<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Hacking-Gurus &#187; ping</title>
	<atom:link href="http://www.hacking-gurus.net/tag/ping/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.hacking-gurus.net</link>
	<description>Security Blog</description>
	<lastBuildDate>Mon, 26 Apr 2010 07:25:03 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=abc</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Lost Windows Vista Password Hack</title>
		<link>http://www.hacking-gurus.net/2009/04/08/lost-windows-vista-password-hack/</link>
		<comments>http://www.hacking-gurus.net/2009/04/08/lost-windows-vista-password-hack/#comments</comments>
		<pubDate>Wed, 08 Apr 2009 17:53:40 +0000</pubDate>
		<dc:creator>r00t</dc:creator>
				<category><![CDATA[Password Recovery]]></category>
		<category><![CDATA[Tutorialz]]></category>
		<category><![CDATA[hacked]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[password]]></category>
		<category><![CDATA[password meter]]></category>
		<category><![CDATA[permission]]></category>
		<category><![CDATA[ping]]></category>
		<category><![CDATA[repair]]></category>
		<category><![CDATA[reset password]]></category>
		<category><![CDATA[reset vista password in 5 minutes]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vista]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.hacking-gurus.net/?p=74</guid>
		<description><![CDATA[
		
		
		
		 Have you forgotten your windows vista password ?   you cannot login to your  computer / laptop ? No worries you can hack windows vista to reset your windows vista password.



Requirements :
1 ) Windows Vista DVD
2 ) Computer with Windows Vista
Please follow steps below to reset your Windows Vista Password in 10 minutes.
Steps : 
1. [...]]]></description>
			<content:encoded><![CDATA[<div style="float: right; width: 42px; padding-right: 10px; margin: 0 0 0 10px;">
		<script type="text/javascript">
		<!--
		digg_url = "http://www.hacking-gurus.net/2009/04/08/lost-windows-vista-password-hack/";
		digg_bgcolor = "#FFFFFF";
		digg_skin = "";
		digg_window = "new";
		digg_title = "Lost+Windows+Vista+Password+Hack";
		digg_media = "news";
		digg_topic = "";
		digg_bodytext = " Have you forgotten your windows vista password ?   you cannot login to your  computer / laptop ? No worries you can hack windows vista to reset your windows vista password.Requirements :1 ) Windows Vista DVD2 ) Computer with Windows VistaPlease follow steps below to reset your Windows Vista Password in 10 minutes.Steps : 1. Insert the Windows Vista...";
		//-->
		</script>
		<script src="http://digg.com/tools/diggthis.js" type="text/javascript"></script></div><p><span style="color: #339966;"><span style="text-decoration: underline;"><strong><img class="alignleft size-medium wp-image-79" title="forgot password?" src="http://www.hacking-gurus.net/wp-content/uploads/2009/04/forgot_password-281x300.jpg" alt="forgot password?" width="142" height="150" /></strong></span></span><span style="color: #ff0000;"><strong> Have you forgotten your windows vista password ?   you cannot login to your  computer / laptop ?</strong></span><span style="color: #339966;"><strong> </strong><span style="text-decoration: underline;"><strong>No worries you can hack windows vista to reset your windows vista password.</strong></span></span></p>
<p><span id="more-74"></span></p>
<p><span style="color: #339966;"><span style="text-decoration: underline;"><strong><br />
</strong></span></span></p>
<p>Requirements :</p>
<p><strong>1 )</strong> Windows Vista DVD<br />
<strong>2 )</strong> Computer with Windows Vista</p>
<p><em><strong>Please follow steps below to reset your Windows Vista Password in 10 minutes.</strong></em></p>
<p><strong>Steps : </strong></p>
<p><strong>1.</strong> Insert the Windows Vista DVD into the DVD drive and then restart the computer.<br />
<strong>2.</strong> Change Boot Options 1st Priority to Optical Drive.<br />
<strong>3.</strong> When system booting up, if the message &#8220;Press any key to boot from cd&#8221; appears, immediately press Enter.<br />
<strong>4.</strong> On Language Settings, Time and Currency and Keyboard Layout screen, just choose the correct settings then click Next.<br />
<strong>5.</strong> On Install Now screen, click Repair. Note: Click No just in case you get the message: Windows found problems with your computer&#8217;s startup options.<br />
<strong>6.</strong> On the System Recovery Options screen, under Operating System, click Windows Vista then click Next. Then select Command Prompt.<br />
<strong>7.</strong> At the command prompt windows, type the following command then press Enter after typing each command:<br />
<span style="text-decoration: underline;"> c:<br />
cd windows\system32<br />
echo ~takeown /f %1 /r /d y &gt; TakeControlOf.cmd<br />
echo ~icacls %1 /grant administrators:F /t<br />
ren Magnify.exe Magnify.old<br />
ren cmd.exe Magnify.exe</span><br />
<strong>8.</strong> Restart the computer.<br />
<strong>9.</strong> On the Welcome Screen, click the Ease button.<br />
<strong>10.</strong> Check Make items on the screen larger then click OK.<br />
<strong>11. </strong>At the prompt, type the command then press Enter.</p>
<p><span style="text-decoration: underline;">net user Administrator /active:yes<br />
exit</span><br />
<strong>12.</strong> Restart the computer.</p>
<p><strong><br />
13.</strong> At the welcome screen, logon using the local administrator account.<br />
<strong>14.</strong> Access Control Panel then click User Accounts. Select the username of the account you can&#8217;t login to then remove the password.<br />
<strong>15.</strong> Log off on the current local administrator account your are logon to.<br />
<strong>16.</strong> Check if you can logon to your user account now.<br />
<strong>17.</strong> Open<span style="text-decoration: underline;"> c:\windows\system32</span>.<br />
<strong>18.</strong> Right click on Magnify.exe, select Properties -&gt; Security -&gt; Advanced -&gt; Owner -&gt; Edit -&gt; Administrators then click OK.<br />
<strong>19. </strong>Select Edit -&gt; Administrators -&gt; Full Control then click Apply then OK.<br />
<strong>20.</strong> Rename Magnify.old to Magnify.exe<br />
<strong>21.</strong> Open command prompt then type the command then press Enter.<br />
<span style="text-decoration: underline;">net user Administrator /active:no</span></p>
<p>i hope this will help you <img src='http://www.hacking-gurus.net/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  feedback will be appreciate.</p>
<img src="http://www.hacking-gurus.net/wp-content/plugins/pixelstats/trackingpixel.php?post_id=74&ts=1280469272" style="display:none;" alt="pixelstats trackingpixel"/>]]></content:encoded>
			<wfw:commentRss>http://www.hacking-gurus.net/2009/04/08/lost-windows-vista-password-hack/feed/</wfw:commentRss>
		<slash:comments>17</slash:comments>
		</item>
		<item>
		<title>Lost Password Recovery :: John The Ripper TUTORIAL</title>
		<link>http://www.hacking-gurus.net/2009/03/11/lost-password-recovery-john-the-ripper-tutorial/</link>
		<comments>http://www.hacking-gurus.net/2009/03/11/lost-password-recovery-john-the-ripper-tutorial/#comments</comments>
		<pubDate>Wed, 11 Mar 2009 09:43:26 +0000</pubDate>
		<dc:creator>r00t</dc:creator>
				<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Network Tools]]></category>
		<category><![CDATA[Password Recovery]]></category>
		<category><![CDATA[Server Security]]></category>
		<category><![CDATA[Tutorialz]]></category>
		<category><![CDATA[decryper]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[hacked]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[jhon]]></category>
		<category><![CDATA[JTR]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[linux recover password]]></category>
		<category><![CDATA[lost password]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[passwd]]></category>
		<category><![CDATA[permission]]></category>
		<category><![CDATA[ping]]></category>
		<category><![CDATA[ripper]]></category>
		<category><![CDATA[sniffer]]></category>
		<category><![CDATA[tutorial]]></category>
		<category><![CDATA[windows]]></category>
		<category><![CDATA[WORDFILE]]></category>

		<guid isPermaLink="false">http://www.hacking-gurus.net/?p=47</guid>
		<description><![CDATA[
		
		
		
		John the Ripper is a decrypting program for passwords. Although it has many
functions we will be looking at using it as a decryper for password files
you possess.

