Network security tools

Tools

• Top 75 Security Tools
• arp-sk tools
• dsniff, Various tools to sniff network traffic for cleartext insecurities
• Snort, The Open Source Network Intrusion Detection System
• Scapy - Packet generator/sniffer and network scanner/discovery
  • cf excellent article in LM52 (Linux France Magazine no 52)
  • Scapy Homepage
  • Python Tutorial
• Netcat
  • Penetration Testing Tip #21: netcat ( nc ) utility resources
  • Netcat rules the net
  • How to duplicate a complete PC via network
  • Wonders of 'dd' and 'netcat' :: Cloning Operating Systems
  • Netcat6 with IPv6 support
  • CryptCat: Netcat with cryptography
• SoCat: Netcat on steroids, if you were amazed by netcat, you've seen *nothing*!!!
  • See here how we use it to bypass proxies and there to replace minicom
  • We can also sniff a tty

socat -v -x PTY,link=/tmp/myttyUSB0,raw,echo=0,isig=0 /dev/ttyUSB0,raw,echo=0,isig=0

• Ettercap
• Wireshark

Sniff over network:

wireshark -N n -S -l -k -i <(ssh root@zeus tshark -w - not tcp port 22)
wireshark -N n -S -l -k -i <(ssh root@zeus tcpdump -s 1500 -w - -i lo not tcp port 22)

Others

• The Honeynet Project

Filtering

• IPTables Linux firewall with packet string-matching support
• Filtering packets based on string matching

cf also

• Bypass Proxy
• Forensics
• Wireless Security
• Virtual Private Network
• Securing Debian HOWTO