I was looking around for some security scanners earlier today, and I came across this cool website with a fair amount of freeware tools, most of which are security related. The only downside is that they are predominantly GUI-based utilities, which doesn’t bode well for my desire to script everything.
I took a peek at the security scanner (NSAuditor) and it looks okay, but I expected it to be more of a traditional vulnerability scanner, whereas it is more of a high-level network swiss-knife utility toolkit, similar to NetScanTools or the Sam Spade utilities.
What I really need at home is a low-cost — or free, even — Security Information/Event Manager, but for some reason, I’m having a hard time finding a decent one, even in the OpenSource arena. So far, I’m keeping an eye on OSSIM, even though it is merely a collection of other tools, rather than its own integrated framework.
Looks like I have some testing to do this weekend…
So, if you know of any good security tool sites that I haven’t covered in my Knowledgebase, then feel free to let me know about them. (Yeah, I do need to update that page)