domingo, 22 de febrero de 2015

KEE PASS PASSWORD SAFE - A lightweight and easy-to-use password manager -


KeePass is a portable password manager for PC (Windows, Linux, Mac OS X), with ports available for Android, iPhone, iPad, and more. Let’s face it, most of us use the same password over and over to avoid password management but this practice is highly risky. It means if someone gains or cracks your password, they could log into any of your accounts, stealing data and jeopardizing your security. Having a separate, lengthy, and random password for every site is considered the best way to secure data. KeePass keeps every username and password pair in an encrypted database, protected by a single master password or key (the only one you have to remember). And it doesn’t store your database in the cloud unless you upload it there.

KeePass at a Glance

You can easily download KeePass for Windows and you can port it on a USB stick for most other operating systems. The interface is as busy as it is robust. For example, KeePass supports password groups for sorting passwords. You can drag and drop passwords into most windows or use a hot key to type your login information into windows automatically. You can also quick copy user names and passwords to the clipboard with a double-click on a field in the password list. And KeePass can import data from a variety of formats like CSV, while the password list can be exported to formats such as TXT, HTML, XML, and CSV.

Product Details

Here is a detailed breakdown of KeePass’s features:
  • Strong security—KeePass uses AES encryption to encrypt its password databases, SHA-256 password hash, protection against dictionary and guessing attacks, in-memory protection, and more.
  • Portable—KeePass is portable, carry it on a USB stick and run it or directly install it on Windows if you prefer desktop access.
  • Easy Database Transfer—A password database, containing a single file, is easy to transfer between computers.
  • Multiple user keys—Use a master password to decrypt the complete database or carry a key file with you.
  • Powerful password generator—KeePass generates passwords based on character sets and patterns, with many options.
  • Extensible—KeePass provides plugin architecture for advanced features and supports over 40 languages.

Pros

Cons

KeePass has a powerful password generator and is available with multi-factor authentication, and it can handle non-standard login sequences. Plugins provide advanced features. KeePass takes a while to warm up to, with its feature-filled interface that might confuse some beginners, but a help center is available to assist you as you find your way around.

Quick Specs

  • Version: 2.27
  • File size: 2.5 MB
  • Date added: June 7, 2014
  • Operating systems: Windows, Linux, Mac OS X, Android mobile devices, and more.
 Level: Intermediate

Download Link:

Kee Pass Password Safe

7-ZIP - A free file archiver for extremely high compression -

7- ZIP is a file archiver with a high compression ratio for ZIP and GZIP formats, which is between 2 to 10% better than its peers, depending on the exact data tested. And 7-Zip boosts its very own 7z archive format that also offers a significantly higher compression ratio than its peers—up to 40% higher! This is mainly because 7-Zip uses LZMA and LZMA2 compression, with strong compression settings and dictionary sizes, to slow but vastly improve density. If a zip tool gains its appeal from its ability to efficiently compress files, then 7-Zip proves it has a little bit o’ magic.

7-Zip at a Glance

After you effortlessly download and launch 7-Zip, you’ll quickly discover its simple and easy to navigate interface. The main toolbar contains 7-Zip’s most used features and there are several menus that allow you to dig deeper within. For example, the Extract button lets you easily browse for or accept the default destination directory for your file, while the View menu contains a Folder History, and the Favorites menu lets you save up to ten folders. 7-Zip also integrates with the Windows Explorer menus, displaying archive files as folders and providing a toolbar with drag-and-drop functions. You can also alternate between a single or dual-pane view.

Product Details

7-Zip offers several features that make it one of the best compression software options around. For example:


  • Open architecture—The source code uses the GNU LGPL license, while the unRAR code is under a mixed license with GNU LGPL + unRAR restrictions.
  • High compression ratio—Using its own 7z format with LZMA and LZMA2 compression, 7-Zip’s compression ratio is up to 40% higher than its peers. For ZIP and GZIP formats, 7-Zip provides a compression ratio that is 2-10% better than PKZip and WinZip.
  • Strong AES-256 encryption—This includes both password protection of files and encryption of file names.
  • Integrates with Windows Shell—Using its menu options, you can integrate 7-Zip to the Windows Shell menu.
  • Powerful file manager and command line versions—There’s also a plugin for FAR Manager.
  • Localizations for 79 languages—This kind of support is why 7-Zip is the world’s favorite free compression software.

