NEW: View my new Information Security Weblog/Portal
Introduction:
Here you will find a collection of Open Source Software that I am currently developing in my spare time.
DominoDig 0.68 Alpha
DominoDig is a perl script that is designed to assist a penetration test or security audit against lotus notest web servers.
This program is similar to a couple of commercial products, but with a few important differences:
- DominoDig is open souce software released under the GPL whereas others are closed-source, commercial software.
- Dominodig uses a mere 29kb of perl code, whereas other software are often several megabytes in length.
- DominoDig is platform independant, running on any platform that supports Perl 5.006 and the LibwwwPerl(LWP) module. Most other commercial software is restricted to one or two platforms/architectures.
- DominoDig, being Open Source Software, is easily modified to collect other arbitrary data in addition to email and IP addresses. Others? Ask nicely and maybe it will find it's way into the next release. Then again, maybe not.
- Instead of just checking for the presence of anonymously accessible default databases, DominoDig also parses the content of each page it retrieves, looking any mention of any other notes databases present on the system.
DominoDig is my first Open Source Software project, and also my first "real" Perl program. In fact, one of DominoDig's main purposes was to help me learn the Perl programming language. Was it successful? You tell me!
Features of Note include:
- User definable scan depth: Can do a quick, 2 link deep scan or a lengthy 20 link deep scan.
- HTML-based report containing the following information:
- Lists all email addresses found
- Lists all unique IP addresses found
- Lists all unique .nsf Databases found
- Total number of bytes parsed
Download it now : Latest version at SourceForge.net
Attack Generator 0.1 Alpha
Agen.pl is a little tool I wrote for generating IDS alerts on demand. Instead of actually running an exploit, or letting a worm lose on your network just to see the alerts it generates, you can instead use agen.pl to reliably and safely reproduce the signatures associated with a couple of the more popular internet worms.
Download it now: Current version of agen.pl
Questions or comments regarding any of the software available on this page? Email me at sonofthor@severus.org