2011.02.28: This post was getting too large, so I broke it into smaller pieces:
- Personal computer security – https://eikonal.wordpress.com/2011/02/28/personal-computer-security/
- Security testing: Vulnerability Assessment, Penetration testing, etc – https://eikonal.wordpress.com/2010/01/29/vulnerability-assessment-tools/
- Malware analysis – https://eikonal.wordpress.com/2011/02/28/malware-analysis/
- Forensics – https://eikonal.wordpress.com/2011/02/28/forensics/
- Code analysis, Debugging and reverse engineering / Code security – https://eikonal.wordpress.com/2011/02/28/code-analysis-debugging-and-reverse-engineering-code-security/
There are still some smaller islands of content that do not yet deserve separate postings:
Patch Management
- GFI Languard
- NSS
- Lumension
- EndPoint
Sites:
- Microsoft Security Bulletins – http://technet.microsoft.com/en-us/security/bulletin/
- Windows service packs & updates for Windows 7, Windows Vista, Server 2008 and Windows XP – http://www.softwarepatch.com/windows/index.html – cumulative patches and list of yearly issued patches for these Windows OSes.
IT Management
- Spiceworks Community – http://www.spiceworks.com/
- Paglo IT – http://paglo.com/
Datamining / logs management
- Splunk Community – http://www.splunk.com/
- Dradis – http://dradisframework.org/
Password analysis
- Cain & Abel – http://www.oxid.it/
- OphCrack – http://ophcrack.sourceforge.net/
- John the Ripper – http://www.openwall.com/john/
Various collections
- http://www.security-database.com/toolswatch/
- Tools by iSEC Partners – https://www.isecpartners.com/tools.html
- Sysinternals Suite at Microsoft, by Mark Russinovich – http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx; [FREEWARE]
- Foundstone Suite at McAfee – http://www.foundstone.com/us/resources-free-tools.asp; [FREEWARE]; Mainly security tools.
- NtSecurity.nu Toolbox – http://ntsecurity.nu/toolbox/
Misc
- InlineEgg – http://oss.coresecurity.com/projects/inlineegg.html: toolbox of classes for writing small assembly programs in Python
- Exomind – http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=tool&name=Exomind: framework for building decorated graphs and developing open-source intelligence modules and ideas, centered on social network services, search engines and instant messaging
- RevHosts – http://www.securityfocus.com/tools/3851: enumerate virtual hosts for a given IP address
- Google’s AJAX API – simplejson: JSON encoder/decoder, e.g. to use http://undefined.org/python/#simplejson”>simplejson: JSON encoder/decoder, e.g. to use <a href="http://dcortesi.com/2008/05/28/google-ajax-search-api-example-python-code/
- IPython – http://ipython.scipy.org/: enhanced interactive Python shell with many features for object introspection, system shell access, and its own special command system
- Beautiful Soup – http://www.crummy.com/software/BeautifulSoup/: HTML parser optimized for screen-scraping
- matplotlib – http://matplotlib.sourceforge.net/: make 2D plots of arrays
- Mayavi – http://code.enthought.com/projects/mayavi/: 3D scientific data visualization and plotting
- RTGraph3D – http://www.secdev.org/projects/rtgraph3d/: create dynamic graphs in 3D
- Twisted – http://twistedmatrix.com/: event-driven networking engine
- Suds – https://fedorahosted.org/suds/: lightweight SOAP client for consuming Web Services
- M2Crypto – http://chandlerproject.org/bin/view/Projects/MeTooCrypto: most complete OpenSSL wrapper
- NetworkX – http://networkx.lanl.gov/: graph library (edges, nodes)
- pyparsing – http://pyparsing.wikispaces.com/: general parsing module
- lxml – http://codespeak.net/lxml/: most feature-rich and easy-to-use library for working with XML and HTML in the Python language
- Pexpect – http://www.noah.org/wiki/Pexpect: control and automate other programs, similar to Don Libes `Expect` system
- Jython – Sikuli: visual technology to search and automate GUIs using screenshots. Scriptable in http://groups.csail.mit.edu/uid/sikuli/”>Sikuli: visual technology to search and automate GUIs using screenshots. Scriptable in <a href="http://www.jython.org/
Sources:
- Secure your Identity, email, passwords, files and internet communication by using free encryption tools. (BiGGTech) – http://www.biggtech.com/web/secure-your-identity-email-passwords-files-and-internet-communication-by-using-free-encryption-tools_357.html
See also local info at this blog:
- Nipper – https://eikonal.wordpress.com/2010/06/21/nipper/
- Logging tools – https://eikonal.wordpress.com/2010/04/13/logging/
- Vulnerability Assessment tools – https://eikonal.wordpress.com/2010/01/29/vulnerability-assessment-tools/
- Password crackers: https://eikonal.wordpress.com/2010/01/06/password-crackers/
Eikonal Blog 
