A freeware tool to trace TCP/UDP/… sessions and fetch application data from snoop or tcpdump logs. This is a type of “any-snarf” program, as it will fetch telnet sessions, FTP files, HTTP transfers (HTML, GIF, JPEG, …), SMTP emails, … from the captured data inside network traffic logs.
http://chaosreader.sourceforge.net/

dsniff

dsniff is a collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.).
http://monkey.org/~dugsong/dsniff/

GFI Backup – Business Edition

GFI Backup – Business Edition provides easy-to-use centralized backup with effortless restore. It delivers simple web-based management for backing up entire networks and permits restore from any location using standard Zip archives – no vendor lock-in!
http://www.gfi.com/business-backup-software/

GFI Backup – Home Edition

GFI Backup is a free, easy-to-use and complete solution, designed for secure backups of all your important documents, pictures, and more. This tool allows you to back up all your data via a simple but smart wizard-driven interface.
http://www.gfi.com/backup-hm/

GFI EndPointSecurity

GFI EndPointSecurity lets you control the use of portable storage devices such as USB drives, iPods and PDAs on your network. With GFI EndPointSecurity you are able to prevent users from stealing confidential company data or introducing malware to your network.
http://www.gfi.com/endpointsecurity/

GFI EventsManager

GFI EventsManager is an event monitoring, event management and archiving solution used by thousands of customers. Competitively priced, it provides network-wide control and management of Windows event logs, W3C logs, Syslog events and SNMP traps generated by network resources and hardware such as firewalls, routers and sensors.
http://www.gfi.com/eventsmanager/

GFI LANguard

GFI LANguard is a complete vulnerability management solution, which allows you to scan, detect, assess and rectify security vulnerabilities on your network. It also provides the tools to remediate vulnerabilities and install missing patches on the network.
http://www.gfi.com/lannetscan/

GFI MailEssentials for Exchange/SMTP

GFI MailEssentials is a server-based anti-spam and anti-phishing solution for Exchange/SMTP/Lotus, which is used by over 80,000 customers worldwide. This solution uses multiple anti-spam filtering techniques to capture 99% of spam, while minimizing false positives.
http://www.gfi.com/mes/

GFI MailSecurity for Exchange/SMTP

GFI MailSecurity for Exchange/SMTP is an email security, exploit detection, threats analysis and anti-virus solution that removes all types of email-borne threats before they can affect an organization’s email users.
http://www.gfi.com/mailsecurity/

GFI Network Server Monitor

GFI Network Server Monitor checks your network & servers for failures and fixes them automatically, before your network users notice them! Alerts can be sent by email, pager or SMS, for instant problem notification.
http://www.gfi.com/nsm/

GFI WebMonitor

GFI WebMonitor polices Internet access, reports on users’ website browsing habits and downloads, while providing web security features such as anti-virus and malware protection in real-time for SMBs.
http://www.gfi.com/webmon/

hping3

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn’t only able to send ICMP echo requests.
http://www.hping.org/download.php

IDABench

IDABench is a Web interface to many intrusion analysis tools. By the use of simple plug-ins, it allows an analyst to twist and turn hourly packet logs through such utilities as tcpdump, ngrep, tethereal, etc.
http://freshmeat.net/projects/idabench/

IPTraf

IPTraf is a console-based network statistics utility for Linux.  It gathers a variety of figures such as TCP connection packet and byte counts, interface statistics and activity indicators, TCP/UDP traffic breakdowns, and LAN station packet and byte counts.
http://iptraf.seul.org/download.html

Metagoofil

Metagoofil is an information gathering tool designed for extracting metadata of public documents (pdf,doc,xls,ppt,odp,ods) availables in the target/victim websites.
http://www.edge-security.com/metagoofil.php

Metasploit

Metasploit provides useful information and tools for penetration testers, security researchers, and IDS signature developers.
http://www.metasploit.com/framework/download/

Nessus

The Nessus vulnerability scanner is the world-leader in active scanners, featuring high-speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of your security posture.
http://www.nessus.org/download/

netcat

Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol.
http://netcat.sourceforge.net/download.php

Ngrep

ngrep strives to provide most of GNU grep’s common features, applying them to the network layer.  ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets.
http://ngrep.sourceforge.net/download.html

Nmap

Nmap (“Network Mapper”) is a free and open source utility for network exploration or security auditing.http://www.nmap.org/download.html

p0f

p0f is a versatile passive OS fingerprinting and masquerade detection utility, to be used for evidence or information gathering on servers, firewalls, IDSes, and honeypots, for pen-testing, or just for the fun of it.
http://lcamtuf.coredump.cx/p0f.shtml

