Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon.
Process Monitor adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous (...)
Home > Security Tools
Security Tools
-
Process Monitor v2.9 released
25 April 2010, by Tools Tracker Team -
SIP Inspector v1.10 released
25 April 2010, by Tools Tracker TeamSIP Inspector is a tool written in JAVA to simulate different SIP messages and scenarios. You can create your own SIP signaling scenarios, customize SIP messages and monitor incoming and outgoing messages. The tool can play RTP streams from a pcap file.
Release notes 1.1
Bug fixes: Call specific variables are lost if multiple concurrent calls created If Total Calls field set to 0, does not allow infinite number of calls Outgoing calls with custom value and not generic [call_number] for (...) -
Aircrack-ng v1.1 released
25 April 2010, by Tools Tracker TeamAircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared to other WEP cracking tools.
«Aircrack-ng is a set of tools for auditing wireless networks.»
A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. (...) -
Security Ninja security tool announcement
24 April 2010, by Tools Tracker TeamSecurity Ninja blog : The tool is the result of me thinking about writing a tool to help people conduct security code reviews for over a year. I had conference presentations to prepare, certification exams to sit and of course a lot of conference speaking slots last year which meant the tool idea had to go on the backburner. The benefit of having this idea going around in my head for so long is that I knew exactly what I wanted the tool to look like and how I wanted it to function before I (...)
-
HITB Ezine - Issue #002
23 April 2010, by Tools Tracker TeamReleased HITB Magazine. Vol. 1, Issue 2, April 2010.
The people of Hack In the Box, decided to make the ezine available for free in the continued spirit of HITB in “Keeping Knowledge Free†. In addition to the freely available PDF downloads, combined editions of the magazine will be printed in limited quantities for distribution at the various HITBSecConf’s around the world - Dubai, Amsterdam and Malaysia. We aim to only print somewhere between 100 or 200 copies (maybe less) per conference so (...) -
OWASP Code Crawler v2.7 released
22 April 2010, by Tools Tracker TeamA tool aimed at assisting code review practitioners. It is a static code review tool which searches for key topics within .NET and J2EE/JAVA code. The aim of the tool is to accompany the OWASP Code review Guide and to implement a total code review solution for "everyone".
Version 2.7 Removed unused References and Objects Reduced Noise (.NET Files) Replaced old scanning engine with new multi step engine (Only Stage 1 is active in this release for Single File Scan Only) New DarkMoon IDE (...) -
OpenSCAP v0.5.9 released
22 April 2010, by Tools Tracker TeamThe OpenSCAP Project was created to provide an open-source framework to the community which enables integration with the Security Content Automation Protocol (SCAP) suite of standards and capabilities.
It is the goal of OpenSCAP to provide a simple, easy to use set of interfaces to serve as the framework for community use of SCAP.
Version 0.5.9 built on windows (without probe support) better support on RHEL5 OVAL model validation functionality OVAL, XCCDF xml file validation (...) -
Xplico v0.5.6: VoIP (SIP & RTP) released
22 April 2010, by Tools Tracker TeamThe goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP), FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer. Xplico is an open source Network Forensic Analysis Tool (NFAT).
Xplico is released under the GNU General Public License.
Version 0.5.6
In this version there are new and important features: HTTP (...) -
Sandcat v4.0 released
20 April 2010, by Tools Tracker TeamSandcat allows web administrators to perform aggressive and comprehensive scans of an organization’s web server to isolate vulnerabilities and identify security holes. The Sandcat scanner requires basic inputs such as host names, start URLs and port numbers to scan a complete web site and test all the web applications for security vulnerabilities.
Version 4.0 Fast and ultra fast scans - Sandcat 4 provides significantly faster scans (500+ requests /sec when running a common web server scan). (...) -
fuzzdb v1.05 - Attack and Discovery Pattern Database
19 April 2010, by Tools Tracker TeamA comprehensive set of fuzzing patterns for discovery and attack during highly targeted brute force testing of web applications.
Fuzzdb is a comprehensive set of known attack pattern sequences to be utilized for intelligent brute force testing in order to rapidly identify exploitable conditions in new applications.
Primary sources used for attack pattern research: researching old web exploits for repeatable attack strings scraping scanner patterns from http logs various books, articles, (...)