full-disclosure - Nipper 0.11.2 Released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 13 Jan 2008 16:31:24 +0000
From: Ian Ventura-Whiting <fizz@...ania.co.uk>
To: full-disclosure@...ts.grok.org.uk
Subject: Nipper 0.11.2 Released

Nipper is a network infrastructure parser. It processes configuration files 
from network devices and produces a report including a security audit of the 
device, configuration settings and other relevant information.

Nipper currently supports the following device types:

  * Cisco IOS-based routers
  * Cisco IOS-based switches
  * Cisco IOS-based catalysts
  * Cisco NMP-based catalysts
  * Cisco CatOS-based catalysts
  * Cisco PIX-based Firewalls
  * Cisco ASA-based Firewalls
  * Cisco FWSM-based Firewalls
  * Cisco Content Service Switches
  * Juniper ScreenOS-based Firewalls (NetScreen)
  * Nortel Passport devices
  * CheckPoint Firewall-1 Firewalls
  * Sonicwall SonicOS-based Firewalls

The security audit includes details of the findings, together with detailed 
recommendations. The security audit can be modified using command line 
parameters or an external configuration file.

Network filtering audits include the following, all of which can be modified:

  * Rule lists end with a deny all and log
  * Rules allowing access from any source
  * Rules allowing access from network sources
  * Rules allowing access from any source port
  * Rules allowing access to any destination
  * Rules allowing access to destination networks
  * Rules allowing access to any destination service
  * Rules that do not log
  * Deny rules that do not log
  * Rules that are disabled
  * Rules that reject rather than drop
  * No bypass rules exist
  * Default rules

Nipper is available for Linux, Windows and other platforms. It can be 
downloaded from the Source Forge project page 
(http://sourceforge.net/projects/nipper).

If you have access to device configuration files for network devices, please 
consider sending them to me. I will be discrete, but you are welcome to 
sanitise them first. However, if you do sanitise them, please ensure that the 
structure of the config file is not modified.

Ian Ventura-Whiting

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/