Friday, 7 February 2014

[AFF v0.1] Anonymous FTP Finder


Anonymous FTP Scanner (AFF) is a Security tool for penetration testers, network admins etc.

The tool is written in Python with wxPython as GUI and compiled with Py2exe.

AFF can scan large networks for Anonymous FTP Servers and regular FTP:s. Example of Anonymous FTP Server is network equipment, Multi Function Printers (MFP:s) etc. AFF can test if Anonymous FTP access can be used to store data. For example, hackers store/hide Trojans and other hacking tools in Anonymous FTP access.


[Router Password Decryptor v2.0] Recover internet login/PPPoE authentication passwords, Wireless WEP keys, WPA/WPA2 Passphrases from your Router/Modem configuration file


Router Password Decryptor is the FREE tool to instantly recover internet login/PPPoE authentication passwords, Wireless WEP keys, WPA/WPA2 Passphrases from your Router/Modem configuration file.

Currently it supports password recovery from following type of Routers/Modems
  • Cisco
  • Juniper
  • DLink
  • BSNL
In addition to this, it also has unique 'Smart Mode' feature (experimental) to recover passwords from any type of Router/Modem configuration file. It detects various password fields from such config file (XML only) and then automatically try to decrypt those passwords.

It also has quick link to Base64 Decoder which is useful in case you have found Base64 encoded password (ending with =) in the config file and automatic recovery is not working.

It is very easy to use tool with its cool GUI interface. Administrators & Penetration Testers will find it more useful to recover login passwords as well as wireless keys from the router configuration files.

It is fully portable and works on both 32-bit & 64-bit windows platforms starting from Windows XP to Windows 8.


Features & Benefits
  • Instantly decrypt and recover login/PPPoE/WEP/WPA/WPA2 Passwords from Router/Modem Config file
  • Supports Cisco/Juniper/DLink/BSNL modems/routers
  • Also has Smart Mode feature to recover password from any config file
  • Useful for Admins & Penetration Testers
  • Simple & elegant GUI interface makes it easy to use
  • Supports quick Drag & Drop of Router config file
  • Right click context menu to quickly copy the Password
  • Sort feature to arrange the displayed passwords
  • Save the recovered password list to HTML/XML/TEXT/CSV file
  • Fully Portable, does not require Java or .NET
  • Includes Installer for assisting you in local Installation & Uninstallation.

Thursday, 6 February 2014

[Rekall] Memory Forensics Analysis Framework

The Rekall Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer visibilty into the runtime state of the system. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts from volatile memory samples and provide a platform for further work into this exciting area of research.

Rekall should run on any platform that supports Python (http://www.python.org)

Rekall supports investigations of the following x86 bit memory images:
  • Microsoft Windows XP Service Pack 2 and 3
  • Microsoft Windows 7 Service Pack 0 and 1
  • Linux Kernels 2.6.24 to 3.10.
  • OSX 10.6-10.8.
Rekall also provides a complete memory sample acquisition capability for all major operating systems (see the tools directory).

[DDOSIM] Layer 7 DDoS Simulator


DDOSIM is a tool that can be used in a laboratory environment to simulate a distributed denial of service (DDOS) attack against a target server. The test will show the capacity of the server to handle application specific DDOS attacks. ddosim simulates several zombie hosts (having random IP addresses) which create full TCP connections to the target server. After completing the connection, ddosim starts the conversation with the listening application (e.g. HTTP server).

ddosim is written in C++ and runs on Linux. Its current functionalities include:
  • HTTP DDoS with valid requests
  • HTTP DDoS with invalid requests (similar to a DC++ attack)
  • SMTP DDoS
  • TCP connection flood on random port

Wednesday, 5 February 2014

[Racfsnow] Password cracker for RACF (IBM mainframe)


RACFSNOW is a highly optimised PC program for performing a dictionary attack against a RACF database, with the option of using a database unload (IRRDBU00) to validate the User IDs to attack.

It uses an ini file to control various parameters to enable focusing the attack on certain user IDs and or passwords.

Check here full documentation >> http://www.racfsnow.co.uk/racfsnow.pdf

[WormTrack] Detection of scanning worms, and machine scans



A Network IDS which allows detection of scanning worms on a Local Area Network by monitoring of anomalous ARP traffic. This allows detection of scanning threats on the network, without having a privileged access on a Switch to set up a dedicated Monitor PORT, nor does it require a constant updating of the rules engine to address new threats.



Tuesday, 4 February 2014

[Sub7 v0.5] Remote Administration Tool


This is the Newest Sub7 Remote Administration Tool..The Official Releases can only be found @ www.sub-7.org

Submitted by Diabl0
Password Mirror:www.sub-7.org