K2pdfopt

K2pdfopt (Kindle 2 PDF Optimizer) is a stand-alone program which optimizes the format of PDF (or DJVU) files for viewing on small mobile reader and smartphone screens such as the Kindle's.  It is meant for text-based files on a white background which may also have graphics or figures.  It is fully automated and can batch-process PDF/DJVU files.

http://www.willus.com/k2pdfopt/

OpenVAS

OpenVAS is a vulnerability scanner that was forked from the last free version of Nessus after Nessus went proprietary in 2005.   OpenVAS plugins are written in the same NASL language used by Nessus.

http://www.openvas.org/

Nagwin - Nagios for Windows

Nagwin is a port of the Nagios software application normally found on Unix/Linux for Windows.  Nagios is a popular system and networking monitor application.  All of the individual components (such as Cygwin) are included within the download package.

http://www.itefix.no/i2/nagwin

Microsoft’s PortQry Utility

Several years ago, Microsoft released a small utility to query for open network ports.  The portqry application can be found at http://www.microsoft.com/download/en/details.aspx?id=17148.  A KB article describing the application can be found at http://support.microsoft.com/default.aspx?scid=kb;en-us;310099.

Below are some examples of using the utility.  The –n parameter is for the IP address or DNS host name.  The –e parameter is for the destination port to query for on the remote host.

TCP is the default protocol.  The –p parameter can specify TCP, UDP, or BOTH.

The –o parameter allows multiple port values to be queried.

The –r parameter allows a range of port values to be queried.

Matriux Live-CD

Matriux is a fully featured security distribution consisting of a bunch of powerful, open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking, system and network administration, cyber forensics investigations, security testing, vulnerability analysis, and much more.  It is a distribution designed for security enthusiasts and professionals, although it can be used normally as your default desktop system.

http://www.matriux.com/

XML filtering within the Windows Event Viewer

Starting in the Windows Vista/Server 2008 time frame, an option was made available to modify or create a XML query to generate Custom Views within the Event Viewer.  To create a Custom View, access the Event Viewer application.  Right-click on the Custom Views subfolder and select the Create Custom View menu option.

Click on the XML tab and then on the Edit query manually checkbox.  Click on the Yes button within the warning dialog box.

Enter text for the XML query.  Below is some sample text to search the Security logs for the user account test:

<QueryList>
  <Query Id="0" >
    <Select Path="Security">
       *[EventData[Data[@Name='SubjectUserName'] and (Data='test')]]
     </Select>
  </Query>
</QueryList>

When finished, give the Custom View entry a name and description.

Queries can include AND/OR operators.

<QueryList>
  <Query Id="0">
    <Select Path="Security">
       *[EventData[Data[@Name='SubjectUserName'] and (Data='test' or Data=’testtwo’)]]
     </Select>
  </Query>
</QueryList>

To find additional fields to query on, access the details of an event entry and click on the XML view.

The query below looks for events that any data or field equals test

<QueryList>
  <Query Id="0">
    <Select Path="Security">
       *[EventData[Data and (Data='test' )]]
     </Select>
  </Query>
</QueryList>