List of Applications/Security
From ParabolaWiki
(Redirected from List of applications/Security)
List of Applications
Internet – Multimedia – Utilities – Documents – Security – Science – Games – Other
Contents
1 Security
For detailed guides, see the main ParabolaWiki page, Security.
1.1 Network security
See also Wikipedia:Comparison of packet analyzers.
- Arpwatch — Tool that monitors ethernet activity and keeps a database of Ethernet/IP address pairings.
- bettercap — Swiss army knife for network attacks and monitoring.
- darkstat — Captures network traffic, calculates statistics about usage, and serves reports over HTTP.
- dsniff — Collection of tools for network auditing and penetration testing.
- EtherApe — Graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display.
- Ettercap — Multipurpose Network sniffer/analyser/interceptor/logger.
- https://ettercap.github.io/ettercap/ || CLI: ettercap, GUI: ettercap-gtk
- GNOME Network Tools — GNOME interface for various networking tools.
- hping — Command-line oriented TCP/IP packet assembler/analyzer.
- IPTraf — Console-based network monitoring utility.
- jnettop — top-like console network traffic visualizer.
- Kismet — 802.11 layer2 wireless network detector, sniffer, and intrusion detection system.
- LinSSID — Graphical wireless scanner.
- Net Activity Viewer — Graphical network connections viewer, similar in functionality with Netstat.
- netsniff-ng — High performance Linux network sniffer for packet inspection.
- ngrep — grep-like utility that allows you to search for network packets on an interface.
- Nmap — Security scanner used to discover hosts and services on a computer network, thus creating a "map" of the network.
- Ntop — Network probe that shows network usage in a way similar to what top does for processes.
- pyNeighborhood — GTK+ based SMB/CIFS browsing utility.
- Smb4K — Advanced network neighborhood browser and Samba share mounting utility for KDE.
- Sshguard — Daemon that protects SSH and other services against brute-force attacts, similar to Fail2ban.
- Tcpdump — Common console-based packet analyzer that allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network.
- tcptrace — TCP dump file analysis tool.
- vnStat — Console-based network traffic monitor that keeps a log of network traffic for the selected interfaces.
- Wireshark — Network protocol analyzer that lets you capture and interactively browse the traffic running on a computer network.
- https://www.wireshark.org/ || CLI: wireshark-cli, GTK+: wireshark-gtk, Qt: wireshark-qt
1.2 Firewall management
See iptables#Front-ends.
1.3 Threat and vulnerability detection
- Lynis — Security and system auditing tool to harden Unix/Linux systems.
- Metasploit Framework — An advanced open-source platform for developing, testing, and using exploit code.
- OpenVAS — Framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution. FOSS Nessus fork.
1.4 File security
- AIDE — File and directory integrity checker.
- Logcheck — Simple utility which is designed to allow a system administrator to view the logfiles which are produced upon hosts under their control.
- https://logcheck.alioth.debian.org/ || {{{4}}}
- Logwatch — Customizable log analysis system.
- OpenDLP — OpenDLP is a free and open source, agent- and agentless-based, centrally-managed, massively distributable data loss prevention tool.
- https://code.google.com/archive/p/opendlp/ || {{{4}}}
1.5 Anti malware
- ClamAV — Open source antivirus engine for detecting trojans, viruses, malware & other malicious threats.
- ClamTk — Graphical front-end for ClamAV using Perl and Gtk libraries. It is designed to be an easy-to-use, lightweight, on-demand antivirus scanner for Linux systems.
- Rootkit Hunter — Checks machines for the presence of rootkits and other unwanted tools.
1.6 Backup programs
See also Synchronization and backup programs#Incremental backups and Wikipedia:Comparison of backup software.
- Déjà Dup — Simple GTK+ backup program. It hides the complexity of doing backups the 'right way' (encrypted, off-site, and regular) and uses duplicity as the backend.
- duplicity — Simple command-line utility which allows encrypted compressed incremental backup to nearly any storage.
- restic — Fast, secure, efficient backup program that supports backing up to many cloud services.
1.7 Screen lockers
Warning: Only sflock, physlock, Cinnamon Screensaver, MATE Screensaver and GNOME Screensaver are able to block tty access. See Xorg#Block TTY access on how to manually block tty access.
