[SpiderFoot v2.1.0] The Open Source Footprinting tool

SpiderFoot is a free, open-source footprinting tool, enabling you to perform various scans against a given domain name in order to obtain information such as sub-domains, e-mail addresses, owned netblocks, web server versions and so on. The main objective of SpiderFoot is to automate the footprinting process to the greatest extent possible, freeing up a penetration tester’s time to focus their efforts on the security testing itself.

2.1.0 - Major release

• New Module (sfp_malcheck): Identify whether an IP or domain (target, co-host or affiliate) appears on any malicious domain lists, RBLs, etc.
• New Module (sfp_bingsearch): Bing searches, as well as identifying co-hosted sites on the target's IPs
• New Module (sfp_affilinfo): Obtain information about affiliates
• New Module (sfp_strangeheaders): Identify non-standard HTTP headers
• Module overhaul (sfp_ripe, now sfp_ir): Identifies ISPs / Up-streams, BGP ASs, and much smarter at identifying owned netblocks
• Module overhaul (sfp_searchtld, now sfp_tldsearch): Uses the Mozilla public TLD list for identifying all TLDs.
• UI Enhancement: Option to configure a new scan by results desired in addition to modules
• UI Enhancement: Simple visualizations added
• UI Enhancement: Improved configuration section
• Lots of small tweaks, performance improvements, bug fixes

Download SpiderFoot v2.1.0

[ModSecurity v2.7] Open Source Web Application Firewall

ModSecurity is an embeddable web application firewall, which means it can be deployed as part of your existing web server infrastructure (Apache, IIS7 and Nginx).

This deployment method has certain advantages:

1. No changes to existing network. It only takes a few minutes to add ModSecurity to your existing web servers. And because it was designed to be completely passive by default, you are free to deploy it incrementally and only use the features you need. It is equally easy to remove or deactivate it should decide you don't want it any more.
2. No single point of failure. Unlike with network-based deployments, you will not be introducing a new point of failure to your system.
3. Implicit load balancing and scaling. Because it works embedded in web servers, ModSecurity will automatically take advantage of the additional load balancing and scalability features. You will not need to think of load balancing and scaling unless your existing system needs them.
4. Minimal overhead. Because it works from inside the web server process there is no overhead for network communication and minimal overhead in parsing and data exchange.
5. No problem with encrypted or compressed content. Many IDS systems have difficulties analysing SSL traffic. This is not a problem for ModSecurity because it is positioned to work when the traffic is decrypted and decompressed.

ModSecurity is known to work well on a wide range of operating systems. Our customers are successfully running it on Linux, Windows, Solaris, FreeBSD, OpenBSD, NetBSD, AIX, Mac OS X, and HP-UX.

Download ModSecurity v2.7