The OpenCA Project is a collaborative effort to develop a robust, full-featured and Open Source out-of-the-box Certification Authority implementing the most used protocols with full-strength cryptography world-wide. OpenCA is based on many Open-Source Projects. Among the supported software is OpenLDAP, OpenSSL, Apache Project, Apache mod_ssl.
Unicornscan is an information gathering and correlation engine. It was designed to provide an engine that is scalable, accurate, flexible, and efficient. Unicornscan is an attempt at a user-land distributed TCP/IP stack. It is intended to provide a researcher with a superior interface for introducing a stimulus into and measuring a response from a TCP/IP enabled device or network.
SnortSMS is a highly configurable sensor management system that provides the ability to remotely administer Snort [and Barnyard] based Intrusion Detection Systems (IDS), push configuration files, add/edit rules, and monitor system health and statistics, all from a simple and clean Web interface console. Whether you have one or multiple Snort sensors, it can help unify and syncronize all sensor configurations.
Bruteblock allows system administrators to block various bruteforce attacks on UNIX services. The program analyzes system logs and adds attackers' IP addresses into the ipfw2 table, effectively blocking them. Addresses are automatically removed from the table after specified amount of time. Bruteblock uses regular expressions to parse logs, which gives it enough flexibility to be used with almost any network service. Bruteblock doesn't use any external programs and works with ipfw2 tables via the raw sockets API.
PyKCS11 is a PKCS#11 wrapper for Python. It lets you access almost all PKCS#11 functions and data types using any PKCS#11 library, such as the various modules supplied by smartcard vendors. It comes with two interfaces: a low level and very thin interface over the original PKCS#11 API, generated using the SWIG compiler (designed for library tests), and a high level interface that offers simpler access (with few limits) to the PKCS#11 APIs.
The dkLab Apache is a patched Apache distribution for those who plan to use the Apache Web server to serve multiple separate sites working under different, fully separated, and independent Unix users. It does not require you to install any OS kernel modules or disable setuid, and works correctly and intelligently with KeepAlive turned on and MaxRequestsPerChild greater than 1.