Security

I think, therefore I hack (both the second definition and the fourth).

Enjoying any of my free software? Why not vist my Amazon wish list (... maybe even send a gift).

• Projects (past and present)
  • Nemesis - ARP/DNS/ETHERNET/ICMP/IGMP/IP/RIP/OSPF/TCP/UDP network packet injection
  • Snort - free, lightweight, network intrusion detection system
    • sp_perl A runtime perl interpreter for creating complex rules. (with Brian Caswell)
    • sp_respond2 The new active response mechanism for Snort - now in Snort CVS.
  • The Honeynet Project - studying blackhat techniques and behaviors
    • Honeywall CD-ROM A bootable CD-ROM containing a self contained honeynet data collection and capture system
  • Barnyard - Snort alert spooler
  • Cryptcat - (netcat + twofish)
  
  
• Presentations/Conference materials
  • CanSecWest/core03 presentation: Advanced IDS (sp_perl for Snort). (with Brian Caswell)
  • CanSecWest/core02 presentation: Large Scaled IDS: Network Intrusion Detection deployment, data mining and management on a large scale (with Brian Caswell)
  • BlackHat 2001 presentation: layer2 @ your service
  • CanSecWest/core01 conference CD
  
  
• Scripts
  • OpenBSD install package tool
  • Snort startup/shutdown/monitoring tool
  
  
• MacOS X/Darwin patches
  • 10.4.x Does not need to be patched
  • BIOCSHDRCMPLT-10.3.3.patch (improved ETHERSPOOF patch for 10.3.3 - 10.3.9)
  • BIOCSHDRCMPLT-panther.patch (improved ETHERSPOOF patch for 10.3.0 - 10.3.2)
  • BIOCSHDRCMPLT-jaguar.patch (improved ETHERSPOOF patch for Jaguar)
  • ADD_BPFs.patch (create 128 bpf devices instead of the standard 4)
  
  
• OpenBSD Systrace policies
  • rdate
  • ntpd
  
  
• Reading
  • papers
  • IDS tapping diagrams
  
  
• Other interesting projects
  • relayDB - annoying spammers
  • nmap - network mapping tool/portscanner
  • dsniff - network auditing toolkit
  • nessus - free, extensible vulnerability scanner
  • OpenBSD - functional, free and secure 4.4BSD Unix