Software Map

A 'honeypot' is designed to detect server-side
attacks. In contrast, a 'honeyclient' is designed
to detect client-side attacks. Specifically, a
honeyclient is a dedicated host that drives
specially instrumented applications to access
remote servers to see if those servers are
behaving in a malicious manner (by compromising
the client). Honeyclients can proactively detect
exploits against client applications without known
signatures. This framework uses a client-server
model with SOAP messaging as the primary
communication method, and uses the free version of
VMware Server as a means of virtualizing the
client environment.

ZenWeb is a system for building entire Web sites, not just pages. It allows you to focus on the content and the structure of the website, while leaving page construction, markup, layout, and navigation as secondary concerns. It provides tools for complete Web site design and creation, simple paragraph to HTML generation with embellishments, and a rich set of tools for page and Web site creation, modification, and customization.

acoc is a regular-expression based colour formatter for programs that display output on the command-line. It works as a wrapper around the target program, executing it and capturing the stdout stream. Optionally, stderr can be redirected to stdout, so that it, too, can be manipulated. acoc then applies matching rules to patterns in the output and applies colours to those matches.

NorfelloCMMS OS is a powerful CMMS application. It enables organizations to easily manage labor, equipment, and service requests via a Web-based interface. This leads to increased efficiency of labor usage and reduced time spent on maintenance tasks. It is targeted at any organization that handles maintenance tasks or has equipment to track. From maintenance management of heavy industry to management of computer network equipment, it can be customized to meet the requirements of various different domains.

recls is a multi-platform recursive filesystem
searching library. It presents a C API with
mappings to C++, COM, D, Java, Python, and Ruby.

Zorba is a general-purpose XQuery processor implementing in C++ the W3C family of specifications. It is not an XML database. The query processor has been designed to be embeddable in a variety of environments, such as other programming languages extended with XML processing capabilities, browsers, database servers, XML message dispatchers, or smartphones. Its architecture employes a modular design, which allows customizing the Zorba query processor to the environment’s needs. In particular, the architecture of the query processor allows a pluggable XML store (e.g. main memory, DOM stores, persistent disk-based large stores, and S3 stores).

Jostraca is a general purpose code generation
toolkit for software developers. It uses JSP
syntax and can be configured to use a number of
different programming languages. Jostraca is a
templating tool for Generative Programming.

Facter is a simple cross-platform library for determining basic facts
about an operating system, like the operating system name, IP address,
or MAC address. It supports multiple mechanisms for resolving a given
fact, and these mechanisms can be restricted to only working on
specified operating systems or operating system releases.

PhysicsFS is a library to provide abstract access to
various archives. The programmer defines a "write
directory" on the physical filesystem. No file writing
done through the PhysicsFS API can leave that
write directory, for security. For file reading, the
programmer lists directories and archives that form
a "search path". Once the search path is defined, it
becomes a single, transparent, hierarchical
filesystem. This makes for easy access to ZIP files
in the same way as you access a file directly on
the disk, and it makes it easy to ship a new archive
that will override a previous archive on a per-file
basis. Symbolic links can be disabled, for added
safety. Finally, PhysicsFS gives you a platform-
abstracted means to determine if CD-ROMs are
available, the user's home directory, where in the
real filesystem your program is running, etc.

Graylog2 is an syslog implementation that stores logs in MongoDB. Messages are accepted via TCP or UDP. A Web interface allows you to view the log messages. It also implements GELF, the Graylog Extended Log Format, which is a simple JSON string that allows you to send long and structured syslog messages, which is very useful for customized application log monitoring.

dradis is a tool for sharing information during security assessments. It provides a centralized repository of information to keep track of what has been done so far, and what is still ahead.