Foundstone Free Tools

All questions, comments, and inquiries regarding Foundstone free tools will only be answered by emailing Although Foundstone does not offer technical or customer support for these tools, your feedback and bug reporting is appreciated.

Hackers and malicious insiders are an undeniable threat to your organization’s network. They have sophisticated tools and backdoor programs at their disposal with which to steal information, perform unlawful or unauthorized activities, and cover their tracks. Security professionals charged with protecting their organizations can become overwhelmed in developing specialty applications to combat these threats.
To help bridge this gap, Foundstone offers several unique utilities that you can add to your network security arsenal.

As the premier provider of security risk management, vulnerability assessments and protection, Foundstone has created a series of tools that are used in the field by its consultants. The company offers this software free of charge to the public. Download them today to defend your organization against attacks.


** NOTE: Some anti-virus packages may falsely report viruses in some of our tools. These tools, like many network utilities, can cause crippling performance and other damage to the hosts and networks they run against. Because of this, some anti-virus software may identify these tools as denial of service (DoS) agents, Trojans, back doors or other forms of virus.**

Assessment Utilities
	FSCrack™ NEW!!	v1.0
	CredDigger™ NEW!!	v2.1
	Fpipe™	v2.1
Forensic Tools
	DumpAutoComplete NEW!!	v0.7
	Pasco	v1.0
	Galleta	v1.0
	Rifiuti	v1.0
	NTLast™	v3.0
	Forensic Toolkit™	v2.0
	ShoWin™	v2.0
	PatchIt™	v2.0
	Vision™	v1.0
Foundstone SASS Tools
	Hacme Casino™ NEW!!	v1.0
	CodeScout™ NEW!!	v1.0
	HackPack™ NEW!!	v1.0
	Hacme Shipping™	v1.0
	Hacme Travel™	v1.0
	Hacme Books™	v2.0
	Hacme Bank™	v2.0
	SiteScope	v1.0
	.NET Security Toolkit	v1.0
	.NETMon™	v1.0
	Validator.NET™	v1.0
	SecureUML Template	v1.0
	WSDigger™	v1.0
	CookieDigger™	v1.0
	SSLDigger™	v1.02
	SiteDigger™	v2.0
Intrusion Detection Tools
	IPv4Trace	v1.0
	Carbonite™	v1.0
	FileWatch™	v1.0
	Attacker™	v3.0
	Fport™	v2.0
Scanning Tools
	SuperScan™	v4.0
	MS05-051 Scan	v1.0
	MS05-039 Scan	v1.0
	NetSchedScan	v1.0
	DSScan	v1.0
	MydoomScanner	v1.0
	MessengerScan	v1.05
	SQLScan	v1.0
	BOPing™	v2.0
	ScanLine™	v1.01
	Trout™	v2.0
	DDosPing™	v2.0
	SNScan™	v1.05
	CIScan	v1.0
	RPCScan	v2.03
Stress Testing Tools
	FSMax™	v2.0
	Blast™	v2.0
	UDPFlood™	v2.0

Creating a Bootable USB Ophcrack

Ophcrack is an open source Windows password cracking utility that uses rainbow tables to find passwords. It can be run from Windows, Linux or Live CD. The following tutorial explains how to install and boot Ophcrack from a portable USB device. Since the Live CD version (running from a SLAX core) is already available, creating USB Ophcrack is similar to converting any other Live Linux CD to USB.

Tools used to create USB Ophcrack:

• Windows Computer (Windows XP is used here)
• 512 MB or larger portable device (USB stick)
• Ophcrack Live CD and usboph.zip

Creating bootable USB Ophcrack:

1. First, create a "New Directory" to house your work
2. Download Ophcrack Live CD to the new directory
3. Download and extract usboph.zip to the new directory
4. Click fixoph.bat and follow the onscreen instructions
5. Copy all the files from the Ophcrack directory to your USB device
6. From your USB device, click makeboot.bat and follow the instructions to make the drive bootable
7. Reboot your PC and set your BIOS boot menu to boot from the USB device.

Nmap 4.50 (10th Anniversary Edition) released

Fyodor writes:
Hi everyone. I'm proud to say that Nmap has reached its 10th
anniversary since I released it in 1997, and it is still going strong!
To celebrate that, Nmap 4.50 has been released. It is the first
stable release in more than a year (there have been dozens of dev
releases), and the first major release since 4.00 two years ago.

In related good news, the movie Bourne Ultimatum was released to DVD
on Tuesday, and is currently the 3rd highest selling DVD on Amazon.
In this movie, the CIA needs to hack the mail server of a newspaper
(The Guardian UK) to read the email of a reporter they
assassinated. So they turn to Nmap and its new official GUI Zenmap
(part of the 4.50 release)! I have screenshots up on
http://insecure.org . Nmap has now appeared in at least five
movies--it has become quite the movie star!

The changelog shows 320 changes since 4.00 with a lot of great stuff
in this release! It has a brand new GUI and results viewer (Zenmap),
a scripting engine allowing you to write your own scripts for
high-performance network discovery (or use one of the 40 scripts
shipped with it), the 2nd generation OS detection system (now with
more than a thousand fingerprints), nearly 1,500 more version
detection signatures, and a lot more! You can read the full release
announcement, which describes the changes as well as future plans,
right here:

http://insecure.org/stf/Nmap-4.50-Release.html

Or if you are ready to jump right in, head to the download page:

http://insecure.org/nmap/download.html

We don't have an ad budget, so please help spread the word about the
new Nmap. The 4.00 release made Slashdot, Digg, etc. and this release
is even better!

And of course be sure to try it out yourself! Let us know on the
nmap-dev list if you encounter any problems. See
http://insecure.org/nmap/man/man-bugs.html .

Cheers,
Fyodor

How to Hack a Mac OS Password

Changing your administrator password

To change the administrator password, you must know the current administrator password. If you're logged in as the administrator, open Account preferences and click the Change Password button.

If you don't remember the password and automatic login is turned off, you can reset the administrator password using the Mac OS X User Install disc.

IMPORTANT: Because a user with the Mac OS X install disc can gain unrestricted access to your computer, you should keep the disc in a safe place.

To reset the administrator password using the Mac OS X disc:

1. Insert the Mac OS X Install disc and restart the computer.
2. When you hear the startup tone, hold down the C key until you see the spinning gear.
3. When the Installer appears, choose Utilities > Reset Password.
4. Follow the onscreen instructions to change the password.
5. Quit the Installer and restart your computer while holding down the mouse button to eject the disc.

Be sure to change your login password in Keychain Access to match your new password.