Section: .. / linux / security /
| /// File Name: |
StMichael_LKM-0.11.tar.gz |
Description:
|
StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. This is done by monitoring the init_module and delete_module process for changes in the system call table. Detects most modern LKM's, including KIS.
| | Author: | Tim Lawless | | Homepage: | http://www.sourceforge.net/projects/stjude | | Changes: | Addition of Self Integrity Checks to Detect Attacks Against StMichael itself. Added of configuration options to hard-code memory offsets into the source instead of discovery during load time, permitting loading of Stmichael from an initrd, before init spawns and the filesystems are mounted. | | File Size: | 36028 | | Last Modified: | Aug 7 01:47:01 2002 |
| MD5 Checksum: | 77d653c5a129e32c59d85ef1451358d5 |
|
| /// File Name: |
linux-2.4.30-ow3.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | This version adds a fix to the ELF core dump vulnerability. | | File Size: | 35491 | | Related CVE(s): | CAN-2005-1263 | | Last Modified: | Jun 1 03:19:03 2005 |
| MD5 Checksum: | 15ea2e5b5818c2207eb8026147d168c7 |
|
| /// File Name: |
linux-2.4.34-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | File Size: | 35445 | | Last Modified: | Dec 27 19:50:21 2006 |
| MD5 Checksum: | 658ebc6eedfca3dd0a0514fb62dbb3f6 |
|
| /// File Name: |
linux-2.4.33-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Minimal changes. | | File Size: | 35384 | | Last Modified: | Aug 27 02:43:10 2006 |
| MD5 Checksum: | c46b4701289deee81436e56a497b2a0a |
|
| /// File Name: |
linux-2.4.35-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | File Size: | 35204 | | Last Modified: | Aug 8 21:15:19 2007 |
| MD5 Checksum: | e0072eb53c9163f7c62a23c17236548d |
|
| /// File Name: |
linux-2.4.32-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Minimal changes. | | File Size: | 35142 | | Last Modified: | Dec 3 01:49:51 2005 |
| MD5 Checksum: | df21f0f080b6f9a612a3318fc0a28218 |
|
| /// File Name: |
multiadm-1.0.4.tbz2 |
Description:
|
The MultiAdmin security framework kernel module provides a means to have multiple root users with unique UIDs. This bypasses collation order problems with NSCD, allows you to have files with unique owners, and allows you to track the quota usage for every real user. It also implements a sub-admin, a partially restricted root user who has full read-only access to most subsystems, but write rights only to a limited subset, for example writing to files or killing processes only of certain users.
| | Author: | Jan Engelhardt | | Homepage: | http://alphagate.hopto.org/multiadm/ | | File Size: | 35106 | | Last Modified: | Jan 27 15:18:02 2006 |
| MD5 Checksum: | 2a30e3ea1cd0cbfd96c3b5ee01d5b1bf |
|
| /// File Name: |
linux-2.4.28-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security "hardening" features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | 2.4.28-ow1 fixes a number of security-related bugs, including the local root ELF loader vulnerabilities discovered by Paul Starzetz, a race condition with reads from Unix domain sockets (potential local root), and smbfs support vulnerabilities discovered by Stefan Esser (remote DoS by a malicious smbfs server; potential: remote root by a malicious smbfs server). | | File Size: | 34715 | | Last Modified: | Nov 24 00:04:10 2004 |
| MD5 Checksum: | a17719c83b71c328ef92b53761f3819a |
|
| /// File Name: |
ext2hide-0.99.9.tar.gz |
Description:
|
ext2hide allows the user to save and restore an arbitrary number of files to and from the reserved space in an ext2/3 filesystem's primary and backup superblocks. Using ext2hide, you can use this reserved section to store an arbitrary number of files, where they will be completely invisible to normal filesystem utilities, but still residing in permanent storage on disk. This can be useful for passwords, public keys, anything you like.
