[Hook Analyser 3.0] A Freeware Malware Analysis and Cyber Threat Intelligence Software

In terms of improvements, a new module has been added - Cyber Threat Intelligence. Threat Intel module is being created to gather and analyse information related to Cyber Threats and vulnerabilities.

The module can be run using HookAnalyser.exe (via Option 6 ), or can be run directly.

The module present information on a web browser (with dashboard alike representation) with the following sections -

1. Threat Vectors - by (%) Country
2. Threat Vectors - by Geography 
3. Vulnerability / Threat Feed.

Project documentation - Click Here

Here is the screenshot of the Cyber Threat Intelligence dashboard -

Download Hook Analyser 3.0

[TestingWhiz] Test Automation Tool

TestingWhiz™ is an easy, intuitive and affordable solution based on a robust FAST® automation engine. It uses effortless and intelligent recording techniques like keyword-driven testing, data driven testing, Excel inputs, object recorder and Java scripting to offer powerful test automation solutions like automated regression testing, cross browser testing, image comparison and language translation.

TestingWhiz easily automates the testing of your web applications on multiple browsers. Record the test case just once and play it back in any browser. TestingWhiz saves your time in doing manual testing for new browser versions. Supported browsers: Internet Explorer, Mozilla Firefox, Google Chrome, Safari and Opera.

System Requirements
Operating System : Windows XP/ Windows Vista/ Windows 7/ Windows 8
Processor : Intel Pentium 4 or later
RAM : 1 GB (2 GB Recommended)
Free Disk Space : 300 MB
Java Version : JRE 6 or later

Browser Support
Internet Explorer: Version 7, 8, 9 and l0
Mozilla Firefox: Version 3.6 to version 20
Google Chrome: Version 19 to version 29
Apple Safari: Version 5.x
Opera: Version 12.x

Download TestingWhiz

[ModSecurity v2.7] Open Source Web Application Firewall

ModSecurity is an embeddable web application firewall, which means it can be deployed as part of your existing web server infrastructure (Apache, IIS7 and Nginx).

This deployment method has certain advantages:

1. No changes to existing network. It only takes a few minutes to add ModSecurity to your existing web servers. And because it was designed to be completely passive by default, you are free to deploy it incrementally and only use the features you need. It is equally easy to remove or deactivate it should decide you don't want it any more.
2. No single point of failure. Unlike with network-based deployments, you will not be introducing a new point of failure to your system.
3. Implicit load balancing and scaling. Because it works embedded in web servers, ModSecurity will automatically take advantage of the additional load balancing and scalability features. You will not need to think of load balancing and scaling unless your existing system needs them.
4. Minimal overhead. Because it works from inside the web server process there is no overhead for network communication and minimal overhead in parsing and data exchange.
5. No problem with encrypted or compressed content. Many IDS systems have difficulties analysing SSL traffic. This is not a problem for ModSecurity because it is positioned to work when the traffic is decrypted and decompressed.

ModSecurity is known to work well on a wide range of operating systems. Our customers are successfully running it on Linux, Windows, Solaris, FreeBSD, OpenBSD, NetBSD, AIX, Mac OS X, and HP-UX.

Download ModSecurity v2.7

[CrowdRE] Reverse Engineering Tool

A new project called CrowdRE aims to make it easy for the reverse engineering of complex applications working in collaboration with other users. Normally, the process reversing software from a complicated binary can consume much time, CrowdRE will help accelerate this process through teamwork.

CrowdRE, which is currently considered in an "alpha" stage of development, is available as an plugin for IDA Pro 6.3.120531. With the plug-in, developers can reverse engineer on one or more functions of a binary and upload the results to a server in the cloud that keeps track of everything in a central database. This allows customers to benefit from a job than other developers already have completed and share the progress that make the rest of the community. The database allows any search and each function can have different concurrent "commits".

Download CrowdRE

[OWASP CSRFTester] Facilitates Ability to Test Applications for CSRF

OWASP CSRFTester is a tool for testing CSRF vulnerability in websites. Just when developers are starting to run in circles over Cross Site Scripting, the 'sleeping giant' awakes for yet another web-catastrophe. Cross-Site Request Forgery (CSRF) is an attack whereby the victim is tricked into loading information from or submitting information to a web application for which they are currently authenticated. The problem is that the web application has no means of verifying the integrity of the request. The OWASP CSRFTester Project attempts to give developers the ability to test their applications for CSRF flaws. 

Download OWASP CSRFTester

[Faraday] Penetration Test IDE

Faraday introduces a new concept (IPE) Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

Features:

* +40 Plugins (Metasploit, Amap, Arachini, Dnsenum, Medusa, Nmap, Nessus, w3af, Zap and More!)

* Collaborative support 

* Information Highlighting 

* Knowledge Filtering 

* Information Dashboard 

* Conflict Detection 

* Support for multiple Workspaces 

* IntelliSense Support 

* Easy Plugin Development 

* XMLRPC, XML and Regex Parsers

Download Faraday

[APKinspector] Powerful GUI tool to analyze the Android applications

The goal of this project is to aide analysts and reverse engineers to visualize compiled Android packages and their corresponding DEX code. APKInspector provides both analysis functions and graphic features for the users to gain deep insight into the malicious apps:

• CFG

• Call Graph

• Static Instrumentation

• Permission Analysis

• Dalvik codes

• Smali codes

• Java codes

• APK Information

What’s new?

UI Improvement:

• Automatically installation
• Fine-grained Graph View to Source View
• Call Graph
• Navigation
• Better display of Control Flow Graph

New Analysis Features:

• Reverse the Code with Ded for Java Analysis
• Static Instrumentation
• Combine Permission Analysis  

Download APKinspector