NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Freeware/shareware scanner to do an analysis against my FW-1



Decide on your own favorite...
no one tool is right for everyone.

Here is a good list.... to start with....

Nessus -- http://www.nessus.org --
 Netcat -- http://www.l0pht.com/~weld/netcat/ (unofficial site) --
 Tcpdump -- http://www.tcpdump.org --
 Snort -- http://www.snort.org --
 SAINT -- http://www.wwdsi.com/saint/ --
 Ethereal -- http://ethereal.zing.org/ --
 Whisker -- http://www.wiretrip.net/rfp/p/doc.asp?id=21&iface=2 --
 Internet Security Scanner -- www.iss.net (COMMERCIAL) --
 Abacus Portsentry -- http://www.psionic.com/abacus/portsentry/ --
 DSniff -- http://naughty.monkey.org/~dugsong//dsniff/ --
 Tripwire -- http://www.tripwire.com/ (COMMERCIAL) --
 Cybercop Scanner --
http://www.pgp.com/asp_set/products/tns/ccscanner_intro.asp (COMMERCIAL) --
 Hping2 -- http://www.kyuzz.org/antirez/hping/ --
 SARA -- http://www-arc.com/sara/ --
 Sniffit -- http://reptile.rug.ac.be/~coder/sniffit/sniffit.html --
 SATAN -- http://www.fish.com/satan/ --
 IPFilter -- http://coombs.anu.edu.au/ipfilter/ --
 ipfwadm/ipchains/netfilter/iptables --
http://netfilter.kernelnotes.org/ --
 Firewalk -- http://www.packetfactory.net/Projects/Firewalk/  --
 Strobe -- http://www.insecure.org/nmap/index.html#other (unofficial
site) --
 L0pht Crack -- http://www.l0pht.com/l0phtcrack/ (COMMERCIAL) --
 John The Ripper -- http://www.openwall.com/john/ --
 Hunt -- http://www.cri.cz/kra/index.html#HUNT --
 OpenSSH -- http://www.openssh.com/ --
 tcp wrappers -- ftp://ftp.porcupine.org/pub/security/index.html --
 SSH -- http://www.ssh.com/commerce/index.html (some versions
COMMERCIAL) --
 Ntop -- http://www.ntop.org --
 traceroute/ping/telnet/NAT -- http://www.linux.com (or most other UNIX) --
 scanlogd -- http://www.openwall.com/scanlogd/ --
 sam spade -- http://www.samspade.org/ --
 NFR -- http://www.nfr.com (COMMERCIAL) --
 logcheck -- http://www.psionic.com/abacus/logcheck/ --
 Shadow --
ftp://piast.t19.ds.pwr.wroc.pl/pub/linux/shadow/shadow-current.tar.gz --
 Perl -- http://www.perl.org --
 Ngrep -- http://www.packetfactory.net/Projects/ngrep/ --
 Cheops -- http://www.marko.net/cheops/ --
 Vetescan -- http://www.self-evident.com/ --
 Retina -- http://www.eeye.com/html/Products/Retina.html --
 Libnet -- http://www.packetfactory.net/libnet/ --
 crack -- http://www.users.dircon.co.uk/~crypto/ --
 Cerberus Internet Scanner --
http://www.cerberus-infosec.co.uk/cis.shtml --
 Swatch -- http://www.stanford.edu/~atkins/swatch/ --
 OpenBSD -- http://www.openbsd.org --
 Nemesis -- http://www.packetfactory.net/Projects/nemesis/  --
 LSOF -- ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/ --
 Lids -- http://www.turbolinux.com.cn/lids/ --
 IPTraf -- http://cebu.mozcom.com/riker/iptraf/ --
 IPLog -- http://ojnk.sourceforge.net/ --
 Fragrouter -- http://www.anzen.com/research/nidsbench/ --
 Queso -- http://www.apostols.org/projectz/queso/ --



Date: Wed, 10 Jan 2001 13:14:44 -0600
From: James Edwards <[email protected]>
Subject: RE: [FW1] Freeware/shareware scanner to do an analysis against my
FW-1

My mistake.  I guess I should have read the original closer instead of
responding like everyone else did.

Yes, nmap is about the end all and be all for freebies.  Will do just about
anything most of the expensive ones will do except provide you a GUI.

Jim Edwards

- -----Original Message-----
From: Steven Lee [mailto:[email protected]]
Sent: Wednesday, January 10, 2001 1:06 PM
To: James Edwards
Cc: 'Allan Pratt'; [email protected]
Subject: Re: [FW1] Freeware/shareware scanner to do an analysis against
myFW-1


Snort, shadow, and the like are IDS systems (intrusion detection).
They will do nothing to scan a firewall to determine what ports
are open and what vulnerabilities exist, but they will tell you if
someone *else* is looking for vulnerabilities.

nmap for NT is listed at
http://www.eeye.com/html/Databases/Software/nmapnt.html.
I haven't used it, so can't vouch for it, but nmap itself seems to
be the choice for many who want a no-nonsense scanner.

Steve




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.