無網不利 vs 有網無力

UNetbootin (ISO to USB)

2010-09-14T22:55:00.002+08:00

UNetbootin allows you to create bootable Live USB drives for Ubuntu, Fedora, and other Linux distributions without burning a CD.
http://unetbootin.sourceforge.net/

個人造業個人擔 Exploit-Part III

2010-09-06T15:22:00.002+08:00

The Exploit Database
http://www.exploit-db.com/

岁月联盟
http://syue.com/

WooYun
http://www.wooyun.org/

記憶體鑑識(Memory Forensics)

2010-09-06T15:15:00.004+08:00

Volatility Framework : is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples.
https://www.volatilesystems.com/default/volatility

MANDIANT Memoryze : is free memory forensic software that helps incident responders find evil in live memory.
http://www.mandiant.com/products/free_software/memoryze/

JSUNPACK

2010-09-06T14:37:00.001+08:00

A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
http://jsunpack.jeek.org/dec/go
Upload a PDF, pcap, HTML, or JavaScript file.

LiveCD Forensics

2010-09-06T09:46:00.002+08:00

DEFT Linux
DEFT (acronym of “Digital Evidence & Forensic Toolkit) is a customized distribution of the Xubuntu live Linux CD.
http://www.deftlinux.net/

PlainSight
is a versatile computer forensics environment that allows inexperienced forensic practitioners perform common tasks using powerful open source tools.
http://www.plainsight.info/

CAINE
offers a complete forensic environment that is organized to integrate existing software tools as software modules and to provide a friendly graphical interface.
http://www.caine-live.net/

e-fense™, Inc. -- E-Discovery, Computer Forensics, Security and Training
http://www.e-fense.com/

Untangle (UTM)

2010-08-27T12:28:00.002+08:00

Untangle provides a powerful suite of Internet management applications for small-to-medium businesses and education institutions.
http://www.untangle.com/

Free Apps：
* Web Filter
* Virus Blocker
* Spam Blocker
* Captive Portal
* Ad Blocker
* Phish Blocker
* Attack Blocker
* Spyware Blocker
* Protocol Control
* Firewall
* Reports
* OpenVPN

Endian (UTM)

2010-08-27T12:16:00.001+08:00

Endian has changed the network security landscape by providing a Unified Threat Management (UTM) solution with a unique management experience: deploy quickly, manage easily and stay flexible.
http://www.endian.com/

Multiple Web Reputation Services

2010-06-15T11:45:00.003+08:00

Detection of possible dangerous websites.
http://www.urlvoid.com/

How about the age of Domain

2010-06-15T11:43:00.000+08:00

CONGLAND - Domain age checker tool
http://domain-age-checker-tool.congland.com/

WebSite Proxy

2010-06-14T13:01:00.000+08:00

Black Dragon Web Proxy - surf anonymous and unblock websites
http://blackdragonproxy.com/

XeroSurf Online Privacy Shield - fast and free anonymous SSL web proxy service
http://xerosurf.net/
http://xerosurf.com/
[Proxy Check]

http://www.prospector.cz/Free-Internet-services/Web-proxy/ ...XD!bypass content filter.

衝破網頁過濾防護設備吧~~~(夭壽!
注意：千萬不要在這底下進行登入帳號密碼的動作。

BitDefender

2010-05-21T14:57:00.001+08:00

http://www.bitdefender.com/scanner/online/free.html

vURL Online

2010-05-21T12:42:00.001+08:00

Quickly and safely dissect malicious or suspect websites
http://vurldissect.co.uk/
http://vurl.mysteryfcm.co.uk/

Fiddler

2010-05-21T12:41:00.001+08:00

a Web Debugging Proxy which logs all HTTP(S) traffic between your computer and the Internet.
http://www.fiddler2.com/

Wepawet

2010-05-21T11:28:00.000+08:00

is a service for detecting and analyzing web-based malware. It currently handles Flash, JavaScript, and PDF files.
http://wepawet.cs.ucsb.edu/

Just-ping, traceroute, dns lookup.

2009-12-22T17:07:00.004+08:00

Online web-based ping: remote ping a server or web site using our network with 40 checkpoints worldwide
http://just-ping.com/

Online traceroute: from 4 locations @ Just-traceroute.com
http://just-traceroute.com/

Online dns lookup: remote dns lookup (nslookup/dig) a host or domain from multiple checkpoints worldwide
http://just-dnslookup.com/

BitBlaze

2009-12-22T17:05:00.000+08:00

Malware Analysis Service.
https://aerie.cs.berkeley.edu/submitsample-d.php

F-Secure

2009-12-22T17:04:00.000+08:00

Sample Analysis System.
https://analysis.f-secure.com/

MalwareURL

2009-12-22T17:03:00.000+08:00

is a group of Internet security experts dedicated to fighting malware, Trojans and a multitude of other web-related threats.
http://www.malwareurl.com/

UploadMalware.com

2009-12-22T17:02:00.000+08:00

is an easy way for you to submit files for analysis by anti-malware and security professionals.
http://www.uploadmalware.com/

Dasient Web Anti-Malware (WAM)

2009-11-24T16:41:00.000+08:00

Dasient's malware infection library catalogs web-based malware from across the Internet.
http://wam.dasient.com/wam/infection_library_index

Identify File (**) by MD5, SHA1 or Others

2009-11-24T15:25:00.000+08:00

FileAdvisor: MD-5 or SHA-1 hash of any file
http://fileadvisor.bit9.com/

RunScanner: Filename / Process / Guid / CLSID / MD5 hash
http://www.runscanner.net/

Prevx: (need to login)
http://www.prevx.com/

VirusTotal: hash by md5/sha1/sha256
http://www.virustotal.com/zh-tw/buscaHash.html

NoVirusThanks

2009-11-24T12:26:00.001+08:00

If you have a suspicious file you can submit it in the form below and our system will analyze your file with 24 AntiVirus Engines and will report back the analysis result.
http://scanner.novirusthanks.org/

Malware Hash

2009-11-24T12:18:00.001+08:00

is a free service offered by NoVirusThanks.org that collects the malicious MD5 hash of the files that are analyzed in the Malware & Virus Scan Service.
http://www.malwarehash.com/submit-file.php

Online Link Scan

2009-05-18T09:00:00.000+08:00

Online Link Scan - Virus, Trojan, Adware and Malware Scanner
http://onlinelinkscan.com/
Prevent infection and data theft! Scan links for viruses, malware, spyware, and trojans with OnlineLinkScan.
Use our arsenal of tools to prevent infection, data theft and find out the trust score of a link.

Malware Hash

2009-04-08T22:53:00.001+08:00

Malware Hash is a free service offered by NoVirusThanks.org that collects the malicious MD5 hash of the files that are analyzed in the Malware & Virus Scan Service.
http://www.malwarehash.com/

Filterbit™

2009-04-05T10:23:00.001+08:00

Using Filterbit, you can upload a file and get results from 9 different scanners.
http://www.filterbit.com/

瑞星恶意网站监测网

2009-01-12T13:03:00.002+08:00

主要監控網站掛馬的攻擊行為。
http://mwm.rising.com.cn/
* 恶意网站TOP5
* 恶意网站分布示意图
* 恶意网站攻击风险标示
* 恶意网站影响地区排行

Malware Domain List

2008-12-04T23:40:00.001+08:00

*注意!!以下網站中的連結，若不知其原理會有相當危險性*

Malicious Web site Labs (恶意网站实验室) (**)
http://www.mwsl.org.cn/

Malware Domain List (***)
All domains on this website should be considered dangerous.
http://www.malwaredomainlist.com/

Malware Block List
The Malware Block List is a free, automated and user contributed system for checking URLs for the presence of Viruses, Trojans, Worms, or any other software considered Malware. The list is available in 29 formats.
http://www.malware.com.br/

DNS-BH - Malware Domain Blocklist
The DNS-BH project creates and maintains a listing of domains that are known to be used to propagate malware and spyware.
http://malwaredomains.com/

StopBadware (***)
StopBadware.org is a "Neighborhood Watch" campaign aimed at fighting badware.
http://www.stopbadware.org/

www.winsiderss.com

2008-11-08T10:07:00.002+08:00

MemInfo is a tool to query information on the state of the memory manager page lists, page frame number (PFN) database entries, per-component and per-process memory usage, and for mapping virtual to physical addresses (for certain kinds of kernel-mode pointers).
http://www.winsiderss.com/tools/meminfo/meminfo.htm

ScTagQuery allows you to obtain precise information on which threads in the system are being used by what service, in order to better gauge CPU and resource usage as well as to help in debugging service-related problems.
http://www.winsiderss.com/tools/sctagquery/sctagquery.htm

Alex Ionescu’s Blog
http://www.alex-ionescu.com/

Forensics Wiki

2008-11-05T22:21:00.002+08:00

focused on the tools and techniques used by investigators.
http://www.forensicswiki.org/wiki/Main_Page

be hacked URL of information (被黑網站資料)

2008-11-03T22:41:00.000+08:00

Zone-H.org (***)
http://www.zone-h.org/
天罣--輪迴的阿修羅 (****)
http://tw.myblog.yahoo.com/edward_205_6/
中国被黑站点统计系统 (*)
http://www.zone-h.com.cn/
Zone-H 本週被黑 .tw 網站整理
http://outian.net/zone-h/
TW 網站淪陷資料庫 | 資安之眼 (*)
http://www.itis.tw/compromised
Turk Hack World Analyse and Attack Mirror Service (*)
http://turk-h.org/
PhishTank See all suspected phish submissions (*)
http://www.phishtank.com/phish_archive.php
Serapis.net
http://www.serapis.net/
XSSed: XSS (cross-site scripting) information and vulnerable websites archive
http://www.xssed.com/archive
WWW Check -- by Chroot
http://www.chroot.org/wwwcheck/
大砲開講
http://rogerspeaking.com/

NOSEC-JSky

2008-10-24T23:00:00.001+08:00

The Web Vulnerabity Scanner for FREE
http://www.nosec.org/web/jsky
#Do you know "Pangolin" ? not only scanner, but also as EXPLOIT.

