

Category: Utilities » Passwords

Katana: Portable Multi-Boot Security Suite
Added 2009-11-25
by .ronin

Added 2009-03-24
by Muris Kurgas
CUPP is a Common User Passwords Profiler. The most common form of authentication is the combination of a username and a password or passphrase. If both match values stored within a locally stored table, the user is authenticated for a connection. Password strength is a measure of the difficulty involved in guessing or breaking the password through cryptographic techniques or library-based automated testing of alternate values. A weak password might be very short or only use alphanumberic characters, making decryption simple. A weak password can also be one that is easily guessed by someone profiling the user, such as a birthday, nickname, address, name of a pet or relative, or a common word such as God, love, money or password. That is why CUPP was born, and it can be used in situations like legal penetration tests or forensic crime investigations.

Added 2008-10-27
by Filip Waeytens
Background: SNMP is the Simple Network Management Protocol. It is used by many if not most companies to manage and monitor their infrastructure. It is also often overlooked in terms of security and underestimated as an attack vector. RFC1157. Components: The program is a GUI program, written in c#, so you'll need the .NET framework (3.5) and it will only work in MS Windows (Mono and Windows GUI components are a pain to make compatible for now). It uses 2 DLL's that were written from scratch: the hacking.snmp and hacking.bruteforce.dll. The SNMP dll is not complete yet but whenever the author finds time it will be extended to support bulkget and extended ASN parsing, so enumeration will become possible as well as SET actions. You will also need to provide a dictionary for dictionary attacks. A very small one is included. Generic usage: The interface should be intuitive enough. Use the slider to increase or decrease scanning speed. This is important to get accurate results. On a LAN the slider can be set to maximum speed. Behind a Natted broadband connection, caution is advised. Devices such as ADSL modems aren't capable to deal with the large amount of packets and nat connections they generate. The program uses non-blocking udp sockets and a listener for answers, which makes it quite fast. You can also set the destination port for devices which listen on non-standard ports (not 161) and set the listening port to make sure the packets get back ok in case of firewalls. For optimal speed, turn off verbosity, errors and reverse lookups (only in case of maximum speed on a LAN). Results can be saved in XML for further processing and loaded back.

Added 2008-10-23
by Luis

Simply Password Manager
Added 2007-05-02
Despite of the site gfx and very basic implemented functionality this tool seems very useful. The innovative idea is that password never exists on your PC. They are generated on the fly when you need and then destroyed.

Secret Server
Added 2007-04-09
by Thycotic Software
Secret Server is a password management system designed for colleagues in enterprises to securely store and share secrets. Secrets include but are not limited to: passwords, bank account information, product license keys, etc.

Aurora Password Manager
Added 2007-04-08
by Animabilis Software
Aurora Password Manager is a full-featured password storage and management solution. This software will store your sensitive data such as website and e-mail passwords, credit card account data, cellular phone PIN codes, etc. in a secure database. The database is encrypted with a 256-bit Advanced Encryption Algorithm, a standard adopted by the U.S. Department of Defense that would take at least 500 years to crack. To increase security even more, the password database can be stored on removable media (such as a USB flash drive) and connected to the computer only when needed. To make sure that you always use the most secure passwords possible, Aurora Password Manager will generate passwords as needed. A number of predefined templates, including web-form, e-mail account, credit card and others, will help you to easily add passwords to the database. The Find function will enable you to find the password you need quickly, even if there are thousands of passwords in the database. Aurora Password Manager is shipped with an IE toolbar plug-in that greatly simplifies filling web forms that contain passwords or any other data by storing the information and entering it automatically when necessary. Aurora Password Manager is ideal for both corporate and individual use: the program supports multiple users and allows them to access the password file simultaneously. In fact, the password file is a full-featured database that supports SQL, tables and locking. In addition, the program features a completely configurable interface and several visual styles. Aurora Password Manager supports all Windows versions starting with Windows 98, and can be downloaded absolutely free.

Added 2007-03-29
by Ergun Çoruh

Added 2006-11-22
by Vitas Ramanchauskas
WinPassword (formerly known as NT Password) is an application for NT / 2000 / XP / 2003 system administrators for finding breaches in system security. It tries to recover plain-text passwords analyzing user password hashes. If it is possible to recover a password within reasonable time, the password should be considered insecure. WinPassword also can be used to recover lost passwords of particular users. Please note that this program is for advanced users and system administrators with good understanding of NT security model. WinPassword uses both traditional recovery methods (Brute Force Attack, Dictionary Search) and the Smart Table Recovery (TM) technique (based on "Rainbow Tables"), allows recovering long and complex passwords quickly: 7 characters password (all characters) can be recovered in 40 minutes (using Brute Force Attack the password can be recovered in 29 days).

Specops Password Policy
Added 2006-11-16
by Special Operations Software
Specops Password Policy is an advanced password filter that gives you more than one password policy per domain in Windows. Something that Microsoft left out from Windows 2000 and Vista. With Specops Password Policy you can have an unlimited number of password policies per Active Directory domain. Specops Password Policy also increases your password granularity options a lot compared to the built-in password policy settings in Windows.

Search Tools
Browse by category
Intrusion Detection
Network, Host, Web, Evasion
Access Control
Libraries, Applications
Network Monitoring
Policy Enforcement
Web Access, Email
System Security Management
Network Utilities
Tunneling, Miscellaneous, Monitoring
Secure Deletion
Linux, FreeBSD, NT, Solaris
Hostile Code
Detection, Removal, Sandbox


Privacy Statement
Copyright 2010, SecurityFocus