFS and CIFS); the addition of the Inprotect package (a Nessus manager); the addition of the Zabbix package (another network resource monitoring tool - similar to Nagios)....
Download (364.9MB)
Added: 2007-02-14 License: GPL (GNU General Public License) Price:
991 downloads
AutoScan 1.01
AutoScan is a utility for network exploration (Samba and nessus client). more>>
AutoScan is a utility for network exploration.
The objective of the program is to post the list of all equipment connected to the network. A list of ports preset is scanned for each equipment.
Main features:
- Automatic network discovery
- Entire subnets can be scanned simultaneously without human intervention
- Addition time-reality of the new machines put on the network
- Detection of the OS, brand and model known (Possibility to add an unknown equipment in the database)
- Ability to save the network state
- A Samba share browser
- A Nessus client
- For each machine, one can launch a script (ex:ping, nmap) and display the result
- For each port, one can launch an application (ex:rdesktop for the terminal server service)
<<lessThe objective of the program is to post the list of all equipment connected to the network. A list of ports preset is scanned for each equipment.
Main features:
- Automatic network discovery
- Entire subnets can be scanned simultaneously without human intervention
- Addition time-reality of the new machines put on the network
- Detection of the OS, brand and model known (Possibility to add an unknown equipment in the database)
- Ability to save the network state
- A Samba share browser
- A Nessus client
- For each machine, one can launch a script (ex:ping, nmap) and display the result
- For each port, one can launch an application (ex:rdesktop for the terminal server service)
Download (14.7MB)
Added: 2007-06-02 License: GPL (GNU General Public License) Price:
967 downloads
Local Area Security 0.5
L.A.S. is a research group focused on information security related subjects. more>>
Local Area Security is a research group focused on information security related subjects. We are most known for L.A.S. Linux. Our live-CD security toolkit.
Local Area Security is a project that was started in 2002 to research information security related topics. During that time there was no real live-CD toolkit focused on information security.
So Jascha, the project founder built one from a stripped down version of Knoppix called Model-K. Both of which were built from Debian Linux.
Up until version 0.4 L.A.S. Linux was command line only. Which made it limited to some of the tools it could contain since many require a GUI. Or at least for many it is preferable to have one. So FluxBox was added as the desktop since it is light weight and very feature filled.
It was during this time that Jascha came up with the idea of keeping the size of L.A.S. as small as possible, which lead to a target maximum size of 180MBs. The size of the original mini-CDs that were available at the time. This forced the selection of tools and features to be weighed heavily since unlike other live-CDs that throw in everything including the kitchen sink. L.A.S. was designed from the ground up to be a tool not a all-inclusive grab bag of applications.
As well as many advances for live-CDs came about, such as to-ram that allows booting a live-CD into the physical RAM of a computer. Which by chance L.A.S. was perfectly cut out for. With as little as 256MB of RAM people could boot L.A.S. and then free up their CD-ROMs for burring etc.
For forensics this was a big plus, along with many other uses. Plus L.A.S. ran very fast in RAM which helped with running Nessus, Nmap, or other tools. When compared to full size (700MB) CDs which would require 1GB of RAM to use the to-ram option, it was really no contest.
<<lessLocal Area Security is a project that was started in 2002 to research information security related topics. During that time there was no real live-CD toolkit focused on information security.
So Jascha, the project founder built one from a stripped down version of Knoppix called Model-K. Both of which were built from Debian Linux.
Up until version 0.4 L.A.S. Linux was command line only. Which made it limited to some of the tools it could contain since many require a GUI. Or at least for many it is preferable to have one. So FluxBox was added as the desktop since it is light weight and very feature filled.
It was during this time that Jascha came up with the idea of keeping the size of L.A.S. as small as possible, which lead to a target maximum size of 180MBs. The size of the original mini-CDs that were available at the time. This forced the selection of tools and features to be weighed heavily since unlike other live-CDs that throw in everything including the kitchen sink. L.A.S. was designed from the ground up to be a tool not a all-inclusive grab bag of applications.
