Saturday, April 7, 2012

Netalyzr

This page includes a Java applet that probes network parameters such as DNS and available bandwidth.

http://n1.netalyzr.icsi.berkeley.edu/analysis/

PAExec

PAExec lets you launch Windows programs on remote Windows computers without needing to install software on the remote computer first. For example, you could launch CMD.EXE remotely and have the equivalent of a terminal session to the remote server. PAExec is useful for doing remote installs, checking remote configuration, etc.  It is similar to PsExec from Sysinternals.

http://www.poweradmin.com/PAExec/

Friday, April 6, 2012

Encryption Wizard

Encryption Wizard (EW) is a Java file and folder encryptor for protection of sensitive information.  The Encryption Wizard encrypts all file types for data-at-rest and data-in-transit protection.  Without installation or elevated privileges, EW runs on Windows, Mac, Linux, Solaris, and other computers with Sun Java.  Behind its simple drag-n-drop interface, EW offers 128-bit AES encryption, SHA-256 hashing, searchable metadata, archives, compression, and secure deleting.

http://www.spi.dod.mil/ewizard.htm

Sunday, April 1, 2012

Enhanced Protection Mode

Enhanced Protection Mode is a new feature within Windows 8.  It is enabled by default with the Metro version of Internet Explorer 10, and can be enabled manually with the desktop version.

enhanced_protected_mode_1

Enhanced Protection Mode offers some additional features compared to the original Protected Mode introduced with Vista.  If the OS version and CPU support is available, all tabs processes are ran as 64-bit.  This helps with technologies such as Address Space Layout Randomization.  Enhanced Protection Mode restricts IE from locations that contain personal information until permission is granted.  Tab processes (which is where untrusted Internet pages load) do not have access to a user’s domain credentials, as well as some other options such as tab processes cannot operate as local webservers.

The desktop version of IE 10 with Windows 8 will use 32-bit tab processes by default if Enhanced Protection Mode is not enabled.  Metro IE uses EPM by default, so tab processes will be 64-bit with compatible hardware and operating system. 

If a plug-in does not offer support with the desktop version of IE 10 when EPM is enabled, a notification bar should appear near the bottom of the screen.

enhanced_protected_mode_2

Network Utilities with Ubuntu

Below are a few network-based utilities available with Ubuntu.  The screen captures below are from Ubuntu version 10.04.  The wget command allows HTTP access via a terminal prompt.

ubuntu_network_tools_1

The tracepath command is similar to traceroute, but does not require root privileges.  The command attempts to trace the “hops” to the destination specified.

ubuntu_network_tools_2

The mtr command attempts to combine ping and tracepath.  It shows the ping times for each “hop”.

ubuntu_network_tools_3

The host command performs DNS lookups.

ubuntu_network_tools_9

The dig command can be used for DNS lookups as well.

ubuntu_network_tools_11

The whois command displays the whois records for the domain in question.

ubuntu_network_tools_4

The ifplugstatus command will display if a network cable is plugged into an interface.  It is not installed by default with Ubuntu, but the command sudo apt-get ifplugd should install it.  The text “link beat detected” means a connection is present.

ubuntu_network_tools_5

The ifconfig command will display information for all network interfaces, including IP addresses and MAC addresses.

ubuntu_network_tools_6

The dhclient command will release and renew a DHCP lease.  The –r parameter will release the current IP address.

ubuntu_network_tools_7

The netstat command will display general information interface statistics.  The –p parameter will display the programs associated with open sockets.

ubuntu_network_tools_8

The command netstat –na | grep –i listen will display the network listening ports.

ubuntu_network_tools_10

Log Parser Studio

Log Parser Studio is a utility that allows you to search through and create reports from your IIS, Event, EXADB and others types of logs.  It builds on top of Log Parser 2.2 and has a full user interface for easy creation and management of related SQL queries.

http://gallery.technet.microsoft.com/Log-Parser-Studio-cd458765