victim
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 16
Neitris 1.0 Beta
Neitris is a competitive, network multiplayer version of Tetris. more>>
Neitris is a competitive, network multiplayer version of Tetris. The game features lots of bonuses and powerups used by players against their "victims".
Only the best, fastest, and smartest player will stay alive in the end.
Game Instructions
So, we are ready to go on with the game. At this point, a new window with the title Neitris should have appeared, which reads "Press Start to Start Game". Well....where is this damn Start button, anyway?
The Keys...
The keys used by the game are the following:
- Start: the Start Key ... starts the game and is actually the key "1" on your keyboard (NOT the number 1 key in the numeric keypad, the other one...)
- Left-Right: everybody knows what these two little ones do. Its the left and right arrows in the Numeric Keypad...
- Down: Its the down arrow in the numeric keypad and can be used to make a piece go down faster
- Rotate left: Rotates the piece to the left...the 5 key in the numeric keypad
- Rotate right: Rotates the piece to the right...the return key
- Drop: The drop key is used to instantly put the falling piece down. Its the 0 (Insert key, usually) in the numeric keypad
- Victim: Changes the victim (well talk about it in a sec). The 5 key (not the one in the numeric keypad, the ...other one)
- Use Antidote Key: Uses the antidote to get rid of applied powerups/bonuses(we said, WE ARE GOING TO TALK ABOUT IT IN A WHILE). The 2 key (again, not the one in the numeric keypad, the ...other one)
- The Reset-Wins key: Reset the wins counter. The 0 key (NOT THE ONE IN THE NUMERIC KEYPAD, I THOUGHT IVE MADE THIS POINT CLEAR SO FAR!!!!!)
WAIT! Before starting to calling me names, I should tell you that you can change the keys if you dont like them (and I bet you dont if youre using a notebook - no numeric keypad there, eh?). To do that, you should use your favorite text editor and edit the file neitris_cfg.py. The naming of the keys in the form K_ is due to the pygame library which simply calls them like this. For normal letters, use K_a, k_b etc (note the lower case in the letter). For the normal arrow keys use K_LEFT, K_RIGHT, K_UP, K_DOWN. For keypad keys, use K_KP0 to K_KP9 and K_KP_ENTER for keypad enter. Function keys are K_F1 etc. Space bar is K_SPACE. Anyway, to see all the available keys do the following:
- type python at a command prompt to invoke the Python Interpreter;
- Then, from inside the interpreter, type import(pygame) and press enter. Then type dir(pygame) and press enter. All the strings beginning with K_ are the ones you can use, thank you very much.
Enhancements:
- This the initial public release of the game.
- Earlier versions (actually svn revisions) can be found at the svn repository at the projects SourceForge page.
<<lessOnly the best, fastest, and smartest player will stay alive in the end.
Game Instructions
So, we are ready to go on with the game. At this point, a new window with the title Neitris should have appeared, which reads "Press Start to Start Game". Well....where is this damn Start button, anyway?
The Keys...
The keys used by the game are the following:
- Start: the Start Key ... starts the game and is actually the key "1" on your keyboard (NOT the number 1 key in the numeric keypad, the other one...)
- Left-Right: everybody knows what these two little ones do. Its the left and right arrows in the Numeric Keypad...
- Down: Its the down arrow in the numeric keypad and can be used to make a piece go down faster
- Rotate left: Rotates the piece to the left...the 5 key in the numeric keypad
- Rotate right: Rotates the piece to the right...the return key
- Drop: The drop key is used to instantly put the falling piece down. Its the 0 (Insert key, usually) in the numeric keypad
- Victim: Changes the victim (well talk about it in a sec). The 5 key (not the one in the numeric keypad, the ...other one)
- Use Antidote Key: Uses the antidote to get rid of applied powerups/bonuses(we said, WE ARE GOING TO TALK ABOUT IT IN A WHILE). The 2 key (again, not the one in the numeric keypad, the ...other one)
- The Reset-Wins key: Reset the wins counter. The 0 key (NOT THE ONE IN THE NUMERIC KEYPAD, I THOUGHT IVE MADE THIS POINT CLEAR SO FAR!!!!!)
WAIT! Before starting to calling me names, I should tell you that you can change the keys if you dont like them (and I bet you dont if youre using a notebook - no numeric keypad there, eh?). To do that, you should use your favorite text editor and edit the file neitris_cfg.py. The naming of the keys in the form K_ is due to the pygame library which simply calls them like this. For normal letters, use K_a, k_b etc (note the lower case in the letter). For the normal arrow keys use K_LEFT, K_RIGHT, K_UP, K_DOWN. For keypad keys, use K_KP0 to K_KP9 and K_KP_ENTER for keypad enter. Function keys are K_F1 etc. Space bar is K_SPACE. Anyway, to see all the available keys do the following:
- type python at a command prompt to invoke the Python Interpreter;
- Then, from inside the interpreter, type import(pygame) and press enter. Then type dir(pygame) and press enter. All the strings beginning with K_ are the ones you can use, thank you very much.
Enhancements:
- This the initial public release of the game.
- Earlier versions (actually svn revisions) can be found at the svn repository at the projects SourceForge page.
Download (0.017MB)
Added: 2006-11-23 License: GPL (GNU General Public License) Price:
1067 downloads
Fat Fish 1.0
Fat Fish is an attractive and funny arcade game. more>>
Fat Fish is an attractive and funny arcade game.
