Foundstone Free Tools

All questions, comments, and inquiries regarding Foundstone free tools will only be answered by emailing Although Foundstone does not offer technical or customer support for these tools, your feedback and bug reporting is appreciated.

Hackers and malicious insiders are an undeniable threat to your organization’s network. They have sophisticated tools and backdoor programs at their disposal with which to steal information, perform unlawful or unauthorized activities, and cover their tracks. Security professionals charged with protecting their organizations can become overwhelmed in developing specialty applications to combat these threats.
To help bridge this gap, Foundstone offers several unique utilities that you can add to your network security arsenal.

As the premier provider of security risk management, vulnerability assessments and protection, Foundstone has created a series of tools that are used in the field by its consultants. The company offers this software free of charge to the public. Download them today to defend your organization against attacks.


** NOTE: Some anti-virus packages may falsely report viruses in some of our tools. These tools, like many network utilities, can cause crippling performance and other damage to the hosts and networks they run against. Because of this, some anti-virus software may identify these tools as denial of service (DoS) agents, Trojans, back doors or other forms of virus.**

Assessment Utilities
	FSCrack™ NEW!!	v1.0
	CredDigger™ NEW!!	v2.1
	Fpipe™	v2.1
Forensic Tools
	DumpAutoComplete NEW!!	v0.7
	Pasco	v1.0
	Galleta	v1.0
	Rifiuti	v1.0
	NTLast™	v3.0
	Forensic Toolkit™	v2.0
	ShoWin™	v2.0
	PatchIt™	v2.0
	Vision™	v1.0
Foundstone SASS Tools
	Hacme Casino™ NEW!!	v1.0
	CodeScout™ NEW!!	v1.0
	HackPack™ NEW!!	v1.0
	Hacme Shipping™	v1.0
	Hacme Travel™	v1.0
	Hacme Books™	v2.0
	Hacme Bank™	v2.0
	SiteScope	v1.0
	.NET Security Toolkit	v1.0
	.NETMon™	v1.0
	Validator.NET™	v1.0
	SecureUML Template	v1.0
	WSDigger™	v1.0
	CookieDigger™	v1.0
	SSLDigger™	v1.02
	SiteDigger™	v2.0
Intrusion Detection Tools
	IPv4Trace	v1.0
	Carbonite™	v1.0
	FileWatch™	v1.0
	Attacker™	v3.0
	Fport™	v2.0
Scanning Tools
	SuperScan™	v4.0
	MS05-051 Scan	v1.0
	MS05-039 Scan	v1.0
	NetSchedScan	v1.0
	DSScan	v1.0
	MydoomScanner	v1.0
	MessengerScan	v1.05
	SQLScan	v1.0
	BOPing™	v2.0
	ScanLine™	v1.01
	Trout™	v2.0
	DDosPing™	v2.0
	SNScan™	v1.05
	CIScan	v1.0
	RPCScan	v2.03
Stress Testing Tools
	FSMax™	v2.0
	Blast™	v2.0
	UDPFlood™	v2.0

Nmap 4.50 (10th Anniversary Edition) released

Fyodor writes:
Hi everyone. I'm proud to say that Nmap has reached its 10th
anniversary since I released it in 1997, and it is still going strong!
To celebrate that, Nmap 4.50 has been released. It is the first
stable release in more than a year (there have been dozens of dev
releases), and the first major release since 4.00 two years ago.

In related good news, the movie Bourne Ultimatum was released to DVD
on Tuesday, and is currently the 3rd highest selling DVD on Amazon.
In this movie, the CIA needs to hack the mail server of a newspaper
(The Guardian UK) to read the email of a reporter they
assassinated. So they turn to Nmap and its new official GUI Zenmap
(part of the 4.50 release)! I have screenshots up on
http://insecure.org . Nmap has now appeared in at least five
movies--it has become quite the movie star!

The changelog shows 320 changes since 4.00 with a lot of great stuff
in this release! It has a brand new GUI and results viewer (Zenmap),
a scripting engine allowing you to write your own scripts for
high-performance network discovery (or use one of the 40 scripts
shipped with it), the 2nd generation OS detection system (now with
more than a thousand fingerprints), nearly 1,500 more version
detection signatures, and a lot more! You can read the full release
announcement, which describes the changes as well as future plans,
right here:

http://insecure.org/stf/Nmap-4.50-Release.html

Or if you are ready to jump right in, head to the download page:

http://insecure.org/nmap/download.html

We don't have an ad budget, so please help spread the word about the
new Nmap. The 4.00 release made Slashdot, Digg, etc. and this release
is even better!

And of course be sure to try it out yourself! Let us know on the
nmap-dev list if you encounter any problems. See
http://insecure.org/nmap/man/man-bugs.html .

Cheers,
Fyodor

User's Guide to Securing External Devices for Telework and Remote Access (pdf)