JavaScript Analysis (Decrypt)

2008-10-24T22:50:00.001+08:00

Interpreters and debuggers (aka sandboxes)...
Rhino : JavaScript in Java
http://www.mozilla.org/rhino/
NJS : JavaScript interpreter
http://www.njs-javascript.org/
http://sourceforge.net/projects/njs/
http://www.ngs.fi/js/
DecryptJS :
http://www.ukhoneynet.org/tools/decrypt-js/
SpiderMonkey : JavaScript in C
http://www.mozilla.org/js/spidermonkey/
MalZilla : various decoders to try and deobfuscate javascript (on Windows)
http://malzilla.sourceforge.net/
FreShow : filters and decodes obscured script (on Windows)
http://www.jimmyleo.com/work/FreShowStart.htm

Default Password

2008-10-07T22:35:00.000+08:00

Virus.Org Default Password Database
http://www.virus.org/default-password/

Default passwords list
http://www.default-password.info/

Default Passwords from AOH
http://artofhacking.com/etc/passwd.htm

View HTTP Request and Response Header

2008-10-05T15:18:00.001+08:00

http://web-sniffer.net/
Fetures:
* list of user agents
* switch between HTTP/1.1 and HTTP/1.0
* test If-Modified-Since and If-Match headers
* support WWW-Authenticate
* search engine redirect added – all bots will be moved permanently to frontpage
* the URL may also be an Internationalized Domain Names (IDN)
* secure connections (HTTPS) allowed

Joebox

2008-09-29T00:02:00.002+08:00

http://www.joebox.org/submit.php
There are three possiblities for a valid submission:
● A script (*.jbs)
● A binary file which is either a:
.....Dll (*.dll)
.....Exectuable (*.exe)
.....Driver (*.sys)
● Or a binarie (*.dll or *.exe or *.sys and a script (.jbs)

Malware Help.Org (*****)

2008-09-27T18:42:00.006+08:00

PC security, privacy, anonymity and anti-malware Resource
http://www.malwarehelp.org/
● Security Software
● Online Scanners

Browsershots

2008-09-27T10:34:00.000+08:00

Browsershots makes screenshots of your web design in different browsers.
http://browsershots.org/
#Test your web design in different browsers.

Scanit-Browser Security Test

2008-09-15T12:42:00.002+08:00

Test Your Browser's Security Now ...
http://bcheck.scanit.be/

utrace - locate IP addresses and domainnames

2008-09-15T09:47:00.003+08:00

http://en.utrace.de/
[ English | Deutsch ]
#by IP address or Domain with google Map.
<閱讀全文(Read More)...>

National Institute of Standards and Technology-Tool Survey

2008-09-14T09:42:00.002+08:00

Classes of Tools & Techniques

	Process	Automation	Approach	Viewpoint
Assurance Case Tools	SWE manage	1	Mitigate(?)	Int
Safer Languages	Implementation	0	Preclude	Int
Design/Modeling Verification Tools	Design	2/3	Detect	Int
Source Code Security Analyzers, Byte Code Scanners, Binary Code Scanners (SWEBOK 10 1.9)	Test	2	Detect	Int
Web Application Vulnerability Scanners	Test/Operation	2	Detect	Ext
Intrusion Detectors	Operation	2	Detect	Int
Network Scanners	Operation	2	Detect	Ext
Requirements Verification Tools	Requirements	2/3	Detect	Int
Architecture Design Tools	Design	1	Preclude	Int
Dynamic Analysis Tools	Test	1	Detect	Ext
Web Services Network Scanners	Test/Operation	2	Detect	Ext
Database Scanning Tools	Operation	2	Detect	Int
Anti-Spyware Tools (A system assurance, not software assurance class)	Operation	2/3	Detect/React	Int

Nass Tools (*)

2008-09-12T22:08:00.000+08:00

http://tools.nass.com.au/

Tools

from nass	DNS Lookup Ping Traceroute	via optus
from ausregistry	Who Is
from internic	Who Is Registrars FAQ
from digex	(USA)
from optus
from telstra
from connect
from sam spade
from IP Plus	(Switzerland)

Sunbelt Software-CounterSpy Scan

2008-09-12T22:05:00.001+08:00

FREE CounterSpy Spyware Scan for Dell Customers
http://www.sunbelt-software.com/dell/counterspy_scan.cfm

PhishTank

2008-09-12T21:03:00.003+08:00

PhishTank is a collaborative clearing house for data and information about phishing on the Internet.
http://www.phishtank.com/
#有釣魚網頁(設網站騙人的)、寄宿釣魚網頁(把騙人的網頁偷偷放在正常的網站，通常也表是正常網站遭淪陷了)的相關記錄資訊，代表不同的意義。

Malzilla - Malware Hunting Tool

2008-09-09T20:21:00.000+08:00

MalZilla is a useful program for use in exploring malicious pages. It allows you to choose your own user agent and referrer, and has the ability to use proxies. It shows you the full source of webpages and all the HTTP headers. It gives you various decoders to try and deobfuscate javascript aswell.
http://malzilla.sourceforge.net/
#JavaScript Decode Tool

hpHosts Online - Simple, Searchable & FREE!

2008-09-08T23:13:00.001+08:00

Welcome to hpHosts online!. This database has been created to allow simple, and quick confirmation of a site's listing in the hpHosts HOSTS file.
hpHosts is a community managed and maintained hosts file that allows an additional layer of protection against access to ad, tracking and malicious websites.
http://hosts-file.net/
#This database has been created to allow simple, and quick confirmation of a site's listing in the hpHosts HOSTS file.

vURL Online (*)

2008-09-08T22:55:00.002+08:00

Welcome to the vURL webpage dissection service.
This service is completely free and allows you to view the source code within a webpage without your having to visit the site itself. In addition to this, options have been provided to view all links within a page for those of you that wish to do so.
http://vurl.mysteryfcm.co.uk/
#Quickly and safely dissect malicious or suspect websites

OpenDNS - Providing A Safer And Faster Internet

2008-09-08T22:10:00.003+08:00

OpenDNS is the world's largest, fastest-growing DNS service provider. Millions of people worldwide (and growing) trust us to handle their DNS and Web-content filtering needs. Why? Because we take a fresh approach to the Domain Name System and make it smarter and more powerful than it's ever been.
http://www.opendns.com/
Features
* Adult Site Blocking
* Phishing Protection
* Large Cache
* Statistics
* Customization
* ...and more!
#你知道自家的 DNS 都是惡意程式的燈塔嗎？
#也要記住這服務模式，我想這也是企業必需的安全服務之一，強化你的 DNS 服務。
#原來國外已經有這服務了。與 ThreatSTOP 有互補之效。

Other WebSites for Tiny URL

2008-09-01T12:04:00.005+08:00

下列資料出自：http://www.freegroup.org/free-tiny-url
<閱讀全文(Read More)...>
is.gd
http://is.gd/
【長度(字元)】16。
【順序排列】是。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

MeaningfulURL
http://www.meaningfulurl.com/
【轉址格式】意義網址 + 自訂詞
【信箱認證】否。
【顯示廣告】否。

Seeit.at
http://seeit.at/
【長度(字元)】21
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】是。
#最長可以使用三十天，最短五分鐘。

esyURL
http://www.esyurl.com/
【長度(字元)】25
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。
#提供了檔案上傳(File Upload)的功能，副檔名必須為 .rar, .zip, .tar.gz 三種...damn

Snip.cc
http://www.snip.cc/
【長度(字元)】19
【順序排列】是。
【隨機排列】否。
【自訂密碼】否。
【自選網址】否。

Go2.TW (中文)
http://go2.tw/
【長度(字元)】15
【順序排列】是。
【隨機排列】否。
【自訂密碼】是。
【自選網址】是。

RubyURL.com
http://rubyurl.com/
【長度(字元)】22
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

dwarfURL
http://www.dwarfurl.com/
【長度(字元)】24
【順序排列】否。
【隨機排列】是。
【自訂密碼】是。
【自選網址】否。

memurl
http://memurl.com/
【長度(字元)】24
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

301url
http://www.301url.com/
【長度(字元)】21
【順序排列】是。
【隨機排列】否。
【自訂密碼】是。
【自選網址】是。

iLook (中文)
http://ilook.tw/
【長度(字元)】20
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

DWZ.tw
http://dwz.tw/
【長度(字元)】18。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

WaURL!
http://www.waurl.com/
【長度(字元)】可自訂。
【順序排列】是。
【隨機排列】是。
【自訂密碼】否。
【自選網址】是。

Z.la (X)
http://z.la/
【長度(字元)】17
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

LNK.IN
http://lnk.in/
【長度(字元)】自選
【順序排列】否。
【隨機排列】是。
【自訂密碼】是。
【自選網址】是，可自行加入字串。

urlTea
http://urltea.com/
【長度(字元)】21
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】是，可自行加入字串。

Peqno
http://www.peqno.com/
【長度(字元)】隨機。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

Boobob.com (X)
http://boobob.com/
【長度(字元)】隨機。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】是。

Fyad.org
http://fyad.org/
【長度(字元)】隨機。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

Redirx (X)
http://redirx.com/
【長度(字元)】隨機。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

UrlZip (X)
http://www.urlzip.net/
【長度(字元)】隨機。
【順序排列】是。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

Stick this
http://stickythis.com/
【長度(字元)】自選。
【順序排列】否。
【隨機排列】否。
【自訂密碼】否。
【自選網址】是。

0rz.tw (台灣地區涵蓋範圍最廣的縮網址服務)
http://0rz.tw/
【長度(字元)】19。
【順序排列】否。
【隨機排列】是。
【自訂密碼】是。
【自選網址】否。

kuso.cc (中文)
http://kuso.cc/
【長度(字元)】19。
【順序排列】否。
【隨機排列】是。
【自訂密碼】是。
【自選網址】是。

myurl.com.tw
http://myurl.com.tw/
【長度(字元)】24。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

myurl.tw
http://myurl.tw/
【長度(字元)】含目錄。
【順序排列】是。
【隨機排列】否。
【自訂密碼】可設為私人不公開，但必須註冊。
【自選網址】註冊後才可使用。

ohaha.net
http://ohaha.net/
【長度(字元)】21。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

Snipurl (中文)
http://snipurl.com/
【長度(字元)】23。
【順序排列】否。
【隨機排列】是。
【自訂密碼】是。
【自選網址】是。

Metamark
http://metamark.net/
【長度(字元)】18。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】是。

My T Url
http://myturl.com/
【長度(字元)】23。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

ShortLinks
http://shortlinks.co.uk/
【長度(字元)】26。
【順序排列】是。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

Tiny.cc
http://tiny.cc/
【長度(字元)】24。
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

Korta och enkla länka
http://tinyurl.se/
【長度(字元)】隨機
【順序排列】否。
【隨機排列】是。
【自訂密碼】否。
【自選網址】否。

Turns a long URL into a shorter and easier one

2008-09-01T11:50:00.000+08:00

TinyURL.com - shorten that long URL into a Tiny URL
http://tinyurl.com/
#Hide URLs
#be used at the attack of Drive-by Download

Other: http://www.freegroup.org/free-tiny-url
#縮短網址。
#網址太長嗎？來縮網址，將你的網址縮短方便大家閱讀。
#有心人事也會利用，把惡意網址隱藏起來。

Free DNS Hosting

2008-09-01T00:04:00.000+08:00

ZoneEdit.com
http://zoneedit.com/
Free DNS service - Easy, web-based domain manager

afraid.org
http://freedns.afraid.org/
FreeDNS - Free DNS - Dynamic DNS - Static DNS subdomain and domain hosting

XName site
http://xname.org/
XName site - Free DNS Hosting Service

EveryDNS.net
http://www.everydns.com/
Free DNS, Static DNS, Dynamic DNS, URL Redirection, and more from EveryDNS!

ArcaBit

2008-08-30T13:04:00.000+08:00

http://arcaonline.arcabit.com/scanner.html

Authentium

2008-08-30T13:03:00.000+08:00

http://www.commandondemand.com/

MKS-Skaner

2008-08-30T13:01:00.000+08:00

http://www.mks.com.pl/skaner/

PC Pitstop AntiVirus Center

2008-08-30T13:00:00.000+08:00

http://www.pcpitstop.com/antivirus/AV.asp

PANDA ActiveScan 2.0

2008-08-30T12:36:00.001+08:00

http://www.pandasecurity.com/activescan/index/

Online Compiler

2008-08-23T13:20:00.003+08:00

Compilr.com - Online Compiler
http://compilr.com/
Currently, focusing Compilr on C#.Net; however, as development continues many other languages will be added, including:
* VB.Net
* C#.Net
* C/C++
* Java
* Fortran

Online Compiler
http://koding.net/
*C#
*VB.Net
*C++

codepad.org is an online compiler/interpreter, and a simple collaboration tool.
http://codepad.org/

Freebyte.com
http://www.freebyte.com/
http://www.freebyte.co/programming/cpp/
Free C++ (and C) Programming Tools

Free Online Picture Editor

2008-08-23T12:09:00.002+08:00

Crop and Resize photos, images, or pictures online for FREE!
http://www.picresize.com/

Sender Policy Framework (SPF)

2008-08-15T11:10:00.003+08:00

http://www.openspf.org/
http://spf.pobox.com/
The Sender Policy Framework (SPF) is an open standard specifying a technical method to prevent sender address forgery. More precisely, the current version of SPF — called SPFv1 or SPF Classic — protects the envelope sender address, which is used for the delivery of messages. See the box on the right for a quick explanation of the different types of sender addresses in e-mails.
#在DNS記錄中，定義郵件地址的網域有提供寄信(SMTP)的郵件主機 IP，避免有人假冒你的網域來寄送信件。
#做法是在 DNS 內加入 SPF record，說明這個域名只會透過那些主機發送郵件，而 SPF record 的格下為:
v=spf1 [[pre] type [ext] ] … [mod]

MXToolBox (**)

2008-08-14T22:28:00.001+08:00

MX Lookup Tool - Check your DNS MX Records online
http://www.mxtoolbox.com/index.aspx
#Tools：
>>MX Lookup(***)
>>Blacklists
>>Diagnostics(*):Open relay test and verify reverse DNS (PTR) record, response times...
>>Analyze Headers(*):email headers human readable by parsing them according to RFC 822.
>>SPF(Sender Policy Framework) Records
#Mail的相關診斷工具

Norton Safe Web, from Symantec (WRS, Web Reputation Services)

2008-08-12T09:45:00.003+08:00

http://safeweb.norton.com/
Norton Safe Web is a new reputation service from Symantec. Our servers analyze Web sites to see how they will affect you and your computer.
#網頁信譽評等軟體(WRS, Web Reputation Services)。

McAfee Avert Stinger

2008-08-03T10:04:00.000+08:00

http://vil.nai.com/vil/stinger/

avast! Virus Cleaner

2008-08-03T09:46:00.000+08:00

http://www.avast.com/eng/down_cleaner.html

AVG Free - Vcleaner

2008-08-03T09:42:00.002+08:00

http://free.avg.com/ww.virus-removal

Trend Micro

2008-08-03T08:59:00.004+08:00

iClean (解毒快手)
http://www.trendmicro.com.tw/iclean/index.htm

Trend Micro System Cleaner (TSC)
中文:http://www.trendmicro.com/download/zh-tw/tsc.asp
English:http://www.trendmicro.com/download/sysclean.asp

Norman Malware Cleaner

2008-08-03T08:47:00.001+08:00

http://www.norman.com/Virus/Virus_removal_tools/en-us
#Special program to clean computers infected by SinowalMBR rootkit.

F-Secure.com

2008-08-03T08:43:00.001+08:00

http://www.f-secure.com/security_center/malware_removal_tools.html
#Fixing tools perform repair of a system damaged or modified by a specific malicious program.

Dr.Web CureIt!

2008-08-03T08:11:00.001+08:00

http://www.freedrweb.com/

a-squared Web Malware Scanner

2008-08-02T23:49:00.001+08:00

http://www.emsisoft.com/en/software/ax/

FileResearchCenter.com - See what's running on your computer!

2008-08-02T12:25:00.002+08:00

The File Research Center provides a free scanning service to identify what is running on your computer. We also provide free information about safe and unsafe files, processes, services, spyware, adware, malware, trojans, and other programs that may be on your computer.
http://www.fileresearchcenter.com/

Find out what's running on your computer!
http://www.fileresearchcenter.com/whatsrunningpre.html

Getting Video Tools for GoogleVedio, YouTube...

2008-08-01T21:55:00.000+08:00

GooTube FLV Retriever
http://kej.tw/flvretriever/

Download videos from Youtube, Google, iFilm, Metacafe, DailyMotion, Music.
http://javimoya.com/
http://javimoya.com/blog/youtube_en.php

Firefox Add-ons: Ook? Video Ook!
https://addons.mozilla.org/en-US/firefox/addons/versions/2584

PEditor

2008-08-01T20:52:00.001+08:00

PEditor is a tool for PE (Portable Executable) files.
http://www.softpedia.com/progMoreBy/Publisher-yoda.html
http://www.softpedia.com/get/Programming/File-Editors/PEditor.shtml

Defense in Depth: IP and Netblock Blocking

2008-07-27T16:46:00.005+08:00

A single solution will never catch all spyware and malware. A layered, defense-in-depth approach is needed. This includes antivirus/antispyware protection, proxy servers, domain blocking via blackhole-DNS, and blocking by IP addresses and netblock.

* Dshield.org recommended block list
(http://feeds.dshield.org/block.txt)
* EmergingThreats rules (many contain IP addresses)
(http://www.emergingthreats.net/rules/)
* EmergingThreats RBN IP
(http://doc.emergingthreats.net/pub/Main/SnortConfSamples/RussianBusinessNetworkIPs.txt)
* Spamhaus Drop List
(http://www.spamhaus.org/drop/drop.lasso)
* The Harimau Watchlist
(down? http://watchlist.security.org.my/watchlist)

#Reference : http://malwaredomains.com/?p=143

IPv6 and/or IPv4 address (*)

2008-07-22T11:09:00.001+08:00

This page shows your IPv6 and/or IPv4 address
http://whatismyv6.com/

那顆爛蔥專屬相簿

2008-07-19T22:33:00.001+08:00

毒窟(研究用) Virus Trojan Resource
http://jokera.mrs3.com/pg/thumbnails.php?album=215

即時通木馬區
http://jokera.mrs3.com/pg/thumbnails.php?album=199

#You can get malware code for research, and be careful.

AVPClub Security Forums

2008-07-19T21:52:00.006+08:00

AVPClub Security Forums - 威脅樣本測試區
http://www.avpclub.ddns.info/discuz/forum-11-1.html

#You can get malware code for research, and be careful.

Trend Micro SecureCloud™ platform

2008-07-19T09:05:00.005+08:00

Is a complete Software as a Service (SaaS) security platform providing industry leading threat protection solutions for small, medium, and enterprise businesses against email and Web threats. The SecureCloud Platform provides an integrated, management platform and offers a single sign-on to Trend Micro's in-the-cloud security services. These services block spam, viruses and malware before they can reach customers' networks and compromise their IT infrastructure.
https://securecloud.com/

You can :
Email IP Reputation Search (電子郵件IP信譽評等搜尋)
Web Reputation Search (網頁信譽評等搜尋)(*)
File Reputation Search (檔案信譽評等搜尋)

WRS Software, more and more ...

2008-07-17T17:16:00.005+08:00

Finjan SecureBrowsing provides you with safety ratings of URLs showing in your browser.
http://securebrowsing.finjan.com/

#Finjan URL Scan:
http://www.finjan.com/Content.aspx?id=574
#其他的URL Scan在這裡(我的這個Blog上)
Others URL Scan at there.

Computer Forensics, Cybercrime and Steganography Resources (***)

2008-07-14T21:01:00.002+08:00

Computer Forensics, Cybercrime and Steganography Resources
http://www.forensics.nl/

Computer Forensics Toolkits, Digital Evidence Software Suites
http://www.forensics.nl/toolkits

Computer Forensics Tools, Digital Evidence Software, Utilities
http://www.forensics.nl/tools

Integrity Management Software
http://www.forensics.nl/integrity-management

Wireless Cracking

2008-07-14T20:56:00.002+08:00

Wardriving Tools, Wardriving Software, Wardriving Utilities
http://www.wardrive.net/wardriving/tools

Wireless LAN Security / Wardriving / WiFi Security / 802.11
http://www.wardrive.net/

DShield; Cooperative Network Security Community

2008-07-07T21:06:00.003+08:00

http://www.dshield.org/reports.html
* Top Ports
* Top Sources
* AS Reports
* Country Reports
* Survival Time
* Trends
* Daily Data Volume (Submissions/day)

ThreatSTOP - Active Internet Security

2008-07-07T00:12:00.005+08:00

ThreatSTOP is a threat intelligence Web service that protects enterprise networks from bots, trojans, spam, viruses and other forms of "malware." The company has established relationships with a wide variety threat intelligence sources that are part of the Internet community. Using a proprietary analytics engine, ThreatSTOP reduces the data provided by millions of Internet sensors down to a dynamic list of the current most active and most dangerous sources of network attacks.
http://www.threatstop.com/
#a dynamic list of the current most active and most dangerous sources of network attacks and bot control.
#a personalized subset of the active threat list as a "block list" in the customer's network firewalls.
#Commerce Service.
#記住這服務模式，它將會繼FW及AV之後，企業必需的安全服務之一。

iFrame.in — Online HTML & JavaScript Encoder

2008-07-06T23:10:00.002+08:00

This tool allows you to obfuscate/encode your HTML or JavaScript. Obfuscated code is source code that's very hard to read and understand, often intentionally (obfuscation applied to analysis complication of source code).
http://iframe.in/
#HTML Encoder
#JavaScript Encoder
#Redirect Generator
#IFrame Generator

E-mail Protector
http://iframe.in/email-protector/

Password Generator
http://iframe.in/password-generator/

Hash Calculator
http://iframe.in/hash-calculator/

Hacking RFID

2008-06-30T22:41:00.002+08:00

DIY Cloning Units: Cloning a Verichip Yourself
http://cq.cx/vchdiy.pl
RFIDIOt: RFID IO tools
http://rfidiot.org/

Browser Defender™ Website Safety Lookup (***)

2008-06-27T22:48:00.002+08:00

Web sites are tested for what we believe are excessive pop-ups, "phishing" and other fraudulent practices, and browser exploits. Downloads are tested for viruses and bundled adware, spyware or other possibly unwanted programs.
http://www.browserdefender.com/
#Just focus IE exploits, IE plug-in can't block it.

個人造業個人擔 Part II

2008-06-24T20:53:00.001+08:00

网络安全焦点 (code)
http://www.xfocus.net/
绿盟科技
http://www.nsfocus.net/
网络天下
http://www.lzbiz.com/
Exploits_黑客手册
http://www.nohack.cn/
http://www.nohack.cn/exploits/

對岸這類網站超多，但變動也超大。
搜尋可找到很多，但內含惡意程式碼的網站也很多，請小心!!

Challenge your browsing security (*****)

2008-06-21T22:52:00.006+08:00

Malware Guru--Everything about Malware
You can use them for your study purposes, for testing your anti-virus, IDS, IPS, ... security solutions. Or for evaluating your enterprise malware solutions.
http://malwareguru.org/
http://malwareguru.org/mediawiki/index.php/Collection_of_working_(live)_browser_exploits_(malware)

Packers and UnPackers

2008-06-21T21:53:00.009+08:00

Packers (加殼工具, A Win32 executable file compressor.)：
Armadillo -
ASPack - http://www.aspack.com/ (***)
NeoLite -
PECompact -
PEPack -
Petite - http://www.un4seen.com/petite/
PKLITE - http://www.pkware.com/
PolyCrypt PE -
Shrinker -
UPX - (***)
http://upx.sourceforge.net/
http://upx.sf.net/
VBox -
WWPack -

UnPackers (脫殼工具)：
ASPack unpacker -
UnPEPack - for PEPack
ProcDump32 - (***)

Detect Packer Format tools (偵測加殼類型工具)：
FileInfo - contains a searchable database of thousands of file extensions with detailed information about the associated file types.
http://www.fileinfo.net/ (**)
GetTyp -
PEiD - detects most common packers, cryptors and compilers for PE files. It can currently detect more than 600 different signatures in PE files. (***)
http://peid.has.it/
http://www.peid.info/
PEInfo -
TYP -

#http://en.wikipedia.org/wiki/Executable_compression

梦之光芒/Monyer

2008-06-02T23:53:00.004+08:00

XSS&JS加解密页面2.0(正式版)——Power By |\/|O|\|YER
http://monyer.cn/demo/monyerjs.html
Other:
http://monyer.cn/demo/

tools88在线工具

2008-06-02T23:42:00.003+08:00

查88(cha88)网站自2007年3月起已建站运行
http://www.cha88.cn/
2009/01/01改版並變更域名：
http://tools88.com/

Google Safe Browsing diagnostic page

2008-06-01T23:14:00.002+08:00

Safe Browsing : Advisory provided by Google
http://www.google.com/safebrowsing/diagnostic?site=***.***
#Over the past 90 days
#檢查結果包括是否有惡意程式、多少網頁內容可能有安全問題、惡意程式的來源網址、可能的網頁安全漏洞等訊息，可以作為使用者檢查單一網址是否可安全瀏覽的參考。

Daily cyber threats and internet security news alerts

2008-06-01T21:29:00.003+08:00

Online threats and internet security news and alerts resource. Featuring daily real time updates with summaries and explanations of new threats for users, their computers and networks.
http://cyberinsecure.com/
# Real time news of internet threat

.[ packet storm ].

2008-06-01T08:39:00.003+08:00

Packet Storm offers an abundant resource of up-to-date and historical security tools, exploits, and advisories.
http://www.packetstormsecurity.org/
# News, Files, Advisories, Exploits, Tools, Misc, ...
#A collection of defense tools

Snort Rules for Defense(***)

2008-06-01T00:05:00.000+08:00

This HOWTO will give you confidence to write your own rules.
http://www.linuxsecurity.com/content/view/132365/171/

Emerging Threats - Rule Downloads (****)
http://www.emergingthreats.net/content/view/16/38/
http://www.emergingthreats.net/rules/
Spamhaus.org DROP List, Known CompromisedHost List, Dshield Top Attackers List,Shadowserver Botnet Command and Control Server Rules, Russian Business Network Host List (RBN).

SRI Malware Threat Center

2008-06-01T00:03:00.002+08:00

The data produced on this site is automatically generated each morning, and summarizes our latest observations of malware activity.
http://mtc.sri.com/
Most Aggressive Malware Attack Source and Filters
Most Effective Malware-Related Snort Signatures
Most Prolific BotNet Command and Control Servers and Filters
Most Observed Malware-Related DNS Names
Most Effective Antivirus Tools Against New Malware Binaries
Most Aggressively Spreading Malware Binaries

mwcollect.org Blog

2008-05-23T16:59:00.001+08:00

Malware Observations and Recent Threats
http://www.mwcollect.org/
Attacker Top Five / 60 minutes
Sample Top Five / 3 hours

Virus.Org

2008-05-22T23:28:00.002+08:00

Virus.Org Rogue File Scanning Service
http://scanner.virus.org/
http://scanner.virus.org/advanced

Virus.Org Default Password Database (**)
http://www.virus.org/default-password/

Web Tools (*)

2008-05-20T22:35:00.004+08:00

Free web tools including webmaster tools.
http://www.iwebtool.com/tools/
http://www.adminstool.com/web-tools.html
* Search Engines
Tools related to Search Engines
* Domain Checkups
Tools related to domain checkup
* HTML
HTML helpful Tools
* Miscellaneous
Miscellaneous is varies tools
#"Source Code Viewer"、"Unix Time Converter"..., I love it.
#網站管理的小工具，當然啦!!大家都可以用。知己知彼吧!!

Tracing about Mapping-IP Changing of Domain (FQDN) (***)

2008-05-20T21:17:00.000+08:00

Domain Tools: Hosting History
http://www.domaintools.com/hosting-history/?q=***.***

Shadowserver Foundation

2008-05-18T19:57:00.002+08:00

The Shadowserver Foundation gathers intelligence on the darker side of the internet. We are comprised of volunteer security professionals from around the world.
http://www.shadowserver.org/
* Capturing and receiving malicious software, or information related to compromised devices
* Disassembling, sandboxing, and analyzing viruses and trojans
* Monitoring and reporting on malicious attackers
* Tracking and reporting on botnet activities
* Disseminating cyber threat information
* Coordinating incident response

無網不利 vs 有網無力

UNetbootin (ISO to USB)

個人造業個人擔 Exploit-Part III

記憶體鑑識(Memory Forensics)

JSUNPACK

LiveCD Forensics

Untangle (UTM)

Endian (UTM)

Multiple Web Reputation Services

How about the age of Domain

WebSite Proxy

BitDefender

vURL Online

Fiddler

Wepawet

Just-ping, traceroute, dns lookup.

BitBlaze

F-Secure

MalwareURL

UploadMalware.com

Dasient Web Anti-Malware (WAM)

Identify File (**) by MD5, SHA1 or Others

NoVirusThanks

Malware Hash

Online Link Scan

Malware Hash

Filterbit™

瑞星恶意网站监测网

Malware Domain List

www.winsiderss.com

Forensics Wiki

be hacked URL of information (被黑網站資料)

NOSEC-JSky

JavaScript Analysis (Decrypt)

Default Password

View HTTP Request and Response Header

Joebox

Malware Help.Org (*****)

Browsershots

Scanit-Browser Security Test

utrace - locate IP addresses and domainnames

National Institute of Standards and Technology-Tool Survey

Classes of Tools & Techniques

Nass Tools (*)

Tools

Sunbelt Software-CounterSpy Scan

PhishTank

Malzilla - Malware Hunting Tool

hpHosts Online - Simple, Searchable & FREE!

vURL Online (*)

OpenDNS - Providing A Safer And Faster Internet

Other WebSites for Tiny URL

Turns a long URL into a shorter and easier one

Free DNS Hosting

ArcaBit

Authentium

MKS-Skaner

PC Pitstop AntiVirus Center

PANDA ActiveScan 2.0

Online Compiler

Free Online Picture Editor

Sender Policy Framework (SPF)

MXToolBox (**)

Norton Safe Web, from Symantec (WRS, Web Reputation Services)

McAfee Avert Stinger

avast! Virus Cleaner

AVG Free - Vcleaner

Trend Micro

Norman Malware Cleaner

F-Secure.com

Dr.Web CureIt!

a-squared Web Malware Scanner

FileResearchCenter.com - See what's running on your computer!

Getting Video Tools for GoogleVedio, YouTube...

PEditor

Defense in Depth: IP and Netblock Blocking

IPv6 and/or IPv4 address (*)

那顆爛蔥 專屬相簿

AVPClub Security Forums

Trend Micro SecureCloud™ platform

那顆爛蔥專屬相簿