Main > Free Download Search >

Free network security software for linux

network security

Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 3322
Trinux 0.890

Trinux 0.890


Trinux is a ramdisk-based Linux distribution that boots from a single floppy or CD-ROM. more>>
Trinux is a ramdisk-based Linux distribution that boots from a single floppy or CD-ROM, loads it packages from an HTTP/FTP server, a FAT/NTFS/ISO filesystem, or additional floppies.

Trinux contains the latest versions of popular Open Source network security tools for port scanning, packet sniffing, vulnerability scanning, sniffer detection, packet construction, active/passive OS fingerprinting, network monitoring, session-hijacking, backup/recovery, computer forensics, intrusion detection, and more.

Trinux also provides support for Perl, PHP, and Python scripting languages. Remote Trinux boxes can be managed securely with OpenSSH.

Trinux gives you the power of Linux security tools without requiring a full-blown Linux install or the need to download, compile, install, and update a complete suite of security tools that are typically not found in mainstream distributions.

Trinux will boot on any i486 or better with at least 12-16 megabytes of RAM, depending on how many packages are loaded. Hardware support for many common Ethernet cards is provided in the default kerneli and additional NICs are supported via Linux kernel modules.

Trinux 0.7x/0.8x is was developed using Slackware 7.1 and supports the latest 2.2.x kernels and glibc 2.1.x. Trinux 0.8x supports Linux kernel 2.4.x. Trinux was first released in April 1998. Versions up through 0.51 were based on Debian 1.31 binaries linked against libc5. Version 0.6x was built using RedHat Linux 5.2. Trinux utilizes Busybox to replace many common UNIX utilities.

Trinux is released under the terms of the GNU Public License.
<<less
Download (19.8MB)
Added: 2005-05-11 License: GPL (GNU General Public License) Price:
1639 downloads
Plan-B Linux 1.0

Plan-B Linux 1.0


Plan-B is a bootable Linux environment without the need for a hard drive. more>>
Plan-B is a bootable Linux environment without the need for a hard drive, it runs entirely in ram or from the cd, based on a basic, stripped installation of Red Hat Linux and the fundamental workings of the SuperRescue CD. A list of tools and utilities are also included for projects such as:

* Forensics/Data Recovery
* System/Network Analysis and Security Scanning
* Temporary Network Device/Server
* IDS / NIDS System
* Network Status Report Creation

My reason for its creation came about due to finding other similar projects (SuperRescue CD, Biatchux (F.I.R.E.), Trinux, Knoppix) to be geared toward only a single area of the broad spectrum I was looking for. The first of which (by H. Peter Anvin, the author of Syslinux, Isolinux, and zisofs) was the only one close to the concept I had in mind which is why I chose it as the foundation for this cd. After not finding what I was really looking for, the "All-in-One", I decided the only way to get it was to build one myself.
<<less
Download (546MB)
Added: 2005-05-19 License: GPL (GNU General Public License) Price:
1618 downloads
Cutter 1.03

Cutter 1.03


Cutter is an TCP/IP Connection cutting on Linux Firewalls and Routers. more>>
Cutter is an TCP/IP Connection cutting on Linux Firewalls and Routers.

Cutter is an open source program that uses the FIN-ACK-RST packet technique described above to abort TCP/IP connections routed over the firewall or router on which it is run. It can be called using one of the following four syntaxes.

cutter ip-address

Example: "cutter 10.10.0.45"

Cuts all connections passing through the firewall between any ports on the specified ip-address (either a "private" or "public" address) and any other hosts. This can be used to close down all incoming connections to a particular server, all outgoing connections from a particular client or all outgoing connections to a server.

cutter ip-address port

Example: "cutter 200.1.2.3 80"

Cuts all connections to or from the specified ip-address/port pair. This allows the user to be a little more specific than the previous example and allows targetting of specific services on specific hosts.

cutter ip-address-1 port-1 ip-address-2

Example "cutter 200.1.2.3 22 10.10.0.45"

Cuts all connections between ip-address-2 and ip-address-1/port-1. This allows the user to cut connections between a specified "client" and a particular service on a specified host. Our example closes host 10.10.0.45s SSH connection to server 200.1.2.3.

cutter ip-address-1 port-1 ip-address-2 port-2

Example: "cutter 200.1.2.3 22 10.10.0.45 32451"

Cuts the specific connection between the two ip/port number pairs given.

IMPORTANT WARNING

Cutter has been designed for use as a administrators tool for Linux firewalls. Its use (as is, or modified) for any other purpose is not sanctioned by the author. So - do not use this tool as a parachute, or to dry your cat, chill meat, answer your phone, drive you car, teach your kids to read or attack other peoples computer systems or networks.

This software has been designed for "legal" and "appropriate" use by network security administrators and the like. It has been written as part of a larger Linux firewall project, targetting at controlling traffic from peer-to-peer software such as Kazaa, iMesh and others into and out of a private network. It is not designed as a tool for malicious use and the author in no way sanctions such use.

Users of the software should be aware that its actions are easily detectable using a number of readily available network monitoring tools, and it makes no attempt to disguise its actions. Malicious use of "cutter" could result in a jail sentance in a number of countries around the world.
<<less
Download (0.013MB)
Added: 2005-12-14 License: GPL (GNU General Public License) Price:
1557 downloads
Devolution Security 3.0.6

Devolution Security 3.0.6


Devolution Security is a video surveillance system for Linux based systems. more>>
Devolution Security is a video surveillance system for Linux based systems. It supports up to 16 cameras and features unicast and multicast broadcasting, a Web interface, an X11 interface, themes, motion detection, record on motion, eight different camera layouts, camera cycling, fullscreen mode, and more. Devolution Security uses its own toolkit (dtk).
Main features:
- Up to 16 cameras
- Motion detection
- Record on motion detection
- Record up to 25 fps mpeg4 video
- Multicast live streams to local network
- Unicast to internet IP address
- Very configurable
- Themeable X11 interface
- Web based interface
<<less
Download (10MB)
Added: 2005-10-26 License: GPL (GNU General Public License) Price:
1486 downloads
GNOME Network 1.4.1

GNOME Network 1.4.1


GNOME Network is a set of client network-oriented tools. more>>
GNOME Network is a set of client network-oriented tools, which currently contains a network information tool, a remote shell and desktop clients and a personal web server and a desktop sharing tool.
GNOME Network is Free Software distributed under the terms of the GNU GPL.
Enhancements:
Updated translations:
- gl (Ignacio)
- it (Alessio)
<<less
Download (0.46MB)
Added: 2005-10-04 License: GPL (GNU General Public License) Price:
1485 downloads
Basic Analysis and Security Engine 1.2

Basic Analysis and Security Engine 1.2


BASE is the Basic Analysis and Security Engine. more>>
BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project.
This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.
BASE is a web interface to perform analysis of intrusions that snort has detected on your network. It uses a user authentication and role-base system, so that you as the security admin can decide what and how much information each user can see. It also has a simple to use, web-based setup program for people not comfortable with editing files directly.
BASE is supported by a group of volunteers. They are available to answer any questions you may have or help you out in setting up your system. They are also skilled in intrusion detection systems and make use of that knowledge in the development of BASE.
Enhancements:
- This release fixes a number of bugs with PHP 5.
- It also adds a number of new features.
<<less
Download (0.33MB)
Added: 2005-10-10 License: GPL (GNU General Public License) Price:
1482 downloads
Solsoft NetfilterOne 1.0

Solsoft NetfilterOne 1.0


Solsoft NetfilterOne is a graphical interface that will automate the design, deployment and documentation of security rules. more>>
Solsoft NetfilterOne is a graphical interface that will automate the design, deployment and documentation of security rules and policies as they pertain to a networked netfilter firewall.
As the name suggests, NetfilterOne will support one installation of the netfilter firewall.
With Solsoft NetfilterOne, IT administrators will realize the advantages of a centralized interface from which to configure, deploy, enforce and audit rules and policies consistently among netfilter firewall(s).
NetfilterOne is the ideal tool to remotely maintain security policies on Linux servers, webservers, DNS, Mail servers which often resides on DMZ.
Main features:
No manual coding
- Centralizing and automating design and generation of accurate security configurations for all devices using the same management software is very important for small, resource-constrained IT departments.
Higher operational efficiency
- Solsoft NetfilterOne enables you to deploy accurate security rules to ALL security devices on your network, instead of manually configuring devices one at a time. Changes to complex networks can be made in minutes - reducing the costs required to manage multi-vendor security environments.
Faster incident response
- Solsoft NetfilterOne makes your organization more agile and improves your ability to react to virus, worm, and network attacks. More importantly, Solsofts policy-based system hardens your network against future attacks by making sure security rules are consistently and correctly configured end-to-end - something that is very hard to do through other means.
Broad interoperability
- Solsoft NetfilterOne provides the glue that connects the sources of policy - business requirements, security audits, vulnerability scans, and event correlation alerts - with the security device infrastructure that must be configured to enforce policy. Only a truly open management solution can provide this level of interoperability and agility.
Greater vendor and device independence
- Solsoft NetfilterOne supports the ability to import existing device configurations and quickly migrate to different security platforms. With Solsoft NetfilterOne, you enjoy the flexibility to pick the best security device based on price vs. performance, regardless of team expertise.
Enhancements:
- This release supports Cisco IOS, PIX, ASA, FWSM, Netscreen, Nortel, Linux, and ISS proventia.
<<less
Download (114.6MB)
Added: 2005-10-26 License: Freeware Price:
1459 downloads
Operator 3.3.20

Operator 3.3.20


Operator is a complete Linux (Debian) distribution that runs from a single bootable CD and runs entirely in RAM. more>>
Operator is a complete Linux (Debian) distribution that runs from a single bootable CD and runs entirely in RAM.
The Operator contains an extensive set of Open Source network security tools that can be used for monitoring and discovering networks.
This virtually can turn any PC into a network security pen-testing device without having to install any software. Operator also contains a set of computer forensic and data recovery tools that can be used to assist you in data retrieval on the local system.
Starting with the 3.3 version of Operator, we have started completely from scratch by installing a basic Debian installation then adding the KNOPPIX functionality afterwards. This allowed us to have more control and understanding of what is on the CD.
Main features:
- Debian based Linux Installation
- Linux-Kernel 2.4.31
- KDE V3.3.2-1
- wine Windows Emulator (Binary Emulator)
- Konqueror and Mozilla Firebird Web Browsers
- Koffice which includes korganizer, kword, kspread and more
- X Multimedia System (xmms) an MPEG-video, MP3
- Internet connection software kppp,pppoeconf (DSL)
- utilities for data recovery and system repairs, even for other operating systems
- network and security analysis tools for network administrators
- many programming languages, development tools
- in total more than 900 installed software packages with over 2000 executable user programs and utilities
- 100+ Unix/Windows Exploits and Tools ready to run
Enhancements:
- Modified wireless_select to use /proc/net/dev instead of /proc/net/wireless. Some cards were not showing up after they were reinserted like orinoco.
- Added package aim_1.5.286 AOL Instant Messenger
- Stripped down locales to use en_, de_, es_ only
- upgraded hydra-4.6 to hydra-4.7
- Added BusLogic driver to the kernel so that vmware would not panic when booting after an HD install.
- Updated Metasploit framework from 2.3 to 2.4
- reinstalled libnet1-dev
- fixed captive-ntfs
- Added new Exploits:
- HOD-ms05039-pnp-expl - (MS05-039) Microsoft Windows Plug-and-Play Service Remote Overflow
- HOD-kerio-firewall-DoS-expl - Kerio Personal Firewall Multiple IP Options Denial of Service
- HOD-ms04031-netdde-expl - Microsoft Windows NetDDE Remote Buffer Overflow Exploit
- HOD-ms04032-emf-expl - Microsoft Windows Metafile (.emf) Heap Overflow Exploit
- HOD-ms05002-ani-expl - Internet Explorer .ANI files handling Universal Exploit
- HOD-ms05017-msmq-expl - Message Queuing Buffer Overflow Universal Exploit
- DSR-cpanel - POC for Cpanel 5 and below
- cpanel-9x_RCE - POC for Cpanel 9 and below
- DSR-nethack - local exploit for Nethack 3.4.0
- phpLDAPadmin - phpLDAPadmin 0.9.6 - 0.9.7 Remote command Execution
- phpbb.php - phpBB 2.0.10 Remote command Execution
- HP_OV_NNM_RCE - HP OpenView Network Node Manager 6.2, 6.4, 7.01, 7.50 Remote Command Execution
- Added new Tools:
- zebra 0.94 - Tool that manages TCP/IP based routing protocols
- voipong 1.2 dev - VoIP call detector and voice dumper VoIPong is a utility which detects all Voice Over IP calls on a pipeline, and for those which are G711 encoded, dumps actual conversation to seperate wave files. It supports SIP, H323, Ciscos Skinny Client Protocol, RTP and RTCP.
- Upgraded yersinia v0.5.3 to v0.5.6 - Framework for performing layer 2 attacks
- ike-scan v1.2 - Discover and fingerprint IKE hosts (IPsec VPN Servers)
<<less
Download (585MB)
Added: 2005-12-24 License: GPL (GNU General Public License) Price:
1439 downloads
Network Tracker and Management 0.94

Network Tracker and Management 0.94


Network Tracker and Management is a Web-based network management application. more>>
Network Tracker and Management is a Web-based network management application.
Network Tracker and Management can store information about all of your network devices, and allows you to track all changes and updates made to the device.
Having this information readily available will enhance your ability to troubleshoot network problems.
Enhancements:
- The documentation was updated to include more details on the setup of the database for the network tracking system.
<<less
Download (0.012MB)
Added: 2005-11-18 License: GPL (GNU General Public License) Price:
1437 downloads
Linux Netwosix 2.0 RC1

Linux Netwosix 2.0 RC1


Linux Netwosix aims to be a small, powerful and highly configurable Linux distribution for servers and network security jobs. more>>
Linux Netwosix is a powerful and optimized Linux distribution for servers and Network Security related jobs.
Linux Netwosix can be also used for special operations as penetration test with its big collection of softwares and sources security oriented. Its a ligh distribution created for the requirements of every SysAdmin and its very portable and highly configurable. Our philosophy is to give a big liberty of configuration to the SysAdmin.
Only in this way he/she can configure a powerful and stable server machine. Linux Netwosix have also a powerful ports system (Nepote) similar to the xBSD systems but more flexible and usable.
Whats New in 1.3 Release:
- New improved SETUP method
- All packages upgraded to latest and fixed versions.
- Very very light iso image fast to download and install (~240MB).
- It runs Linux Kernel 2.6.14.4
- System binaries linked with the GNU C Library, version 2.3.5.
- Iptables 1.3.1
- GCC 3.4.3 as the default C compiler.
- It runs "nepote" as default Porting Tool (updated with the new packages).
- Perl 5.8.6 as perl compiler.
Whats New in 2.0 RC1 Release:
- New improved SETUP method (screenshots here: http://www.netwosix.org/screenshots.html)
- All packages upgraded to latest and fixed versions.
- Very very light iso image fast to download and install (~248MB).
- It runs Linux Kernel 2.6.14.5
- System binaries linked with the GNU C Library, version 2.3.5.
- Iptables 1.3.1
- GCC 3.4.3 as the default C compiler.
- It runs "nepote" as default Porting Tool (updated with the new packages).
- Perl 5.8.6 as perl compiler.
<<less
Download (241MB)
Added: 2005-12-30 License: GPL (GNU General Public License) Price:
1395 downloads
Deep Network Analyser 1.5 GA

Deep Network Analyser 1.5 GA


Deep Network Analyser is an open, flexible, and extensible deep network analyzer server. more>>
DNA (Deep Network Analyser) is an open, flexible, and extensible deep network analyzer server and software architecture for passively gathering and analyzing network packets, network sessions, and applications protocols.
Deep Network Analyser project is designed to be used for Internet security, network management, intrustion detection, protocol and network analysis, information gathering, and network monitoring applications.
Main features:
- Extensible Java based network sensor (processing layers 2-7)
Configurable processing and output:
- Packet flows like Ethereal
- IP Flows like CISCO netflow
- Stateful Sessions (client/server flow pairs)
- Application protocol element output
- Configurable and extensible application protocol element parsing.
- Application protocol parsing toolkit APIs allows for new protocol parser to be easily developed and extended
- Targeting based full session capture facility, like a realtime targeted TCPDump.
- Flexible targeting from IPAddr, Port tuple to Application sensitive targeting.
- Configurable and extensible output forwarding (file, DB, Streams, JMS, RMI, etc.)
- Extensible realtime collection portable to many OS/Packet processing environments
Easily adaptable to packet processing environments:
- Specialized linux drivers mechanismon
- Network Appliances
- Network Switches / Routers
- Highly mutithreaded for increased performance over multi processor environments
Enhancements:
- Adoption of OpenAdaptor(tm) as the Output Adapter mechanism.
- Support for local-only administration.
- A new targeted packet capture parser, new run scripts, and a new install mechanism.
- Many bugfixes.
<<less
Download (12.3MB)
Added: 2006-01-09 License: GPL (GNU General Public License) Price:
1391 downloads
Deep Network Analyzer 1.5 GA

Deep Network Analyzer 1.5 GA


Deep Network Analyzer is an flexible, open and extensible deep network analyzer. more>>
Deep Network Analyzer is an flexible, open and extensible deep network analyzer (software server) and architecture for gathering and analyzing network packets, network sessions and applications protocols, passively off enterprise class networks.
DNA is designed to be used for Internet Security, Intrusion detection, Network Management, Protocol and Network Analysis, Information Gathering, Network Monitoring applications.
DNA runs as a distributed application under a Java Virtual Machine (JVM) environment and is portable across many OS environments, including: Network appliances, Switches and Routers.
Main features:
- Deep packet and session processing (layers 2-7)
- Configurable processing and output:
- Layer 4 Packet flows
- Layer 4-7 Stateful Sessions flows (client/server flow pairs)
- Layer 7 Packet and Session Application protocol Parsing (HTTP, DNS, P2P, VoIP, etc)
- Application protocol parsing toolkit enables easy devlopment of new new protocol parsers.
- Support for both symmetric and asymmetric routing links.
- Targeting based full session capture facility, like a real time targeted TCPDump.
- Flexible targeting from IP address, port tuple to application sensitive targeting.
- Configurable and extensible output adaptor utilizing OpenAdaptor able to send output to a varity of resources including: Flat file, Oracle, MySQL, MSSQL, Sybase, Sockets, JMS, RMI, WebService.
- Extensible real time collection engine portable across many OS/Packet processing environment :
- Specialized linux drivers mechanisms
- Network Appliances
- Network Switches / Routers
- Highly paralleliszed for increased performance over multi processor environment
- System metadata dictionary externalizes processing type definition
Enhancements:
- Adoption of OpenAdaptor(tm) as the Output Adapter mechanism.
- Support for local-only administration.
- A new targeted packet capture parser, new run scripts, and a new install mechanism.
- Many bugfixes.
<<less
Download (12.1MB)
Added: 2006-01-10 License: GPL (GNU General Public License) Price:
1390 downloads
Email Security through Procmail 1.151

Email Security through Procmail 1.151


Email Security through Procmail (the Procmail Sanitizer) provides methods to sanitize email, removing obvious exploit attempts. more>>
Email Security through Procmail (the Procmail Sanitizer) provides methods to sanitize email, removing obvious exploit attempts and disabling the channels through which exploits are delivered.
Email Security through Procmail also provides facilities for detecting and blocking Trojan Horse exploits and worms.
Enhancements:
- This release added default poisoning of the application/x-msdownload MIME type in response to a new worm.
- Full MIME-type poisoning support will be available shortly.
- This release was accelerated for security reasons.
<<less
Download (0.095MB)
Added: 2006-01-21 License: GPL (GNU General Public License) Price:
1373 downloads
Firewalk 5.0

Firewalk 5.0


Firewalk is an active reconnaissance network security tool. more>>
Firewalk is an active reconnaissance network security tool that attempts to determine what layer 4 protocols a given IP forwarding device will pass. Firewalk project works by sending out UDP or TCP packets with a TTL one greater than the targeted gateway.

If the gateway allows the traffic, it will forward the packets to the next hop where they will expire and elicit an ICMP_TIME_EXCEEDED message. If the gateway hostdoes not allow the traffic, it will likely drop the packets on the floor and we will see no response.

To get the correct IP TTL that will result in expired packets one beyond the gateway we need to ramp up hop-counts. We do this in the same manner that traceroute works. Once we have the gateway hopcount (at that point the scan is said to be `bound`) we can begin our scan.

It is significant to note the fact that the ultimate destination host does not have to be reached. It just needs to be somewhere downstream, on the other side of the gateway, from the scanning host.

<<less
Download (0.079MB)
Added: 2006-03-03 License: BSD License Price:
1359 downloads
NeWBIE LiveCD 0.2

NeWBIE LiveCD 0.2


NeWBIE LiveCD is a NetBSD based distro geared towards the desktop user. more>>
NeWBIE LiveCD is a NetBSD based distro geared towards the desktop user.
It includes software for Web browsing, chatting, multimedia, and document editing.
This acronym NeWBIE is pronounced just like the word "newbie" and stands for (Ne)tBSD (W)are (B)urned (I)n (E)conomy.
Newbie is a NetBSD (v. 3.0) live CD similar in spirit to the well-known FreeSBIE live CD. Newbie currently caters to the desktop-user (i.e. with applications for web browsing, chat, multimedia, document editing, etc) but will also serve as a core for creating a NetBSD version of Arudius (see below) - a network security auditing tool.
Why based on NetBSD? Because contrary to the popular opinion, NetBSD is not some obscure *BSD flavor that is only good for powering your toaster, but is a powerful, flexible and highly portable operating system.
In many aspects it is better than its more famous cousins. Did you know that NetBSD recently broke the speed record for network data transfer? And what about speed and scalability?
Enhancements:
- This release cleans up the boot process and adds a GUI tool for easy setup of the modem/DSL connection.
- More productivity tools are included (e.g. a file manager, spreadsheet, Samba, wireless AP detection, sniffer, network analysis, etc.).
<<less
Download (244MB)
Added: 2006-02-07 License: BSD License Price:
1358 downloads
Secleted [ 0 ] software to compare
  • Page: 1 of 5
  • 1
  • 2
  • 3
  • 4
  • 5