Are you prepared to meet the most hungry fish of the ocean?... Fat Fish is a game where you take the control of a fish who has a insatiable stomach and must to eat his victims who falls infinitely into the ocean.
The game has 4 different objectives, or rather, 4 short-games where you will entertain trying to complete them. During the game and according to how much you eat, you will start to find out that the fish will lose his agility little by little... here is the part where the toilet that is in the right-bottom of the ocean takes part of the game letting you to "shit" to recover your agility and to continue with your food.
Fat Fish has a simple and funny graphic design, it also has funny music and powerful sound effects that give the game a extra points of fun and adiction.
You will be able to setup your controls, the video mode, sound, music, graphic effects and all the necesary to setup de game according to the needs of your computer or according to your preferences.
<<lessAre you prepared to meet the most hungry fish of the ocean?... Fat Fish is a game where you take the control of a fish who has a insatiable stomach and must to eat his victims who falls infinitely into the ocean.
The game has 4 different objectives, or rather, 4 short-games where you will entertain trying to complete them. During the game and according to how much you eat, you will start to find out that the fish will lose his agility little by little... here is the part where the toilet that is in the right-bottom of the ocean takes part of the game letting you to "shit" to recover your agility and to continue with your food.
Fat Fish has a simple and funny graphic design, it also has funny music and powerful sound effects that give the game a extra points of fun and adiction.
You will be able to setup your controls, the video mode, sound, music, graphic effects and all the necesary to setup de game according to the needs of your computer or according to your preferences.
Download (2.0MB)
Added: 2007-04-20 License: GPL (GNU General Public License) Price:
1053 downloads
Class::NiceApi 0.01.02
Class::NiceApi is a Perl module that translates your methodNames to my method_names. more>>
Class::NiceApi is a Perl module that translates your methodNames to my method_names.
SYNOPSIS
use Class::NiceApi;
my $acl = Class::NiceApi->new( victim => Decision::ACL->new(), style => custom, table => { run_acl => RunACL } );
Perl method names should be written lowercased and multiple words should be connected via _. This is_good_coding_convention. Unfortunately this recommendation is ignored by many CPAN authors. Class::NiceApi helps pernickety programmers as me. It translates method names from isThisPerl to is_this_perl back and forth. Well, it so flexible it can translate allmost anything to anything. So it would translate perl_method_name to java programmers favorite perlMethodName.
METHODS
new()
Takes following parameters (which are also available as methods).
victim
An instance of a class where the method names subjected to translation.
style
A style is just a shortcut for the translation table. Following styles are currently supported: custom, with_underscore and to_lc.
[Note] They are implemented via a translating callback in $Class::NiceApi::callbacks. It filters the source method name and returns the destination name.
table
Here you can list explicit translations of method names, which are exceptions to the custom style filter.
<<lessSYNOPSIS
use Class::NiceApi;
my $acl = Class::NiceApi->new( victim => Decision::ACL->new(), style => custom, table => { run_acl => RunACL } );
Perl method names should be written lowercased and multiple words should be connected via _. This is_good_coding_convention. Unfortunately this recommendation is ignored by many CPAN authors. Class::NiceApi helps pernickety programmers as me. It translates method names from isThisPerl to is_this_perl back and forth. Well, it so flexible it can translate allmost anything to anything. So it would translate perl_method_name to java programmers favorite perlMethodName.
METHODS
new()
Takes following parameters (which are also available as methods).
victim
An instance of a class where the method names subjected to translation.
style
A style is just a shortcut for the translation table. Following styles are currently supported: custom, with_underscore and to_lc.
[Note] They are implemented via a translating callback in $Class::NiceApi::callbacks. It filters the source method name and returns the destination name.
table
Here you can list explicit translations of method names, which are exceptions to the custom style filter.
Download (0.003MB)
Added: 2007-06-20 License: Perl Artistic License Price:
856 downloads
ip-masq-log 1.0.2
This patch can be used on a masquerading firewall (NAT) to keep a log of all the outgoing masqueraded TCP connections. more>>
This patch can be used on a masquerading firewall (NAT) to keep a log of all the outgoing masqueraded TCP connections.
Its even possible to log the name of the user who has opened the connection. This can be a useful security tool for many small networks that are hidden by a masquerading box if users cannot be totally trusted. It can be used with linux 2.2.17, 2.2.19, 2.2.20 and maybe other (future) 2.2.x versions.
With this information you can know, in the above scenario, that the connection masquerader.yourdomain.com:666 [-3-] ==> crackme.victim.com:31337 [-2-] was started by attacker.yourdomain.com [-1-] from port 1234.
Now please note that this is NOT enough: if attacker.yourdomain.com is a multiuser machine at that time there could be 100 users logged in. Moreover a malicious user could attack crackme.victim.com from attacker.yourdomain.com even without being logged in (with either cron or with a background job or... etc.).
Since we dont want the users being able to hide themselves in this way, the masquerader makes a IDENT query to the client and, if IDENT is available, adds the response to the log together with [-1-], [-2-] and [-3-].
Its therefore recommended (although its optional) that you enable the IDENT service on all hosts on the internal network. Please note that if you restrict the IDENT service (e.g. with TCP wrappers) to the masquerader it wont work (exercise: can you understand why?). If your network configuration on the masquerader is OK, remote hosts wont be able to do IDENT queries (since they cant pass through the masquerader). Therefore allowing "everyone" to do IDENT queries on the clients should be safe enough. If you wish to allow remote hosts to do IDENT queries you can install a special IDENT server on the masquerade router, like pnidentd (for example).