| | Author: | Jason McManus | | Homepage: | http://sourceforge.net/projects/ext2hide/ | | File Size: | 34579 | | Last Modified: | Apr 10 20:27:03 2006 |
| MD5 Checksum: | 5fad72166dbdf5efe539ab97337fb75d |
|
| /// File Name: |
linux-2.4.27-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security "hardening" features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | New kernel, new patch. | | File Size: | 33467 | | Last Modified: | Aug 14 13:24:43 2004 |
| MD5 Checksum: | 6eb45801c030877e3123a964552ad840 |
|
| /// File Name: |
linux-2.4.31-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Minimal changes. | | File Size: | 32692 | | Last Modified: | Jun 18 14:32:27 2005 |
| MD5 Checksum: | f37f5b4763a9bf179bb7f5393d413d50 |
|
| /// File Name: |
bmap-1.0.16.tar.gz |
Description:
|
The Linux kernel includes a powerful, filesystem independant mechanism for mapping logical files onto the sectors they occupy on disk, which can be subverted (with bmap and friends) to perform a variety of functions interesting to the computer forensics community and the computer security community.
| | Author: | Daniel Ridge | | File Size: | 32189 | | Last Modified: | Apr 12 19:05:16 2000 |
| MD5 Checksum: | b6ebb00ab857b66f1721720d4d110e8a |
|
| /// File Name: |
pam_usb-0.4.1.tar.gz |
Description:
|
pam_usb is a PAM module that enables authentication using a USB storage device through DSA private/public keys. It can also work with floppy disks, CD-ROMs, or any kind of mountable device.
| | Author: | Andrea Luzzardi | | Homepage: | http://www.sig11.org/~al/pam_usb/ | | Changes: | Fixed a security issue related to OpenSSH authentication. Fixed the quiet option (now it is really quiet). Support for devices without vendor/model information. | | File Size: | 32044 | | Last Modified: | May 30 17:01:07 2007 |
| MD5 Checksum: | 2c6178952cd90fbdee928d272141fde8 |
|
| /// File Name: |
linux-2.4.23-ow2.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security "hardening" features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Fixes two newly discovered local root vulnerabilities in the mremap() system call. Ported to kernel v2.4.23. | | File Size: | 31985 | | Last Modified: | Jan 6 01:38:11 2004 |
| MD5 Checksum: | 7e69e67d2eef41504cc8521128e055c0 |
|
| /// File Name: |
pam_usb-0.4.0.tar.gz |
Description:
|
pam_usb is a PAM module that enables authentication using a USB storage device through DSA private/public keys. It can also work with floppy disks, CD-ROMs, or any kind of mountable device.
| | Author: | Andrea Luzzardi | | Homepage: | http://www.sig11.org/~al/pam_usb/ | | Changes: | Completely redesigned amongst other changes. | | File Size: | 31889 | | Last Modified: | Apr 10 01:48:38 2007 |
| MD5 Checksum: | 51a677ff30a3b29e8b5df4a0e60c8d75 |
|
| /// File Name: |
mvc-0.8.9.tar.gz |
Description:
|
MVC is a text mode v4l video capture program that features motion detection. It is very small and easy to use, and could be used to monitor and record the people that enter your room.
| | Author: | Merlin | | Homepage: | http://www.turbolinux.com.cn/~merlin/mvc/ | | Changes: | Bug fix release. | | File Size: | 31881 | | Last Modified: | Nov 1 20:49:00 2004 |
| MD5 Checksum: | d1bb2b59f1ed45d261ee2a1683a1f42d |
|
| /// File Name: |
StMichael_LKM-0.10.tar.gz |
Description:
|
StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. This is done by monitoring the init_module and delete_module process for changes in the system call table. Detects most modern LKM's, including KIS.
