Free security suite software for linux

Luke Macken Security LiveCD provides a fully functional livecd based on Fedora for use in security auditing, forensics research, and penetration testing.
Main features:
- All of the security features and tools Fedora has to offer
- Features from the FedoraLiveCD
- Ability to install directly to hard drive
Spinning your own
# yum install mercurial livecd-tools
$ hg clone http://hg.lewk.org/security-livecd
# livecd-creator --config security-livecd/fedora-security-livecd.ks --fslabel=Fedora-7-Security-LiveCD
Making changes to the LiveCD is as simple as modifying the fedora-security-livecd.ks configuration file.

The Linux Security Auditing Tool (LSAT) is a post install security auditor for Linux/Unix.
Linux Security Auditing Tool checks many system configurations and local network settings on the system for common security/config errors and for packages that are not needed.
It (for now) works under Linux (x86: Gentoo, RedHat, Debian, Mandrake; Sparc: SunOS (2.x), Redhat sparc, Mandrake Sparc; Apple OS X).
Enhancements:
- The dependency on the popt library has been removed.
- This release adds extra passwd and group checks under Linux, a check for failed logins under Linux/Solaris, a check for kernel modules under Solaris, network interface stats, and routing checks. It fixes a problem in checknetforward giving false positives, and an issue where verbose output was not very consistent.
- The kernel module check under Linux has been modified.

Spike PHP Security Audit Tool project is a tool that performs a static analysis of PHP code for security exploits.
Usage:
To install, unzip Spike phpSecAudit package.
> unzip spike_phpSecAudit.zip
Change directory to your php repository.
> cd /path/to/code/to/audit
Execute the run.php, passing the file name or directory to audit.
> php /path/to/spike_phpSecAudit/run.php test_file.php
or
> php /path/to/spike_phpSecAudit/run.php dir_name
Enhancements:
- Modified to be PHP 4 friendly.
- A few functions have been added to the knowledge base: extract, shell_exec, pcntl_exec, and exec.
- The organization of the knowledge base file (vuln_db.xml) has been slightly improved.
- The _getAllPhpFiles function may miss a few (unverified).
- The tokenizer needs to be able to differentiate between a native function call and class method call of the same name, i.e. mail() and $class->mail().

Soma is a suite of programs that let you play and schedule audio files from the Web.
Soma suite supports extra utilities using run-time loadable modules and includes a broadcasting scheduler, a tool to control it via TCP/IP, and an utility to check configuration file syntax.
Soma project started in summer 2003 to manage the digital version of an activists radio old spools.
The first release just gave just the chance to play random some audio files in a directory using an external program (at that time mpg123). In despite of that this software was never used, i kept on thinking about soma project for some weeks, until i started directly to work with a group called Reload, which was experimenting at the time a project called "eterete" and creating a place for a web radio at Pergola Tribe (a selfmanaged house in Milan).
We used, of course, a release, which was a little bit better to manage the radio-playlist and of course we implemented the software itself. From september till december soma became a software suite, configurable through file and (remote administration...). Thats thanks to the relationships and the inputs that such a community like Reload can create.
A group of passionate activists was able to make broadcastings and broadcast schedules, to find out new problems and to give implementation advices. They also suggest me the idea that soma (originally a simple play-list manager) could become a programs suite, which has a player, a software for deferred broadcasting, a more user friendly admininstration, documentation and distribution.
Some time after came somaplayer and somaadmin. The player was still very behind compared to my implementation ideas. Somadmin was straight away on line and advertised on radio.inventati.org/somadmin/
In January 2004 we showed Soma at the first italian (web and air-waves) radio meeting in Naples.The meeting was technologically and politically profitable and it was an attempt to build up a real radio-network.
Radio.inventati.org was actually the only example od direct cooperation among even very different people: individuals, improvised groups, very old and movement radios and experiences from overseas countries.
On the web site there are occasional streamings, weekly streamings, and 24hrs music flows.
The object of the technical research was a digital environment, which could let individuals or whole communities gain access to a common schedule with resum?s, repetitions, deferred programs, live broadcastings, regular broadcastings as one national and international network.
Soma could satisfy this need and could be easly managed through the web thanks to somadmin, which could update the soma admin in real time.
The developments went on. Somaplayer is now reality. The only music player which can stream directly an mp3, an ogg vorbis, a wav, a track from an audio cd or a streaming directly on an icecast server (icecast 2 or shoutcast) or just play it on a computer using sound drivers or sound daemons.
At the moment more other people work at this project, who debug the software, write docs, work at the website and make installation packages (for debian).
Enhancements:
- This release fixes three bugs related to group permissions, the 31st of months, and an error in libsoma related to buffers and protocols.

XML Security Library is a C library based on LibXML2.
The library supports major XML security standards:
- XML Signature
- XML Encryption
- Canonical XML (was included in LibXML2)
- Exclusive Canonical XML (was included in LibXML2)
XML Security Library is released under the MIT Licence see the Copyright file in the distribution for details.

The Coldtags suite is a collection of custom JSP tags that provides 90+ custom JSP tags for common programming tasks faced by JSP developers.
Coldtags suite also includes custom tags similar to the Web controls in the .NET framework.
Enhancements:
- New components were added, so the total amount is over 305 now.
- Features were updated for the existing taglibs, docs, and examples.
- Enhancements were made for many controls.