Enhancements:
- Update for linux 2.2.19
<<lessIts even possible to log the name of the user who has opened the connection. This can be a useful security tool for many small networks that are hidden by a masquerading box if users cannot be totally trusted. It can be used with linux 2.2.17, 2.2.19, 2.2.20 and maybe other (future) 2.2.x versions.
With this information you can know, in the above scenario, that the connection masquerader.yourdomain.com:666 [-3-] ==> crackme.victim.com:31337 [-2-] was started by attacker.yourdomain.com [-1-] from port 1234.
Now please note that this is NOT enough: if attacker.yourdomain.com is a multiuser machine at that time there could be 100 users logged in. Moreover a malicious user could attack crackme.victim.com from attacker.yourdomain.com even without being logged in (with either cron or with a background job or... etc.).
Since we dont want the users being able to hide themselves in this way, the masquerader makes a IDENT query to the client and, if IDENT is available, adds the response to the log together with [-1-], [-2-] and [-3-].
Its therefore recommended (although its optional) that you enable the IDENT service on all hosts on the internal network. Please note that if you restrict the IDENT service (e.g. with TCP wrappers) to the masquerader it wont work (exercise: can you understand why?). If your network configuration on the masquerader is OK, remote hosts wont be able to do IDENT queries (since they cant pass through the masquerader). Therefore allowing "everyone" to do IDENT queries on the clients should be safe enough. If you wish to allow remote hosts to do IDENT queries you can install a special IDENT server on the masquerade router, like pnidentd (for example).
Enhancements:
- Update for linux 2.2.19
Download (0.010MB)
Added: 2006-07-14 License: GPL (GNU General Public License) Price:
1198 downloads
DirIndexFaker 1.1
DirIndexFaker is a PHP script designed to produce fake Apache directory listings. more>>
DirIndexFaker script is writen in PHP and its designed to produce fake Apache directory listings for the purpose of slowing down and overloading with false positives the Web spiders used by the RIAA, MPAA, etc.
People like the riaa, mpaa, and others are on a copyright enforcing rampage, destroying innocent victims along the way. They are using automated tools (web spiders) to find people hosting illegal content to sue. Sometimes the spiders catch innocent people in their web of evil.
Since our politicians think the RIAAa well-being is more important than ours, we must find a way to make the RIAA/MPAAs spiders too expensive to operate. Therefore our goals should be to:
- Slow the spider down, or get it stuck in a loop
- Provide soo many false positives, that sorting the actual infringers from the innocent is too expensive to allow the copywrong police to continue
These things are what a honeypot, or tarpit is designed to do. There are several available RIAA/MPAA spider trapping scripts currently available, but they all have unacceptable limitations (either requirements are too high, or they take an unacceptable toll on your server).
What was needed was a script which could generate fake apache index pages, but with links to large files with copyrighted sounding names. The server operator should not have to have root, nor should it waste excessive disk space for the server operator, IE - the files should be generated by the script, and not actually stored on the servers disk. This is what DirIndexFaker does!
The best existing script I could find which came close to meeting these criteria was the DMCA Bot Killer , but it had several problems:
- It requires the files to be generated beforehand with a perl script, the code is in the source, but commented out and a little wonky.
- It does not look like an apache index page, it looks suspicious, the **AAs spiders could be easily modified to detect this.
- It requires a list of filenames to use when generating our warez index. This list is loaded from a server at every invocation. This is innefficient, and error-prone.
So DirIndexFaker is a fixed version of the DMCA Bot Killer.
Usage:
Simply extract the contents of the .zip file to a subfolder under your PHP enabled webservers document root, then place a link to that subfolder somewhere on your site where bots can see it, and people cannot. One way to hide the link from humans is with CSS.
Note: You may be tempted to keep the search engines away with your robots.txt file, but is is well known that the RIAA is using the search engines to find infringing content, so this is not a good idea.
Enhancements:
- This release adds the ability to slow down RIAA/MPAA bots with a usleep call.
- This is enabled by default, but can be disabled by commenting out a line at the top of index.php.
- The bottom row has been fixed to make server info match the actual server version running on your host.
- The random seed has been changed so that filenames/sizes will only change once a day.
- This makes it harder to detect as a fake.
<<lessPeople like the riaa, mpaa, and others are on a copyright enforcing rampage, destroying innocent victims along the way. They are using automated tools (web spiders) to find people hosting illegal content to sue. Sometimes the spiders catch innocent people in their web of evil.
Since our politicians think the RIAAa well-being is more important than ours, we must find a way to make the RIAA/MPAAs spiders too expensive to operate. Therefore our goals should be to:
- Slow the spider down, or get it stuck in a loop
- Provide soo many false positives, that sorting the actual infringers from the innocent is too expensive to allow the copywrong police to continue
These things are what a honeypot, or tarpit is designed to do. There are several available RIAA/MPAA spider trapping scripts currently available, but they all have unacceptable limitations (either requirements are too high, or they take an unacceptable toll on your server).
What was needed was a script which could generate fake apache index pages, but with links to large files with copyrighted sounding names. The server operator should not have to have root, nor should it waste excessive disk space for the server operator, IE - the files should be generated by the script, and not actually stored on the servers disk. This is what DirIndexFaker does!
The best existing script I could find which came close to meeting these criteria was the DMCA Bot Killer , but it had several problems:
- It requires the files to be generated beforehand with a perl script, the code is in the source, but commented out and a little wonky.
- It does not look like an apache index page, it looks suspicious, the **AAs spiders could be easily modified to detect this.
- It requires a list of filenames to use when generating our warez index. This list is loaded from a server at every invocation. This is innefficient, and error-prone.
So DirIndexFaker is a fixed version of the DMCA Bot Killer.
Usage:
Simply extract the contents of the .zip file to a subfolder under your PHP enabled webservers document root, then place a link to that subfolder somewhere on your site where bots can see it, and people cannot. One way to hide the link from humans is with CSS.
Note: You may be tempted to keep the search engines away with your robots.txt file, but is is well known that the RIAA is using the search engines to find infringing content, so this is not a good idea.
Enhancements:
- This release adds the ability to slow down RIAA/MPAA bots with a usleep call.
- This is enabled by default, but can be disabled by commenting out a line at the top of index.php.
- The bottom row has been fixed to make server info match the actual server version running on your host.
- The random seed has been changed so that filenames/sizes will only change once a day.
- This makes it harder to detect as a fake.
Download (0.005MB)
Added: 2005-12-16 License: GPL (GNU General Public License) Price:
1407 downloads
Qpsmtpd::Plugin::Quarantine 0.36
Qpsmtpd::Plugin::Quarantine is a filter outbound email to prevent blacklisting. more>>
Qpsmtpd::Plugin::Quarantine is a filter outbound email to prevent blacklisting.
SYNOPSIS
Qpsmtpd quarantine plugin:
use Qpsmtpd::Plugin::Quarantine;
The quarantine.cgi web page:
use Qpsmtpd::Plugin::Quarantine::CGI;
main();
In crontab or nightly:
perl -MQpsmtpd::Plugin::Quarantine::Batch -e cronjob()
In crontab (every five minutes?):
perl -MQpsmtpd::Plugin::Quarantine::Batch -e sendqueued()
From the command line:
perl -MQpsmtpd::Plugin::Quarantine::Batch -e mailq()
Qpsmtpd::Plugin::Quarantine implements and outbound mail filter. A substantial number of internet sites will blacklist senders if they send too much spam. Most will do this without providing enough feedback for you (the sender) to figure out where the spam is coming from or why you were blacklisted.
I run ISPs and Ive been blacklisted by AOL. Ive been blacklisted by Comcast. Why? Sometimes its because someone is exploting an insecure formmail CGI on my system and sometimes its simply because I allow users to forward email and when they do, they end up forwarding spam.
Qpsmtpd::Plugin::Quarantine understands that sometimes the sender is the victim and sometimes not. The normal situation is that Qpsmtpd::Plugin::Quarantine will bounce things that it thinks are spammy back to the sender with a URL to allow the sender to push the message onwards. However if the particular recipient is on an override list or is very popular (maybe because someone is forwarding their mail to the recipient or maybe theyre on a mailing list) then instead of bouncing to the sender, it will send a note to the recipient letting them know there is a message waiting for them.
Qpsmtpd::Plugin::Quarantine will only send bounces or notifications every so often (configurable). Both senders and recipients have the option (via the website) to have their mail silently discarded so that they dont get bothered again.
Qpsmtpd::Plugin::Quarantine uses OOPS to store its persistent data in mysql or PostgreSQL.
<<lessSYNOPSIS
Qpsmtpd quarantine plugin:
use Qpsmtpd::Plugin::Quarantine;
The quarantine.cgi web page:
use Qpsmtpd::Plugin::Quarantine::CGI;
main();
In crontab or nightly:
perl -MQpsmtpd::Plugin::Quarantine::Batch -e cronjob()
In crontab (every five minutes?):
perl -MQpsmtpd::Plugin::Quarantine::Batch -e sendqueued()
From the command line:
perl -MQpsmtpd::Plugin::Quarantine::Batch -e mailq()
Qpsmtpd::Plugin::Quarantine implements and outbound mail filter. A substantial number of internet sites will blacklist senders if they send too much spam. Most will do this without providing enough feedback for you (the sender) to figure out where the spam is coming from or why you were blacklisted.
I run ISPs and Ive been blacklisted by AOL. Ive been blacklisted by Comcast. Why? Sometimes its because someone is exploting an insecure formmail CGI on my system and sometimes its simply because I allow users to forward email and when they do, they end up forwarding spam.
Qpsmtpd::Plugin::Quarantine understands that sometimes the sender is the victim and sometimes not. The normal situation is that Qpsmtpd::Plugin::Quarantine will bounce things that it thinks are spammy back to the sender with a URL to allow the sender to push the message onwards. However if the particular recipient is on an override list or is very popular (maybe because someone is forwarding their mail to the recipient or maybe theyre on a mailing list) then instead of bouncing to the sender, it will send a note to the recipient letting them know there is a message waiting for them.
Qpsmtpd::Plugin::Quarantine will only send bounces or notifications every so often (configurable). Both senders and recipients have the option (via the website) to have their mail silently discarded so that they dont get bothered again.
Qpsmtpd::Plugin::Quarantine uses OOPS to store its persistent data in mysql or PostgreSQL.
Download (0.038MB)
Added: 2007-02-28 License: Perl Artistic License Price:
969 downloads
THC-FuzzyFingerprint 0.0.8
THC-FuzzyFingerprint tool generates fuzzy fingerprints as described in the corresponding paper. more>>
Welcome to the world of Fuzzy Fingerprinting, a new technique to attack cryptographic key authentication protocols that rely on human verification of key fingerprints. It is important to note that while fuzzy fingerprinting is an attack against a protocol, it is not a cryptographic attack and thus does not attack any cryptographic algorithm.
