Automated Security Tools / News: Recent posts

Development has been started on two new plugins. Working versions of a vanilla connect() port scan and a banner grabbing scan are available in CVS. They will be part of sonar 1.2.3. Any suggestions, submit a feature request.

Today, May 6th 2004, I released sonar 1.2.2! Sonar 1.2.2 contains alot of major useability updates, as well as some placeholder code for new and exciting features in 1.2.3.
I have taken on a few developers, and I am always looking for more. If you are interested in developing for sonar, or any other autosec tools, let me know and we'll get you on board.
Look for sonar 1.2.2 here on sourceforge, or on gentoo's portage.

The first public versions of APG and librand have been released!
APG is the Advanced Password Generator. It is used to automatically generate new passwords for whatever use you feel like putting it to. APG supports the following features:
- Setting maximum percentage of special characters
- Setting the length of generated passwords
- Grouping characters
- Setting a number of passwords to generate
- Setting a random seed file
- One Time Pad Generation
- Printing how many passwords it generated in how many seconds.... read more

Feel free to join in a 24/7 Q & A Coding party on irc. Come on in, ask questions, hack some code, anytime at irc.freenode.net #autosec. Look forward to seeing you there.

sonar 1.2.1 sees major updates, including new plugins, better documentation, logging to syslog, and working input/output plugins. You can now compile plugins from outside the sonar source-tree, so once you install sonar, go ahead and start your own plugin projects. Results are now reported in a general format that output plugins can recognize and parse however they want. Fixes for a gcc 2.95 compile bug were included with the help of svrmarty.... read more

The second major release since this summer's hiatus will bring major functionality upgrades. Output plugins will now have an abstract way of receiving data, instead of just a text log. Works in progress include: XML output, machine readable output, and a TTL scan plugin. If you have any other suggestions, feel free to email me.

I want you to hack my program. Crash it, dump it, tweak it, patch it, and send 'em my way. Analysis papers would be wonderful, but completely optional. Submit any and all patches here: http://sourceforge.net/tracker/?group_id=51027&atid=461809 . Also, Feature requests, bug reports, and the like should go here: http://autosec.sourceforge.net/helpDesk/index.htm

Thanks!

Project: Automated Security Tools (autosec)
Package: sonar
Date : 2003-03-05 20:19

Project "Automated Security Tools" ('autosec') has released the new version
of package 'sonar'. You can download it from SourceForge.net by following this
link:
<https://sourceforge.net/project/showfiles.php?group_id=51027&release_id=144450>
or browse Release Notes and ChangeLog by visiting this link:
<https://sourceforge.net/project/shownotes.php?release_id=144450>

Project "Automated Security Tools" ('autosec') has released the new version
of package 'sonar'. You can download it from SourceForge by following this link:
<http://sourceforge.net/project/showfiles.php?group_id=51027&release_id=118130>
or browse Release Notes and ChangeLog by visiting this link:
<http://sourceforge.net/project/shownotes.php?release_id=118130>

At various times in the development cycle, patches are made and uploaded. I upload the patches for various projects to the helpdesk on the home page (http://autosec.sourceforge.net/helpDesk). To find patches, first, update to the most current version, then look through the bugs posted on the helpdesk. Bugs with uploaded files named xx-sonar.patch.gz are patches. The 'xx' will correspond to the bug number. To install the patches, download them to the top-level source directory of sonar, type 'gunzip xx-sonar.patch.gz; patch -p1 < xx-sonar.patch' and all should be well. ... read more

With the release of sonar 1.1, sonar has become much more stable than it was before. Hopefully the 1.1 series will see more stable development. Upgrading is highly recommended.

Release Name: 1.0BETA4

Notes:
Fixed a few annoying bugs. This version should compile on
Solaris still. If not, check the project page's helpdesk for a
Solaris patch soon. Also, the ICMP scan has been made
more versatile. It now allows you to choose an ICMP type
(echo by default), and an ICMP code (0 by default).

2002-08-19 red0x

* plugins/rfc793.c, plugins/rfc793.h:
[BUGFIX] 0000004: TCP Checksum Fix ... read more

Check the downloads page for the latest release of sonar. Finally, this version compiles on Solaris! Also in this release are a few bug fixes, a new passive scanner, and the cool feeling of having the latest version! Get it from the downloads page.

I just released version 1.5 of the popular lean IDS scripts. This new version sports some better features, like kernel command line checking, loaded module list, remote login detection, crash detection, and (drum roll please) *cryptographic signatures*.

Thats right, August First of 2002 saw the release of sonar 1.0BETA2. This version has been ported back to C, for better portability between platforms. Also, a few minor bugs have been fixed.

I have just released the FIRST BETA of sonar! I need lots of testing and bug reports from all you out there. I have done alot of testing, but God knows I've probably missed something. So, please, sign up at our help desk and submit all the bugs you find. You can get sonar 1.0BETA1 from the sourceforge page, or from genbukan security.

I have released the source and alot of documentation of the alpha release of sonar 1.0! I need lots of people to read the documentation and start programming plugins for anything that interests you. I will include all plugins sent to me in a future release of sonar 1.0! Yes, the plugin system works and is pretty much ready for a stable release. There are just a few kinks to work out. Enjoy sonar 1.0a at http://autosec.sourceforge.net!

Well, I've put a lot of time into sonar now. Soon to be the most robust network reconnaisance scanner available, sonar 1.0 will be released in about a month at the latest. All that is left is porting the new code to FreeBSD, MAC OS X 10.1, and Solaris, and a whole lot of testing. So, download the newest release candidate and test it out for us!

Remember, the newest version has plugin support, so feel free to contribute plugins for different types of scans.

Sonar is about to be given a face lift and a syringe full of steroids. Yes, thats right, I'm talking about a plugin interface! We are beginning work on an API for plugins for sonar's input and output, maybe even for its network handling (so you can use sonar to send TCP pings as well as ICMP). Send us an email if you have any suggestions or plugin ideas!

We have recently installed a help desk on the home page (use the above link). From now on, submit all the bugs to that tracker instead of the one on the project page.

Wow! Another release candidate has been, well, released. sonar v0.5 rc3 marks the best release of the 0.5 series. With a few security fixes, cross compilable to Mac OS X 10.1, FreeBSD 4.3-RELEASE, Linux, and Solaris 8, sonar has become a multiplatform tool! Get it today!

Hey! A release candidate for sonar has been released. With major code cleanup, feature enhancements, and bug fixes, this one is going all the way.
Go get sonar-0.4!

Wow, v0.1's code was a mess! So, I cleaned it up and added framework for raw ip packets (for ttl mangling) to the code. Can't seem to get it to work yet, but hey. I'm only one guy.
v0.2 of the sonar package is out!