Parrot Security OS - Friendly OS designed for Pentesting, Computer Forensic, Reverse engineering, Hacking, Cloud pentesting, Privacy/Anonimity and Cryptography

Parrot Security OS is a cloud friendly operating system designed for Pentesting, Computer Forensic, Reverse engineering, Hacking, Cloud pentesting, privacy/anonimity and cryptography. Based on Debian and developed by Frozenbox network.

Who can use it

Parrot is designed for everyone, from the Pro pentester to the newbie, because it provides the most professional tools combined in a easy to use, fast and lightweight pentesting environment, and it can be used also for an everyday use.

Features:

System Specs

• Debian-based system
• Custom hardened linux 3.16 kernel
• Rolling release upgrade line
• MATE desktop environment
• Lightdm Dislpay Manager
• Custom themes, icons and wallpapers

System Requirements

• CPU: x86 compatible processor with at least 800Mhz – non-pae processors require a custom kernel (available via repositories)
• ARCH: i386 (x86-32bit) and amd64 (x86-64bit) supported – armel and armhf coming soon
• RAM: At least 256Mb (i386) / 320Mb (amd64) – 512Mb suggested
• GPU: No graphic acceleration required – propertary drivers installable via repositories
• HDD: 8Gb required – 3.8Gb used
• BOOT: Legacy bios (preferred) or UEFI (experimental)

Pentesting

• Fresh & lightweight pentesting environment
• Easy to use automation tools for beginners
• Must-have professional tools for Pro Pentesters
• Custom tools developed by our team
• External tools developed by our community
• Only a selected set of tools is preinstalled out of the box
• Thousands of other tools are available in our repositories

Cloud

• Parrot Server Edition
• Parrot Cloud Controller
• Custom installation script for Debian VPS
• Cloud Pentesting concept for file hosting and remote distributed computing

Digital Forensic

• “Stealth” option at boot for no partitions or swap mounting
• Most famous Digital Forensic tools and frameworks out of the box

Cryptography

• Custom Anti Forensic tools
• Custom interfaces for GPG
• Custom interfaces for cryptsetup
• NUKE slots for cryptsetup LUKS disks
• Encrypted system installation

Anonymity

• AnonSurf
• Whole-system anonymization
• DNS requests anonymization
• “Change Identity” function for AnonSurf
• BleachBit system cleaner
• NoScript plugin
• UserAgentOverrider plugin

Programming

• FALCON Programming Language (1.0)
• System editor tuned for programming
• Lots of preinstalled compilers/interpreters/debuggers
• Reverse Engineering Tools
• Programming Template Files
• Preinstalled most-used libs

Cryptocurrency

• Cryptocurrency-friendly environment
• Custom compiled wallets available in our software center
• MultiBit
• Bitcoin-qt
• Litecoin-qt
• Feathercoin-qt
• BitLira-qt
• Dogecoin-qt
• Zetacoin-qt
• Other wallets will be available as soon as possible

Download Parrot Security OS

Read More

Radare - The Reverse Engineering Framework

r2 is a rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files

This is the rewrite of radare (1.x branch) to provide a framework with a set of libraries and programs to work with binary data.

Radare project started as a forensics tool, an scriptable commandline hexadecimal editor able to open disk files, but later support for analyzing binaries, disassembling code, debugging programs, attaching to remote gdb servers, ..

radare2 is portable.

Architectures:

6502, 8051, arm, arc, avr, bf, tms320 (c54x, c55x, c55+), gameboy csr, dcpu16, dalvik, i8080, mips, m68k, mips, msil, snes, nios II, sh, sparc, rar, powerpc, i386, x86-64, H8/300, malbolge, T8200

File Formats:

bios, dex, elf, elf64, filesystem, java, fatmach0, mach0, mach0-64, MZ, PE, PE+, TE, COFF, plan9, bios, dyldcache, Gameboy and Nintendo DS ROMs

Operating Systems:

Android, GNU/Linux, [Net|Free|Open]BSD, iOS, OSX, QNX, w32, w64, Solaris, Haiku, FirefoxOS

Bindings:

Vala/Genie, Python (2, 3), NodeJS, LUA, Go, Perl, Guile, php5, newlisp, Ruby, Java, OCAM

Features:

• Multi-architecture and multi-platform
  • GNU/Linux, Android, *BSD, OSX, iPhoneOS, Windows{32,64} and Solaris
  • i8080, 8051, x86{16,32,64}, avr, arc{4,compact}, arm{thumb,neon,aarch64}, c55x+, dalvik, ebc, gb, java, sparc, mips, nios2, powerpc, whitespace, brainfuck, malbolge, z80, psosvm, m68k, msil, sh, snes, gb, dcpu16, csr, arc
  • pe{32,64}, te, [fat]mach0{32,64}, elf{32,64}, bios/uefi, dex and java classes
• Highly scriptable
  • Vala, Go, Python, Guile, Ruby, Perl, Lua, Java, JavaScript, sh, ..
  • batch mode and native plugins with full internal API access
  • native scripting based in mnemonic commands and macros
• Hexadecimal editor
  • 64bit offset support with virtual addressing and section maps
  • Assemble and disassemble from/to many architectures
  • colorizes opcodes, bytes and debug register changes
  • print data in various formats (int, float, disasm, timestamp, ..)
  • search multiple patterns or keywords with binary mask support
  • checksumming and data analysis of byte blocks
• IO is wrapped
  • support Files, disks, processes and streams
  • virtual addressing with sections and multiple file mapping
  • handles gdb:// and rap:// remote protocols
• Filesystems support
  • allows to mount ext2, vfat, ntfs, and many others
  • support partition types (gpt, msdos, ..)
• Debugger support
  • gdb remote and brainfuck debugger support
  • software and hardware breakpoints
  • tracing and logging facilities
• Diffing between two functions or binaries
  • graphviz friendly code analysis graphs
  • colorize nodes and edges
• Code analysis at opcode, basicblock, function levels
• embedded simple virtual machine to emulate code
• keep track of code and data references
• function calls and syscall decompilation
• function description, comments and library signatures

Download Radare

Read More

[WinAppDbg 1.5] Python Debugger

The WinAppDbg python module allows developers to quickly code instrumentation scripts in Python under a Windows environment.

It uses ctypes to wrap many Win32 API calls related to debugging, and provides an object-oriented abstraction layer to manipulate threads, libraries and processes, attach your script as a debugger, trace execution, hook API calls, handle events in your debugee and set breakpoints of different kinds (code, hardware and memory). Additionally it has no native code at all, making it easier to maintain or modify than other debuggers on Windows.

The intended audience are QA engineers and software security auditors wishing to test / fuzz Windows applications with quickly coded Python scripts. Several ready to use utilities are shipped and can be used for this purposes.

Current features also include disassembling x86/x64 native code, debugging multiple processes simultaneously and produce a detailed log of application crashes, useful for fuzzing and automated testing.

What’s new in this version?

In a nutshell…

• full 64-bit support (including function hooks!)
• added support for Windows Vista and above.
• database code migrated to SQLAlchemy, tested on:
  • MySQL
  • SQLite 3
  • Microsoft SQL Server
  should work on other servers too (let me know if it doesn’t!)
• added integration with more disassemblers:
  • BeaEngine: http://www.beaengine.org/
  • Capstone: http://capstone-engine.org/
  • Libdisassemble: http://www.immunitysec.com/resources-freesoftware.shtml
  • PyDasm: https://code.google.com/p/libdasm/
• added support for postmortem (just-in-time) debugging
• added support for deferred breakpoints
• now fully supports manipulating and debugging system services
• the interactive command-line debugger is now launchable from your scripts (thanks Zen One for the idea!)
• more UAC-friendly, only requests the privileges it needs before any action
• added functions to work with UAC and different privilege levels, so it’s now possible to run debugees with lower privileges than the debugger
• added memory search and registry search support
• added string extraction functionality
• added functions to work with DEP settings
• added a new event handler, EventSift, that can greatly simplify coding a debugger script to run multiple targets at the same time
• added new utility functions to work with colored console output
• several improvements to the Crash Logger tool
• integration with already open debugging sessions from other libraries is now possible
• improvements to the Process and GUI instrumentation functionality
• implemented more anti-antidebug tricks
• more tools and code examples, and improvements to the existing ones
• more Win32 API wrappers
• lots of miscellaneous improvements, more documentation and bugfixes as usual!

Download WinAppDbg 1.5

Read More

[CrowdRE] Reverse Engineering Tool

A new project called CrowdRE aims to make it easy for the reverse engineering of complex applications working in collaboration with other users. Normally, the process reversing software from a complicated binary can consume much time, CrowdRE will help accelerate this process through teamwork.

CrowdRE, which is currently considered in an "alpha" stage of development, is available as an plugin for IDA Pro 6.3.120531. With the plug-in, developers can reverse engineer on one or more functions of a binary and upload the results to a server in the cloud that keeps track of everything in a central database. This allows customers to benefit from a job than other developers already have completed and share the progress that make the rest of the community. The database allows any search and each function can have different concurrent "commits".

Download CrowdRE

Read More