THC-FuzzyFingerprint tool generates fuzzy fingerprints as described in the corresponding paper. It is an ideal extension to man-in-the-middle attacks against the SSH service. The current version supports RSA and DSA key generation and MD5 and SHA1 fingerprints.
The Challenge:
THC is doing a little "seti@home" like competition. The challenge is to generate the best fuzzy fingerprint for our target public SSH host key. Here are some information on our victims SSH public host key.
The victim host: kimble.org
Public SSH key: kimble.org.pub
Public key algorithm: RSA
Public key length: 1024
MD5 key fingerprint: 08:54:5d:27:f8:e9:47:4e:49:8a:87:7e:03:cc:98:73
Download the fuzzy fingerprint release from the link at the top of this page and join the competition. Compile ffp and launch the tool against the victim hosts fingerprint and key algorithm using the following setup. (It is essential that you provide all of the given arguments to ffp so that we are able to compare different peoples fuzzy fingerprints)
$ ffp -f md5 -k rsa -b 1024
-t 08:54:5d:27:f8:e9:47:4e:49:8a:87:7e:03:cc:98:73
-s /var/tmp/kimble.org.state
You can stop the process at any point and continue later by just using the following comman line options.
$ ffp -s /var/tmp/kimble.org.state
<<lessTHC-FuzzyFingerprint tool generates fuzzy fingerprints as described in the corresponding paper. It is an ideal extension to man-in-the-middle attacks against the SSH service. The current version supports RSA and DSA key generation and MD5 and SHA1 fingerprints.
The Challenge:
THC is doing a little "seti@home" like competition. The challenge is to generate the best fuzzy fingerprint for our target public SSH host key. Here are some information on our victims SSH public host key.
The victim host: kimble.org
Public SSH key: kimble.org.pub
Public key algorithm: RSA
Public key length: 1024
MD5 key fingerprint: 08:54:5d:27:f8:e9:47:4e:49:8a:87:7e:03:cc:98:73
Download the fuzzy fingerprint release from the link at the top of this page and join the competition. Compile ffp and launch the tool against the victim hosts fingerprint and key algorithm using the following setup. (It is essential that you provide all of the given arguments to ffp so that we are able to compare different peoples fuzzy fingerprints)
$ ffp -f md5 -k rsa -b 1024
-t 08:54:5d:27:f8:e9:47:4e:49:8a:87:7e:03:cc:98:73
-s /var/tmp/kimble.org.state
You can stop the process at any point and continue later by just using the following comman line options.
$ ffp -s /var/tmp/kimble.org.state
Download (0.20MB)
Added: 2006-03-08 License: GPL (GNU General Public License) Price:
1327 downloads
TCFS 3.0b2
TCFS is a transparent cryptographic file system. more>>
TCFS project is a cryptographic network file system featuring group sharing of encrypted files. TCFS will encrypt your files before sending them to the file server and will decrypt them before they are read by the requesting application.
Because the encryption/decryption process takes place on the client host, no clean data will travel the network. This is particularly valid for the encryption key.
Recent advances in hardware and communication technologies have made possible and cost effective to share a file system among several machines over a local (but possibly also a wide) area network.
One of the most successful and widely used such applications is Suns Network File System (NFS).
NFS is very simple in structure but assumes a very strong trust model: the user trusts the remote file system server (which might be running on a machine in different country) and a network with his/her data. It is easy to see that neither assumption is a very realistic one.
The server (or anybody with superuser privileges) might very well read the data on its local filesytem and it is well known that the Internet or any local area network (e.g, Ethernet) is very easy to tap (see for example, Berkeleys tcpdump application program).
Impersonification of users is also another security drawback of NFS.
In fact, most of the permission checking over NFS are performed in the kernel of the client. In such a context a pirate can temporarely assign to his own workstation the Internet address of victim. Without secure RPC no further authentication procedure is requested. From here on, the pirate can issue NFS requests presenting himself with any (false) uid and therefore accessing for reading and writing any private data on the server, even protected data.
Given the above, a user seeking a certain level of security should take some measures. We propose a new cryptographic file system, which we call TCFS, as a suitable solution to the problem of privacy for distributed file system.
Dynamic Encryption Modules in TCFS:
The dynamic encryption module feature of TCFS allows a user to specify the encryption engine of his/her choiche to be used by TCFS. So you are not forced anymore to use what us (the developer) consider the best (i.e., more secure and efficient) encryption algorithm. The encryption engine must be given in the form of a Linux module and must conform to (the very simple) TCFS API for encryption module. Essentially, it must specify four functions:
1. An initialization function that is called by TCFS when the user pushes her key into TCFS.
Typically the initialization function takes as input the key and returns a pointer to a struct containing a the result of a preprocessing of the key to be used for the encryption and the decryption.
For the specific case of DES the initialization function computes the 16 48-bit subkeys, one for each round of DES.
2. An encryption function which takes a block of data, the length of the block in bytes and the result of the initialization function and encrypts the data.
3. A decryption function which takes a block of data, the length of the block in bytes and the result of the initialization function and decrypts the data.
The encryption and the decryption functions are called each time TCFS needs to read/write a block of data.
4. A cleanup function which performs whatever operation is needed before the key removed by TCFS.
Our work improves on Matt Blazes CFS by providing deeper integration between the encryption service and the file system which results in a complete transparency of use to the user applications.
Release 2.2 of TCFS includes the possibility of threshold sharing files among users. Threshold sharing consists in specifying a minimum number of members (the threshold) that need to be ``active for the files owned by the group to become available.
