  |
http://www.openssl.org/ - http://www.openssl.org/
The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. |
| |
Postfix Mail Transfer Agent - http://www.postfix.org
Drop-in Sendmail replacement by Wietse Venema. Offers several features that make it difficult to crack. |
| |
GNU Privacy Guard - http://www.gnupg.org/
OpenPGP (RFC2440) implementation from the GNU project. Encrypts/decrypts/signs/digests files using strong cryptography. FAQ, downloads, documentation. |
| |
The Coroner's Toolkit (TCT) - http://www.porcupine.org/forensics/tct.html
The Coroner's Toolkit (TCT) provides post-break-in data collection that could be useful in determining what happened. Less polished that the authors (Dan Farmer and Wietse Venema) usual work, the toolkit offers a patch-work of tools that help exhume interesting stuff from violated systems. Should be installed and examined before a break-in happens! |
| |
NMAP Network Scanner - http://www.nmap.org/
Efficient stealth port scanner. Downloads, e-mail lists, news. |
| |
Tripwire Inc. - http://www.tripwire.com/
Commercial version of the original Unix file integrity scanner. Calculates and stores signatures of file permissions, ownership and contents. Scans the same files later, detecting changes. |
| |
Tripwire Open Source - http://www.tripwire.org
Open source version of the original Unix file integrity scanner. Calculates and stores signatures of file permissions, ownership and contents. Scans the same files later, detecting changes. This open source version is targeted at Linux systems. |
| |
OpenSSH - Portable Distribution - http://www.openssh.org/portable.html
Open source implementation of SSH1 and SSH2 protocols. Ported from OpenBSD by the OpenSSH portability team. |
| |
LBNL's Network Research Group - http://www-nrg.ee.lbl.gov/nrg.html
Tools such as tcpdump and traceroute. |
| |
http://www.wwdsi.com/saint/ - http://www.wwdsi.com/saint/
(Security Administrator's Integrated Network Tool) Scans systems and networks and reports potential vulnerabilities. |
| |
http://hq.hellug.gr/~mcrypt - http://hq.hellug.gr/~mcrypt
A replacement for the unix crypt, using several block algorithms in several modes like cbc, and cfb. |
| |
North American Cryptography Archives - http://cryptography.org
Strong cryptographic software, libraries, and information about cryptography, data security, and privacy. |
| |
http://freshmeat.net/projects/lsof - http://freshmeat.net/projects/lsof
lsof is a tool for examining I/O channels open on your Unix system. These can include files, FIFOs and network sockets. This information can be extremely useful for security and a variety of other purposes. Works on most Unix-like systems. |
| |
http://www.sudo.ws/ - http://www.sudo.ws/
Run selected commands as root, with the users' own password. Allows the administrator to grant limited root privileges to a subset of users, without giving out the root password. |
| |
sudoscript - http://www.egbok.com/sudoscript
A pair of Perl scripts that provide an audited root shell using sudo and script(1). Tarballs, RPM's and individual components. |