Security Scanners

Shadow Intrusion and Network Analysis Shadow Intrusion and Network Analysis- Shadow is an intrusion-detection system from the Naval Surface Warfare Center, shows promise in detecting previously unknown attacks for whi… Fail2Ban Fail2Ban- fail2ban is a POSIX/Linux tool used to ban IP addresses that generate too many password failures. ssh, iptables, ipfwadm and ipfw are currently supported. Rootkit Hunter Rootkit Hunter- Open-source GPL rootkit scanner for Unix-like systems. Scans for rootkits, trojans, backdoors and local exploits. Tests include scanning of plaintext and binary fi… Firestorm Network Intrusion Detection System Firestorm Network Intrusion Detection System- Firestorm is a high-performance GPL-licensed network intrusion detection system (NIDS). Features include being fully pluggable, easil… QuIDScor IDS/VA correlation QuIDScor IDS/VA correlation- QuIDScor is an Open Source project demonstrating the value in correlating information between Intrusion Detection Systems (such as Snort) and vulnerab… sLink project sLink project- sLink consists of a daemon and a suite of cgi programs which provide a web administration interface to an EDM/BOSCH Solution16 Alarm Panel. Systrace (Interactive Policy Generation for System Calls) Systrace (Interactive Policy Generation for System Calls)- Systrace enforces system call policies for applications by interactively constraining the application's access to the sy… Snortalog Snortalog- Perl-based log analysis tool that summarizes network security events from any native snort database format. Panoptis Panoptis- Network-IDS that detects and stops DoS/DDoS attacks by using real-time Cisco NetFlow data. LAk Intrusion Prevention System LAk Intrusion Prevention System- A single compilation of source, binaries, scripts and whitepapers on intrusion prevention systems. The aim is to quickly establish a working IPS w… Chkrootkit Chkrootkit- Provides open source application to check for presence of rootkits installed on Linux/Unix machines. Links to security related sites. Advanced Intrusion Detection Environment Advanced Intrusion Detection Environment- AIDE is a file integrity checker that supports regular expressions. Licensed with GPL. ACID (Analysis Console for Intrusion Databases) ACID (Analysis Console for Intrusion Databases)- Powerful PHP-based data analysis tool for network security events captured by many common IDS tools, including snort and tcpdump. Snort Snort- A free lightweight network intrusion detection system for UNIX and Windows. Honeyd Honeyd- Small daemon that creates virtual hosts on a network (honeypot). Can be used as a virtual honeynet or for network monitoring. For *BSD, GNU/Linux, and Solaris. PreludeIDS Technologies PreludeIDS Technologies- Distributed hybrid IDS framework, that collects and aggregates event reports from available security systems, and analyses them on a central system.