Thursday, February 1, 2007

Tools of the Trade - Better with Wasabi

Wasabi (Japanese: わさび, 山葵 (originally written 和佐比) ; Wasabia japonica, Cochlearia wasabi, or Eutrema japonica) is a member of the cabbage family. Known as Japanese horseradish, its root is used as a spice and has an extremely strong flavor. Its hotness is more akin to that of a hot mustard than a chili pepper, producing vapors that burn the nasal passages rather than the tongue. The plant grows naturally along stream beds in mountain river valleys in Japan. There are also other species used, such as W. koreana, and W. tetsuigi. The two main cultivars in the marketplace are W. japonica var. Duruma and Mazuma, but there are many others.

On with the tools....

1) On Jan 29th, Michal Zalewski released Stompy. It is a free tool to perform a black-box assessment of Internet sessions IDs. While some session ID cookies generation algorithms are believed to be cryptographically secure, this is not the case for certain less-common enterprise web platforms.

2) On Jan 31st, pdp released Technika. Technika was developed for the computer security professionals to automate common exploitative task from the browser. It acts like a standard OS shell scripting environment. You can script everything from the currently viewed page and also spawn processes, unrestricted XMLHttpRequest connections and Sockets. Technika is still in Alpha although it is mostly usable and quite stable.

3) In late January, Internet Systems Consortium released new versions of the popular BIND DNS server software. The new releases, 9.2.8, 9.3.4 and 9.4.0rc2 contain fixes for two security vulnerabilities that were identified early January.

4) On Jan 27th, NTA's Technical Director Roy Hills released IKE-Scan v.19. IKE-Scan is a command-line tool that uses the IKE protocol to discover, fingerprint and test IPsec VPN servers. It is available for Linux, Unix, MacOS and Windows under the GPL license. This new version includes multiple bug fixes and enhancements.

5) On Jan 27th, Honeytrap v6.4 was released. Honeytrap is a network security tool written to observe attacks against TCP services. As a low-interactive honeypot, it collects information regarding known or unknown network-based attacks and thus can provide early-warning information.

6) On Jan 26th, Paint.NET v3.0 was released. Paint.NET is free image editing and photo manipulation software designed to be used on computers that run Windows. It supports layers, unlimited undo, special effects, and a wide variety of useful and powerful tools.

7) On Jan 19th, Gaim 2.0.0 Beta 6 was released. Gaim is a multi-protocol instant messaging (IM) client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ (Oscar protocol), MSN Messenger, Yahoo!, IRC, Jabber, Gadu-Gadu, SILC, Novell GroupWise Messenger, Lotus Sametime, and Zephyr networks. The official release of v2.0 is very close, this might even be the last beta release.

8) On Dec 19th, SIP Proxy v2 was released. SIP Proxy is an Open Source VoIP security test tool which has been developed by the students Philipp Haupt and Matthias H rlimann during their diploma thesis and second student research project at the University of Applied Sciences Rapperswil (www.hsr.ch). Business partner was Compass Security AG in Rapperswil (www.csnc.ch).

2 comments:

  1. Hey, those tools sound great, albeit i've never used any of them, but it's hard for me to believe that they're all better than wasabi, come on now! You definitely can't eat these apps as a condiment to a fresh lobster hand roll!

    ReplyDelete
  2. Well, Gaim is my standard chat client and people would normally use IKE-Scan from BackTrack when needed. BIND DNS is more of a service than a tool, but whatever.

    But you are right, none are as tasty as good old true wasabi.

    ReplyDelete