Alpine security: Difference between revisions

Revision as of 04:10, 23 December 2021

Note: This is work in progress. Not all packages are available at the moment.

Basics

Name	Description	URL
alpine-base	Alpine base package	https://pkgs.alpinelinux.org/packages?name=alpine-base
alpine-mirrors	List of Official Alpine Linux Mirrors	https://mirrors.alpinelinux.org/
bkeymaps	Binary keymaps for busybox	http://dev.alpinelinux.org/alpine/bkeymaps^{[Dead Link]}
network-extras	Meta package to pull in vlan, bonding, bridge and wifi support	https://pkgs.alpinelinux.org/packages?name=network-extras
openssl	Toolkit for TLS	https://www.openssl.org/
tzdata	Timezone data	https://www.iana.org/time-zones

Code Analysis

Name	Description	URL
rpmlint	A tool for checking common errors in RPM packages	https://github.com/rpm-software-management/rpmlint
pylint	Analyzes Python code looking for bugs and signs of poor quality	https://pypi.org/project/pylint/
flawfinder	Examines C/C++ source code for security flaws	http://www.dwheeler.com/flawfinder/ 🔓
rats	A tool to find security related programming errors	https://www.fortify.com/ssa-elements/threat-intelligence/rats.html
pychecker	A analyser for python source code	http://pychecker.sourceforge.net/ 🔓
pyflakes	A passive checker of Python programs	https://launchpad.net/pyflakes
strace	A useful diagnositic, instructional, and debugging tool	https://strace.io/
netsink	A Network Sinkhole for Isolated Malware Analysis	https://github.com/shendo/netsink

Forensics / Data recovery tools

Name	Description	URL
dc3dd	Patched version of GNU dd for use in computer forensics	http://dc3dd.sourceforge.net/
ddrescue	Data recovery tool for block devices with errors	http://www.gnu.org/s/ddrescue/ddrescue.html
testdisk	A powerful free data recovery software	http://www.cgsecurity.org/wiki/TestDisk
scrub	Disk scrubbing program	http://code.google.com/p/diskscrub/
ncdu	A curses-based version of the well-known "du"	http://dev.yorhel.nl/ncdu
htop	An interactive process viewer for Linux	http://htop.sourceforge.net/
mac-robber	A tool that collects data from allocated files in a mounted file system	http://www.sleuthkit.org/mac-robber/desc.php
wipe	Tool for securely erasing files from magnetic media	http://lambda-diode.com/software/wipe/^{[Dead Link]}
nwipe	Securely erase disks using a variety of recognized methods	https://github.com/martijnvanbrummelen/nwipe/
jhead	An Exif jpeg header manipulation tool	http://www.sentex.net/~mwandel/jhead/

Reconnaissance

Name	Description	URL
arpalert	Monitor ARP changes in ethernet networks	http://www.arpalert.org
arpon	ARP handler inspection	http://arpon.sourceforge.net/
dnsenum	A tool to enumerate DNS info about domains	http://code.google.com/p/dnsenum/
halberd	A tool to discover HTTP load balancers	https://github.com/jmbr/halberd
scanssh	Fast SSH server and open proxy scanner	http://monkey.org/~provos/scanssh/
ngrep	Network layer grep tool	http://ngrep.sourceforge.net/
netsniff-ng	A performant Linux network analyzer and networking toolkit	http://netsniff-ng.org/
scapy	Interactive packet manipulation tool and network scanner	http://www.secdev.org/projects/scapy/
socat	Bidirectional data relay between two data channels ('netcat++')	http://www.dest-unreach.org/socat/
tcpdump	A network traffic monitoring tool	http://www.tcpdump.org/
tcptrack	Displays information about tcp connections on a network interface	http://www.rhythm.cx/~steve/devel/tcptrack/^{[Dead Link]}
tcpflow	A tool for monitoring, capturing and storing TCP connections flows	http://www.circlemud.org/~jelson/software/tcpflow/
tcpproxy	Transparent TCP Proxy	http://www.quietsche-entchen.de/cgi-bin/wiki.cgi/proxies/TcpProxy^{[Dead Link]}
etherdump	An extremely small packet sniffer	http://freshmeat.net/projects/etherdump/
netdiscover	A network address discovering tool	http://sourceforge.net/projects/netdiscover/
nmap	A network exploration tool and security/port scanner	http://nmap.org
arpwatch	An ethernet monitoring program	http://www-nrg.ee.lbl.gov/
nfswatch	An NFS traffic monitoring tool	http://nfswatch.sourceforge.net/
p0f	Passive traffic fingerprinting tool	http://lcamtuf.coredump.cx/p0f3/
hping3	A ping-like TCP/IP packet assembler/analyzer	http://www.hping.org
sslscan	Security assessment tool for SSL	http://sourceforge.net/projects/sslscan/
httpry	A packet sniffer designed for HTTP traffic	http://dumpsterventures.com/jason/httpry
bannergrab	A banner grabbing tool	http://sourceforge.net/projects/bannergrab
dnstop	A DNS traffic capture utility	http://dns.measurement-factory.com/tools/dnstop/
flunym0us	A vulnerability scanner for wordpress and moodle	http://code.google.com/p/flunym0us/
swaks	A transaction-oriented SMTP test tool	http://www.jetmore.org/john/code/swaks/
onesixtyone	An efficient SNMP scanner	http://www.phreedom.org/software/onesixtyone/
mitmproxy	An interactive SSL-capable intercepting HTTP proxy	http://www.mitmproxy.org/
hexinject	A very versatile packet injector and sniffer	http://hexinject.sourceforge.net/
openvas	Vulnerability scanner and manager	http://www.openvas.org/src-doc/openvas-manager/index.html