TCFS enforces the threshold sharing by generating an encryption key for each group and giving each member of the group a share using a Threshold Secret Sharing Scheme. The group encryption key can be reconstructed by any set of at least threshold keys.
A member of the group that intends to become active does so by pushing her/his share of the group key into the kernel. The TCFS module checks if the number of shares available is above the threshold and, if it is so, it attempts to reconstruct the group encryption key. By the properties of the Threshold Secret Sharing Scheme, it is guaranteed that, if enough shares are available, the group encryption key is correctly reconstructed.
Once the group encryption key has been reconstructed, the files owned by the group become accessible. Each time a member decides to become inactive, her share of the group encryption key is removed. The TCFS module checks if the number of shares available has gone under the threshold. In this case, the group encryption key is removed from the TCFS module and files owned by the group become unaccessible.
The current TCFS implementation of the group sharing facility requires each memeber to trust the kernel of the machine that reconstructs the key to actually remove the key once the number of active users goes below the threshold. Future implementations will remove this requirement by performing the reconstruction of the key in a distributed manner.
<<lessBecause the encryption/decryption process takes place on the client host, no clean data will travel the network. This is particularly valid for the encryption key.
Recent advances in hardware and communication technologies have made possible and cost effective to share a file system among several machines over a local (but possibly also a wide) area network.
One of the most successful and widely used such applications is Suns Network File System (NFS).
NFS is very simple in structure but assumes a very strong trust model: the user trusts the remote file system server (which might be running on a machine in different country) and a network with his/her data. It is easy to see that neither assumption is a very realistic one.
The server (or anybody with superuser privileges) might very well read the data on its local filesytem and it is well known that the Internet or any local area network (e.g, Ethernet) is very easy to tap (see for example, Berkeleys tcpdump application program).
Impersonification of users is also another security drawback of NFS.
In fact, most of the permission checking over NFS are performed in the kernel of the client. In such a context a pirate can temporarely assign to his own workstation the Internet address of victim. Without secure RPC no further authentication procedure is requested. From here on, the pirate can issue NFS requests presenting himself with any (false) uid and therefore accessing for reading and writing any private data on the server, even protected data.
Given the above, a user seeking a certain level of security should take some measures. We propose a new cryptographic file system, which we call TCFS, as a suitable solution to the problem of privacy for distributed file system.
Dynamic Encryption Modules in TCFS:
The dynamic encryption module feature of TCFS allows a user to specify the encryption engine of his/her choiche to be used by TCFS. So you are not forced anymore to use what us (the developer) consider the best (i.e., more secure and efficient) encryption algorithm. The encryption engine must be given in the form of a Linux module and must conform to (the very simple) TCFS API for encryption module. Essentially, it must specify four functions:
1. An initialization function that is called by TCFS when the user pushes her key into TCFS.
Typically the initialization function takes as input the key and returns a pointer to a struct containing a the result of a preprocessing of the key to be used for the encryption and the decryption.
For the specific case of DES the initialization function computes the 16 48-bit subkeys, one for each round of DES.
2. An encryption function which takes a block of data, the length of the block in bytes and the result of the initialization function and encrypts the data.
3. A decryption function which takes a block of data, the length of the block in bytes and the result of the initialization function and decrypts the data.
The encryption and the decryption functions are called each time TCFS needs to read/write a block of data.
4. A cleanup function which performs whatever operation is needed before the key removed by TCFS.
Our work improves on Matt Blazes CFS by providing deeper integration between the encryption service and the file system which results in a complete transparency of use to the user applications.
Release 2.2 of TCFS includes the possibility of threshold sharing files among users. Threshold sharing consists in specifying a minimum number of members (the threshold) that need to be ``active for the files owned by the group to become available.
TCFS enforces the threshold sharing by generating an encryption key for each group and giving each member of the group a share using a Threshold Secret Sharing Scheme. The group encryption key can be reconstructed by any set of at least threshold keys.
A member of the group that intends to become active does so by pushing her/his share of the group key into the kernel. The TCFS module checks if the number of shares available is above the threshold and, if it is so, it attempts to reconstruct the group encryption key. By the properties of the Threshold Secret Sharing Scheme, it is guaranteed that, if enough shares are available, the group encryption key is correctly reconstructed.
Once the group encryption key has been reconstructed, the files owned by the group become accessible. Each time a member decides to become inactive, her share of the group encryption key is removed. The TCFS module checks if the number of shares available has gone under the threshold. In this case, the group encryption key is removed from the TCFS module and files owned by the group become unaccessible.
The current TCFS implementation of the group sharing facility requires each memeber to trust the kernel of the machine that reconstructs the key to actually remove the key once the number of active users goes below the threshold. Future implementations will remove this requirement by performing the reconstruction of the key in a distributed manner.
Download (0.085MB)
Added: 2007-04-12 License: GPL (GNU General Public License) Price:
927 downloads
Poopmup 1.2
Poopmup is a shoot-em-up, with a twist. more>>
Poopmup project is a shoot-em-up, with a twist.
Poopmup is a game, a sort of a shoot-em-up, but with a twist. As a child, you where tortured in the playground. You were a victim of the highschool hierarchy.
You hacked hours on end, and built a machine that transformed you into a bird.
You are now free (as in speech) to fly around the city and poop on passers-by.
It is written in C++ using OpenGL. We originally used GLUT as an upper layer, but recently moved to Simple DirectMedia Layer as it is easier to install for an end user and it is a more powerful tool to create user interfaces.
