BleachBit

BleachBit quickly frees disk space and tirelessly guards your privacy. Free cache, delete cookies, clear Internet history, shred temporary files, delete logs, and discard junk you didn't know was there. Designed for Linux and Windows systems, it wipes clean 90 applications including Firefox, Internet Explorer, Adobe Flash, Google Chrome, Opera, Safari,and more.

http://bleachbit.sourceforge.net/

Armitage

Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for security practitioners who understand hacking but don't use Metasploit every day.

http://www.fastandeasyhacking.com/

BSonPosh PowerShell Module

BSOnPosh PowerShell Module is a module with several additional commandlets for Powershell.  Some are network-based while others are related to specific topics such as a KMS server.

http://code.msdn.microsoft.com/bsonposh

Malware DNS Scraper

The Malware DNS Scraper is a Perl script that will scan the DNS cache of a DNS server for malware-related entries.  The script can be found at:

http://www.mayhemiclabs.com/?q=node/11

The test OS in this example was Ubuntu version 10.04.  Before the script would execute, two additional packages were required:

libnet-dns-perl
libcrypt-ssleay-perl

Both were available via the Synaptic Package Manager within Ubuntu.  The syntax of the script is:

perl script.pl –server IP address of DNS server

Below is an example of when no entries are found:

If malware-related entries are found, a total number should be displayed as well as details for each.

Set Execution Policy within PowerShell

By default, PowerShell will allow individual commands but will not execute scripts.  To set the execution policy, use the Set-ExecutionPolicy commandlet.  The commandlet has four different execution policies available:

• Restricted - No scripts can be run. Windows PowerShell can be used only in interactive mode.

• AllSigned - Only scripts signed by a trusted publisher can be run.

• RemoteSigned - Downloaded scripts must be signed by a trusted publisher before they can be run.

• Unrestricted - No restrictions; all Windows PowerShell scripts can be run.

The PowerShell prompt or ISE must be launched with local administrative authority for the change to be made.  The Get-ExecutionPolicy can be used to verify the existing setting.

mRemoteNG

mRemoteNG is a fork of mRemote, an open source, tabbed, multi-protocol, remote connections manager.  mRemoteNG adds bug fixes and new features to mRemote.

mRemoteNG supports the following protocols:

• RDP (Remote Desktop/Terminal Server)
• VNC (Virtual Network Computing)
• ICA (Citrix Independent Computing Architecture)
• SSH (Secure Shell)
• Telnet (TELecommunication NETwork)
• HTTP/HTTPS (Hypertext Transfer Protocol)
• rlogin
• Raw Socket Connections

http://www.mremoteng.org/

SSDLife

SSDLife is an application that will let you know how many times your drive has been powered on, written to, what its health and S.M.A.R.T. status is, and even give you an estimated lifespan of the drive.

http://ssd-life.com/

Introduction to PowerCLI

PowerCLI is a snapin for PowerShell that is intended for use with a VMware environment.  It can be found at:

http://communities.vmware.com/community/vmtn/vsphere/automationtools/powercli

Once launched, help can be found using the Get-VICommand commandlet or the Get-PowerCLIHelp commandlet.

To connect to a ESX/ESXi host, use the Connect-VIServer commandlet.  An example would be:

Connect-VIServer –Server IP address –Protocol https –User root –Password passwordvalue

Once connected, a message should be displayed:

Once connected to a host, commandlets such as Get-VM and Get-VMHost can be used.

The | format-list option can provide additional details.

More details can be displayed using the | Select-Object * option as well.

The Get-VMGuest commandlet will offer some additional details on a particular VM:

The Get-HardDisk commandlet pulls storage information:

The Get-DataStore commandlet can offer details on items such as free disk space available.

The Disconnect-VIServer commandlet will remove the connection to the host:

GNS3

GNS3 is a graphical network simulator that allows simulation of complex networks.  This project is an open source, free program that may be used on multiple operating systems, including Windows, Linux, and MacOS X.  Users have to provide their own IOS/IPS/PIX/ASA/JunOS to use with GNS3.

http://www.gns3.net/

SCR.IM

This is a similar service to URL-shortening sites but for email.  The purpose is to have an email link that requires a captcha check before the true email address is displayed.

http://scr.im/