We will be looking at Password Files which you have put on your Hard Disk
- PREPARATION
SHORTCUT TIP FOR WINDOWS 95
PASSWORD FILES
- DECRYPTING
JTR MODES
SINGLE MODE
WORDFILE MODE
INCREMENTAL MODE
ALPHA
DIGITS
ALL
SHOW MODE &#8211; Saving [...]]]></description>
			<content:encoded><![CDATA[<div style="float: right; width: 42px; padding-right: 10px; margin: 0 0 0 10px;">
		<script type="text/javascript">
		<!--
		digg_url = "http://www.hacking-gurus.net/2009/03/11/lost-password-recovery-john-the-ripper-tutorial/";
		digg_bgcolor = "#FFFFFF";
		digg_skin = "";
		digg_window = "new";
		digg_title = "Lost+Password+Recovery+%3A%3A+John+The+Ripper+TUTORIAL";
		digg_media = "news";
		digg_topic = "";
		digg_bodytext = "John the Ripper is a decrypting program for passwords. Although it has manyfunctions we will be looking at using it as a decryper for password filesyou possess.We will be looking at Password Files which you have put on your Hard Disk- PREPARATIONSHORTCUT TIP FOR WINDOWS 95PASSWORD FILES- DECRYPTINGJTR MODESSINGLE MODEWORDFILE MODEINCREMENTAL MODEALPHADIGITSALLSHOW...";
		//-->
		</script>
		<script src="http://digg.com/tools/diggthis.js" type="text/javascript"></script></div><p>John the Ripper is a decrypting program for passwords. Although it has many</p>
<p>functions we will be looking at using it as a decryper for password files<br />
you possess.</p>
<p><span id="more-47"></span></p>
<p>We will be looking at Password Files which you have put on your Hard Disk<br />
- <strong>PREPARATION</strong><br />
SHORTCUT TIP FOR WINDOWS 95<br />
PASSWORD FILES<br />
- <strong>DECRYPTING</strong><br />
JTR MODES<br />
SINGLE MODE<br />
WORDFILE MODE<br />
INCREMENTAL MODE<br />
ALPHA<br />
DIGITS<br />
ALL<br />
SHOW MODE &#8211; Saving the Decrypted Files<br />
- <strong>ADVANCED COMMANDS</strong><br />
STOPPING JTR<br />
RULES<br />
SESSION and RESTORE<br />
- <strong>JTR QUICK REFERENCE</strong></p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;</p>
<p>. &#8212;&#8212;&#8212;&#8211;<br />
<strong>PREPARATION</strong><br />
&#8212;&#8212;&#8212;&#8211;<br />
1. Download the correct version of JTR, use win32 for Win 95/98<br />
2. Extract the zip File into a Directory<br />
3. Make sure you have your Password Files in the same directory</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<br />
<strong>SHORTCUT TIP FOR WINDOWS 95</strong><br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<br />
1. Right Click on the [Start] Button, and choose Open<br />
2. Double Click on [Programs] Folder<br />
3. Right Click and Copy, [MS-DOS Prompt]<br />
4. Close the [Programs] Folder<br />
5. Right Click and Paste on the Desktop, a [MS-DOS Prompt] should appear<br />
6. Right Click on the [MS-DOS Prompt] icon and choose Properties<br />
7. Click on the Program Tab<br />
8. In the box next to Working (It should have C:WINDOWS in there) Change<br />
it to the Directory of where-ever the Program JOHN.EXE has been<br />
extracted<br />
9. Click on the [OK] button<br />
10. Test what you have done by Double Clicking on the Icon, If you wish to<br />
rename [MS-DOS Prompt] to JTR, then do so</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8211;<br />
<strong> PASSWORD FILES</strong><br />
&#8212;&#8212;&#8212;&#8212;&#8211;<br />
A. Naming<br />
I personally name my files with a p extension, some people use txt<br />
eg If i had the password file to Dannis&#8217;, I would name it danni.p<br />
The reason is that p stands for password file, I then name my decrypted<br />
password files with a txt extension<br />
It is really up to you what you name your password files, just remember<br />
that the names should be less than 8 characters<br />
eg likethis.p<br />
B. Where should I put them?<br />
Always have the password files you have found in the same directory as<br />
JOHN.EXE, Its just easier to handle them that way</p>
<p>&#8212;&#8212;&#8212;-<br />
<strong> DECRYPTING</strong><br />
&#8212;&#8212;&#8212;-<br />
Depending on what JTR version you have downloaded, you have to change into<br />
the directory JOHN.EXE is</p>
<p>&#8212;&#8212;&#8212;<br />
<strong> JTR MODES</strong><br />
&#8212;&#8212;&#8212;<br />
There are 3 main modes we will be dealing with<br />
-single, -wordfile, -incremental</p>
<p>[KEYS]<br />
[passfile] &#8211; this is the name of your password file<br />
[wordlist] &#8211; this is the name of your wordlist<br />
[output] &#8211; this is the name of the file you will name when you want to<br />
save your decrypted passwords</p>
<p>&#8212;&#8212;&#8212;&#8211;<br />
<strong> SINGLE MODE</strong><br />
&#8212;&#8212;&#8212;&#8211;<br />
Single Mode attempts to find the weakest of all the passwords. This is one<br />
of the fastest methods.</p>
<p>SINGLE MODE SYNTAX<br />
john -single [passfile]<br />
or you could use<br />
john -si [passfile]</p>
<p>Example:<br />
If you found a [passfile] and named it danni.p then you would type<br />
john -si danni.p</p>
<p>Take a look at SCREEN SHOT OF A JTR SESSION</p>
<p>&#8212;&#8212;&#8212;&#8212;-<br />
<strong> WORDFILE MODE</strong><br />
&#8212;&#8212;&#8212;&#8212;-<br />
Wordfile Mode is the next quickest method. It requires the use of a wordlist<br />
The wordlist must be in a single wordlist and not a combo list</p>
<p><strong>WORDFILE SYNTAX</strong><br />
john -wordfile:[wordlist] [passfile]<br />
or<br />
john -w:[wordlist] [passfile]</p>
<p>Example:<br />
If you found a [passfile] and named it danni.p and you had a [wordlist]<br />
named mydict.txt then you would type</p>
<p>john -w:mydict.txt danni.p</p>
<p>Take a look at SCREEN SHOT OF A JTR SESSION</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
<strong> INCREMENTAL MODE</strong><br />
&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
Incremental mode is the slowest mode and will try to decrypt every pass in<br />
your passfile, as this can take days, months even years, I would use it as<br />
a last resort</p>
<p>There are 4 basic commands we will be dealing with<br />
digits, alpha, all, and leaving it blank</p>
<p>DIGITS mode<br />
This will try to decrypt all the Passwords that are in numbers</p>
<p>ALPHA mode<br />
This will try to decrypt all the Passwords that are letters only</p>
<p>ALL mode<br />
This will try to decrypt all the Passwords, whether they are in numbers, in<br />
letters or some special characters (@!^&amp;&#8230;etc)</p>
<p>WITH NO MODE SELECTED<br />
This will basically do everything to try to decrypt the password file</p>
<p>SYNTAX<br />
john -i [passfile]<br />
john -i:DIGITS [passfile]<br />
john -i:ALPHA [passfile]<br />
john -i:ALL [passfile]</p>
<p><strong>Example:</strong><br />
If you found a [passfile] and named it danni.p<br />
john -i danni.p<br />
john -i:DIGITS danni.p<br />
john -i:ALPHA danni.p<br />
john -i:ALL danni.p</p>
<p>Take a look at SCREEN SHOT OF A JTR SESSION</p>
<p>When running in this mode, If you ever want to stop it push CTRL &#8211; C</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br />
<strong> SHOW MODE &#8211; Saving the Decrypted Files</strong><br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br />
Finally, once JTR has finished its decrypting process, you will be ready<br />
to enjoy the results. These you will save in a file name of your choice.</p>
<p><strong>SHOW SYNTAX</strong><br />
john -show [passfile]&gt;[output]</p>
<p>Example:<br />
If you found a [passfile] and named it danni.p, you decide you want to name the<br />
decrypted password file or [output] to danni.txt</p>
<p>john -show danni.p&gt;danni.txt</p>
<p>Now you can open danni.txt in a TEXT EDITOR<br />
You will see something like this</p>
<p>italia:italiano<br />
makoto:makotox<br />