Webscarab

WebScarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. It is written in Java, and is thus portable to many platforms. WebScarab has several modes of operation, implemented by a number of plugins.
http://www.owasp.org/index.php/Category:OWASP_Download

Wireshark

Wireshark is the world’s foremost network protocol analyzer, and is the de facto (and often de jure) standard across many industries and educational institutions.
http://www.wireshark.org/download.html

copyright from Ryan Underdown

Introduction

BackTrack is one of the more popular distributions in the white hat circles. It is specially suited for penetration testing, with more than 300 tools available for the task. Like both Helix and Protech, BackTrack is based on Ubuntu. This means good stability and hardware detection and a whole lot of software that can be easily obtained.

Sound quite interesting. Let’s see how it behaves. We’re going to check version 4 Beta.

Lots of great stuff

Like most Linux distros – and definitely all forensics/security-oriented tools, BackTrack works primarily as a live CD, with good hardware detection and low memory footprint, intended to make it usable even on older machines. It is also possible to install BackTrack, should one desire.

The boot menu is simple and elegant, with three options.

The second option (Console no FB) stands for Console no Framebuffers, i.e. the failsafe mode with minimal graphics that should work well on all hardware. Thanks k finity! As to the third option, MSRAMDUMP, I did try booting it, but this produced an error and threw me back into the boot menu.

Anyhow …

The distro maintains its elegance by booting into the best-looking console I have seen, with stylish color gradients and mirror effects. You can begin working instantly on the command-line or boot into GUI desktop by issuing startx command.

One thing worth noting in the screenshot above is the mounting error on hda1, which is formatted with Ext4, a relatively new filesystem. In fact, the system I booted BackTrack on hosts a Jaunty install, with the Ext4 root partition. This is something that will probably be solved in future releases.

Desktop

The desktop is simple and functional, running a lightweight KDE3 manager. You get a simple wallpaper with dragon-like theme. Another interesting element is the Run box embedded in the panel, which allows you to run applications without invoking a terminal first.

The network is not enabled by default and you’ll have to fire it up manually.

Tools

BackTrack is all about lots and lots of hacking tools. Once again, I’m only going to present the tools, not show you how to use them. These tools are all double-edged swords, and without the right amount of respect, skill and integrity, you may cause more harm than good. Furthermore, do not deploy them in a production environment without the explicit approval from system administrators and INFOSEC people.

The tools can all be found under Backtrack in the menu, arranged into sub-categories. The collection is long and rich and it will take you a long time pouring over all of them, let alone mastering them. Most of the tools are command-line utilities, with menu items a link to the console with the relevant tool running inside it.

A few practical examples, there’s the venerable nmap, Hydra and hping3:

You may also want to audit Bluetooth devices. On the test machine, there are no Bluetooth devices, which explains the error you see below.

Then, there’s the gdb (GNU Debugger) for analyzing crash dumps and memory cores.

Last but not the least, you get the great Wireshark (formerly Ethereal):

Other programs

BackTrack is mainly loaded with security applications, however it also has a reasonable assortment of “normal” programs. You get Firefox, already configured to use the exceptional Noscript extension.

You also get Synaptic, which makes software management easy and pleasant:

You also have Wine for Windows software.

And then, you can change wallpapers and get classic KDE looks.

How I miss that wallpaper! To the best of my knowledge, it has not been included in most KDE releases since Kubuntu 6.06.

You can find more stuff in the K-menu:

Errors

Being a beta, BackTrack 4 was not the most stable distro. In addition to the Ext4 error during the boot, there were some other problems. For example, both Lynx text browser and QtParted partitioning software refused to work.

Other things

One thing that may bother you is the issue with the documentation section on the official site. It’s secure site, self-signed with an expired certified, at last when this article was written, although the expiration has been in effect since August 2008.

This is not something you expect to see on a site catering to the security-conscious audience.

Furthermore, there’s the small issue of inconsistency when it comes to application names. For example, BlueSmash shows up as blue-smash on the command line, hping3 has a capital H in the menus, etc. BackTrack itself also comes in two flavors, with both lowercase and uppercase Ts.

Overall, there were no big issues, except for the occasional application errors.

