OpenSEC Picks
Cheops - a variety of network tools to provide system adminstrators and users with a simple interface to managing and accessing their networks. Cheops aims to do for the network what the file manager did for the filesystem. Additionally, cheops has taken on the role of a network management system, in the same category as one might put HP Openview. Mechanics: Simple ICMP "ping" packets are used to initially search a network for hosts that are alive (ping). Domain Name Transfers are used to list hosts in a domain (nslookup). OS detection is done using invalid flags on TCP packets (queso). Port detection is done (somewhat) silently using half-open TCP connections in order to avoid unnecessarily starting services or logging on the remote machine (halfscan). Mapping is done using UDP (or optionally ICMP) packets with small time-to-live values (traceroute and mtr, respectively). Monitoring is done using normal connect() sequences using sets of chained stages centerd around the gtk_input_add routine.

Firewalk - a technique developed by MDS and DHG that employs traceroute-like techniques to analyze IP packet responses to determine gateway ACL filters and map networks.

Hping - a complex ping-based program that allows you to send customized pings to remote hosts and networks, gathering raw fingerprint data, utilizing the concept of "tcp specific firewalks," and more.

Nmap - a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), and TCP/IP fingerprinting (remote host operating system identification). Nmap also offers flexible target and port specification, decoy scanning, determination of TCP sequence predictability characteristics, reverse-identd scanning, and more. The latest version of netmap comes with a GTK+ front-end called nmapfe and there is a KDE gui called Kmap. Is it just me, or is KDE really ugly??


More Tools
DNS Tools - bunch of useful DNS querying tools by Paul Balyoz

Dnswalk - Perl script for debugging DNS databases

Exscan - scanner that capture banner info and uses Queso for OS detection

MTR - diagnostic tool that combines the features of traceroute and ping

Nlog - a set of perl scripts that allow you to search through your Nmap 2.x scan logs. Included is a conversion script and a complete CGI interface with 4 extensions and support for more. From your web browser you can search for all hosts with any given port open, operating system, sequence index, or IP address and query common services through the extension scripts.

TDS - Top Level Domain Scanner- a script written in perl for unix which utilizes data from dns information, essentially scanning the entire internet by querying the root-servers, and then the individual nameservers for domains

Queso - OS fingerprinting tool by the Apostols (site is down)