Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hi i have one question that i need suggestion from you all

I am studying computer security and i need to make the presentation one security tool

any interesting tools about security...


migration rejected from Jan 24 '15 at 19:28

This question came from our site for professional and enthusiast programmers. Votes, comments, and answers are locked due to the question being closed here, but it may be eligible for editing and reopening on the site where it originated.

closed as primarily opinion-based by kasperd, Katherine Villyard, Xavier Lucas, Ward, HopelessN00b Jan 24 '15 at 19:27

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise.If this question can be reworded to fit the rules in the help center, please edit the question.

I would use Scapy for your presentation. Scapy is python, so people in the audience are likely to know the language, and if they don't, they can probably read it if they know other languages.

More importantly, Scapy would be particularity good because you can craft packets layer by layer (OSI layers) so it will be easy to tie your examples conceptually to the explanations. See the first link in the slides section of Scapy link above for an example of how well this tool can fit with presentations.

Also, since it is a multipurpose tool, you can demonstrate both sniffing ( like wireshark ) and packet crafting.



share has held a couple of polls on network security tools. The results are maintained at and give details and locations of a range of popular, widely-used tools. Rather than just listing names it gives some background as to why the tools are used.

Do bear in mind that the use (or even the downloading or possession?) of such tools may be illegal or contrary to the AUP (acceptable usage policy) of hosts or networks over which the tools are used.



This is not strictly a security tool, its use is much broader (not to say that the answer is irrelevant or inadequate) – Vinko Vrsalovic Aug 1 '09 at 13:33

In addition to mas' comment about, you might try out - they've got a list of tools, too.

But, more than that, what are you really trying to do? There are many, many security tools, and each does something different. Do you want tools to benchmark the security of a system, or to meet a benchmark? If so, you might try NIST's FDCC ( ). Are you trying to check the security of Unix passwords? Jack The Ripper is an oldie. What about Windows passwords? Then you'd want l0phtcrack. Or if you are testing the security of a web application, you would want a scanner like WebInspect or Cenzic Hailstrom - or you might use a proxy like Google's Ratproxy or OWASP's WebScarapb or Burp Proxy (not sure who offers that one). Are you trying to scan a whole machine - or a whole network - and see what's on, and what's got vulnerabilities? Nessus and NMap are good for that.

If you can narrow down your question a bit, people in the know can offer better suggestions.




I would go with Scapy, Metasploit or OpenVAS. Just my 2cts.


Here are three open source security related software.

nessus: General purpose vulnerability scanner, taking basically an antivirus approach to security vulnerabilities

mod_security: Web application firewall, very flexible and performant

mod_evasive: Allows to configure Apache to provide evasive action in the event of an HTTP DoS or DDoS attack or brute force attack. It is also designed to be a detection and network management tool

Nessus is not open-source anymore. – Anonymous Aug 2 '09 at 3:58

I've liked Nessus, used in conjunction with tools like Wireshark and Nmap to find unusual behavior on the network.

tools like GLTail can give some nice visualizations of your network; that way, you can become familiar enough with "expected" behavior that if something is amiss you may spot it.

Checksums on Unix systems can be handy using tools like Tripwire and Samhain to maintain file integrity, but you do have to maintain them since updates will trigger alerts.

Then there's rootkit scanners like rkhunter and chkrootkit.

Another name that likes popping up for exploit checking is the metasploit framework.

Hope these help you in your presentation...


Not the answer you're looking for? Browse other questions tagged or ask your own question.