<<lessPoopmup is a game, a sort of a shoot-em-up, but with a twist. As a child, you where tortured in the playground. You were a victim of the highschool hierarchy.
You hacked hours on end, and built a machine that transformed you into a bird.
You are now free (as in speech) to fly around the city and poop on passers-by.
It is written in C++ using OpenGL. We originally used GLUT as an upper layer, but recently moved to Simple DirectMedia Layer as it is easier to install for an end user and it is a more powerful tool to create user interfaces.
Download (3.6MB)
Added: 2006-12-11 License: GPL (GNU General Public License) Price:
1048 downloads
Sahana Disaster Management System LiveCD 1.2
Sahana project is an integrated set of pluggable, web-based disaster management. more>>
Sahana project is an integrated set of pluggable, web-based disaster management applications that provide solutions to large-scale humanitarian problems in the aftermath of a disaster.
Main features:
- Missing Person Registry - Helping to reduce trauma by effectively finding missing persons
- Organization Registry - Coordinating and balancing the distribution of relief organizations in the affected areas and connecting relief groups allowing them to operate as one
- Request Management System - Registering and Tracking all incoming requests for support and relief upto fullfilment and helping donors connect to relief requirements
- Camp Registry - Tracking the location and numbers of victims in the various camps and temporary shelters setup all around the affected area.
<<lessMain features:
- Missing Person Registry - Helping to reduce trauma by effectively finding missing persons
- Organization Registry - Coordinating and balancing the distribution of relief organizations in the affected areas and connecting relief groups allowing them to operate as one
- Request Management System - Registering and Tracking all incoming requests for support and relief upto fullfilment and helping donors connect to relief requirements
- Camp Registry - Tracking the location and numbers of victims in the various camps and temporary shelters setup all around the affected area.
Download (683.8MB)
Added: 2006-01-12 License: LGPL (GNU Lesser General Public License) Price:
1387 downloads
Sahana Disaster Management System 0.5.2 Alpha
Sahana is an integrated set of pluggable, web based disaster management applications. more>>
Sahana project is an integrated set of pluggable, web-based disaster management applications that provide solutions to large-scale humanitarian problems in the aftermath of a disaster.
Main features:
- Missing Person Registry - Helping to reduce trauma by effectively finding missing persons
- Organization Registry - Coordinating and balancing the distribution of relief organizations in the affected areas and connecting relief groups allowing them to operate as one
- Request Management System - Registering and Tracking all incoming requests for support and relief upto fullfilment and helping donors connect to relief requirements
- Camp Registry - Tracking the location and numbers of victims in the various camps and temporary shelters setup all around the affected area
<<lessMain features:
- Missing Person Registry - Helping to reduce trauma by effectively finding missing persons
- Organization Registry - Coordinating and balancing the distribution of relief organizations in the affected areas and connecting relief groups allowing them to operate as one
- Request Management System - Registering and Tracking all incoming requests for support and relief upto fullfilment and helping donors connect to relief requirements
- Camp Registry - Tracking the location and numbers of victims in the various camps and temporary shelters setup all around the affected area
Download (2.9MB)
Added: 2007-04-25 License: LGPL (GNU Lesser General Public License) Price:
913 downloads
X-bomber 0.8
X-bomber project is a multiplayer game for Unix systems. more>>
X-bomber project is a multiplayer game for Unix systems.
"X-Bomber" is multi-player maze-style game where players collect and drop bombs, in an attempt to blow each other up. Last player standing wins!
X-Bomber is vaguely based on "Atomic Bomberman" by InterPlay and "Bomberman" by Hudsonsof. It is played on a grid, rather than with smooth movement.
Main features:
- 4 players on screen, up to 3 may be computer-controlled
- Pairs of players can share the same keyboard (so only two PCs are needed for a 4-human match)
- 2 types of bombs - normal, and remote-controlled
- Randomly-placed boxes with random power-ups inside!
- Occasionally, random boxes of explosive TNT
- 100 level maps!
- A nasty "death" character who appears if the players take too long. He ruthlessly homes in one a character until he catches him... then he picks a new victim!
<<less"X-Bomber" is multi-player maze-style game where players collect and drop bombs, in an attempt to blow each other up. Last player standing wins!
X-Bomber is vaguely based on "Atomic Bomberman" by InterPlay and "Bomberman" by Hudsonsof. It is played on a grid, rather than with smooth movement.
Main features:
- 4 players on screen, up to 3 may be computer-controlled
- Pairs of players can share the same keyboard (so only two PCs are needed for a 4-human match)
- 2 types of bombs - normal, and remote-controlled
- Randomly-placed boxes with random power-ups inside!
- Occasionally, random boxes of explosive TNT
- 100 level maps!
- A nasty "death" character who appears if the players take too long. He ruthlessly homes in one a character until he catches him... then he picks a new victim!
Download (0.23MB)
Added: 2006-11-21 License: GPL (GNU General Public License) Price:
1074 downloads
Spyware Removal Tool 3.5
Spyware is a major problem in many computers these days. You can easily be a victim and not even know it. Do you mysteriously have a different h... more>> <<less
Download (15KB)
Added: 2009-03-31 License: Freeware Price: Free
455 downloads
Search And Rescue 0.8.2
Search And Rescue project is an air rescue flight simulator. more>>
Search And Rescue project is an air rescue flight simulator. The player pilots rescue helicopters to rescue victims in various situations of distress.