Pros

Cons

7-Zip is easy to download and use, it opens and compresses most everything, and is has a Windows shell extension. The interface is a little sparse and so are the instructions, but the program works like a charm anyway.

Quick Specs


  • Version: 9.22
  • File size: 1.1 MB
  • Date added: March 2, 2013
  • Operating systems: Windows
Level: Novice

Download Link:

7-ZIP Download

 

Anti-Spam SMTP Proxy Server

The Anti-Spam SMTP Proxy (ASSP) Server project aims to create an open source platform-independent SMTP Proxy server which implements auto-whitelists, self learning Bayesian, Greylisting, DNSBL, DNSWL, URIBL, SPF, SRS, Backscatter, Virus scanning, attachment blocking, Senderbase and multiple other filter methods. Click 'Browse all files' to download the professional version 2.4.3 build 14349.

V1 development has been stopped at the end of 2014 (1.10.1 build 14365). Possibly there will be done some bugfixing in future.

Please upgrade to V2, which is and will be actively maintained.


Features


  • Multiple Weighted DNSBLs
  • Multiple Weighted URIBLs
  • Greylisting
  • Weighted Regular Expression Filtering
  • Bayesian
  • Penalty Box
  • SenderBase
  • SSL/TLS
  • SPF/SRS
  • Attachment Blocking
  • ClamAV and FileScan
  • Blocking Reporting
  • LDAP support
  • Backscatter Detection
  • V2 - recipient replacement / GUI user access rights management
  • V2 - MIME charset conversion / DKIM check and signing
  • V2 - DB support for all hashes / level based open plugin support
  • V2 - transparent proxy support / BATV check and signing
  • V2 - Plugins: archive, full attachment check and replacement, OCR
  • V2 - damping (steal spammers time)
  • V2 - AUTH to relay host / POP3 collector
  • V2 - configuration value and file synchronization
  • V2 - Block Reports design could be customized
  • V2 - Razor2 and DCC support via Plugin
  • V2 - SNMP support (monitoring, configuring, controll-API)
  • V2 - user group import (file or LDAP or command based)
  • V2 - automatic crash analyzer Hidden Markov Model
  • V2 - IPv6 socket support
  • V2 - word stemming (several languages) for Bayesian analyzer
  • V2 - Perl module autoupdate via PPM or CPAN
  • V2 - Hidden Markov Model spam detection engine
  • V2 - full unicode support
  • V2 - DMARC support
  • V2 - privat Whitelist (legacy, domain based, user based)
  • V2 - privat IP and Domain lists (legacy, domain based, user based)
  • V2 - CPU affinity settings
  • V2 - web file commander
  • V2 - graphical statistic output (SVG)
  • V2 - native SSL support for target hosts
  • V2 - client SSL-certificate validation 
  • License: GLPv2
Level: Expert

 Download Link:

Anti-Spam SMTP Proxy Server

FILEZILLA - A fast cross-platform FTP client -

FileZilla is a cross-platform graphical FTP, SFTP, and FTPS file management tool for Windows, Linux, Mac OS X, and more. With tons of intuitive tools, FileZilla helps you quickly move files between your computer and Web server. If you plan to use FileZilla regularly, you might like the advanced features like manual configuration and speed limit monitoring. While FTP may seem outdated, it’s actually a very reliable way to transfer large files or groups of files to your Web server. And, with FileZilla, you can deploy multiple simultaneous connections to speed up file transfers. Overall, FileZilla has everything you need to support your FTP needs including a documentation wiki and a forum.

Filezilla at a Glance

Filezilla is so easy to download and launch that you might not realize how powerful it is. Just enter a few basic server settings and you’re up and running with a single click. To upload and download files, simply drag and drop them between your Web server and computer. You monitor your actions in the site manager pane, which highlights the status of file uploads and downloads, or bypass the queue with manual transfer. You can also pause or cancel file transfers and even configure transfer speed limits to reduce file transfer errors, making the process of managing your Web site a breeze!

Product Details

Here is a detailed breakdown of Filezilla’s features:

  • FTP, FTPS, and SFTP support—Filezilla gives you a choice between several file transfer protocols and encryption methods, while supporting HTTP and the IPv6 Internet protocol.
  • Vital Info at a Glance—Filezilla lets you compare your files with server files in the same directory to see if their file name or size is out of sync via highlighted colors..
  • Built-in file management—A site manager lets you order transfer tasks via a server list and a transfer queue. It also supports resume, which means you can pause and continue transfers. Filename filters help locate specific files with the conditions you want. And you can edit server files on-the-fly, without downloading and re-uploading them back to the server.
  • Easy to navigate—A tabbed user interface allows you to multitask browse servers to transfer files between them simultaneously. Bookmarks provide easy access to frequently used files. You can also drag and drop files between your computer and Web server.
  • Advanced file settings—You can configure transfer speed limits to reduce file transfer errors and a network configuration wizard can assist you to configure any confusing network settings.
  • Reduces timeout errors—Filezilla checks your network connection and notifies you if it has been idle for too long by sending a keep-alive command.
  • Multi-language support—Filezilla is currently available in 47 languages worldwide.

Pros

Cons

FileZilla is a reliable, accessible program with many basic functions and advanced tools for expert users. If you are serious about FTP, FileZilla won’t disappoint. FileZilla stores your FTP credential in plain text instead of encrypting it. Therefore the onus is on you and your operating system to protect private data.

Quick Specs

  • Version: 3.9.01
  • File size: 21.6 MB
  • Date added: July 7, 2014
  • Operating systems: Windows, Mac OS X, & Linux.
License: GNU GLPv2

Level: Novice

Donwload LInk:

FilleZilla 3.9.01

sábado, 21 de febrero de 2015

CRYPTOHAZE - GPU accelerated password cracking tools -

A CUDA & OpenCL accelerated rainbow table implementation from the ground up, and a CUDA hash brute forcing tool with support for many hash types including MD5, SHA1, LM, NTLM, and lots more!

Cryptohaze is the home of high performance, open source, network-enabled, US-based cross-platform GPU and OpenCL accelerated password auditing tools for security professionals. Currently, many security professionals are at a serious disadvantage in auditing as they cannot submit hashes to online hash databases due to the terms of their auditing agreement. Cryptohaze tools are aimed at providing high quality tools that run on any platform - Windows, Linux, or OS X. The tools run on all platforms that support CUDA or OpenCL (currently Windows, Linux, OS X). If you don't have a GPU - the OpenCL code will run just fine on your host CPU!

Compatibility

The Cryptohaze tools are designed for both nVidia based graphics cards, and OpenCL devices (nVidia and ATI/AMD graphics cards, and Intel/AMD CPUs). Right now, the old Multiforcer requires CUDA support (so nVidia cards only), but the rainbow table tools and the new Multiforcer work on anything with a CPU, including Atom based devices. For best performance, a top of the line ATI card is recommended. nVidia cards simply do not have the hash performance of ATI right now. The tools do support BFI_INT and other ATI-specific operations to improve performance rather significantly over nVidia cards. That said, if you value your sanity, nVidia may be a better option for these tools. ATI's driver support, especially under Linux, leaves much to be desired and they do not seem to care to fix it. nVidia support is reliable, tested, and is less likely to leave you balding. And the uptime of an nVidia server may compensate for the reduced performance.
OpenCL support is present for the rainbow table tools, and is present in the new alpha Multiforcer. If you are interested in helping to port the tools to OpenCL, drop me a line!

Tools Overview

Cryptohaze Multiforcer
The Cryptohaze Multiforcer is a high performance CUDA password cracker that is designed to target large lists of hashes. Performance holds very solid with large lists, such that on a suitable server, cracking a list of 1 000 000 passwords is not significantly slower than cracking a list of 10. For anyone who deals with large lists of passwords, this is a very useful tool! Algorithm support includes MD5, NTLM, LM, SHA1, and many others.
Multiforcer New (MFN)
The Multiforcer New is a total ground up rewrite of the Cryptohaze Multiforcer with CUDA, OpenCL, and CPU (SSE/AVX/etc) support. It remains focused on brute forcing large hash lists, and scales very well. It also is designed for network clustering of machines - no longer are you limited to running your hashes with a single machine! Other tools have varying levels of network support, but Cryptohaze is the only open source tool with easy to use built in networking.
Cryptohaze GPU Rainbow Tables
There has been very little development in the promising Rainbow Table technology over the past several years. Cryptohaze GPU Rainbow table are a totally fresh implementation of rainbow tables, leveraging the strengths of the nVidia GPUs and OpenCL devices to allow for much larger table spaces and coverage. While the stock RainbowCrack tables use chain lengths of 10 000, the Cryptohaze tables use a chain length of 200 000. This allows much larger attack spaces - NTLM tables for full US charset (95 characters) length 8 are available, and other tables will become available as they are created. While doing this, cracking times on a high performance server remain very reasonable - in some cases, under 2 minutes per password!

License: GNU GLPV2

Level: Expert

Download Link:

Cryptohaze GPU Rainbow Tables

Android Pattern Unlocker

Unlock Samsung Galay Phones.




Description


Tested Devices :
1.Samsung Galaxy Y
2.Samsung Galaxy Y Duos

Procedure :
1.copy both files in root of memory card
2.Insert that memory card in your android device
3.Now switch off your device
4.Now press volume up + power + home button together to start recovery mode
5.In this mode touch will not work so navigate using volume up and down keys and select using home button
6.Now select ‘update zip from sd card’
7.Now select 'cwm.zip'
8.Yellow coloured menu will appear
9.Select ‘install zip from sd card’
10.Then select ‘choose zip from sd card’
11.Select ‘ delete_passward.zip’
12.Now select ‘yes’
13.Then the process will complete after some time
14.Now press back and select ‘Reboot Device’
15.Now Draw Any pattern your device will unlock
16.Now to set new pattern lo

Level: Intermediate

Download Link:

BRUTEFORCER CLIENT

BruteForcer is a client-server multithreaded application for bruteforce cracking passwords. The more clients connected to the server, the faster the cracking.
The client is plugin-based. Meaning that BruteForcer itself is just a segmentation software and it doesn't care what type of file you are trying to crack. It just sends the generated passwords to the plugin and the plugin will handle checking if the password is correct. This concept have a great future potential - any programmer can write a plugin in any language, that can compile stdcall dll-s. And not only for files - this may be adopted to any type of bruteforcing passwords.
At the moment there is only a plugin for RAR archives and only with encrypted filenames. But since this plugin is open source, i hope some people will help with more plugins.

Documentation:

Usage:
Wordlist attack:
Start the server and type the name of the file, that you want to crack. If the file is accessible by all clients on a network you can specify the complete path to it. If it's not, then you have to type the filename with no path and every client will look for it in it's own folder - that means there must be a copy of the file for each client.
Then carefully setup the dictionary. If the password consists of symbols that are not in the dictionary, BruteForcer will not be able to find it. By default in the dictionary there are all lowercase English letters and all numbers. So if you suspect that in the password there might be capital letters or brackets or other symbols you have to add them to the dictionary. But be carefull - the longer the dictionary, the longer the time it takes to break a password.
Then you have to set the maximum password length - the software will not attempt passwords that are longer than this. The default value is 5.
Then start the client on as many machines, as you can find and connect to the server and they will start working.

Since version 0.7 the client supports wordlist attack. Basically when this is enabled it tries to determine if the current combination of symbols mean anything and if it doesn't - then it skips it. For this you need a wordlist file - this is a database with all the words in a language. I have provided an English wordlist with more that 200 000 words. It is easy to make other wordlists from some free spell check libraries.

The wordlist attack operates at 3 different modes:
- Level 1 - It is fastest and skips most of the combinations. It looks only for complete match with the wordlist. It can be useful only if you know that the password is just a single word.
- Level 2 - It ignores the symbols that are not letters, and looks for a match with the wordlist. It is useful when you know that the password is a single word, surrounded by numbers or other symbols.
- Level 3 - It checks if the current combination of symbols contains at least one meaningful word from the wordlist. This is the best mode, i suggest you use it always. The password of the test archive (test.rar) can be found only by this method (or by pure bruteforce of course).

 Level: Expert

Download Link:

Bruteforcer Client

NetworkMiner packet analyzer

NetworkMiner packet analyzer

NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows that can detect the OS, hostname and open ports of network hosts through packet sniffing or by parsing a PCAP file. NetworkMiner can also extract transmitted files from network traffic.




Features


  • Network Forensics
  • Network Sniffing
  • PCAP Parser
  • Digital Forensics
  • Packet Sniffer
Level: Expert

Link to Download:

Networkminer

Process Hacker - View and manage processes, services and more with this powerful tool. -

Process Hacker is a free and open source process viewer. This multi-purpose tool will assist you with debugging, malware detection and system monitoring. It includes powerful process termination, memory viewing/editing and other unique and specialized features.





Features


  • Clear overview of running processes and resource usage
  • Detailed system information and graphs
  • Views and edits services
  • Powerful process termination
  • Bypasses security software and rootkits
  • Other features useful for debugging and analyzing software.
Level: Intermediate

Link to download:

Process Hacker

viernes, 20 de febrero de 2015

Open Stego The Free Steganography Solution


 OpenStego, the free steganography solution. This is an open-source software distributed under the terms of the GNU General Public License v2.0.


OpenStego provides two main functionalities:
  • Data Hiding: It can hide any data within a cover file (e.g. images).
  • Watermarking (beta): Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
Support is available through community forums.

What is Steganography?

Steganography is the science of hiding secret message inside another larger and harmless looking message. This is one notch above regular cryptography; which just obscures the original message. Steganography tries to conceal the fact that there is a message in the first place. Steganographic message often appears to be something else than the original (secret) message, like a picture, sound, larger text, etc.
Some terms related to Steganography:
  • plaintext: The original secret message that needs to be communicated.
  • ciphertext: Secret message is often first encrypted using traditional methods. Encrypted message is known as ciphertext.
  • covertext: A larger and harmless looking data which is used as container for the plaintext/ciphertext. This can be a picture, sound, text, etc.
  • stegotext: The data generated after embedding the plaintext/ciphertext into the covertext.
The normal procedure is to first encrypt the plaintext to generate the ciphertext, and then modify the covertext in some way to contain the ciphertext. The generated stegotext is sent over to the intended recepient. If a third party snoops the stegotext in between, then they will just see some harmless looking picture (or sound, etc). Once the recepient receives the stegotext, the ciphertext is extracted from it by reversing the logic that was used to embed it in the first place. The ciphertext is decrypted using the traditional cryptography to get back the original plaintext.

What is Digital Watermarking?

Digital Watermarking is the process of embedding a covert marker in a noise-tolerant signal such as image data. It is typically used to identify ownership of the copyright of such signal. The hidden information should but does not necessarily need to contain a relation to the carrier signal. Digital watermarks may be used to verify the authenticity or integrity of the carrier signal or to show the identity of its owners. It is prominently used for tracing copyright infringements and for banknote authentication. Like traditional watermarks, digital watermarks are only perceptible under certain conditions, i.e. after using some algorithm, and imperceptible anytime else. If a digital watermark distorts the carrier signal in a way that it becomes perceivable, it is of no use.
OpenStego provides robust digital watermarking capabilities such that the watermark strength is not easily reduced when the watermarked image is resized, cropped or some other minor modifications are done.

Level: Expert

Link to Download:

Open Stego

Hide & Reveal steganography software

Hide &Reveal is both an open-source steganography software and a java library distributed under the GNU GPL.
It is primarily designed for scientists wishing to experiment new hiding techniques or steganalysis on various carriers.

Main features

  • Distributed under the GNU General Public License
  • Pure Java
  • Multi-threaded (why? Because it is possible!)
  • Allows to hide any type of file within BMP, PNG and TIF images (more carriers to come...)
  • Hiding and revealing assistants which include automatic hiding scheme selection
  • Uses all schemes (algorithms) provided by the org.steganography library
  • Customizable: pluggable algorithms and carrier types dynamically loaded at execution time (using an XML configuration file validated with XMLSchema)
  • Fully internationalized in english and french. More languages to come depending on contributors
 Level: Expert

 Link Download:


Hide & Reveal steganography


Hide in Picture

Hide in Picture is a program that allows you to conceal files inside bitmap pictures, using a password. The pictures look like normal images, so people will not suspect there is hidden data in them.

Level: Intermediate

Link to Download:
Hide in Picture