| | Author: | Tim Lawless | | Homepage: | http://www.sourceforge.net/projects/stjude | | Changes: | Really Immutable filesystem support for ext3 fs added, Added in Kernel Licensing Code to Identify the Kernel License for newer kernels, Backup kernel is now obscured from string searches using the weak crypt function, Added needed modifications to support the newer Alan Cox Kernels, with the different VM system, fixed lots of compilation issues, and better docs. | | File Size: | 31492 | | Last Modified: | Mar 30 14:03:13 2002 |
| MD5 Checksum: | 16b42d7707d5dfa25214d8cd3768e7fa |
|
| /// File Name: |
linux-2.4.29-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Adds a number of security fixes, including to the x86/SMP page fault handler and the uselib(2) race conditions, both discovered by Paul Starzetz. | | File Size: | 31342 | | Related CVE(s): | CAN-2004-1235, CAN-2005-0001 | | Last Modified: | Jan 22 15:29:26 2005 |
| MD5 Checksum: | b300f3d45f699f2cdc7bfee417dd4e26 |
|
| /// File Name: |
safebreaker.tar |
Description:
|
Safebreaker is a demonstration next-generation packet-sniffing backdoor, that doesn't require libpcap. It offers a full terminal support, comes with a tls encryption for the connection, and the authentication parameters are configurable.
| | Author: | Amir Alsbih | | Homepage: | http://www.informatik.uni-freiburg.de/%7Ealsbiha/code.htm | | File Size: | 30720 | | Last Modified: | Oct 25 18:03:54 2006 |
| MD5 Checksum: | ffa51e5800f9e95944c72eecae91bdbf |
|
| /// File Name: |
StMichael_LKM-0.08.tar.gz |
Description:
|
StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. This is done by monitoring the init_module and delete_module process for changes in the system call table. Detects most modern LKM's, including KIS.
| | Author: | Tim Lawless | | Homepage: | http://www.sourceforge.net/projects/stjude | | Changes: | Addition of ability to restore a system attacked using kernel modification techniques such as a Silvio Stealth syscall by reloading the kernel without a reboot. Addition of Checks to detect the possible subversion of the kernel at loadtime. Now does Full Kernel Text Validation. | | File Size: | 30545 | | Last Modified: | Jan 22 00:37:53 2002 |
| MD5 Checksum: | 56b40532ec8f1f3089de8ec4fe7f5f4f |
|
| /// File Name: |
linux-2.4.24-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security "hardening" features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Ported to kernel v2.4.24. Upgrade for users of linux-2.4.23-ow2 is not needed. | | File Size: | 30420 | | Last Modified: | Jan 8 14:43:28 2004 |
| MD5 Checksum: | a2a870b0dbfea6c81542b09c85e00dbc |
|
| /// File Name: |
mvc-0.8.8.tar.gz |
Description:
|
MVC is a text mode v4l video capture program that features motion detection. It is very small and easy to use, and could be used to monitor and record the people that enter your room.
| | Author: | Merlin | | Homepage: | http://www.turbolinux.com.cn/~merlin/mvc/ | | File Size: | 29764 | | Last Modified: | Mar 3 04:18:00 2004 |
| MD5 Checksum: | e6133aaabc8465f43d784fc950462782 |
|
| /// File Name: |
linux-2.2.21-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security "hardening" features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Updated for Linux 2.2.21. Permissions on /proc entries have been changed to be consistent with Linux 2.4.18-ow0, and the getcwd(2) instance of the d_path() truncation problem and the fsuid/fsgid handling inconsistency have been fixed. | | File Size: | 29327 | | Last Modified: | Jun 3 01:44:01 2002 |
| MD5 Checksum: | 0b846c829eae6276c57357fe72c3d180 |
|
| /// File Name: |
linux-2.2.20-ow3.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security "hardening" features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Fixes the recent zlib (PPP/IrDA Deflate compression) problem and added fixes for two Alpha-specific bugs introduced in Linux 2.2.20. | | File Size: | 29267 | | Last Modified: | Apr 6 02:41:39 2002 |
| MD5 Checksum: | 021cc007b503daa3cad2bb0ef35c4fb5 |
|
| /// File Name: |
linux-2.2.20-ow2.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security "hardening" features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Fixed an x86-specific Linux kernel vulnerability where local users could abuse a binary compatibility interface (lcall) to kill processes not belonging to them, including system processes. | | File Size: | 28948 | | Last Modified: | Mar 4 01:15:30 2002 |
| MD5 Checksum: | 789b9b631a3930e3ba765381278d04ea |
|
|
|
|
|