Software Map

Nettle is a cryptographic library that is designed to fit easily in more or less any context: in crypto toolkits for object-oriented languages (C++, Python, Pike, etc.), in applications like LSH or GNUPG, or even in kernel space. In most contexts, you need more than the basic cryptographic algorithms; you also need some way to keep track of available algorithms and their properties and variants. You often have some algorithm selection process, often dictated by a protocol you want to implement. And as the requirements of applications differ in subtle and not so subtle ways, an API that fits one application well can be a pain to use in a different context, which is why there are so many different cryptographic libraries around. Nettle tries to avoid this problem by doing one thing, the low-level crypto stuff, and providing a simple but general interface to it. In particular, Nettle doesn't do algorithm selection. It doesn't do memory allocation. It doesn't do any I/O. The idea is that one can build several application- and context-specific interfaces on top of Nettle and share the code, testcases, benchmarks, documentation, etc.

Scannedonly is a samba VFS module that ensures
that only files that have been scanned for viruses
are visible and accessible to the end user.
Scannedonly was developed because of scalability
problems with samba-vscan. Scannedonly comes in
two parts: a Samba VFS module and (one or more)
daemons. The daemon scans files and marks them
when they are known to be clean. The samba module
simply filters out files that aren't marked clean.

NessusWC provides a simple HTTP Web
interface to the Nessus Security Scanner. It connects to local
or remote Nessus version 2 daemons via SSL (using
OpenSSL libraries), retrieves the plugins, configures a scan
for a
single target host, and saves the results in HTML format. As
a result, even users with limited security knowledge can
scan their machines. Scan results are stored in a central
place.

Synspam uses Netfilter NFQUEUE to catch the source IP address of any machine connecting to your mail server, running multiple tests against it (RBL check, regexp on the reverse name, etc.) before forwarding the connection to the MTA. In order to have as few false positives as possible, a scoring system is used. If the source IP address is believed to be a spammer IP address, the connection can be dropped. There is a dry run mode if you just want to test it, which is the default.

Portecle is a GUI version of the command-line
keytool provided with the Java SDK. Portecle can
create many different types of keystores, generate
and store keys and their associated X.509
certificates, generate CSRs, import and store
trusted certificates, and perform maintenance on
keystore entries.

Off-the-Record (OTR) Messaging is a gaim plugin
which allows you to have private conversations
over the instant messaging system of your choice.
It provides encryption, which prevents someone who
intercepts your instant messages from reading
them; authentication, which ensures that the
correspondent is who you think it is; and perfect
forward secrecy, which ensures that no previous
conversation is compromised if you lose control of
your private keys.

Complemento is a collection of tools for
penetration testing. LetDown is a TCP flooder
written after reading the Fyodor article "TCP
Resource Exhaustion and Botched Disclosure".
Reverse raider is a domain scanner that uses brute
force wordlist scanning for finding a target's
subdomains or reverse resolution for a range of
IPs. Httsquash is an HTTP server scanner, banner
grabber, and data retriever. It can be used for
scanning large ranges of IPs for finding devices
or HTTP servers.

QPass is a password manager application. It enables you to store your confidential data encrypted. All entries are stored in a single-file database encrypted using the AES-256 algorithm. Each entry can contain a name, URL, username, password, and description. QPass can also generate random passwords based on mouse movements.

S-terminal lets you create a secure X terminal. Regular X terminals pass unencrypted data between you the remote machine. S-terminal creates an encrypted tunnel through which all X traffic passes. It replaces the remote xdm login screen with a local application that collects username and password, then sets up an ssh tunnel to the remote host and starts a session. It is highly configurable both in appearance and behavior, and deployed S-terminals can be remotely administered. Best of all, it can be added to a KNOPPIX CD to create an instant, bootable, secure X terminal CD.

OTPW is a one-time password authentication module
for POSIX systems. Its security concept is
optimized for users who prefer printed paper
password lists over portable electronics. In this
mode of operation, it provides better protection
against some attacks than other schemes (e.g.
S/KEY). It provides a library that can be linked
with any application that performs interactive
logins. A PAM wrapper is included for simple
installation under Linux.

AES Encryption for Shell Scripts provides strong encryption/decryption using the Advanced Encryption Standard algorithm "Rijndael" to do 128-bit encryption. It is intended for use in shell scripts or as part of a larger cryptosystem, not as a standalone program.

snowdrop is a steganographic text document and C
code watermarking tool that uses redundant,
tamper-evident and modification-proof information
embedded in the content itself, instead of the
medium, to simplify tracking of proprietary code
leaks, sensitive information disclosure, etc.