As well as many advances for live-CDs came about, such as to-ram that allows booting a live-CD into the physical RAM of a computer. Which by chance L.A.S. was perfectly cut out for. With as little as 256MB of RAM people could boot L.A.S. and then free up their CD-ROMs for burring etc.
For forensics this was a big plus, along with many other uses. Plus L.A.S. ran very fast in RAM which helped with running Nessus, Nmap, or other tools. When compared to full size (700MB) CDs which would require 1GB of RAM to use the to-ram option, it was really no contest.
Download (210MB)
Added: 2005-11-09 License: GPL (GNU General Public License) Price:
840 downloads
Linux-EduCD 0.8
Linux-EduCD is a Polish live DVD based on KANOTIX, with focus on education, graphics, office, multimedia. more>>
Linux-EduCD is a Polish live DVD based on KANOTIX, with focus on education, graphics, office, multimedia and software development.
Main features:
- addition of the Compiz desktop;
- integration of GParted into the hard disk installer;
- new boot options;
- Linux kernel 2.6.18 with extra drivers and modules;
- KDE 3.5.5;
- OpenOffice.org 2.0.4;
- a range of educational software (Celestia, OpenDX, PyMOL, Rasmol, DrGeo, Yacas); multimedia applications (GIMP 2.2.13, Blender 2.42, Amarok, Audacity, Xine); network and system administration software (Wireshark, Nessus, Iptraf, EtherApe, Cheops);
- new development packages (DrScheme, Ruby, VisualPython, GPS, GNAT, Glade)
<<lessMain features:
- addition of the Compiz desktop;
- integration of GParted into the hard disk installer;
- new boot options;
- Linux kernel 2.6.18 with extra drivers and modules;
- KDE 3.5.5;
- OpenOffice.org 2.0.4;
- a range of educational software (Celestia, OpenDX, PyMOL, Rasmol, DrGeo, Yacas); multimedia applications (GIMP 2.2.13, Blender 2.42, Amarok, Audacity, Xine); network and system administration software (Wireshark, Nessus, Iptraf, EtherApe, Cheops);
- new development packages (DrScheme, Ruby, VisualPython, GPS, GNAT, Glade)
Download (1366MB)
Added: 2007-06-16 License: GPL (GNU General Public License) Price:
860 downloads
NavynOS 2004.07
Navyn OS is a gnu/linux distribution based on Gentoo. more>>
NavynOS is a Linux distribution based on Gentoo.
The heart of Navyn OS is kernel 2.6.8.1 and I tried to put the newest versions of software on the cdrom. There is for example xorg 6.7.0, mplayer 1.0, and gimp2.0. Fluxbox is the default window manager, because it is very fast and comfortable, the memory requirements are minimal in contrast to such slow and bloated window managers like KDE or GNOME.
The system was also designed to be easy for iso customizing, so you can add programs to the cdrom image using special scripts. While the system is booting it configures all your hardware ( especially network cards and sound cards ), and all the programs have small hardware requirements.
On the cd there are complete library headers so it is great for compiling programs. I tried to include many programs connected with security and network. There are for example sniffers like dsniff, tcpdumpm and also port scanners: nmap, nessus.
<<lessThe heart of Navyn OS is kernel 2.6.8.1 and I tried to put the newest versions of software on the cdrom. There is for example xorg 6.7.0, mplayer 1.0, and gimp2.0. Fluxbox is the default window manager, because it is very fast and comfortable, the memory requirements are minimal in contrast to such slow and bloated window managers like KDE or GNOME.
The system was also designed to be easy for iso customizing, so you can add programs to the cdrom image using special scripts. While the system is booting it configures all your hardware ( especially network cards and sound cards ), and all the programs have small hardware requirements.
