Tools (3rd Sept)

A weekly update on new and updated Information Security tools that I have come across or use. The tools are mainly those for PenTesting although other tools are sometimes included.

Santoku Linux
https://santoku-linux.com/
A new GNU/Linux distribution or distro designed for helping you in every aspect of your mobile forensics, mobile malware analysis, reverse engineering and security testing needs and experience has just been released and its alpha version is now available for download.
It’s called Santoku Linux. Santoku is a general purpose kitchen knife which originated from Japan. Santoku means “three virtues” or “three uses” (Wikipedia). This distribution is not from Japan, but was given the name because it’s crafted specifically for Mobile Forensics, Mobile Malware Analysis, and Mobile Security Testing. The current alpha release is based on a fork of the OWASP (Open Web Application Security Project) MobiSec Ubuntu distro thus making this alpha release an OWASP MobiSec Remix (released under GPL) with added tools from viaForensics and some of its contributors or supporters. This project or platform is sponsored and launched by viaForensics which is a known and very innovative digital forensics and security firm that focuses or specializes on computer and mobile forensics, mobile application security, enterprise security, information security and penetration testing, and forensics training.

rdp-sec-check v0.8
http://labs.portcullis.co.uk/application/rdp-sec-check/
rdp-sec-check is a tool to remotely check if certain security features of an RDP service (AKA Terminal Services) have been enabled.  It does not require authentication, only network connectivity to TCP port 3389.

WiFiSlax v4.2 Final
http://www.wifislax.com/
WifiSlax is a type of Slax OS made exclusively for wireless hacking. It comes with a bunch of wireless tools preloaded into it. These include Aircrack, Airsnort, kismet, madwifi drivers and many more…