Some of LAN Speed Test v2.0 Features include…

• Completely portable – No installation needed
• Incredibly small (120KB) and can run from a hard drive, USB Flash drives, etc.
• Compatable with all Windows 2000 & up
• Version 2.0 registration is now only $5.00!
• Very Fast!  Most tests are less than 1 minute
• New window that displays progress bar and allows user to cancel at any time
• New Open/Save option to .csv file
• Individual profiles automatically saved to .ini file to remember all settings
• Selectable Speed Measurements
• Command Line Mode (Allows network administrators to start the test from the client’s workstation and view the automatically generated .csv file from anywhere on the network)
• And much more!

Lan Speed Test v2.0.1 (with setup)

Filed under: Internet ]]> http://rajwec.wordpress.com/2010/07/20/lan-speed-test/feed/ 0 rajwec LST2 Get it from CNET Download.com! http://rajwec.wordpress.com/2010/07/13/wifi-hacking-backtrack/ http://rajwec.wordpress.com/2010/07/13/wifi-hacking-backtrack/#comments Tue, 13 Jul 2010 16:22:09 +0000 rajwec http://rajwec.wordpress.com/?p=398 ]]> This method is being used to crack the wep passwords using BackTrack Live…cd.. NOw lets read it..lol

You already know that if you want to lock down your Wi-Fi network, you should opt for WPA encryption because WEP is easy to crack. But did you know how easy? Take a look.

Today we’re going to run down, step-by-step, how to crack a Wi-Fi network with WEP security turned on. But first, a word: Knowledge is power, but power doesn’t mean you should be a jerk, or do anything illegal. Knowing how to pick a lock doesn’t make you a thief. Consider this post educational, or a proof-of-concept intellectual exercise.

Dozens of tutorials on how to crack WEP are already all over the internet using this method. Seriously—Google it. This ain’t what you’d call “news.” But what is surprising is that someone like me, with minimal networking experience, can get this done with free software and a cheap Wi-Fi adapter. Here’s how it goes.
What You’ll Need

Unless you’re a computer security and networking ninja, chances are you don’t have all the tools on hand to get this job done. Here’s what you’ll need:

A compatible wireless adapter—This is the biggest requirement. You’ll need a wireless adapter that’s capable of packet injection, and chances are the one in your computer is not. After consulting with my friendly neighborhood security expert, I purchased an Alfa AWUS050NH USB adapter, pictured here, and it set me back about $50 on Amazon. Update: Don’t do what I did. Get the Alfa AWUS036H, not the US050NH, instead. The guy in this video below is using a $12 model he bought on Ebay (and is even selling his router of choice). There are plenty of resources on getting aircrack-compatible adapters out there.
A BackTrack 3 Live CD. We already took you on a full screenshot tour of how to install and use BackTrack 3, the Linux Live CD that lets you do all sorts of security testing and tasks. Download yourself a copy of the CD and burn it, or load it up in VMware to get started. (I tried the BackTrack 4 pre-release, and it didn’t work as well as BT3. Do yourself a favor and stick with BackTrack 3 for now.)
A nearby WEP-enabled Wi-Fi network. The signal should be strong and ideally people are using it, connecting and disconnecting their devices from it. The more use it gets while you collect the data you need to run your crack, the better your chances of success.
Patience with the command line. This is an ten-step process that requires typing in long, arcane commands and waiting around for your Wi-Fi card to collect data in order to crack the password. Like the doctor said to the short person, be a little patient.

Crack That WEP

To crack WEP, you’ll need to launch Konsole, BackTrack’s built-in command line. It’s right there on the taskbar in the lower left corner, second button to the right. Now, the commands.

First run the following to get a list of your network interfaces:

airmon-ng

The only one I’ve got there is labeled ra0. Yours may be different; take note of the label and write it down. From here on in, substitute it in everywhere a command includes (interface).

Now, run the following four commands. See the output that I got for them in the screenshot below.

airmon-ng stop (interface)
ifconfig (interface) down
macchanger –mac 00:11:22:33:44:55 (interface)
airmon-ng start (interface)

If you don’t get the same results from these commands as pictured here, most likely your network adapter won’t work with this particular crack. If you do, you’ve successfully “faked” a new MAC address on your network interface, 00:11:22:33:44:55.

Now it’s time to pick your network. Run:

airodump-ng (interface)

To see a list of wireless networks around you. When you see the one you want, hit Ctrl+C to stop the list. Highlight the row pertaining to the network of interest, and take note of two things: its BSSID and its channel (in the column labeled CH), as pictured below. Obviously the network you want to crack should have WEP encryption (in the ENC) column, not WPA or anything else.

Like I said, hit Ctrl+C to stop this listing. (I had to do this once or twice to find the network I was looking for.) Once you’ve got it, highlight the BSSID and copy it to your clipboard for reuse in the upcoming commands.

Now we’re going to watch what’s going on with that network you chose and capture that information to a file. Run:

airodump-ng -c (channel) -w (file name) –bssid (bssid) (interface)

Where (channel) is your network’s channel, and (bssid) is the BSSID you just copied to clipboard. You can use the Shift+Insert key combination to paste it into the command. Enter anything descriptive for (file name). I chose “yoyo,” which is the network’s name I’m cracking.

You’ll get output like what’s in the window in the background pictured below. Leave that one be. Open a new Konsole window in the foreground, and enter this command:

aireplay-ng -1 0 -a (bssid) -h 00:11:22:33:44:55 -e (essid) (interface)

Here the ESSID is the access point’s SSID name, which in my case is yoyo. What you want to get after this command is the reassuring “Association successful” message with that smiley face.

You’re almost there. Now it’s time for:

aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:55 (interface)

Here we’re creating router traffic to capture more throughput faster to speed up our crack. After a few minutes, that front window will start going crazy with read/write packets. (Also, I was unable to surf the web with the yoyo network on a separate computer while this was going on.) Here’s the part where you might have to grab yourself a cup of coffee or take a walk. Basically you want to wait until enough data has been collected to run your crack. Watch the number in the “#Data” column—you want it to go above 10,000. (Pictured below it’s only at 854.)

Depending on the power of your network (mine is inexplicably low at -32 in that screenshot, even though the yoyo AP was in the same room as my adapter), this process could take some time. Wait until that #Data goes over 10k, though—because the crack won’t work if it doesn’t. In fact, you may need more than 10k, though that seems to be a working threshold for many.

Once you’ve collected enough data, it’s the moment of truth. Launch a third Konsole window and run the following to crack that data you’ve collected:

aircrack-ng -b (bssid) (file name-01.cap)

Here the filename should be whatever you entered above for (file name). You can browse to your Home directory to see it; it’s the one with .cap as the extension.

If you didn’t get enough data, aircrack will fail and tell you to try again with more. If it succeeds, it will look like this:

The WEP key appears next to “KEY FOUND.” Drop the colons and enter it to log onto the network.

Then make sure you set the max upload speed to at least half of your connection upload speed (this will ensure faster downloading) because high upload speeds are the main cause for slow downloads.

Do not use randomized port on every startup, as this will have problems with your firewall and this is highly unnecessary.

Choose the correct number of maximum connections, too much connections can slow down your torrent download speed instead of speeding them up. For best results use uTorrent’s speed guide found on Options >Speed Guide, and it will suggest you the best settings. For users with a max upload speed of 256 Kbits/s uTorrent suggeests 35 connections per torrent and 60 in total. Check the total speed guide for your type of connection here.

Run as few torrents as possible, this means that your connection can handle and deliver maximum speed for the running torrents. I suggest running 2 torrents if you have a 256 Kbits/s upload speed connection and 1 torrent at a time if you have a 128 Kbits/s upload connection.
When selecting from similar torrents select from the best seeds/peers ratio as well as swarm speed. Here is a guide on how a perfect torrent should be.

If you are using a DSL router then enable port forwarding in your router. If you are using a DSL Modem this is unnecessary.

Enable UPnP Port Mapping And NAT-PMP Port Mapping, (found on Options > Preferences > Connection. If you are manually forwarding your port than keep it UNCHECKED, but if you don’t know what port forwarding is or you?re not forwarding the port manually than CHECK it.
Do not use windows firewall, windows firewall simply hates torrents and you will have a truckload of speed problems with it. Disable it permanantly, and use a secure firewall such as Comodo Firewall or Eset.

Manage your upload slots per torrent, usually it should be 2-3 per torrent. More than that will reduce the download speed of your torrents.

Increase the Net.max_Halfopen Connections to 50-60 in uTorrent Advanced configaration panel, there is also a patch for windows XP to increase this limit. In Windows XP increase the limit to 100 connections.

Enable the following, they greatly improve your download speed.

USE PORT FORWARDING TO ACHIEVE MAXIMUM DOWNLOAD SPEED

DOWNLOAD LINK FOR UTORRENT

http://www.utorrent.com/downloads/complete?os=win