Showing posts with label tools. Show all posts

Thursday, September 26, 2019

DocBleach - Content Disarm and Reconstruction(CDR) - Open Source tool

DocBleach:

is an advanced Content Disarm and Reconstruction open source software. Its objective is to remove misbehaving dynamic content from your Office files, or everything that could be a threat to the safety of your computer.

DocBleach allows you to sanitize your Word, Excel, PowerPoint, PDF, ... documents. This repository contains the DocBleach Web API, packaged as a docker service. Two clicks and you'll feel safer.

Let's assume your job involves working with files from external sources, for instance reading resumes from unknown applicants. You receive for example a .doc file, your anti-virus doesn't detect it as harmful, and you decide to open it anyway. You get infected. You can use DocBleach to sanitize this document: chances are you don't get infected, because the dynamic content isn't run.

Howto's

To build DocBleach, use Maven:

$ mvn clean package
...
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 10.696 s
[INFO] Finished at: 2016-12-19T17:36:10+01:00
[INFO] Final Memory: 29M/234M
[INFO] ------------------------------------------------------------------------

The final jar is stored in cli/target/docbleach.jar.
To use DocBleach, you may either use the Web Interface or run it in CLI:

java -jar docbleach.jar -in unsafe_document.doc -out safe_doc.doc

The input file may be a relative/absolute path, an URI (think: http:// link), or a dash (-).
The output file may be a relative/absolute path, or a dash (-).
If a dash is given, the input will be taken from stdin, and the output will be sent to stdout.
DocBleach's information (removed threats, errors, ...) are sent to stderr.

Download Link :

https://github.com/docbleach/DocBleach.git
https://github.com/docbleach/DocBleach-Web

DocBleach - Online ( Hosted in OVH )

Sanitizes a potentially dangerous file (Office Document, PDF), by removing macros and other active contents.

Friendly reminder: do NOT post sensitive documents here, unless you trust this page owner.

Online Link : https://www.docbleach.ovh/

Tuesday, August 20, 2019

Malicious Software Removal Tool / Safety Scanner - Microsoft

Malicious Software Removal Tool (MSRT) :

helps keep Windows computers free from prevalent malware. MSRT finds and removes threats and reverses the changes made by these threats. MSRT is generally released monthly as part of Windows Update or as a standalone tool available here for download.

Use this tool:

If you have automatic updates for Windows turned off. Windows Update automatically downloads and runs MSRT in the background.
If you suspect an infection from prevalent malware families
To complement your antimalware product.

MSRT targets prevalent malware families only.

Download Link :

https://www.microsoft.com/en-us/download/details.aspx?id=16

Microsoft Safety Scanner:

is a scan tool designed to find and remove malware from Windows computers. Simply download it and run a scan to find malware and try to reverse changes made by identified threats.

Safety Scanner only scans when manually triggered and is available for use 10 days after being downloaded. We recommend that you always download the latest version of this tool before each scan.

Download

Tuesday, November 19, 2013

Cloud Security - Tools to Secure and Encrypt Files in Cloud Storage

CloudCapsule :

is designed to provide secure encryption of data that resides on public and private cloud storage. Users can link their favorable cloud storage account to CloudCapsule, and encrypt, import and export files securely through CloudCapsule. That is, as suggested by the name Capsule, it creates a secure environment on a user's iOS device to securely access data in the Cloud. By security, this means data is encrypted in the storage server, in transit, and only decrypted and accessible within the CloudCapsule app.

Features:

Capsule

1. Linking with public cloud storage services, including Dropbox and GoogleDrive.
2. Strong secure file encryption with RSA-2048 and AES-256 and integrity protection with RSA-SHA1 or HMAC-SHA256.
3. Import and automatically encrypt plaintext files to a Cloud storage.
4. Export encrypted file through iDevice's e-mail account.

Privacy Browser

1. Spoof User-Agent to hide device information. For both PC and mobile platforms (iOS and Android), our private browser can be disguised as Opera, IE, Firefox, or Chrome.
2. Spoof location to hide user's actual location to web services.

