Technology Tool Kit

Technology Tool Kit (160)

What?

The Technology Tool Kit (TTK) is intended to provide a collection of cyber security tools and guidance on their utilization.
  • OpenSource Cyber Security Tool Repository
  • Educational Awareness on Cyber Security Tool Utilization
  • Reference Materials for Cyber Security Tools
  • Map Legal and Regulatory Controls to Tools

Why?

Increase security awareness while reducing risk and ensuring budgets are focused on capabilities that provide optimal ROI.

Who?

The collection will be stocked with free and open source tools and made available to InfraGard members.

When?

Tools have being collected into the initial list, and published here. The TTK will be an ongoing program with continuous improvement efforts.

Children categories

Anonymizer

Anonymizer (1)

An anonymizer or an anonymous proxy is a tool that attempts to make activity on the Internet untraceable. It is a proxy server computer that acts as an intermediary and privacy shield between a client computer and the rest of the Internet. It accesses the Internet on the user's behalf, protecting personal information by hiding the client computer's identifying information.

View items...
Anti Malware

Anti Malware (8)

Detection and Removal of Viruses, Worms, Trojans, Rootkits, Dialers and Spyware

View items...
Configuration Management

Configuration Management (0)

Solution that let you define the state of a system via a baseline. Then you can monitor and alert for changes with an option to automatically enforce the correct configuration to ensure the right services are up and running, on the right platforms. This can ensure that correct security configurations remain in place and also assist in intrusion detection.

View items...
Encrypted Communication

Encrypted Communication (2)

Secure communication is when two entities are communicating and do not want a third party to listen in. For that they need to communicate in a way not susceptible to eavesdropping or interception. Secure communication includes means by which people can share information with varying degrees of certainty that third parties cannot intercept what was said.

View items...
Firewalls

Firewalls (3)

A firewall is a software or hardware-based network security system that controls the incoming and outgoing network traffic based on applied rule set. A firewall establishes a barrier between a trusted, secure internal network and another network (e.g., the Internet) that is not assumed to be secure and trusted.

View items...
Forensics

Forensics (4)

Computer forensics is a branch of digital forensic science pertaining to legal evidence found in computers and digital storage media. The goal of computer forensics is to examine digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing and presenting facts and opinions about the digital information.

View items...
Fuzzers

Fuzzers (2)

Fuzz testing or fuzzing is a software testing technique, often automated or semi-automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. There are two forms of fuzzing program, mutation-based and generation-based, which can be employed as white-, grey-, or black-box testing.

View items...
Malware Analysis

Malware Analysis (2)

Sandbox environments that can be used to investigate suspicious files. Generally will provide you back some detailed results outlining what such file did when executed inside an isolated environment.

View items...
Packet Crafting

Packet Crafting (6)

Packet crafting is a technique that allows network administrators or hackers to probe firewall rule-sets and find entry points into a targeted system or network. This is done by manually generating packets to test network devices and behaviour, instead of using existing network traffic.

View items...
Packet Sniffers

Packet Sniffers (10)

A packet analyzer (network analyzer, protocol analyzer, Ethernet sniffer or wireless sniffer) is a computer program or a piece of computer hardware that can intercept and log traffic passing over a digital network or part of a network. As data streams flow across the network, the sniffer captures each packet and, if needed, decodes the packet's raw data, showing the values of various fields in the packet, and analyzes its content.

View items...
Password Crackers

Password Crackers (13)

Password cracking is the process of recovering passwords from data that have been stored in or transmitted by a computer system. A common approach (brute-force attack) is to repeatedly try guesses for the password.

View items...
Password Safe

Password Safe (0)

Repository for encrypted, centralized storage of passwords.

View items...
Phishing

Phishing (1)

Software that indicates the potential presence of a rootkit on the system.

View items...
Port Scanner

Port Scanner (9)

A port scanner is a software application designed to probe a server or host for open ports. This is often used by administrators to verify security policies of their networks and by attackers to identify running services on a host with the view to compromise it.

