58 matches found
A Framework for Secure and Scalable Network Traffic Analysis: Netcap
The Netcap NETwork CAPture framework efficiently converts a stream of network packets into highly accessible type-safe structured data that represent specific protocols or custom abstractions. These audit records can be stored on disk or exchanged over the network, and are well suited as a data...
WindowsSpyBlocker - Block Spying And Tracking On Windows
WindowsSpyBlocker is an application written in Go and delivered as a single executable to block spying and tracking on Windows systems. The initial approach of this application is to capture and analyze network traffic based on a set of tools. It is open for everyone and if you want to contribute...
Malware Network Communication Provides Better Early Warning Signal
Research is expected to be unveiled today that challenges the industry’s current reliance on dynamic malware analysis as the best means of early detection of infections. Instead, researchers from the Georgia Institute of Technology, the IMDEA Software Institute and EURECOM posit that a better...
Intercepter-NG v1.9 - Multifunctional Network Toolkit for Android
Intercepter-NG is a multifunctional network toolkit for various types of IT specialists. It has functionality of several famous separate tools and more over offers a good and unique alternative of Wireshark for android. The main features are: Network discovery with OS detection Network traffic...
Technical analysis Potato provided the right principle-vulnerability warning-the black bar safety net
! Graphic unrelated 0×0 0 Preface A while ago included a Potato to mention the right tools, find the tools provide the right posture with the conventional tool are not the same, but with WPAD proxy related, so expand the test and analysis, primarily through the analysis of its network traffic to...
Malware Analysis System: Cuckoo Sandbox
Cuckoo Sandbox is an advanced, extremely modular, and 100% open source automated malware analysis system with infinite application opportunities. By default it is able to: Analyze many different malicious files executables, office documents, pdf files, emails, etc as well as malicious websites...
The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information
The vulnerability of the Mail Drop extension of the Mail component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain access to protected information by analyzing network traffic at the time of sendin...
Malware Communication Analyzer: Malcom
Malcom is a tool designed to analyze a system’s network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate with the outside world. Malcom can help you...
Wireless Network Auditing Tool: FruityWifi
FruityWifi is an open source tool to audit wireless networks. It allows the user to deploy advanced attacks by directly using the web interface or by sending messages to it. Initialy the application was created to be used with the Raspberry-Pi, but it can be installed on any Debian based system...
U.S. Air Force Aiming to Raise Cyber Awareness on Networks with MAMA
The United States Air Force is attempting to enhance what the military service branch is calling cyber situational awareness in order to contend with “increasingly sophisticated” threats to its networks and systems. The Air Force Research Laboratory’s Information Directorate announced it was...
Wireshark M3UA Dissector拒绝服务漏洞
Bugtraq ID：66070 CVE ID：CVE-2014-2282 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 由于程序没有正确处理某些类型的数据包，攻击者可以利用漏洞是受影响程序崩溃，拒绝服务合法用户。 0 Wireshark 1.10.0 - 1.10.5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wireshark.org/...
Wireshark RLC Dissector 'packet-rlc.c'拒绝服务漏洞
Bugtraq ID：66072 CVE ID：CVE-2014-2283 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 由于程序没有正确处理某些类型的数据包，攻击者可以利用漏洞是受影响程序崩溃。 0 MandrakeSoft Enterprise Server 5 x8664 MandrakeSoft Enterprise Server 5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wireshark.org/...
Wireshark NFS Dissector拒绝服务漏洞
Bugtraq ID：66068 CVE ID：CVE-2014-2281 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 由于程序没有正确处理某些类型的数据包，攻击者可以利用漏洞是受影响程序崩溃，拒绝服务合法用户。 0 MandrakeSoft Enterprise Server 5 x8664 MandrakeSoft Enterprise Server 5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wireshark.org/...
Intercepter-Ng - Pocket Sniffer For Android
Intercepter-NG is a multifunctional network toolkit for various types of IT specialists. It has functionality of several famous separate tools and more over offers a good and unique alternative of Wireshark for android. The main features are: network discovery with OS detection network traffic...
Detecting Advanced Persistent Threat with Network Traffic Analysis
A high degree of stealthiness over a prolonged duration of operation in order to do a successful cyber attack can be defined as Advanced Persistent Threat. The attack objectives therefore typically extend beyond immediate financial gain, and compromised systems continue to be of service even afte...
Scrutinizer NetFlow & sFlow Analyzer Detection
Scrutinizer NetFlow & sFlow Analyzer, a network traffic analysis tool, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58992; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Scrutinizer NetFlow & sFlow...
SUSE-SA:2003:019: ethereal
The remote host is missing the patch for the advisory SUSE-SA:2003:019 ethereal. Ethereal is a GUI for analyzing and displaying network traffic. Ethereal is vulnerable to a format string bug in it's SOCKS code and to a heap buffer overflow in it's NTLMSSP code. These bugs can be abused to crash...