Search and Rescue is a helicopter based air rescue flight simulator. It employs a simple flight dynamics engine that is targetted towards the "average" player. It is not designed to be a cutting-edge realistic simulator, but rather a flexable game that everyone can play and enjoy.
The history of the development of this game goes back to 1997, when Search and Rescue was created as an explorative to design for more complex 3D games using the OpenGL graphics library. Much of the effort in the development of this game came from Wolfpack Entertainment and many dedicated contributors (see credits below).
This game was ported to Windows early on in its development to ensure the portability of its graphics code. However the Win32 version lacked certain features due to differences in Windows design of its graphic, sound, and controller implementation.
The flight dynamics engine (FDE) features helicopter, aircraft, and tilt-rotor aircraft flight dynamics models (FDMs). It uses source-centered (as opposed to world-centered) mathimatical equations to simulate movement which mimicks but does not fundimentally follow standard physics equations. This simplifies the "flyability" of the aircrafts at a slight cost of realisim and lightens processor load.
The 3D visual models of the aircrafts and objects were created by a program called Vertex 3D, an OpenGL modeller designed to create 3D visual models that are optimized for OpenGL.
Each scene is a finite sized flat world, separated vertically by cloud layer(s) and centered at the origin with an artificial longitude and latitude offset applied to displayed positions.
<<lessSearch and Rescue is a helicopter based air rescue flight simulator. It employs a simple flight dynamics engine that is targetted towards the "average" player. It is not designed to be a cutting-edge realistic simulator, but rather a flexable game that everyone can play and enjoy.
The history of the development of this game goes back to 1997, when Search and Rescue was created as an explorative to design for more complex 3D games using the OpenGL graphics library. Much of the effort in the development of this game came from Wolfpack Entertainment and many dedicated contributors (see credits below).
This game was ported to Windows early on in its development to ensure the portability of its graphics code. However the Win32 version lacked certain features due to differences in Windows design of its graphic, sound, and controller implementation.
The flight dynamics engine (FDE) features helicopter, aircraft, and tilt-rotor aircraft flight dynamics models (FDMs). It uses source-centered (as opposed to world-centered) mathimatical equations to simulate movement which mimicks but does not fundimentally follow standard physics equations. This simplifies the "flyability" of the aircrafts at a slight cost of realisim and lightens processor load.
The 3D visual models of the aircrafts and objects were created by a program called Vertex 3D, an OpenGL modeller designed to create 3D visual models that are optimized for OpenGL.
Each scene is a finite sized flat world, separated vertically by cloud layer(s) and centered at the origin with an artificial longitude and latitude offset applied to displayed positions.
Download (0.77MB)
Added: 2006-11-04 License: GPL (GNU General Public License) Price:
3251 downloads
XSS Shell 0.3.9
XSS Shell script is a powerful XSS backdoor. more>>
XSS Shell script is a powerful XSS backdoor. XSS Shell allows interactively getting control over a Cross-site Scripting (XSS) vulnerability in a web application.
It demonstrates the real power and damage of Cross-site Scripting attacks.
Enhancements:
Regenerating Pages
- This is one of the key and advanced features of XSS Shell. XSS Shell re-renders the infected page and keep user in virtual environment. Thus even user click any links in the infected page he or she will be still under control! (within cross-domain restrictions) In normal XSS attacks when user leaves the page you cant do anything.
- Secondly this feature keeps the session open so even victim follow an outside link from infected page session is not going to timeout and you will be still in charge.
Keylogger
- Mouse Logger (click points + current DOM)
Built-in Commands:
- Get Keylogger Data
- Get Current Page (Current rendered DOM / like screenshot)
- Get Cookie
- Execute supplied javaScript (eval)
- Get Clipboard (IE only)
- Get internal IP address (Firefox + JVM only)
- Check victims visited URL history
- DDoS
- Force to Crash victims browser
Version restrictions:
- Keylogger is not working on IE
- Possibly not going to work for framed pages because of frame regeneration.
- Not working on Konqueror
Enhancements:
- Connection drop timeout check. If your XSS Shell server is down or connection dropped because of victim itll try to repair itself.
- DoS and Crash commands added
<<lessIt demonstrates the real power and damage of Cross-site Scripting attacks.
Enhancements:
Regenerating Pages
- This is one of the key and advanced features of XSS Shell. XSS Shell re-renders the infected page and keep user in virtual environment. Thus even user click any links in the infected page he or she will be still under control! (within cross-domain restrictions) In normal XSS attacks when user leaves the page you cant do anything.
- Secondly this feature keeps the session open so even victim follow an outside link from infected page session is not going to timeout and you will be still in charge.
Keylogger
- Mouse Logger (click points + current DOM)
Built-in Commands:
- Get Keylogger Data
- Get Current Page (Current rendered DOM / like screenshot)
- Get Cookie
- Execute supplied javaScript (eval)
- Get Clipboard (IE only)
- Get internal IP address (Firefox + JVM only)
- Check victims visited URL history
- DDoS
- Force to Crash victims browser
Version restrictions:
- Keylogger is not working on IE
- Possibly not going to work for framed pages because of frame regeneration.
- Not working on Konqueror
Enhancements:
- Connection drop timeout check. If your XSS Shell server is down or connection dropped because of victim itll try to repair itself.
- DoS and Crash commands added
Download (0.83MB)
Added: 2007-04-05 License: GPL (GNU General Public License) Price:
956 downloads
Secleted [ 0 ] software to compare
- Page: 1 of 2
- 1
- 2
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above victim search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed