Open Source Security Software - Page 33

Yet Another FINE FTP Application, YAFFA, is a filemanager. Besides that it supports FTP, SFTP and even HTTP. And it\'s SO refreshing!

yafingerd is a new concept in finger daemons. Created with security in mind, if offers various features that makes it the best choice for security, without loosing features that one might want. Fully tested on AIX, Linux, Solaris and FreeBSD.

Yapk is a website password manager written in C that uses gpg to en/decrypt its database. It stores the site name, url, a comment, site e-mail address, username and password for each site. Because it is separate from your browser it is more secure.

Aiakos is a suite of software components that together provide a collaborative Single-Signon System across multiple trusted websites. A simple open protocol is provided for collaboration, and working libraries are provided for ASP and Zope.

A web-based system to assign a set of known persons anonymous ids, such that every person only receives one id. The ids cannot be mapped to the corresponding persons afterwards.

Antispyd is an HTTP/HTTPS threats filtering proxy server written in pure C under Linux. The main goal of the project is to develop a free, secure, fast and extensible solution to fight against current Web threats, anonymize and control web traffic.

mod_antihak is an Apache Module designed to eliminate the CodeRed and Nimda worm\'s network bandwidth consumption. We're working to make it as easy as writing a line of text to add more worms! :)

babel.lib is Babel Com Australia's PHP Components Library, which we are releasing under an open source license for other PHP developers.

No longer maintained. A Firefox Add-on that enables true privacy by design web applications. Encryption and decryption takes place in the Add-on. In contrast to JS crypto solutions there is no way for web scripts to tamper with this regardless of their origin.

Main function is to see which cert a server is using show cert details and calculate fingerprints Second function is to see which ciphers a server is willing to connect to make sure that weak cipher on the server are disabled and therefore fail. By default collect_ssl_info with option -p try all ciphers openssl has build in. This ist mostly sufficient for a check. required - actual as possible openssl - gawk licence http://www.gnu.org/licenses/gpl-3.0-standalone.html

cravlAndBlock is simple java application that cravl error log file of Your web server and add all attacker IPs. I.E. All Modsecure entries, scans and so on. Every bad IP will be added to hosts.deny file with ALL prefix. For sure it will not block all atacks but it will help. How it works: use cron to start java cravlAndBlock.jar in the same folder add properties.xml (I addes sample properties.xml file). And thats all. Program will start from cron, read properties file and make backup of hosts.deny file in backu location, cravl log file / files and add entries to hosts.deny file. It will print log information on the screen. If You are interested in cravl and block project please make a small donation for the author by paypal (to mail tjancz@gmail.com). Those donation will make the project live. Everyone needs to eat something:)

crcRepair is a utility that is able to fix corrupt files by consulting a database and file mirrors. It is written in pure Java, so it can be used on all platforms with the Java JRE installed.

COMMON VULNERABILITIES AND EXPOSURES (CVEŽ) DATABASE BROWSER, CVEBROWSER A web search engine for the CVE dictionary, targeted to be used on a intranet. CVEBrowser uses Java Servlets / JSP and MySQL and its designed to work well on RedHat

d3vscan is a simple yet powerful network and Bluetooth scanner which is based on PyGTK.

Collection of all projects from me and friends

deface-no-tnx is an anti-defacement system that monitors your Web files and notifies you about unallowed changes. It also replaces the defaced page with a standard "error" page,so that no offensive/joking content can be frauodolently added to your site

devialog is a behavior/anomaly-based syslog intrusion detection system which detects unknown attacks via anomalies in syslog. It can generate signatures for ease of management, act upon anomalies in a predefined fashion or perform as a standard log parser

1) support 5 cipher suites : TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

eXlent2k7 is a CMS based on the most modern technologies (XHTML 1.1, CSS 2.1, PHP 5 objects, PDO, XML, DOM) with good security (CSRF protection, XSS prevention in template system, JavaScript can be disabled, SQL injection prevention in database class).

Our project aims to support some Open Source colleagues in order to provide them information regarding Object Oriented development, Java and Project Management, as well as consulting services for other kinds of organizations that needs Open So

test messenger with enc

enviroHash is a network utility designed to be executed standalone or through remote management software. It uses fsum by Slavasoft to hash all accessible files within a scope that is defined through command line arguments. Uppon completion enviroHash will generate a .txt output file that contains a "hash","filename" pair delimited by commas. This file can then be imported into the enviroHashBrowser so that System Administrators can search a host or all hosts for particular filename or hash value, and compare one host to another to view similarities/differences. This utility is being developed as a term project for our Computer System Forensics class at the Rochester Institute of Technology.

A robust and reliable user management sub-system is critical to an enterprise application system. Esecurity is a web services-based user management component that provides services for user authentication, access control, user profile management etc.

EvilSentinel is basely an universal security system for php web applications . The software offers a completely configurable filtering system, wich allows ,depending on the situation, to block, sanitize or simply to ignore malevole input datas .

Flash/PHP adaptation of the XTEA encryption algorithm. Allows encryption/decryption of sensitive data using 128-bit key. May be used for network data (HTTP) or offline for implementations like secure CD-ROM projects.