[anonym00se]

After reading:
http://www.networkcomputing.com/1110/1110ws1.html

It got me thinking about what the most common
security tools in use are, so what is every ones favourite tool, be it for IDS, auditing,
crypto etc and for what platform.

[deRanged]

the three I've used most in the past while are
openssl, l0phtcrack and ultrascan.
(solaris, nt, nt)

it's surprising how much you can get done with just those three.


[This message has been edited by deRanged (edited 29-05-2000).]

[anonym00se]

My current favourites would have to be:

network scanner
----------------
nmap (Unix)
http://www.insecure.org/nmap

IDS
---
snort (Unix)
http://www.clark.net/~roesch/security.html

OS Hardening
------------
Titan (Solaris, SunOS)
http://www.fish.com/titan/

Auditing
--------
Sara (Unix), Saint(Unix), ISS(Win), whisker(Unix)
http://www-arc.com/sara/sara.html
http://www.wwdsi.com/saint/
http://www.iss.net/securing_e-busine...ernet_scanner/
http://www.wiretrip.net/rfp/p/doc.asp?id=21&iface=2

OS
---

openBSD
http://www.openbsd.org - ok ok I know it
isnt a security tool, but it is so damn
cool.

[deRanged]

you must have thought about that list for a while

[anonym00se]

Surprisingly enough no, I saw your reply
like 10 min ago and thought I'd lash my
own together. After all I would use alot
of those daily, so it really wasnt that
hard to decide.

I did however leave out Crypto tools as
I just couldnt decide.

[deRanged]

what crypto tools do you use?
I know I'm being awkward but I'm in the middle of some ssl stuff atm so it's topical.
I'm using a mix of openssl, RSA's ssl_j and baltimore's j_ssl. with openssl as my favourite.

[This message has been edited by deRanged (edited 29-05-2000).]

[anonym00se]

Off the top of my head

I would use

Win32
------
pgp - http://www.pgpi.com
scramdisk - http://www.scramdisk.clara.net/

Unix
----

pgp
mcrypt - http://mcrypt.hellug.gr/
libMcrypt - http://mcrypt.hellug.gr/#_libmcrypt

I know there are lots more but I really
cant think of them atm.

Hopefully I will manage to get around to giving openBSDs swap encryption a go some time soon

On a slightly related note I also use

srm (unix) and eraser (win) for secure
file deletion
http://www.infowar.co.uk/thc/ http://www.tolvanen.com/eraser/

[BrainDead]

snoop/tcpdump and telnet, what more do you need?

[anonym00se]

Ok please explain how telnet is a security tool!!!

[BrainDead]

Well, telnet may not be the fastest means of doing things, but it's always there and can be used for a good variety of things.

[BrainDead]

Besides, ftp is much better for generating core dumps than telnet....ahhh those 8 meg core dumps at the press of a key

[anonym00se]

It is all well and good being able to get a computer to core dump, but being able to get any usefull info with that core file is a different kettle of fish.

[BrainDead]

Ahh, I know, but all these fancy tools make life just too easy

[anonym00se]

I for one dont want to have to waste time on things that can be automated. It just cuts into the time you have to test for "unknown" problems.

[Kali]

my syringe and a baseball bat.
what more security do you need?