Wireless Scanner - scans/connects/gives info about Wireless networks

Wireless Scanner - scans/connects/gives info about Wireless networks

This software can:
- give you a list of wireless adapters
- scan for Wireless networks (also continuosly)
- give you a list of wireless networks
- if it founds a wireless network without authentication, it connects to it, start an external program, wait for it then disconnect

The program is done in C++ using the Microsoft Windows Native Wifi.

Download latest version updated on 08/01/2013
Download WirelessScanner_01_00_02_beta.zip (60.6 kB)
Download other versions from here

Source-
http://sourceforge.net/projects/wirelessscanner/

Security Onion 12.04 - network security monitoring system

What is Security Onion?
Security Onion is a network security monitoring system that provides full context and forensic visibility into the traffic it monitors. At it's heart it is designed to make deploying multiple complex open source tools simple via a single package, reducing what would normally take days to weeks of work to minutes. Featuring Bro IDS, your choice of Snort or Suricata, Sguil analyst console, ELSA, Squert, Snorby and capME web interfaces, and the ability to pivot from one tool to the next seamlessly provides the most effective collection of network security tools available in a single package.

What can it do for you?

• Signature-based detection - Whether you choose Snort or Suricata for signature-based detection, you'll have Snort and/or Emerging Threats signatures available for use.
• Context - Bro IDS provides visibility into the haystack, while signature-based detection targets the needle. Now you can know not only what signature-based events occurred, but you can have full context of all activity detected from the host involved. What domains a host queries, SSL certificates it's used, files downloaded, FTP/SMTP/IRC activity? All contextual questions that can help determine whether a signature-based alert is an event or an incident.
• Evidence - Full packet capture means you can know exactly what a host did. Sguil and its integration with other tools in Security Onion, such as Network Miner and Wireshark in addition to ELSA, Squert and Snorby via capME, allow an analyst to look at the evidence of a network attack frame by frame exactly as it happened, all with a click of a mouse.
• Tools - Security Onion is loaded with tools to monitor your network efficiently and effectively. Sguil provides the best security analyst console available in terms of function and utility. Squert and Snorby provide visibility into Sguil and Snort respectively, and ELSA provides a Splunk-like interface to the vast wealth of log data Security Onion will harvest from Bro, OSSEC and more.
• Save Money - It's free, well except for the hardware. But it will help you save a lot of money you might otherwise throw at commercial solutions and you could maybe spend some of that money so your analysts can become better.

What can't it do for you?

Security Onion is a network monitoring and detection system. It will not block an attack, nor is it designed to. It will however act as a video camera for your network for every connection it sees, not just the one's that it thinks are bad. In a world where detection rates are unpredictable, evidence like this can save you a lot of money.

CHANGES

No major changes since we announced RC1 and the ISO image, just a few small bug fixes:

• Setup no longer disables NIC offloading features on management interface
• Setup now disables the IPv6 stack on sniffing interfaces (can still sniff IPv6, though)
• if running Quick Setup, netsniff-ng is started with "-c" option to disable scatter/gather mode and force traffic to be written to disk instantly

INSTRUCTIONS

For full instructions on installing Security Onion 12.04, please see the installation page on Wiki.

Installation

Security Onion 12.04 Installation Procedure

Download - 

Download securityonion-12.04-20121224.iso (1.3 GB)

Download other versions from here

SCREENSHOTS

Booting ISO image

Booted into Live desktop, starting Xubuntu installer

Started Xubuntu installer

Completed Xubuntu installer, ready to reboot into new installation

Rebooted into new installation, ready to run Setup

Started Setup Wizard

Configuring /etc/network/interfaces

Selecting management interface

Selecting DHCP for this test VM

Selecting sniffing interfaces

Confirming network interface configuration, ready to reboot

Rebooted and ready to do the second phase of Setup

Started Setup Wizard

Setup detects that network interfaces have already been configured

Choosing Quick Setup for this test VM

Selecting interface to run sniffing processes on

Setting username for Sguil/Squert/ELSA

Setting email address for Snorby

Setting password for Sguil/Squert/Snorby/ELSA

Confirming password

Optionally enabling ELSA

Confirming selections

Setup wizard performs all configuration automatically

Setup Complete #1

Setup Complete #2

Setup Complete #3

Replaying sample pcaps to simulate network traffic

Logging into Snorby

Snorby Dashboard

Pivoting from IDS alert in Snorby to Full Transcript

Viewing full transcript in CapME

Logging into Squert

Squert Dashboard

Squert Signature Statistics

Squert GeoIP

Squert events

Logging into Sguil

Sguil RealTime Console

Sguil pivoting from IDS alert to full transcript

Logging into ELSA

ELSA query for Bro Notices

ELSA pivoting from Bro notice to full transcript

Full transcript in CapME

Source-

http://securityonion.blogspot.in/2012/12/security-onion-1204-is-now-available.html

Wireshark is 1.8.4 released

Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education.

What's New in Version 1.8.4

Bug Fixes

The following vulnerabilities have been fixed.

• wnpa-sec-2012-30
  Wireshark could leak potentially sensitive host name resolution information when working with multiple pcap-ng files. Discovered by Laura Chappell.
  Versions affected: 1.8.0 to 1.8.3.
• wnpa-sec-2012-31
  The USB dissector could go into an infinite loop. (Bug 7787)
  Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
• wnpa-sec-2012-32
  The sFlow dissector could go into an infinite loop. (Bug 7789)
  Versions affected: 1.8.0 to 1.8.3.
• wnpa-sec-2012-33
  The SCTP dissector could go into an infinite loop. (Bug 7802)
  Versions affected: 1.8.0 to 1.8.3.
• wnpa-sec-2012-34
  The EIGRP dissector could go into an infinite loop. (Bug 7800)
  Versions affected: 1.8.0 to 1.8.3.
• wnpa-sec-2012-35
  The ISAKMP dissector could crash. (Bug 7855)
  Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
• wnpa-sec-2012-36
  The iSCSI dissector could go into an infinite loop. (Bug 7858)
  Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
• wnpa-sec-2012-37
  The WTP dissector could go into an infinite loop. (Bug 7869)
  Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
• wnpa-sec-2012-38
  The RTCP dissector could go into an infinite loop. (Bug 7879)
  Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
• wnpa-sec-2012-39
  The 3GPP2 A11 dissector could go into an infinite loop. (Bug 7801)
  Versions affected: 1.8.0 to 1.8.3.
• wnpa-sec-2012-40
  The ICMPv6 dissector could go into an infinite loop. (Bug 7844)
  Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.

The following bugs have been fixed:

• Menu and Title bars inaccessible using GTK2 (non-legacy) with two monitors. (Bug 553)
• 802.11 Probe Response fails to parse. (Bug 1284)
• Tshark - decimal symbol. (Bug 2880)
• Malformed tpncp.dat file can crash Wireshark. (Bug 6665)
• SSL decryption not work even with example capture file and key. (Bug 6869)
• Info line is incorrect on SIP message containing another SIP message in body. (Bug 7780)
• OOPS: dissector table "sctp.ppi" doesn't exist Protocol being registered is "Datagram Transport Layer Security". (Bug 7784)
• Dissection of IEEE 802.11 Channel Switch Announcement element fails. (Bug 7797)
• Invalid memory accesses when loading RADIUS captures. (Bug 7803)
• ISUP CIC should have format BASE_DEC, not BASE_HEX. (Bug 7848)
• We don't handle pcap-ng files with IDBs that come after packet blocks. (Bug 7851)
• '*' wildcard in the 'Src IP' or 'Dest IP' field of the ESP SA dialog does not work. (Bug 7866)
• nas_eps dissector does not decode some esm message. (Bug 7912)
• WLAN decryption status not updated after updating WEP/WPA keys. (Bug 7921)
• IPv6 Option Pad1 Incorrect dissection. (Bug 7938)
• Print GNUTLS error message if PEM import fails. (Bug 7948)
• GSM classmark3 8-PSK decode error. (Bug 7964)
• Parsing the Server Name Indication extension in SSL/TLS traffic reads some fields incorrectly. (Bug 7967)
• Lua code crashes wireshark after update to 1.8.3. (Bug 7976)
• 2 bugs in Ran-Information-Error Rim Container. (Bug 8000)
• Misspelling (typo) in IPv6 display filter field name. (Bug 8006)
• Two BSSGP dissector bugs. (Bug 8008)
• Core dump during SCTP association analysis. (Bug 8011)

New and Updated Features

There are no new features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

3GPP2 A11, BSSGP, EIGRP, FMP/NOTIFY, GSM A, ICMP, ICMPv6, IEEE 802.11, IPsec, IPv6, ISAKMP, iSCSI, LTE RRC, NAS EPS, NDPS, Prism, RADIUS, RRC, RTCP, SCTP, sFlow, SIP, SMB2, SSL/TLS, TPNCP, USB

New and Updated Capture File Support

CommView NCF, iSeries, pcap-ng.

Getting Wireshark

Wireshark source code and installation packages are available from http://www.wireshark.org/download.html.

Vendor-supplied Packages

Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site.

File Locations

Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use About→Folders to find the default locations on your system.

Known Problems

Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419)

The BER dissector might infinitely loop. (Bug 1516)

Capture filters aren't applied when capturing from named pipes. (Bug 1814)

Filtering tshark captures with display filters (-R) no longer works. (Bug 2234)

The 64-bit Windows installer does not support Kerberos decryption. (Win64 development page)

Application crash when changing real-time option. (Bug 4035)

Hex pane display issue after startup. (Bug 4056)

Packet list rows are oversized. (Bug 4357)

Summary pane selected frame highlighting not maintained. (Bug 4445)

Wireshark and TShark will display incorrect delta times in some cases. (Bug 4985)

Source-

http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html

Download -
http://www.wireshark.org/download.html

• Stable Release (1.8.4)

  	Windows Installer (64-bit)
  	Windows Installer (32-bit)
  	Windows U3 (32-bit)
  	Windows PortableApps (32-bit)
  	OS X 10.6 and later Intel 64-bit .dmg
  	OS X 10.5 and later Intel 32-bit .dmg
  	OS X 10.5 and later PPC 32-bit .dmg
  	Source Code