Software Map

PeaZip is a free archiver tool. The application provides an unified, natively portable, cross-platform file manager and archive manager GUI for many Open Source technologies like 7-Zip, FreeArc, PAQ, UPX.

Create: 7Z, ARC, BZip/GZip, PEA, TAR, WIM, XZ, ZPAQ, ZIP files and more

Open and extract 150+ file types: ACE, CAB, DEB, ISO, RAR, ZIPX and more

Features of PeaZip includes extract, create and convert multiple archives at once, create self-extracting archives (sfx), split files, strong encryption with two factor authentication, encrypted password manager, secure deletion, find duplicate files, calculate hashes, export task definition as command line script.

Darik's Boot and Nuke (DBAN)は、安全にコンピュータのハードディスクの内容を消去する自己起動フロッピー/CDイメージです。DBANは、一括または緊急のデータ破壊に適切です。

Clam AntiVirus is an anti-virus toolkit designed especially for email scanning on mail gateways. It provides a number of utilities, including a flexible and scalable multi-threaded daemon, a commandline scanner, and a tool for automatic database updates. The core of the package is an anti-virus engine available as a shared library.

The WiKID Strong Authentication System is a highly scalable, secure, self-hosted two-factor authentication system. It is simple to implement and maintain, allows users to be validated automatically, requires no hardware tokens, has a simple API for application support (via Ruby, PHP, Java, COM, Python, etc.), supports multiple domains, and supports replication for fault tolerance and scalability. It also supports mutual /host and transaction authentication, wireless tokens only domains, locked tokens (to your PC), anti-keystroke logger keypad PIN entry, etc.

IPCop Firewall は、Linux ファイアウォールのディストリビューションです。ホームユーザ、SOHOユーザを対象としています。IPCop のウェブインターフェイスは、とてもユーザフレンドリーで簡単に利用できます。

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types commonly found on Unix systems, as well as Windows LM hashes. On top of this, lots of other hashes and ciphers are added in the community-enhanced version (-jumbo), and some are added in John the Ripper Pro.

Metasploitable2 (Linux)は、Metasploitによるペネトレーションの練習やテストに使用するための、わざと脆弱性を持たせた「やられサーバ」の仮想マシンです。 デフォルトのログインIDとパスワードは、いずれもmsfadminです。

この仮想マシンをDMZ等に設置しないでください。 開発者に連絡を取りたければ、msfdev@metasploit.com　まで。

VeraCrypt は IDRIX (http://www.idrix.fr) による無料のディスク暗号化ソフトウェアであり、TrueCrypt を起源としています。このソフトウェアは、システムやパーティション暗号化に使用されるアルゴリズムに対して強化されたセキュリティを提供し、日々進化し続けているブルートフォースアタックの手法に対抗しています。 たとえば、システム パーティションが暗号化されている場合 TrueCrypt は ハッシュ関数 PBKDF2 RIPEMD160 を 1000回しか繰り返しません。一方、VeraCrypt はこれを327661 回繰り返します。また、標準的なコンテナやパーティション暗号化の場合、TrueCrypt はせいぜい 2000回ですが VeraCryptは 655331回のRIPEMD160 と50万回のSHA-2及びWhirlpoolを使用します。 このセキュリティ強化により、暗号化ボリュームを最初に開く際わずかな遅延が生じますが、アプリケーションを使用する段階では全く影響がありません。これは暗号化ボリュームの正当な所有者は容認できることです。しかし、攻撃者が暗号化されたデータへのアクセスを得ることはより困難になります。 なお、VeraCrypt はTrueCrypt のストレージ形式とは互換性がありません。

GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.

Portable OpenSSH is a Unix/Linux port of OpenBSD's excellent OpenSSH, a full implementation of the SSH1 and SSH2 protocols. It includes sftp client and server support.

Lynis is an security auditing and hardening tool for Unix derivatives like Linux/BSD/Solaris. It performs an in-depth scan on the system to detect software and security issues. Besides information related to security, it will also scan for general system information, installed packages, and possible configuration mistakes. The software is aimed at assisting automated auditing, configuration management, software patch management, vulnerability detection, and malware scanning of Unix-based systems.

Nmap ("Network Mapper") is a utility for network exploration, administration, and security auditing. It uses IP packets in novel ways to determine which hosts are available online (host discovery), which TCP/UDP ports are open (port scanning), and what applications and services are listening on each port (version detection). It can also identify remote host OS and device types via TCP/IP fingerprinting. Nmap offers flexible target and port specifications, decoy/stealth scanning for firewall and IDS evasion, and highly optimized timing algorithms for fast scanning.