PADWICK:PADWICKH<br />
kelley:kelleyaj<br />
bechtel:jbechtel<br />
mequery:queryme<br />
seeeee:meeeee<br />
stevewm:stevenm</p>
<p>8 passwords cracked, 246 left</p>
<p>Hopefully you will get more passwords than the example though</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br />
<strong> ADVANCED COMMANDS</strong><br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br />
Here are a few more commands which prove handy when using JTR</p>
<p>&#8212;&#8212;&#8212;&#8212;<br />
<strong> STOPPING JTR</strong><br />
&#8212;&#8212;&#8212;&#8212;<br />
If at anytime you wish to stop the decrypting process then<br />
Hold down the [ CTRL ] key and Push the [ C ] key</p>
<p>&#8212;&#8211;<br />
<strong>RULES</strong><br />
&#8212;&#8211;<br />
This command is used with the Wordfile Option, without it JTR will try only<br />
the words in your wordlist. When this is activated it will try variations as<br />
outlined in the john.ini file. This is also quite slow</p>
<p>RULES SYNTAX<br />
john w:[wordlist] -rules [passfile]</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<br />
<strong> SESSION &amp; RESTORE</strong><br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<br />
Decrypting by now you will notice can become a long a slow process, JTR<br />
allows you to save save and restore sessions. A session is like a snap<br />
shot of what you are decrypting. It remembers what file you used, and<br />
where you were at if you decide to stop it. session can be used with any<br />
of the main modes.</p>
<p>SESSION &amp; RESTORE SYNTAX<br />
john -restore<br />
john -restore:[session name]<br />
john -session:[session name]</p>
<p>[session name] is any name you choose</p>
<p><strong>EXAMPLE</strong><br />
&#8212;&#8212;-<br />
Lets say you want to decrypt a file named danni.p</p>
<p>OK you&#8217;ve used the -si mode, which was quick<br />
With your trusty wordlist file named biglist.txt you next run the -w mode</p>
<p><strong>FINAL NOTES</strong><br />
&#8212;&#8212;&#8212;&#8211;<br />
There are many other features that JTR uses, that are Advanced, these can be<br />
found in the DOC folder in JTR, just use a text editor to open and read them<br />
We were only concerned with getting at least 50% of the passwords. This may<br />
be achieved by SINGLE and WORDFILE modes<br />
SPEED is dependant on your CPU, If you screen looks like its frozen and<br />
doing nothing, just hit any key a couple of times, you will see a mini<br />
progress report.<br />
Speed is also dependant on the size of your password file and the number of<br />
salts, A salt can be thought of as a slightly different way to encrypt a<br />
file. As there are many ways to encrypt a single password</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
<strong> JTR QUICK REFERENCE</strong><br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
[KEYS]<br />
[passfile] &#8211; this is the name of your password file<br />
[wordlist] &#8211; this is the name of your wordlist<br />
[output] &#8211; this is the name of the file you will name when you want to<br />
save your decrypted passwords<br />
: &#8211; whenever you see a colon then use it in the command<br />
- &#8211; whenever you see a minus sign then use it in the command<br />
&gt; &#8211; whenever you see this sign then use it in the command<br />
[] &#8211; DO NOT INCLUDE THESE IN THE COMMAND</p>
<p>SINGLE MODE<br />
john -si [passfile]<br />
WORDFILE MODE<br />
john -w:[wordlist] [passfile]<br />
INCREMENTAL MODES<br />
john -i [passfile]<br />
john -i:ALL [passfile]<br />
john -i:DIGITS [passfile]<br />
john -i:ALPHA [passfile]<br />
SHOW MODES<br />
john -show [passfile]&gt;[output]</p>
<p>Loaded 254 passwords with 85 different salts (Standard DES [32/32 BS])<br />
italia (italiano)<br />
makoto (makotox)<br />
PADWICK (PADWICKH)<br />
kelley (kelleyaj)<br />
bechtel (jbechtel)<br />
mequery (queryme)<br />
seeeee (meeeee)<br />
stevewm (stevenm)<br />
guesses: 8 time: 0:00:01:23 100% c/s: 25771 trying: zcatcatk &#8211; zcatcatz</p>
<img src="http://www.hacking-gurus.net/wp-content/plugins/pixelstats/trackingpixel.php?post_id=47&ts=1280469272" style="display:none;" alt="pixelstats trackingpixel"/>]]></content:encoded>
			<wfw:commentRss>http://www.hacking-gurus.net/2009/03/11/lost-password-recovery-john-the-ripper-tutorial/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Linux Security Tools</title>
		<link>http://www.hacking-gurus.net/2009/03/09/linux-security-tools/</link>
		<comments>http://www.hacking-gurus.net/2009/03/09/linux-security-tools/#comments</comments>
		<pubDate>Mon, 09 Mar 2009 20:03:04 +0000</pubDate>
		<dc:creator>r00t</dc:creator>
				<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Network Tools]]></category>
		<category><![CDATA[Server Security]]></category>
		<category><![CDATA[Wireless Security]]></category>
		<category><![CDATA[Add new tag]]></category>
		<category><![CDATA[backdoor]]></category>
		<category><![CDATA[browser]]></category>
		<category><![CDATA[Chkrootkit]]></category>
		<category><![CDATA[clamav]]></category>
		<category><![CDATA[data acquisition]]></category>
		<category><![CDATA[Denyhosts]]></category>
		<category><![CDATA[Dsniff]]></category>
		<category><![CDATA[Etherape]]></category>
		<category><![CDATA[Ettercap]]></category>
		<category><![CDATA[exploit scanner]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[GnuPG]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[Hping3]]></category>
		<category><![CDATA[ICMP]]></category>
		<category><![CDATA[IPv4]]></category>
		<category><![CDATA[IPv6]]></category>
		<category><![CDATA[john]]></category>
		<category><![CDATA[john the ripper]]></category>
		<category><![CDATA[Kismet]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[monitoring tool]]></category>
		<category><![CDATA[MTR]]></category>
		<category><![CDATA[NBTscan]]></category>
		<category><![CDATA[Nemesis]]></category>
		<category><![CDATA[Nessus]]></category>
		<category><![CDATA[Netcat]]></category>
		<category><![CDATA[netdude]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[network analyzer]]></category>
		<category><![CDATA[Network Mapper]]></category>
		<category><![CDATA[network monitor]]></category>
		<category><![CDATA[network security auditor]]></category>
		<category><![CDATA[network traffic analyzer]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[ngrep]]></category>
		<category><![CDATA[nmap]]></category>
		<category><![CDATA[Ntop]]></category>
		<category><![CDATA[OpenSSH]]></category>
		<category><![CDATA[Packet Injection]]></category>
		<category><![CDATA[password meter]]></category>
		<category><![CDATA[ping]]></category>
		<category><![CDATA[port scanner]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[privacy guard]]></category>
		<category><![CDATA[protection]]></category>
		<category><![CDATA[Rkhunter]]></category>
		<category><![CDATA[rootkits]]></category>
		<category><![CDATA[scapy]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[sniffer]]></category>
		<category><![CDATA[SNMP]]></category>
		<category><![CDATA[Snort]]></category>
		<category><![CDATA[SSH]]></category>
		<category><![CDATA[system security]]></category>
		<category><![CDATA[Tcpdump]]></category>
		<category><![CDATA[tcpreplay]]></category>
		<category><![CDATA[tcptrace]]></category>
		<category><![CDATA[tiger]]></category>
		<category><![CDATA[tripwire]]></category>
		<category><![CDATA[unix]]></category>
		<category><![CDATA[virus utility]]></category>
		<category><![CDATA[vulnerabilities]]></category>
		<category><![CDATA[wireless]]></category>
		<category><![CDATA[Wireless Network]]></category>
		<category><![CDATA[wireshark]]></category>

