Software Map

Authforce is an HTTP authentication brute forcer. Using various methods, it attempts brute force username and password pairs for a site. It has the ability to try common usernames and passwords, username derivations, and common username/password pairs. It is used both to test the security of your site and to highlight the insecurity of HTTP authentication due to the fact that users just don't pick good passwords.

elfsign provides tools and an interface for
signing and verifying ELF binary images with
certificates. The functionality is similar to
Microsoft's Authenticode technology in that
binaries can be tagged with an owner as well as
proof that they have not been modified or tampered
with.

Scannedonly is a samba VFS module that ensures
that only files that have been scanned for viruses
are visible and accessible to the end user.
Scannedonly was developed because of scalability
problems with samba-vscan. Scannedonly comes in
two parts: a Samba VFS module and (one or more)
daemons. The daemon scans files and marks them
when they are known to be clean. The samba module
simply filters out files that aren't marked clean.

rfrandpass is a PHP application that generates random
passwords according to your specifications (minimum length,
number of alpha/numeric/symbol characters, etc). It
features many output crypt and hashing options. Also
included is a native PHP library for performing NT and LM
hashing.

dc3dd is a patched version of GNU dd to include a
number of features useful for computer forensics.

Synspam uses Netfilter NFQUEUE to catch the source IP address of any machine connecting to your mail server, running multiple tests against it (RBL check, regexp on the reverse name, etc.) before forwarding the connection to the MTA. In order to have as few false positives as possible, a scoring system is used. If the source IP address is believed to be a spammer IP address, the connection can be dropped. There is a dry run mode if you just want to test it, which is the default.

Soffid IAM offers a complete and integrated solution for controlling access to enterprise applications. It provides you with everything you need to obtain accurate information about who uses your systems, manage the whole user provisioning lifecycle, and bring users an enhanced experience by removing the need to enter credentials every time they access your business applications. It provides a single point of audit and control for assessing data security regulatory compliance.

YAPET is a small text based password manager. It
features the Blowfish encryption algorithm and
runs on most modern Unixes.

This patch integrates SecurID authentication services directly into the OpenSSH daemon, allowing users to use SecurID tokens directly as their passwords instead of relying on the clunky sdshell. It rides on the plain password auth architecture in OpenSSH to avoid requiring ChallengeResponse or securid-1@ssh.com style auth. It supports full privilege separation.

HardWall Firewall is an iptables firewall script
that provides port forwarding, packet filtering,
stateful packet inspection, port redirection,
masquerading, SNAT, DNAT, NAT, and bridging. It
functions as both a workstation firewall and an IP
forwarding firewall.

Portecle is a GUI version of the command-line
keytool provided with the Java SDK. Portecle can
create many different types of keystores, generate
and store keys and their associated X.509
certificates, generate CSRs, import and store
trusted certificates, and perform maintenance on
keystore entries.