Download Link :

https://itunes.apple.com/us/app/cloudcapsule/id673662021

Boxcryptor :

is a Free for non-commercial use software which works on Windows, Mac, iOS and Android Platform without any issue. BoxCryptor allows you to secure your data in any Cloud Storage service you are using like Dropbox, SkyDrive, Google Drive or any other cloud storage provider. BoxCryptor uses the AES-256 standard to encrypt and protect your files. AES-256 is classified by the U.S. Government to protect “TOP SECRET” information. In the Unlimited versions you can add an additional security layer by filename encryption.

Boxcryptor is a Free for non-commercial use software which works on Windows, Mac, iOS and Android Platform without any issue. BoxCryptor allows you to secure your data in any Cloud Storage service you are using like Dropbox, SkyDrive, Google Drive or any other cloud storage provider. BoxCryptor uses the AES-256 standard to encrypt and protect your files. AES-256 is classified by the U.S. Government to protect “TOP SECRET” information. In the Unlimited versions you can add an additional security layer by filename encryption.
Read more at http://technokarak.com/top-five-software-to-secure-and-encrypt-cloud-storage.html#mJyAuIiMbrZVhrES.99

Download Link :

https://www.boxcryptor.com/download/

DataLocker :

is another tool which can be used to secure your cloud storage. It is very easy to use and doesn’t require a great deal of technical ability to sync all of your Dropbox files. It has got very simple interface in which you just have to drag and drop the files and encryption and decryption process is very simple. It uses a 256 key bit for both cryptographic processors and offers high level of security to the data.

Download Link :

http://www.appsense.com/products/appsense-labs/datanow-vault/

Cloudfogger :

is software which lets you encrypt your data on your local disk before you upload it to the Cloud Storage. This ensures that none of the Cloud storage service lets access to your data. Cloudfogger uses AES (Advanced Encryption Standard) with 256 bit key to carry out the encryption and decryption procedure of the cryptography. Cloudfogger can be used for almost all the Cloud services like Dropbox, SkyDrive, Google Drive and others also

Download Link :

http://www.cloudfogger.com/download/Cloudfogger_Setup.exe

Viivo :

lets you Cloud in Confidence with free, easy Cloud file encryption services for Dropbox. The best part is, if you know how to use Dropbox, you already know how to encrypt files using Viivo! Start enjoying the benefits of free Cloud security right away.Viivo is a tool which is especially made to secure content in Dropbox and it works prefect in all the devices like Mac, PC, Windows, iOS, Android. It is freely available for non-commercial use

Download Link :

http://www.viivo.com/products/

Cryptsync :

offers different but useful functionality. With the help of Cryptsync you can manage two folders containing the same content, one has the normal files which you are using and other folder contains the encrypted format of those files. Now suppose you have to put important data on Cloud Storage and want it to be private, in this case CryptSync work perfectly fine as you can upload the encrypted folder with all password protect files on the Cloud Storage. Both the folders remains always in sync which means that if some modifications happens in one folder than it will be reflected in other also.

Download Link :

http://code.google.com/p/cryptsync/downloads/list

Thanks ,

RRN Technologies

Thursday, May 31, 2012

MaxPatrol Network Security Scanner - Positive Technologies

MaxPatrol - Network & Web Application Security Testing Tool:

MaxPatrol Core Features:

Web-server and Web Application structure analysis.

        MaxPatrol analyzes the structure of Web Applications to determine
        weaknesses and potential vulnerabilities in both the Web Server
        Configuration and the Web Application. Discovers available web server
        technologies. Inspects the HTTP version banners and looks for
        vulnerable products and other..

Intelligent recognition of vulnerabilities in known web-server scripts.

    Automatically detects web vulnerabilities:

        - SQL injection
        - Blind SQL injection
        - Cross Site Scripting
        - UTF-7 Cross Site Scripting
        - HTTP Response Splitting
        - Code execution
        - File inclusion
        - Directory traversal
        - Input validation
        - Authentication attacks
          (brute force login/password and etc)
        - Script source code disclosure
        - Discovers directories with weak permissions
          (finds directory listings and etc)
        - Looks for common files,
          back-up files, logs or directories

Detection of vulnerabilities arising from configuration errors including
    cases of unprotected authorization, revealing of information by services,
    etc.

Download Link: Maxpatrol

Freeware Tools:   Click Here