On the cd there are complete library headers so it is great for compiling programs. I tried to include many programs connected with security and network. There are for example sniffers like dsniff, tcpdumpm and also port scanners: nmap, nessus.
Download (MB)
Added: 2007-05-17 License: GPL (GNU General Public License) Price:
540 downloads
Knoppix STD 0.1
STD is a Linux-based Security Tool. Actually, it is a collection of hundreds if not thousands of open source security tools. more>>
STD is a Linux-based Security Tool. Actually, it is a collection of hundreds if not thousands of open source security tools. Its a Live Linux Distro, which means it runs from a bootable CD in memory without changing the native operating system of the host computer. Its sole purpose in life is to put as many security tools at your disposal with as slick an interface as it can.
STD is meant to be used by both novice and professional security personnel but is not ideal for the Linux uninitiated. STD assumes you know the basics of Linux as most of your work will be done from the command line. If you are completely new to Linux, its best you start with another live Distro like Knoppix to practice the basics.
STD tools are divided into the following categories:
- authentication
- encryption
- forensics
- firewall
- honeypot
- ids
- network utilities
- password tools
- servers
- packet sniffers
- tcp tools
- tunnels
- vulnerability assessment
- wireless tools
Enhancements:
- Eliminated all windows managers except fluxbox
- built kernel from kernel.org 2.4.21 src. added ntfs/rw, superfreeswan and openmosix patches.
- ntfs rw is very limited. You can basically only modify existing files and only if you dont change the size. Good for making basic registry changes.
- Superfreeswan adds IPSEC support for VPNs.
- OpenMosix adds clustering support with automatic discovery of other nodes.
- Added /usr/bin/tunnels category
- Eliminated /usr/bin/pen-test category and moved tools to /usr/bin/vuln-test
- Moved some tools in /usr/bin/sniff to /usr/bin/tcp-tools
- Eliminated /usr/bin/pen-test category and moved tools to /usr/bin/vuln-test
- ACID/MySQL/Snort configured to work automatically
- update nessus plugins, clamAV signatures, and snort signatures
- If you have 640MB of RAM or more you run boot: knoppix toram and free up the CD drive
- patched orinoco driver is the default. no more patch-orinoco
- Kismet updated to 3.0.1 and is pre-configured for orinoco on eth0
- all init scripts now check the knoppix home dir before copying from the CD.This means that if youre using a persistant home dir the init scripts act as restore scripts
- blockall now allows connections from localhost so you can block all external traffic but still run nessus or ntop or kismet or.....
- added many new tools and updated all existing tools
<<lessSTD is meant to be used by both novice and professional security personnel but is not ideal for the Linux uninitiated. STD assumes you know the basics of Linux as most of your work will be done from the command line. If you are completely new to Linux, its best you start with another live Distro like Knoppix to practice the basics.
STD tools are divided into the following categories:
- authentication
- encryption
- forensics
- firewall
- honeypot
- ids
- network utilities
- password tools
- servers
- packet sniffers
- tcp tools
- tunnels
- vulnerability assessment
- wireless tools
Enhancements:
- Eliminated all windows managers except fluxbox
- built kernel from kernel.org 2.4.21 src. added ntfs/rw, superfreeswan and openmosix patches.
- ntfs rw is very limited. You can basically only modify existing files and only if you dont change the size. Good for making basic registry changes.
- Superfreeswan adds IPSEC support for VPNs.
- OpenMosix adds clustering support with automatic discovery of other nodes.
- Added /usr/bin/tunnels category
- Eliminated /usr/bin/pen-test category and moved tools to /usr/bin/vuln-test
- Moved some tools in /usr/bin/sniff to /usr/bin/tcp-tools
- Eliminated /usr/bin/pen-test category and moved tools to /usr/bin/vuln-test
- ACID/MySQL/Snort configured to work automatically
- update nessus plugins, clamAV signatures, and snort signatures
- If you have 640MB of RAM or more you run boot: knoppix toram and free up the CD drive
- patched orinoco driver is the default. no more patch-orinoco
- Kismet updated to 3.0.1 and is pre-configured for orinoco on eth0
- all init scripts now check the knoppix home dir before copying from the CD.This means that if youre using a persistant home dir the init scripts act as restore scripts
- blockall now allows connections from localhost so you can block all external traffic but still run nessus or ntop or kismet or.....