		<guid isPermaLink="false">http://www.hacking-gurus.net/?p=36</guid>
		<description><![CDATA[
		
		
		
		Below is list of Linux Security Tools that you must know about as being Linux Administrator.


1) Wireshark &#8211; network traffic analyzer
Wireshark is a network traffic analyzer, or “sniffer”, for Unix and Unix-like operating systems. A sniffer is a tool used to capture packets off the wire. Wireshark decodes numerous protocols (too many to list).This package [...]]]></description>
			<content:encoded><![CDATA[<div style="float: right; width: 42px; padding-right: 10px; margin: 0 0 0 10px;">
		<script type="text/javascript">
		<!--
		digg_url = "http://www.hacking-gurus.net/2009/03/09/linux-security-tools/";
		digg_bgcolor = "#FFFFFF";
		digg_skin = "";
		digg_window = "new";
		digg_title = "Linux+Security+Tools";
		digg_media = "news";
		digg_topic = "";
		digg_bodytext = "Below is list of Linux Security Tools that you must know about as being Linux Administrator.1) Wireshark &#8211; network traffic analyzerWireshark is a network traffic analyzer, or “sniffer”, for Unix and Unix-like operating systems. A sniffer is a tool used to capture packets off the wire. Wireshark decodes numerous protocols (too many to list).This...";
		//-->
		</script>
		<script src="http://digg.com/tools/diggthis.js" type="text/javascript"></script></div><p>Below is list of Linux Security Tools that you must know about as being Linux Administrator.<br />
<strong></strong></p>
<p><span id="more-36"></span></p>
<p><strong>1) Wireshark &#8211; network traffic analyzer</strong><br />
Wireshark is a network traffic analyzer, or “sniffer”, for Unix and Unix-like operating systems. A sniffer is a tool used to capture packets off the wire. Wireshark decodes numerous protocols (too many to list).This package provides wireshark (the GTK+ version)<br />
<a href="http://www.wireshark.org" target="_blank"></a></p>
<p><a href="http://www.wireshark.org" target="_blank">http://www.wireshark.org</a><br />
<strong></strong></p>
<p><strong>2) Nessus &#8211; Remote network security auditor</strong><br />
The Nessus® vulnerability scanner, is the world-leader in active scanners, featuring high speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of your security posture. Nessus scanners can be distributed throughout an entire enterprise, inside DMZs, and across physically separate networks.<br />
<a href="http://www.nessus.org " target="_blank"></a></p>
<p><a href="http://www.nessus.org " target="_blank">http://www.nessus.org </a></p>
<p><strong>3) Nmap &#8211; The Network Mapper</strong><br />
Nmap (”Network Mapper”) is a free and open source (license) utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and both console and graphical versions are available.</p>
<p><strong>4) Etherape &#8211; graphical network monitor modeled after etherman</strong><br />
EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, ip and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display.It supports Ethernet, FDDI, Token Ring, ISDN, PPP and SLIP devices. It can filter traffic to be shown, and can read traffic from a file as well as live from the network.<br />
<a href="http://etherape.sourceforge.net" target="_blank"></a></p>
<p><a href="http://etherape.sourceforge.net" target="_blank">http://etherape.sourceforge.net</a><br />
<strong></strong></p>
<p><strong>5) Kismet &#8211; Wireless 802.11b monitoring tool</strong><br />
Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.<br />
Kismet identifies networks by passively collecting packets and detecting standard named networks, detecting (and given time, decloaking) hidden networks, and infering the presence of nonbeaconing networks via data traffic.</p>
<p><a href="http://www.kismetwireless.net" target="_blank">http://www.kismetwireless.net</a><br />
<strong></strong></p>
<p><strong>6) Chkrootkit &#8211; Checks for signs of rootkits on the local system</strong><br />
chkrootkit identifies whether the target computer is infected with a rootkit. Some of the rootkits that chkrootkit identifies are:<br />
1. lrk3, lrk4, lrk5, lrk6 (and some variants);<br />
2. Solaris rootkit;<br />
3. FreeBSD rootkit;<br />
4. t0rn (including latest variant);<br />
5. Ambient’s Rootkit for Linux (ARK);<br />
6. Ramen Worm;<br />
7. rh[67]-shaper;<br />
8. RSHA;<br />
9. Romanian rootkit;<br />
10. RK17;<br />
11. Lion Worm;<br />
12. Adore Worm.<br />
Please note that this is not a definitive test, it does not ensure that the target has not been cracked. In addition to running chkrootkit, one should perform more specific tests.<br />
<a href="http://www.chkrootkit.org" target="_blank"></a></p>
<p><a href="http://www.chkrootkit.org" target="_blank">http://www.chkrootkit.org</a></p>
<p><strong>7) Rkhunter &#8211; rootkit, backdoor, sniffer and exploit scanner</strong><br />
Rootkit Hunter scans systems for known and unknown rootkits, backdoors, sniffers and exploits.<br />
It checks for:<br />
- MD5 hash changes;<br />
- files commonly created by rootkits;<br />
- executables with anomalous file permissions;<br />
- suspicious strings in kernel modules;<br />
- hidden files in system directories;<br />
and can optionally scan within files. Using rkhunter alone does not guarantee that a system is not compromised. Running additional tests, such as chkrootkit, is recommended.<br />
<a href="http://www.rootkit.nl" target="_blank"></a></p>
<p><a href="http://www.rootkit.nl" target="_blank">http://www.rootkit.nl</a><br />
<strong></strong></p>
<p><strong>8 ) tiger &#8211; Report system security vulnerabilities</strong><br />
TIGER, or the ‘tiger’ scripts, is a set of Bourne shell scripts, C programs and data files which are used to perform a security audit of UNIX systems. TIGER has one primary goal: report ways ‘root’ can be compromised.Debian’s TIGER incorporates new checks primarily oriented towards Debian distribution including: md5sums checks of installed files, location of files not belonging to packages, check of security advisories and analysis of local listening processes.<br />
<strong></strong></p>
<p><strong>9) GnuPG &#8211; GNU privacy guard </strong><br />
GnuPG is GNU’s tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440.GnuPG does not use any patented algorithms so it cannot be compatible with PGP2 because it uses IDEA (which is patented worldwide).<br />
<a href="http://www.gnupg.org/" target="_blank"></a></p>
<p><a href="http://www.gnupg.org/" target="_blank">http://www.gnupg.org/</a><br />
<strong></strong></p>
<p><strong>10) Nemesis &#8211; TCP/IP Packet Injection Suite</strong><br />
Nemesis is a command-line network packet crafting and injection utility for UNIX-like and Windows systems. Nemesis, is well suited for testing Network Intrusion Detection Systems, firewalls, IP stacks and a variety of other tasks. As a command-line driven utility, Nemesis is perfect for automation and scripting.<br />
Nemesis can natively craft and inject ARP, DNS, ETHERNET, ICMP, IGMP, IP, OSPF, RIP, TCP and UDP packets. Using the IP and the Ethernet injection modes, almost any custom packet can be crafted and injected.<br />
<a href="http://nemesis.sourceforge.net" target="_blank"></a></p>
<p><a href="http://nemesis.sourceforge.net" target="_blank">http://nemesis.sourceforge.net</a><br />
<strong></strong></p>
<p><strong>11) Tcpdump &#8211; A powerful tool for network monitoring and data acquisition</strong><br />
This program allows you to dump the traffic on a network. tcpdump is able to examine IPv4, ICMPv4, IPv6, ICMPv6, UDP, TCP, SNMP, AFS BGP, RIP, PIM, DVMRP, IGMP, SMB, OSPF, NFS and many other packet types.<br />
It can be used to print out the headers of packets on a network interface, filter packets that match a certain expression. You can use this tool to track down network problems, to detect “ping attacks” or to monitor network activities.<br />
<a href="http://www.tcpdump.org/" target="_blank"></a></p>
<p><a href="http://www.tcpdump.org/" target="_blank">http://www.tcpdump.org/</a></p>
<p><strong>12) OpenSSH &#8211; secure shell server</strong><br />
This is the portable version of OpenSSH, a free implementation of the Secure Shell protocol as specified by the IETF secsh working group.Ssh (Secure Shell) is a program for logging into a remote machine and for executing commands on a remote machine. It provides secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. It is intended as a replacement for rlogin, rsh and rcp, and can be used to provide applications with a secure communication channel.This package provides the sshd server.<br />
In some countries it may be illegal to use any encryption at all without a special permit.<br />
<a href="http://www.openssh.com/" target="_blank"></a></p>
<p><a href="http://www.openssh.com/" target="_blank">http://www.openssh.com/</a><br />
<strong></strong></p>
<p><strong>13) Denyhosts &#8211; an utility to help sys admins thwart ssh hackers </strong><br />
DenyHosts is a program that automatically blocks ssh brute-force attacks by adding entries to /etc/hosts.deny. It will also inform Linux administrators about offending hosts, attacked users and suspicious logins.Syncronization with a central server is possible too.<br />
Differently from other software that do same work, denyhosts doesn’t need support for packet filtering or any other kind of firewall in your kernel<br />
<a href="http://denyhosts.sourceforge.net/" target="_blank"></a></p>
<p><a href="http://denyhosts.sourceforge.net/" target="_blank">http://denyhosts.sourceforge.net/</a></p>
<p><strong>14) Snort &#8211; Flexible Network Intrusion Detection System</strong></p>
<p><strong></strong><br />
Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform content searching/matching in addition to being used to detect a variety of other attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, and much more. Snort has a real-time alerting capability, with alerts being sent to syslog, a separate “alert” file, or even to a Windows computer via Samba.<br />
This package provides the plain-vanilla snort distribution and does not provide database (available in snort-pgsql and snort-mysql) support.<br />
<a href="http://www.snort.org/" target="_blank"></a></p>
<p><a href="http://www.snort.org/" target="_blank">http://www.snort.org/</a></p>
<p><a href="http://www.snort.org/" target="_blank"></a><br />
<strong>15) Firestarter &#8211; gtk program for managing and observing your firewall</strong><br />
Firestarter is a complete firewall tool for Linux machines. It features an easy to use firewall wizard to quickly create a firewall. Using the program you can then open and close ports with a few clicks, or stealth your machine giving access only to a select few. The real-time hit monitor shows attackers probing your machine.<br />
<a href="http://www.fs-security.com" target="_blank"></a></p>
<p><a href="http://www.fs-security.com" target="_blank">http://www.fs-security.com</a><br />
<strong></strong></p>
<p><strong>16) clamav &#8211; anti-virus utility for Unix &#8211; command-line interface</strong><br />
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon in the clamav-daemon package, a command-line scanner in the clamav package, and a tool for automatic updating via the Internet in the clamav-freshclam package. The programs are based on libclamav3, which can be used by other software.<br />
This package contains the command line interface. Features:<br />
- built-in support for various archive formats, including Zip, RAR, Tar,<br />
Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS and others;<br />
- built-in support for almost all mail file formats;<br />
- built-in support for ELF executables and Portable Executable files<br />
compressed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and<br />
obfuscated with SUE, Y0da Cryptor and others;<br />
- built-in support for popular document formats including Microsoft<br />
Office and Mac Office files, HTML, RTF and PDF.<br />
For scanning to work, a virus database is needed. There are two options for getting it:<br />
- clamav-freshclam: updates the database from Internet. This is<br />
recommended with Internet access.<br />
- clamav-data: for users without Internet access. The package is<br />
not updated once installed. The clamav-getfiles package allows<br />
creating custom packages from an Internet-connected computer.<br />
<a href="http://www.clamav.net/" target="_blank"></a></p>
<p><a href="http://www.clamav.net/" target="_blank">http://www.clamav.net/</a><br />
<strong></strong></p>
<p><strong>17) Ettercap &#8211; Multipurpose sniffer/interceptor/logger for switched LAN</strong><br />
Ettercap supports active and passive dissection of many protocols (even ciphered ones) and includes many feature for network and host analysis.Data injection in an established connection and filtering (substitute or drop a packet) on the fly is also possible, keeping the connection synchronized.<br />
Many sniffing modes were implemented to give you a powerful and complete sniffing suite. It’s possible to sniff in four modes: IP Based, MAC Based, ARP Based (full-duplex) and PublicARP Based (half-duplex).<br />
It has the ability to check whether you are in a switched LAN or not, and to use OS fingerprints (active or passive) to let you know the geometry of the LAN.<br />
<a href="http://ettercap.sourceforge.net/" target="_blank"></a></p>
<p><a href="http://ettercap.sourceforge.net/" target="_blank">http://ettercap.sourceforge.net/</a><br />
<strong></strong></p>
<p><strong>18) Netcat &#8211; TCP/IP swiss army knife</strong><br />
A simple Unix utility which reads and writes data across network connections using TCP or UDP protocol. It is designed to be a reliable “back-end” tool that can be used directly or easily driven by other programs and scripts. At the same time it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.</p>
<p><a href="http://netcat.sourceforge.net" target="_blank">http://netcat.sourceforge.net</a><br />
<strong></strong></p>
<p><strong>19) MTR &#8211; mtr combines the functionality of the ‘traceroute’ and ‘ping’ programs in a single network diagnostic tool. </strong><br />
As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. After it determines the address of each network hop between the machines, it sends a sequence ICMP ECHO requests to each one to determine the quality of the link to each machine. As it does this, it prints running statistics about each machine.</p>
<p><a href="http://www.bitwizard.nl/mtr/" target="_blank">http://www.bitwizard.nl/mtr/</a><br />
<strong>20) Hping3 &#8211; Active Network Smashing Tool</strong><br />
hping3 is a network tool able to send custom ICMP/UDP/TCP packets and to display target replies like ping does with ICMP replies. It handles fragmentation and arbitrary packet body and size, and can be used to transfer files under supported protocols. Using hping3, you can test firewall rules, perform (spoofed) port scanning, test network performance using different protocols, do path MTU discovery, perform traceroute-like actions under different protocols, fingerprint remote operating systems, audit TCP/IP stacks, etc. hping3 is scriptable using the TCL language.<br />
<a href="http://www.hping.org" target="_blank"></a></p>
<p><a href="http://www.hping.org" target="_blank">http://www.hping.org</a><br />
<strong></strong></p>
<p><strong>21) ngrep &#8211; grep for network traffic</strong><br />
ngrep strives to provide most of GNU grep’s common features, applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular expressions to match against data payloads of packets. It currently recognizes TCP, UDP and ICMP across Ethernet, PPP, SLIP and null interfaces, and understands bpf filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.<br />
<a href="http://ngrep.sourceforge.net/" target="_blank"></a></p>
<p><a href="http://ngrep.sourceforge.net/" target="_blank">http://ngrep.sourceforge.net/</a><br />
<strong></strong></p>
<p><strong>22) john &#8211; active password cracking tool</strong><br />
