Results 1 to 9 of 9

Thread: newbie tools for network security scanning

  1. #1

    newbie tools for network security scanning

    Hi guys, I want to make sure that our network is as secure as possible. What is the best newbie tool(s) to run and where is the best tutorial on running the said tool in order to see what is going on.
    We have an NT4(All patches up to date) server to which are connected 40 odd nodes and the server is connected to the net via a router which is also a firewall (Netgear FVS 318).
    I want two tools I guess. Something that will highlight vulnerabilities at the perimeter and also soemthing that can track traffic inside the boundaries.

    If anyone knows a good book to start me off that I can get my teeth into that would be cool too.
    Cheers guys.
    \"\'Do not despise the snake for having no horns, for who is to say it will not become a dragon?\"

  2. #2
    Senior Member
    Join Date
    Oct 2003
    Posts
    707
    I dont know if this will be of any help to you but you might wanna give it a shot :

    Netwox

    Netwox contains over 130 tools built into one program. Each tool is referenced by a particular number and is readily available and searchable. The coolest tool is the network sniffing program. This tool sniffs network packets and doesn't output it like you normally see with tcpdump or ethereal. No, it outputs the packets just like you learned it.
    Netwox has other tools like base64, decimal, and hex converters, port scanner, mail client, syslog client, dns server, dns client, http server, ping, traceroute, etc.. It gives you the tools to do quick tests without having to use a suite of tools. The default output and way to run netwox is via the command-line though a gui interface exists for its use as well.
    The quoting is taken from : Introduction to Netwox and Interview with Creator Laurent Constantin

    Hopefully some of the other members can give you a better answer which will suite your needs.
    Operation Cyberslam
    \"I\'ve noticed that everybody that is for abortion has already been born.\" Author Unknown
    Microsoft Shared Computer Toolkit
    Proyecto Ututo EarthCam

  3. #3
    Languard network scanner is a good freeware security scanner - you can get it here -

    http://www.gfi.com/lannetscan/networ...r_freeware.htm

  4. #4
    HeadShot Master N1nja Cybr1d's Avatar
    Join Date
    Jul 2003
    Location
    Boston, MA
    Posts
    1,840
    advanced administrative tools

    http://www.glocksoft.com


    download the 45 day fully functional trial version, and if you like it, you can buy the lincense for $45.

  5. #5
    elmurado - no offense intended, but if you are a self-proclaimed newbie, do you know what the output of those tools will be telling you, and how to correct any identified problems?

    Be sure to head over to the tutorials section and parse through some of the security write-ups other members have posted.

    Also, check out SecurityFocus.com's database of software vulnerabilities. It's broken down by vendor/product/version, so you can look for issues that may exist for specific software packages your server(s) or clients are running. Don't forget - the OS is just one weak link in the chain. SSH, FTP, HTTP, IM... they can all be security issues.

    l00p

  6. #6
    thanks guys, yes I am a noob, and no offense taken. I don't offend easily, I never learnt anything without looking ridiculous at least once!(riding my mtb for instance)

    I am scouring the net for resources to help me learn learn learn. I've found sans a good spot and also security-focus.com (a bit more straight laced than here!) also have been learning by trying things and places (ie shieldsup) and the such. will check the tutorials here.
    Thanks for the advice l00p it is all gratefully accepted.
    \"\'Do not despise the snake for having no horns, for who is to say it will not become a dragon?\"

  7. #7
    Senior Member
    Join Date
    Mar 2004
    Posts
    171
    For another tool that is 1) pretty decent, and 2) good for a newbie to cut his teeth on, and 3) best of all, FREE, why not check out Microsoft's Baseline Security Analyzer? MBSA is a decent tool and good help. The link is available right on the AO homepag, or click here:

    http://www.microsoft.com/downloads/d...DisplayLang=en

    Good place to start that wont overwhelm ya right off the bat. There are better tools out there but none as easy to manage, or get started with, that I know of.

    Cheers!
    ~ I'm NOT insane! I've just been in a bad mood for the last 30 years! ~ Somepeople are like Slinky's: Not good for anything, but the thought of pushing them down the stairs brings a smile to your face!

  8. #8
    I didn't know about this MBSA.. just picked it up. Good show, MrCoffee!

    l00p

  9. #9

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •