Latest Linux Security Tools Updates

Angr is a security tool written in Python to allow analyzing binaries. It provides a combination of static and dynamic analysis.

Wapiti is a security tool to perform vulnerability scans on web applications. It uses fuzzing to detect known and unknown paths, among other tests.

OpenSSL is an open source project and provides a toolkit for Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

TLS-Attacker is a framework to analyze TLS libraries. It is written in Java and developed by the Ruhr University Bochum and Hackmanit GmbH.

The LaZagne project is an open source tool to retrieve passwords stored on a local system. It uses different techniques to obtain passwords from well-known applications.

Cowrie is a honeypot to emulate SSH and telnet services. It can be used to learn attack methods and as an additional layer for security monitoring.

Faraday is collaboration tool for pentest assignments and vulnerability management. It allows integration with a number of other security tools.

Django-security is a toolkit for the Django framework with the focus on security. It provides models, views, and middleware to strengthen the defenses.

Clair is an open source container analyzer. It performs static analysis of container images and correlates their contents with public vulnerability databases.

OSRFramework is an open source research framework. The project helps with information gathering and can be classified as an OSINT tool.

MISP is short for Malware Information Sharing Platform. It helps with sharing threat data which can be used by defenders and malware researchers.

Tools to assist administrators and auditors with assessment, measurement and enforcement of security baselines

Bandit is an AST-based static analyzer for analyzing Python code. It helps with finding code flaws that could lead to security vulnerabilities.

Vuls is a vulnerability scanner for Linux and FreeBSD. It is written in Go, agentless, and can use a remote login to find any software vulnerabilities. It has multiple levels of scanning, from a fast scan up to a deep scan with extensive analysis.

Prowler is a security tool to perform security audits on AWS configurations. It helps to find configuration flaws and improve system hardening.