- Cinnamon Screensaver — Screen locker for the Cinnamon desktop.
- GNOME Screensaver — Screen locker for the GNOME Flashback desktop.
- i3lock — A simple screen locker. Provides user feedback, uses PAM authentication, supports DPMS. The background can be set to an image or solid color.
- Light-locker — A simple locker (forked from gnome-screensaver) that aims to have simple, sane, secure defaults and be well integrated with the desktop while not carrying any desktop-specific dependencies. It relies on LightDM for locking and unlocking your session via ConsoleKit/UPower or logind/systemd.
- MATE Screensaver — Screensaver and locker for MATE Desktop Environment.
- physlock — Screen and console locker.
- slock — Very simple and lightweight X screen locker. Offers only a black background when locked, there are no animations or text fields.
- vlock — TTY locker. A mirror of the original vlock is available at github.
- xlockmore — Simple X11 screen lock with PAM support.
- XScreenSaver — Screen saver and locker for the X Window System.
- XSecureLock — X11 screen lock utility designed with the primary goal of security.
- xtrlock — Very lightweight X display locker. Keeps windows visible and displays lock icon instead of mouse cursor. Typing password followed by enter unlocks the screen.
1.8 Password managers
1.8.1 Console
- gopass — Advanced console based password manager, supporting GnuPG and other backends.
- pass — Simple console based password manager, using GnuPG encryption.
- LastPass — Hosted password manager.
1.8.2 Graphical
- GNOME Password Safe — Password manager for GNOME which makes use of the KeePass v.4 format.
- KeePass Password Safe — Mono-based password manager, which helps you to manage your passwords in a secure way.
- KeePassX — Qt-based password manager. Compatible with KeePass v.1.x and KeePass v.2.x.
- https://www.keepassx.org/ || version 1: keepassx, version 2: keepassx2
- KeePassXC — Community fork of KeePassX with more active development. Compatible with KeePass v.1.x (import only) and KeePass v.2.x.
- KWalletManager — Tool to manage the passwords on your system. By using the KDE wallet subsystem it not only allows you to keep your own secrets but also to access and manage the passwords of every application that integrates with the wallet.
- QtPass — GUI for pass, the standard unix password manager.
- Seahorse — GNOME application for managing encryption keys and passwords in the GNOME Keyring.
1.9 Cryptography
1.9.1 Hash checkers
- cfv — Tiny utility to both test and create checksum files, support .sfv, .csv, .crc, .md5, md5sum, sha1sum, .torrent, par, and .par2 files.
- hashdeep — A cross-platform tools to computer hashes, or message digests, for any number of files
- RHash — Utility for verifying hash sums (SFV, CRC, etc). Supports lots of algorithms.
- Parchive — Utility which creates and uses PAR2 files to detect damage in data files and repair them if necessary.
1.9.2 Encryption, signing, steganography
- ccrypt — A command-line utility for encrypting and decrypting files and streams.
- Enigmail — A security extension to Mozilla Thunderbird and Seamonkey. It enables you to write and receive email messages signed and/or encrypted with the OpenPGP standard.
- GnuPG — The GNU project's complete and free implementation of the OpenPGP standard as defined by RFC4880. Free and Open Source replacement of PGP, mostly used for digital signing of packages.
- GPG-Crypter — Graphical front-end to GnuPG(GPG) using the GTK3 toolkit and GPGME library.
- gzsteg — Utility that can hide data in gzip compressed files
- Keybase — Key directory mapping social media identities, with cross platform encrypted chat, cloud storage, and git repositories.
- KGpg — Simple interface for GnuPG, for KDE.
- Kleopatra — Certificate Manager and Unified Crypto GUI for KDE. It supports managing X.509 and OpenPGP certificates in the GpgSM keybox and retrieving certificates from LDAP servers.
- minisign — Simple program that only inplements key signing
- Seahorse — GNOME application for managing encryption keys and passwords in the GNOME Keyring.
- steghide — A steganography utility that is able to hide data in various kinds of image and audio files.
1.9.3 Disk encryption
See Disk encryption.