john, mostly known as John the Ripper, is a tool designed to help systems administrators to find weak (easy to guess or crack through brute force) passwords, and even automatically mail users warning them about it, if it is desired.<br />
It can also be used with different cyphertext formats, including Unix’s DES and MD5, Kerberos AFS passwords, Windows’ LM hashes, BSDI’s extended DES, and OpenBSD’s Blowfish.<br />
<a href="http://www.openwall.com/john/" target="_blank"></a></p>
<p><a href="http://www.openwall.com/john/" target="_blank">http://www.openwall.com/john/</a><br />
<strong></strong></p>
<p><strong>23) tcptrace &#8211; Tool for analyzing tcpdump output </strong><br />
Tcptrace is a tool for analyzing and reporting on tcpdump (or other libpcap) dump files. It can summarize the data or generate graph data for use with the gnuplot tool from the gnuplot package. Graph data can be created for throughput, RTT, time sequences, segment size, and cwin.<br />
<a href="http://jarok.cs.ohiou.edu/software/tcptrace/" target="_blank">http://jarok.cs.ohiou.edu/software/tcptrace/</a></p>
<p><strong> 24) netdude &#8211; NETwork DUmp data Displayer and Editor for tcpdump trace files</strong><br />
It is a GUI-based tool that allows you to make detailed changes to packets in tcpdump trace files, in particular, it can currently do the following:<br />
* Set the value of any field in IP, TCP and UDP packet headers.<br />
* Copy, move and delete packets in the trace file.<br />
* Fragment and reassemble IP packets.<br />
* Netdude constantly communicates with a tcpdump process to update<br />
the familiar tcpdump output that corresponds to the trace. This<br />
also means that any changes made to your local version of tcpdump<br />
are reflected in Netdude.<br />
* Plugin architecture: people can easily add plugins for specific<br />
tasks. The code comes with a plugin for checksum correction in IP,<br />
TCP and UDP, and a dummy plugin.<br />
* Through the plugin mechanism, Netdude provides a good facility for<br />
writing tcpdump trace file filters.<br />
<a href="http://netdude.sourceforge.net" target="_blank"> http://netdude.sourceforge.net</a><br />
<strong>25) tcpreplay &#8211; Tool to replay saved tcpdump files at arbitrary speeds</strong></p>
<p><strong></strong><br />
Tcpreplay is aimed at testing the performance of a NIDS by replaying real background network traffic in which to hide attacks. Tcpreplay allows you to control the speed at which the traffic is replayed, and can replay arbitrary tcpdump traces. Unlike programmatically-generated artificial traffic which doesn’t exercise the application/protocol inspection that a NIDS performs, and doesn’t reproduce the real-world anomalies that appear on production networks (asymmetric routes, traffic bursts/lulls, fragmentation, retransmissions, etc.), tcpreplay allows for exact replication of real traffic seen on real networks.<br />
<a href="http://tcpreplay.synfin.net" target="_blank"> http://tcpreplay.synfin.net</a><br />
<strong> 26) Dsniff &#8211; Various tools to sniff network traffic for cleartext insecurities</strong><br />
This package contains several tools to listen to and create network traffic:<br />
* arpspoof &#8211; Send out unrequested (and possibly forged) arp replies.<br />
* dnsspoof &#8211; forge replies to arbitrary DNS address / pointer queries<br />
on the Local Area Network.<br />
* dsniff &#8211; password sniffer for several protocols.<br />
* filesnarf &#8211; saves selected files sniffed from NFS traffic.<br />
* macof &#8211; flood the local network with random MAC addresses.<br />
* mailsnarf &#8211; sniffs mail on the LAN and stores it in mbox format.<br />
* msgsnarf &#8211; record selected messages from different Instant Messengers.<br />
* sshmitm &#8211; SSH monkey-in-the-middle. proxies and sniffs SSH traffic.<br />
* sshow &#8211; SSH traffic analyser.<br />
* tcpkill &#8211; kills specified in-progress TCP connections.<br />
* tcpnice &#8211; slow down specified TCP connections via “active”<br />
traffic shaping.<br />
* urlsnarf &#8211; output selected URLs sniffed from HTTP traffic in CLF.<br />
* webmitm &#8211; HTTP / HTTPS monkey-in-the-middle. transparently proxies.<br />
* webspy &#8211; sends URLs sniffed from a client to your local browser<br />
(requires libx11-6 installed).</p>
<p><a href="http://www.monkey.org/~dugsong/dsniff/" target="_blank">http://www.monkey.org/~dugsong/dsniff/</a><br />
<strong> 27) scapy &#8211; Packet generator/sniffer and network scanner/discovery</strong><br />
Scapy is a powerful interactive packet manipulation tool, packet generator, network scanner, network discovery, packet sniffer, etc. It can for the moment replace hping, 85% of nmap, arpspoof, arp-sk, arping, tcpdump, tethereal, p0f, ….<br />
In scapy you define a set of packets, then it sends them, receives answers, matches requests with answers and returns a list of packet couples (request, answer) and a list of unmatched packets. This has the big advantage over tools like nmap or hping that an answer is not reduced to (open/closed/filtered), but is the whole packet.<br />
<a href="http://www.secdev.org/projects/scapy/" target="_blank">http://www.secdev.org/projects/scapy/</a><br />
<strong> 28) Ntop &#8211; display network usage in top-like format</strong><br />
ntop is a Network Top program. It displays a summary of network usage by machines on your network in a format reminiscent of the unix top utility.It can also be run in web mode, which allows the display to be browsed with a web browser.<br />
<a href="http://www.ntop.org/" target="_blank">http://www.ntop.org/</a><br />
<strong> 29) NBTscan &#8211; A program for scanning networks for NetBIOS name information</strong><br />
NBTscan is a program for scanning IP networks for NetBIOS name information. It sends NetBIOS status query to each address in supplied range and lists received information in human readable form. For each responded host it lists IP address, NetBIOS computer name, logged-in user name and MAC address (such as Ethernet).</p>
<p><a href="http://www.unixwiz.net/tools/nbtscan.html" target="_blank">http://www.unixwiz.net/tools/nbtscan.html</a><br />
<strong> 30) tripwire &#8211; file and directory integrity checker</strong><br />
Tripwire is a tool that aids system administrators and users in monitoring a designated set of files for any changes. Used with system files on a regular (e.g., daily) basis, Tripwire can notify system administrators of corrupted or tampered files, so damage control measures can be taken in a timely manner.<br />
<a href="http://www.tripwire.com/" target="_blank"> http://www.tripwire.com/</a></p>
<img src="http://www.hacking-gurus.net/wp-content/plugins/pixelstats/trackingpixel.php?post_id=36&ts=1280469272" style="display:none;" alt="pixelstats trackingpixel"/>]]></content:encoded>
			<wfw:commentRss>http://www.hacking-gurus.net/2009/03/09/linux-security-tools/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Top 3 IP and Port Scanner</title>
		<link>http://www.hacking-gurus.net/2009/03/09/top-3-ip-and-port-scanner/</link>
		<comments>http://www.hacking-gurus.net/2009/03/09/top-3-ip-and-port-scanner/#comments</comments>
		<pubDate>Mon, 09 Mar 2009 03:38:02 +0000</pubDate>
		<dc:creator>r00t</dc:creator>
				<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Network Tools]]></category>
		<category><![CDATA[angry ip scanner]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[icmp tools]]></category>
		<category><![CDATA[ip]]></category>
		<category><![CDATA[ip address]]></category>
		<category><![CDATA[ip packets]]></category>
		<category><![CDATA[ipchain]]></category>
		<category><![CDATA[iptables]]></category>
		<category><![CDATA[Mac ip scanner]]></category>
		<category><![CDATA[namp]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[ping]]></category>
		<category><![CDATA[port scanner]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[superscan]]></category>
		<category><![CDATA[tcp ip]]></category>
		<category><![CDATA[TCP SYN]]></category>
		<category><![CDATA[traceroute]]></category>
		<category><![CDATA[windows ip scanner]]></category>

		<guid isPermaLink="false">http://www.hacking-gurus.net/?p=33</guid>
		<description><![CDATA[
		
		
		
		Port Scanner :
A port scanner is a piece of software designed to search a network host for open ports. This is often used by administrators to check the security of their networks and by crackers to compromise it. To portscan a host is to scan for listening ports on a single target host.

Nmap
Superscan
Angry Ip  [...]]]></description>
			<content:encoded><![CDATA[<div style="float: right; width: 42px; padding-right: 10px; margin: 0 0 0 10px;">
		<script type="text/javascript">
		<!--
		digg_url = "http://www.hacking-gurus.net/2009/03/09/top-3-ip-and-port-scanner/";
		digg_bgcolor = "#FFFFFF";
		digg_skin = "";
		digg_window = "new";
		digg_title = "Top+3+IP+and+Port+Scanner";
		digg_media = "news";
		digg_topic = "";
		digg_bodytext = "Port Scanner :A port scanner is a piece of software designed to search a network host for open ports. This is often used by administrators to check the security of their networks and by crackers to compromise it. To portscan a host is to scan for listening ports on a single target host.NmapSuperscanAngry Ip  Scanner1. NmapNmap (&#8221;Network Mapper&#8221;)...";
		//-->
		</script>
		<script src="http://digg.com/tools/diggthis.js" type="text/javascript"></script></div><p><strong>Port Scanner </strong>:</p>
<p>A <strong>port scanner</strong> is a piece of <span class="mw-redirect">software</span> designed to search a network host for open ports. This is often used by administrators to check the security of their networks and by <span class="mw-redirect">crackers</span> to compromise it. To <strong>portscan</strong> a host is to scan for listening ports on a single target host.<span id="more-33"></span></p>
<ol>
<li>Nmap</li>
<li>Superscan</li>
<li>Angry Ip  Scanner</li>
</ol>
<p>1. <strong>Nmap</strong></p>
<p><a name="intro">Nmap (&#8221;Network Mapper&#8221;) is a free and open source </a> utility for network exploration or security auditing.  Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics.  It was designed to rapidly scan large networks, but works fine against single hosts.  Nmap runs on all major computer operating systems, and both console and graphical versions are available.</p>
<p><a href="http://www.nmap.org" target="_blank">www.nmap.org</a></p>
<p>2. <strong>Superscan :</strong></p>
<p>SuperScan is a powerful freeware TCP port scanner, that includes a variety of additional networking tools like ping, traceroute, HTTP HEAD, WHOIS and more. It uses multi-threaded and asynchronous techniques resulting in extremely fast and versatile scanning. You can perform ping scans and port scans using any IP range or specify a text file to extract addresses from. Other features include TCP SYN scanning, UDP scanning, HTML reports, built-in port description database, Windows host enumeration, banner grabbing and more.</p>
<p><a href="http://www.foundstone.com/us/resources/proddesc/superscan.htm" target="_blank">www.foundstone.com/us/resources/proddesc/superscan.htm</a></p>
<p>3. <strong>Angry Ip  Scanner :</strong></p>
<p>Angry IP Scanner (or simply <em>ipscan</em>) is an open-source and cross-platform network scanner designed to be fast and simple to use. It scans IP addresses and ports as well as has many other features.</p>
<p>It is widely used by network administrators and just curious users around the world, including large and small enterprises, banks, and government agencies.</p>
<p>It runs on <em>Linux</em>, <em>Windows</em>, and <em>Mac OS X</em>, possibly supporting other platforms as well.</p>
<p><a href="http://www.angryziber.com/w/Home" target="_blank">www.angryziber.com/w/Home</a></p>
<img src="http://www.hacking-gurus.net/wp-content/plugins/pixelstats/trackingpixel.php?post_id=33&ts=1280469272" style="display:none;" alt="pixelstats trackingpixel"/>]]></content:encoded>
			<wfw:commentRss>http://www.hacking-gurus.net/2009/03/09/top-3-ip-and-port-scanner/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Net Tools</title>
		<link>http://www.hacking-gurus.net/2009/03/08/net-tools/</link>
		<comments>http://www.hacking-gurus.net/2009/03/08/net-tools/#comments</comments>
		<pubDate>Sun, 08 Mar 2009 13:50:09 +0000</pubDate>
		<dc:creator>r00t</dc:creator>
				<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Network Tools]]></category>
		<category><![CDATA[Wireless Security]]></category>
		<category><![CDATA[Anonymous]]></category>
		<category><![CDATA[cpu]]></category>
		<category><![CDATA[dhcp]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[DOS]]></category>
		<category><![CDATA[email bomber]]></category>
		<category><![CDATA[Encryption]]></category>
		<category><![CDATA[flooder]]></category>
		<category><![CDATA[ftp]]></category>
		<category><![CDATA[http]]></category>
		<category><![CDATA[ip]]></category>
		<category><![CDATA[ip address]]></category>
		<category><![CDATA[monitoring]]></category>
		<category><![CDATA[net meter]]></category>
		<category><![CDATA[netstat]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[nmap]]></category>
		<category><![CDATA[ping]]></category>
		<category><![CDATA[port scanner]]></category>
		<category><![CDATA[sniffer]]></category>
		<category><![CDATA[SNMP]]></category>
		<category><![CDATA[spoofer]]></category>
		<category><![CDATA[tracert]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[trojan hunter]]></category>
		<category><![CDATA[whois]]></category>

		<guid isPermaLink="false">http://www.hacking-gurus.net/?p=25</guid>
		<description><![CDATA[
		
		
		
		What is Net Tools :
Net Tools is a comprehensive set of host monitoring, network scanning, security, administration tools and much more, all with a highly intuitive user interface. It&#8217;s an ideal tool for those who work in the network security, administration, training, internet forensics or law enforcement internet crimes fields. Net Tools is mainly written [...]]]></description>
			<content:encoded><![CDATA[<div style="float: right; width: 42px; padding-right: 10px; margin: 0 0 0 10px;">
		<script type="text/javascript">
		<!--
		digg_url = "http://www.hacking-gurus.net/2009/03/08/net-tools/";
		digg_bgcolor = "#FFFFFF";
		digg_skin = "";
		digg_window = "new";
		digg_title = "Net+Tools";
		digg_media = "news";
		digg_topic = "";
		digg_bodytext = "What is Net Tools :Net Tools is a comprehensive set of host monitoring, network scanning, security, administration tools and much more, all with a highly intuitive user interface. It&#8217;s an ideal tool for those who work in the network security, administration, training, internet forensics or law enforcement internet crimes fields. Net Tools is mainly...";
		//-->
		</script>
		<script src="http://digg.com/tools/diggthis.js" type="text/javascript"></script></div><p><strong>What is Net Tools :</strong></p>
<p>Net Tools is a comprehensive set of host monitoring, network scanning, security, administration tools and much more, all with a highly intuitive user interface. It&#8217;s an ideal tool for those who work in the network security, administration, training, internet forensics or law enforcement internet crimes fields. Net Tools is mainly written in Microsoft Visual Basic 6, Visual C++, Visual C# and Visual Studio .NET.</p>
<p><span id="more-25"></span></p>
<p><strong>Screenshots</strong></p>
<p>Here are a few screenshots of Net Tools 5.                                    Click to enlarge.</p>
<p><a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot1.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH1.jpg" border="0" alt="Screenshot #1 - click to enlarge" width="75" height="75" /></a> <a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot2.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH2.jpg" border="0" alt="Screenshot #2 - click to enlarge" width="75" height="75" /></a> <a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot3.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH3.jpg" border="0" alt="Screenshot #3 - click to enlarge" width="75" height="75" /></a></p>
<p><a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot4.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH4.jpg" border="0" alt="Screenshot #4 - click to enlarge" width="75" height="75" /></a> <a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot5.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH5.jpg" border="0" alt="Screenshot #5 - click to enlarge" width="75" height="75" /></a> <a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot6.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH6.jpg" border="0" alt="Screenshot #6 - click to enlarge" width="75" height="75" /></a></p>
<p><a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot7.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH7.jpg" border="0" alt="Screenshot #7 - click to enlarge" width="75" height="75" /></a> <a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot8.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH8.jpg" border="0" alt="Screenshot #8 - click to enlarge" width="75" height="75" /></a> <a rel="lightbox" href="http://users.telenet.be/ahmadi/ntscreenshot9.JPG" target="_blank"><img src="http://users.telenet.be/ahmadi/ntSH9.jpg" border="0" alt="Screenshot #9 - click to enlarge" width="75" height="75" /></a></p>
<p><strong>Download Net Tools 5.0</strong></p>
<p><strong>[ <a href="http://www.mabsoft.com/NetTools5.0.70.zip">download</a> ] </strong><span class="style3">(version 5.0.70)</span></p>
<p><strong>Features</strong>:</p>
<p>Net Tools 5.0 (build 70) contains a whole variety of network tools. Here is a list of the most important tools:</p>
<p style="margin-bottom: 0pt;">1) IP Address Scanner<br />
2) IP Calculator<br />
3) IP Converter<br />
4) Port Listener<br />
5) Port Scanner<br />
6) Ping<br />
7) NetStat (2 ways)<br />
8 ) Trace Route (2 ways)<br />
9) TCP/IP Configuration<br />
10) Online &#8211; Offline Checker<br />
11) Resolve Host &amp; IP<br />
12) Time Sync<br />
13) Whois &amp; MX Lookup<br />
14) Connect0r<br />
15) Connection Analysator and protector<br />
16) Net Sender<br />
17) E-mail seeker<br />
18) Net Pager<br />
19) Active and Passive port scanner<br />
20) Spoofer<br />
21) Hack Trapper<br />
22) HTTP flooder (DoS)<br />
23) Mass Website Visiter<br />
24) Advanced Port Scanner<br />
25) Trojan Hunter (Multi IP)<br />
26) Port Connecter Tool<br />
27) Advanced Spoofer<br />
28) Advanced Anonymous E-mailer<br />
29) Simple Anonymous E-mailer<br />
30) Anonymous E-mailer with Attachment Support<br />
31) Mass E-mailer<br />
32) E-mail Bomber<br />
33) E-mail Spoofer<br />
34) Simple Port Scanner (fast)<br />
35) Advanced Netstat Monitoring<br />
36) X Pinger<br />
37) Web Page Scanner<br />
38) Fast Port Scanner<br />
39) Deep Port Scanner<br />
40) Fastest Host Scanner (UDP)<br />
41) Get Header<br />
42) Open Port Scanner<br />
43) Multi Port Scanner<br />
44) HTTP scanner (Open port 80 subnet scanner)<br />
45) Multi Ping for Cisco Routers<br />
46) TCP Packet Sniffer<br />
47) UDP flooder<br />
48) Resolve and Ping<br />
49) Multi IP ping<br />
50) File Dependency Sniffer<br />
51) EXE-joiner (bind 2 files)<br />
52) Encrypter<br />
53) Advanced Encryption<br />
54) File Difference Engine<br />
55) File Comparasion<br />
56) Mass File Renamer<br />
57) Add Bytes to EXE<br />
58) Variable Encryption<br />
59) Simple File Encryption<br />
60) ASCII to Binary (and Binary to ASCII)<br />
61) Enigma<br />
62) Password Unmasker<br />
63) Credit Card Number Validate and Generate<br />
64) Create Local HTTP Server<br />
65) eXtreme UDP Flooder<br />
66) Web Server Scanner<br />
67) Force Reboot<br />
68) Webpage Info Seeker<br />
69) Bouncer<br />
70) Advanced Packet Sniffer<br />
71) IRC server creater<br />
72) Connection Tester<br />
73) Fake Mail Sender<br />
74) Bandwidth Monitor<br />
75) Remote Desktop Protocol Scanner<br />
76) MX Query<br />
77) Messenger Packet Sniffer<br />
78) API Spy<br />
79) DHCP Restart<br />
80) File Merger<br />
81) E-mail Extractor (crawler / harvester bot)<br />
82) Open FTP Scanner<br />
83) Advanced System Locker<br />
84) Advanced System Information<br />
85) CPU Monitor<br />
86) Windows Startup Manager<br />
87) Process Checker<br />
88) IP String Collecter<br />
89) Mass Auto-Emailer (Database mailer; Spammer)<br />
90) Central Server (Base Server; Echo Server; Time Server; Telnet Server; HTTP Server; FTP Server)<br />
91) Fishing Port Scanner (with named ports)<br />
92) Mouse Record / Play Automation (Macro Tool)<br />
93) Internet / LAN Messenger Chat (Server + Client)<br />
94) Timer Shutdown/Restart/Log Off/Hibernate/Suspend/ Control<br />
95) Hash MD5 Checker<br />
96) Port Connect &#8211; Listen tool<br />
97) Internet MAC Address Scanner (Multiple IP)<br />
98) Connection Manager / Monitor<br />
99) Direct Peer Connecter (Send/Receive files + chat)<br />
100) Force Application Termination (against Viruses and Spyware)<br />
101) Easy and Fast Screenshot Maker (also Web Hex Color Picker)<br />
102) COM Detect and Test<br />
103) Create Virtual Drives<br />
104) URL Encoder<br />
105) WEP/WPA Key Generator<br />
106) Sniffer.NET<br />
107) File Shredder<br />
108) Local Access Enumerater<br />
109) Steganographer (Art of hiding secret data in pictures)<br />
110) Subnet Calculater<br />
111) Domain to IP (DNS)<br />
112) Get SNMP Variables<br />
113) Internet Explorer Password Revealer<br />
114) Advanced Multi Port Scanner<br />
115) Port Identification List (+port scanner)<br />
116) Get Quick Net Info<br />
117) Get Remote MAC Address<br />
118) Share Add<br />
119) Net Wanderer<br />
120) WhoIs Console<br />
121) Cookies Analyser<br />
122) Hide Secret Data In Files<br />
123) Packet Generator<br />
124) Secure File Splitting<br />
125) My File Protection (Password Protect Files, File Injections)<br />
126) Dynamic Switch Port Mapper<br />
127) Internet Logger (Log URL)<br />
128) Get Whois Servers<br />
129) File Split&amp;Merge<br />
130) Hide Drive<br />
131) Extract E-mails from Documents<br />
132) Net Tools Mini (Client/Server, Scan, ICMP, Net Statistics, Interactive, Raw Packets, DNS, Whois, ARP, Computer&#8217;s IP, Wake On LAN)<br />
133) Hook Spy<br />
134) Software Uninstaller<br />
135) Tweak &amp; Clean XP<br />
136) Steganographic Random Byte Encryption<br />
137) NetTools Notepad (encrypt your sensitive data)<br />
138) File Encrypter/Decrypter<br />
139) Quick Proxy Server<br />
140) Connection Redirector (HTTP, IRC, &#8230; All protocols supported)<br />
141) Local E-mail Extractor<br />
142) Recursive E-mail Extractor<br />
143) Outlook Express E-mail Extractor<br />
144) Telnet Client<br />
145) Fast Ip Catcher<br />
146) Monitor Host IP<br />
147) FreeMAC (MAC Address Editor)<br />
148) QuickFTP Server (+user accounts support)<br />
149) NetTools Macro Recorder/Player (Keybord and Mouse Hook)<br />
150) Network Protocol Analyzer<br />
151) Steganographic Tools (Picture, Sounds, ZIP Compression and Misc Methods)<br />
152) WebMirror (Website Ripper)<br />
153) GeoLocate IP<br />
154) Google PageRank Calculator<br />
155) Google Link Crawler (Web Result Grabber)<br />
156) Network Adapter Binder<br />
157) Remote LAN PC Lister<br />
158) Fast Sinusoidal Encryption<br />
159) Software Scanner<br />
160) Fast FTP Client<br />
161) Network Traffic Analysis<br />
162)                                    Network Traffic Visualiser<br />
163) Internet Protocol Scanner<br />
164) Net Meter (Bandwidth Traffic Meter)<br />
165) Net Configuration Switcher<br />
166) Advanced System Hardware Info<br />
167) Live System Information<br />
168) Network Profiler<br />
169) Network Browser<br />
170) Quick Website Maker and Web Gallery Creator<br />
171) Remote PC Shutdown<br />
172) Serial Port Terminal<br />
173) Standard Encryptor<br />
174) Tray Minimizer<br />
175) Extra Tools (nmap console &amp; win32 version)</p>
<p style="margin-top: 0pt;">Many extra features and utilities are included in this package!</p>
<p><strong>Download Net Tools 5.0</strong></p>
<p><strong>[ <a href="http://www.mabsoft.com/NetTools5.0.70.zip">download</a> ] </strong><span class="style3">(version 5.0.70)</span></p>
<img src="http://www.hacking-gurus.net/wp-content/plugins/pixelstats/trackingpixel.php?post_id=25&ts=1280469272" style="display:none;" alt="pixelstats trackingpixel"/>]]></content:encoded>
			<wfw:commentRss>http://www.hacking-gurus.net/2009/03/08/net-tools/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
