Poll
Should software vendors reward independent researchers for finding vulnerabilities in their software?
Windows Personal Firewall analysis - Downloads
BSODhook aka Kernel hooks probing tool
BSODhook has been introduced in our article, which describes bugs in implementations of SSDT hooks in various software, called Plague in (security) software drivers. It is a handy utility that helps finding improper validation bugs in drivers that implement (not only) SSDT hooks.
Leak-tests
Before you download leak-tests, we recommend you to read the Introduction to Firewall Leak-testing article.
- Atelier Web Firewall Tester 3.2 (AWFT) - evaluation version
- BITStester
- Breakout - source code included
- Breakout2 - source code included
- Coat - source code included
- CopyCat
- CPIL
- CPIL Test Suite (CPILSuite)
- DNStest - source code included
- DNStester - source code included
- FireHole
- Fake Protection Revealer (FPR) - source code included
- Ghost
- Jumper
- LeakTest
- OSfwbypass-demo (OSfwbypass)
- pcAudit
- pcAudit 6.3 (pcAudit2)
- PCFlank
- Runner - source code included
- Surfer - source code included
- Thermite - source code included
- TooLeaky - source code included
- WallBreaker
- YALTA
- ZAbypass
Testing programs
You can download testing programs with source codes. The description of what testing programs are is given in the methodology reference.
- Testing programs for open process control
- Testing programs for open thread control
- Testing programs that can corrupt process integrity
- DLL injection testing programs
- Inbound connection testing programs
- Outbound connection testing programs
- Testing programs using other protocols
- Testing programs for token privilege elevation control
- Testing programs for performance measurement
- Testing programs for usermode hooks enumeration