Application Testing

Name	Description	URL
wbox	HTTP testing tool and configuration-less HTTP server	http://www.hping.org/wbox/
slowhttptest	An application Layer DoS attack simulator	http://code.google.com/p/slowhttptest
nikto	A web application security scanner	https://www.cirt.net/Nikto2

Network statistics

Name	Description	URL
iperf	Tool to measure IP bandwidth using UDP or TCP	http://iperf.sourceforge.net/
iptraf-ng	A console-based network monitoring utility	https://fedorahosted.org/iptraf-ng/
iptop	Command line tool that displays bandwidth usage on an interface	http://www.ex-parrot.com/~pdw/iftop/
fping	A utility to ping multiple hosts at once	http://fping.sourceforge.net/
mtr	Full screen ncurses traceroute tool	http://www.bitwizard.nl/mtr/
speedometer	Measure and display the rate of data across a network connection or data being stored in a file	http://excess.org/speedometer/
nfdump	The nfdump tools collect and process netflow data on the command line	http://nfdump.sourceforge.net/
nethogs	Top-like monitor for network traffic	http://raboof.github.io/nethogs/
iptstate	Top-like interface to netfilter connection-tracking table	http://www.phildev.net/iptstate/

Misc tools

Name	Description	URL
bash-completion	Command-line tab-completion for bash	http://bash-completion.alioth.debian.org/
clamav	An anti-virus toolkit for UNIX	http://www.clamav.net
p7zip	A command-line port of the 7zip compression utility	http://p7zip.sourceforge.net/
nano	A simple ncurses text editor	http://www.nano-editor.org/
rsync	A file transfer program to keep remote files in sync	http://rsync.samba.org/
screen	A terminal multiplexer, used to multiplex several virtual consoles. Similar to "tmux" below	http://www.gnu.org/software/screen/
tmux	A terminal multiplexer, used to multiplex several virtual consoles. Similar to "screen" above	https://tmux.github.io/
multitail	A tool to view one or multiple files	http://www.vanheusden.com/multitail
shed	A simple hex editor	http://shed.sourceforge.net/
e2fsprogs	Standard Ext2/3/4 filesystem utilities	http://e2fsprogs.sourceforge.net/
openssh	An open source implementation of SSH protocol versions 1 and 2	http://www.openssh.org/
passwdgen	A random password generator	http://code.google.com/p/passwdgen/
partclone	Back up and restore used-blocks of a partition	http://partclone.org
sshguard	Log monitor that blocks with iptables on bad behaviour	http://www.sshguard.net/download/
proxychains	A tool that forces any TCP connection through proxies	http://proxychains.sourceforge.net
knock	A simple port-knocking daemon	http://www.zeroflux.org/projects/knock
logcheck	A simple utility which is designed to allow a system administrator to view the logfiles	http://www.logcheck.org
mc	A visual file manager	https://www.midnight-commander.org/
makepasswd	Generates (pseudo-)random passwords of a desired length	http://people.defora.org/~khorben/projects/makepasswd/
lnav	A curses-based tool for viewing and analyzing log files	http://lnav.org
goaccess	A real-time web log analyzer and interactive viewer	http://goaccess.prosoftcorp.com/

VoIP

Name	Description	URL
sipp	A test tool / traffic generator for the SIP protocol	http://sipp.sourceforge.net/
voiphopper	A VLAN Hop security test	http://voiphopper.sourceforge.net/
sipvicious	Tools for auditing SIP based VoIP systems	http://code.google.com/p/sipvicious/
sipcrack	A SIP protocol login cracker	http://packages.debian.org/lenny/sipcrack
sipsak	SIP swiss army knife	http://sipsak.org/^{[Dead Link]}
smap	A simple scanner for SIP enabled devices	http://www.wormulon.net/smap^{[Dead Link]}

Wireless

Name	Description	URL
weplab	Analyzing WEP encryption security on wireless networks	http://weplab.sourceforge.net/^{[Dead Link]}
kismet	A WLAN detector, sniffer, and IDS	http://www.kismetwireless.org/
cowpatty	Attacking WPA/WPA2-PSK exchanges	http://www.willhackforsushi.com/Cowpatty.html^{[Dead Link]}
wavemon	Ncurses-based monitoring application for wireless network devices	https://github.com/uoaerg/wavemon

Intrusion detection

Name	Description	URL
nebula	An Intrusion Signature Generator	http://nebula.carnivore.it/^{[Dead Link]}
snort	A network intrusion prevention and detection system	http://www.snort.org/

@@ Line 48: / Line 48: @@
 | pylint
 | Analyzes Python code looking for bugs and signs of poor quality
-| http://pypi.python.org/pypi/pylint
+| https://pypi.org/project/pylint/
 |-
 | flawfinder
 | Examines C/C++ source code for security flaws
-| http://www.dwheeler.com/flawfinder/
+| http://www.dwheeler.com/flawfinder/{{insecure url|HTTPS times out}}
 |-
 | rats
@@ Line 60: / Line 60: @@
 | pychecker
 | A analyser for python source code
-| http://pychecker.sourceforge.net/
+| http://pychecker.sourceforge.net/{{insecure url|HTTPS returns connection refused}}
 |-
 | pyflakes
@@ Line 68: / Line 68: @@
 | strace
 | A useful diagnositic, instructional, and debugging tool
-| http://sourceforge.net/projects/strace/
+| https://strace.io/
 |-
 | netsink