- added many new tools and updated all existing tools
Download (497MB)
Added: 2005-05-13 License: GPL (GNU General Public License) Price:
1629 downloads
OS-SIM 0.9.9 RC5
Ossim stands for Open Source Security Information Management. more>>
Ossim stands for Open Source Security Information Management. OS-SIMs goal is to provide a comprehensive compilation of tools which, when working together, grant a network/security administrator with detailed view over each and every aspect of his networks/hosts/physical access devices/server/etc...
Besides getting the best out of well known open source tools, some of which are quickly described below these lines, ossim provides a strong correlation engine, detailed low, mid and high level visualization interfaces as well as reporting and incident managing tools, working on a set of defined assets such as hosts, networks, groups and services.
All this information can be limited by network or sensor in order to provide just the needed information to specific users allowing for a fine grained multi-user security environment. Also, the ability to act as an IPS (Intrusion Prevention System) based on correlated information from virtually any source result in a useful addition to any security professional.
Main features:
- Arpwatch, used for mac anomaly detection.
- P0f, used for passive OS detection and os change analisys.
- Pads, used for service anomaly detection.
- Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort, the IDS, also used for cross correlation with nessus.
- Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
- Tcptrack, used for session data information which can grant useful information for attack correlation.
- Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
- Nagios. Being fed from the host asset database it monitors host and service availability information.
- Osiris, a great HIDS.
<<lessBesides getting the best out of well known open source tools, some of which are quickly described below these lines, ossim provides a strong correlation engine, detailed low, mid and high level visualization interfaces as well as reporting and incident managing tools, working on a set of defined assets such as hosts, networks, groups and services.
All this information can be limited by network or sensor in order to provide just the needed information to specific users allowing for a fine grained multi-user security environment. Also, the ability to act as an IPS (Intrusion Prevention System) based on correlated information from virtually any source result in a useful addition to any security professional.
Main features:
- Arpwatch, used for mac anomaly detection.
- P0f, used for passive OS detection and os change analisys.
- Pads, used for service anomaly detection.
- Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort, the IDS, also used for cross correlation with nessus.
- Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
- Tcptrack, used for session data information which can grant useful information for attack correlation.
- Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
- Nagios. Being fed from the host asset database it monitors host and service availability information.
- Osiris, a great HIDS.
Download (3.8MB)
Added: 2007-08-09 License: BSD License Price:
812 downloads
Echelon Linux 0.2
Echelon Linux is a distro designed to monitor services on your network. more>>
Echelon Linux is a distro designed to monitor services on your network. Echelon Linux is based on the DamnSmallLinux project.
I started building echelonlinux last year but I stopped working on it a few month later. Today I have decided to publish a new release of echelonlinux. It is a little bit different than first one; only 3 components are available :
- Nagios Services and local ressources monitoring
- Ntop Network traffic analyser
- Nessus Remote Security Scanner
Main features:
- Apache based system
- Network monitoring with Nagios.
- Vulnerabilities scan with Nessus.
<<lessI started building echelonlinux last year but I stopped working on it a few month later. Today I have decided to publish a new release of echelonlinux. It is a little bit different than first one; only 3 components are available :
- Nagios Services and local ressources monitoring
- Ntop Network traffic analyser
- Nessus Remote Security Scanner
Main features:
- Apache based system
- Network monitoring with Nagios.
- Vulnerabilities scan with Nessus.
Download (105.6MB)
Added: 2005-12-29 License: GPL (GNU General Public License) Price:
791 downloads
Secleted [ 0 ] software to compare
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above nessus search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed