Download
The National Institutes of Science and Technology maintains the National Software Reference Library. As part of this, they keep track of SHA-1 hashes of millions of known pieces of software (the "Reference Data Set"). Unfortunately, there are very few tools to help users query the NSRL RDS. That's where nsrlquery comes in.
Categories
SecurityLicense
ISC LicenseFollow nsrlquery
nel_h2
Enterprise-grade ITSM, for every business
Freshservice is an intuitive, AI-powered platform that helps IT, operations, and business teams deliver exceptional service without the usual complexity. Automate repetitive tasks, resolve issues faster, and provide seamless support across the organization. From managing incidents and assets to driving smarter decisions, Freshservice makes it easy to stay efficient and scale with confidence.
Rate This Project
Login To Rate This Project
User Reviews
-
Zero instruction with the thing so here they are. Otherwise you have to figure it out on your own. it defaults to a test compare file called /usr/local/share/nsrlsvr/hashes.txt . Rep[lace it with a symbolic link to your NSRL hash file like so ln -s /mnt/drive1/tools/NSRL1/NSRLFile.txt /usr/local/share/nsrlsvr/hashes.txt I have a copy of my target image mounted as /mnt/drive2 then /usr/bin/nsrlsvr to fire her up netstat should look like tcp 0 0 192.168.0.54:9120 192.168.0.54:41018 TIME_WAIT then you install nsrllookup (yup, 2 pieces to the puzzle). Command line usage looks like this md5deep -r /mnt/drive2 | nsrllookup -s 192.168.0.54 -K /mnt/drive1/known.txt