View items...
Proxy

Proxy (0)

A proxy server is a server (a computer system or an application) that acts as an intermediary for requests from clients seeking resources from other servers. A client connects to the proxy server, requesting some service, such as a file, connection, web page, or other resource available from a different server and the proxy server evaluates the request as a way to simplify and control its complexity. Proxies were invented to add structure and encapsulation to distributed systems.

View items...
Recon

Recon (7)

Reconnaissance is the military term for exploring beyond the area occupied by friendly forces to gain vital information about enemy forces or features of the environment for later analysis and/or dissemination. In IT we explore to identify and gather as much data as we can through as many resources as we can identify including search engines, social media, public domain data, marketing information, company news releases, etc.

View items...
Reference

Reference (8)

Reference guides and links to cheat sheets for common commands or code in standard languages.

View items...
Rootkit Detectors

Rootkit Detectors (1)

Software that indicates the potential presence of a rootkit on the system.

View items...
Screen Recording

Screen Recording (2)

Screen recording can be useful when you need to record a how-to video to help someone learn how to use a program, record a walkthrough, or prepare for a presentation. Record here means you can create a video of whatever you are doing on your desktop, save the recording as a video file and send it to a coworker or upload it on YouTube.

View items...
Traffic Monitoring

Traffic Monitoring (5)

Solution that let you define the state of a system via a baseline. Then you can monitor and alert for changes with an option to automatically enforce the correct configuration to ensure the right services are up and running, on the right platforms. This can ensure that correct security configurations remain in place and also assist in intrusion detection.

View items...
Vulnerability Analysis

Vulnerability Analysis (19)

A vulnerability scanner is a computer program designed to assess computers, computer systems, networks or applications for weaknesses. Some of the solutions alsp provide the ability to exploit the vulnerability once identified, e.g. Metasploit. See also Web Vulnerability Scanners, which are designed to scan web applications.

View items...
Web Vulnerability Scanners

Web Vulnerability Scanners (21)

A web vulnerability scanner is a computer program designed to assess web applications for weaknesses. They can be run either as part of vulnerability management by those tasked with protecting systems - or by black hat attackers looking to gain unauthorized access.

View items...
Wireless Analysis

Wireless Analysis (5)

Solution that let you define the state of a system via a baseline. Then you can monitor and alert for changes with an option to automatically enforce the correct configuration to ensure the right services are up and running, on the right platforms. This can ensure that correct security configurations remain in place and also assist in intrusion detection.

View items...

AIDE (Advanced Intrusion Detection Environment) is a file and directory integrity checker.
It creates a database from the regular expression rules that it finds from the config file(s). Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms that are used to check the integrity of the file. All of the usual file attributes can also be checked for inconsistencies. It can read databases from older or newer versions. See the manual pages within the distribution for further info.

Friday, 29 May 2015 22:29 Written by in File Integrity Monitor

Aircrack is a suite of tools for 802.11a/b/g WEP and WPA cracking. It implements the best known cracking algorithms to recover wireless keys once enough encrypted packets have been gathered. . The suite comprises over a dozen discrete tools, including airodump (an 802.11 packet capture program), aireplay (an 802.11 packet injection program), aircrack (static WEP and WPA-PSK cracking), and airdecap (decrypts WEP/WPA capture files).

Friday, 29 May 2015 23:13 Written by in Password Crackers

Angry IP Scanner

Angry IP scanner is a very fast IP address and port scanner. It can scan IP addresses in any range as well as any their ports.

Angry IP scanner simply pings each IP address to check if it’s alive, then optionally it is resolving its hostname, determines the MAC address, scans ports, etc. The amount of gathered data about each host can be extended with plugins. Additional features: NetBIOS information (computer name, workgroup name, and currently logged in Windows user), favorite IP address ranges, web server detection, customizable openers, etc.

Scanning results can be saved to CSV, TXT, XML or IP-Port list files. With help of plugins, Angry IP Scanner can gather any information about scanned IPs. Anybody who can write Java code is able to write plugins and extend functionality of Angry IP Scanner.

In order to increase scanning speed, it uses multithreaded approach: a separate scanning thread is created for each scanned IP address.

Tuesday, 05 May 2015 06:07 Written by in Port Scanner

Codenomicon AppCheck is a security-focused application composition analysis scanner. What makes it unique is that it operates purely on provided binary images or compiled applications. No source code is required. Results of the composition analysis include identification of third party code and libraries included within the scanned software, vulnerabilities in the third party code that could be exposed in the scanned software, and software licenses such as AGPL, BSD, GPLv2, GPLv3 and LGPL associated with the third party code that may have implications for the whole software package.

Wednesday, 03 June 2015 23:15 Written by in Vulnerability Analysis

Argus is Network activity audit tool, they call it a "next-generation network flow technology tool", going from packets on the wire to advanced network flow data, to network forensics data; all in support of Network Operations, Performance and Security Management. If you need to know what is going on in your network, right now or historically, you will find Argus a useful tool. It currently runs on Mac OS X, Linux, Solaris, FreeBSD, OpenBSD, NetBSD, AIX, IRIX, Windows (under Cygwin) and OpenWrt, and has been ported to many hardware accelerated platforms, such as Bivio, Pluribus, Arista, and Tilera.

Wednesday, 03 June 2015 23:31 Written by in Traffic Monitoring

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit and other digital forensics tools. It can be used to analyze disk images and perform in-depth analysis of file systems (such as NTFS, FAT, HFS+, Ext3, and UFS) and several volume system types.

Friday, 22 May 2015 00:20 Written by in Forensics

AutoScan-Network is a network scanner (discovering and managing application). No configuration is required to scan your network. The main goal is to print the list of connected equipment in your network.

Wednesday, 03 June 2015 23:36 Written by in Port Scanner

BackTrack is a Linux-based pen-testing toolbox security professionals use to perform assessments in a purely native environment dedicated to hacking.

Users have easy access to a variety of tools ranging from port scanners to password crackers. Users can boot BackTrack directly from portable media without requiring installation, though permanent installation to hard disk is an option.

BackTrack arranges tools into 12 categories:  

  • Information gathering
  • Vulnerability assessment
  • Exploitation tools
  • Privilege escalation
  • Maintaining access
  • Reverse engineering
  • RFID tools
  • Stress testing
  • Forensics
  • Reporting tools
  • Services
  • Miscellaneous
Thursday, 04 June 2015 18:42 Written by in Vulnerability Analysis

The Become utility changes the current effective, or real, user and group identity to those specified on the command line. The default shell (/bin/sh) is then executed. UID and GID are specified numerically and do not have to be currently defined on the system.

 

Monday, 11 May 2015 13:44 Written by in General Purpose / Utility

The Browser Exploitation Framework (BeEF) is a powerful professional security tool. BeEF is pioneering techniques that provide the experienced penetration tester with practical client side attack vectors.  Unlike other security frameworks, BeEF focuses on leveraging browser vulnerabilities to assess the security posture of a target. This project is developed solely for lawful research and penetration testing.  BeEF hooks one or more web browsers as beachheads for the launching of directed command modules. Each browser is likely to be within a different security context, and each context may provide a set of unique attack vectors.

Wednesday, 03 June 2015 23:46 Written by in Vulnerability Analysis
Page 1 of 12

Warranty Disclaimer

Warranty Disclaimer: The FBI, InfraGard, and its affiliates provide information, including but not limited to software, documentation, training, and other guidance to be known as “materials”. The materials are provided as-is and we expressly disclaim any and all warranties, express or implied, including, and without limitation, the implied warranties of merchantability, fitness for a particular purpose, non-infringement, quiet enjoyment, and integration, and warranties arising out of course of dealing or usage of trade. You agree that, as between you and the FBI, InfraGard, and its affiliates, you are responsible for the outcome of the use of materials made available, including but not limited to adherence to licensing requirements, and taking legal and regulatory considerations into account. There is no guarantee of accuracy, completeness, timeliness, or correct sequencing of the information provided.