Galleta 1.0 Download

Galleta 1.0 Description

"A Internet Explorer Cookie Forensic Analysis Tool"

Edit By BS Editor: Many important files within Microsoft Windows have structures that are undocumented. One of the principals of computer forensics is that all analysis methodologies must be well documented and repeatable, and they must have an acceptable margin of error. Currently, there are a lack of open source methods and tools that forensic analysts can rely upon to examine the data found in proprietary Microsoft files.

Many computer crime investigations require the reconstruction of a subject's Internet Explorer Cookie files. Since this analysis technique is executed regularly, we researched the structure of the data found in the cookie files. Galleta, the Spanish word meaning "cookie", was developed to examine the contents of the cookie files. The foundation of Galleta's examination methodology will be documented in an upcoming whitepaper. Galleta will parse the information in a Cookie file and output the results in a field delimited manner so that it may be imported into your favorite Spreadsheet program. Galleta is built to work on multiple platforms and will execute on Windows (through Cygwin), Mac OS X, Linux, and *BSD platforms. you can free download Galleta 1.0 now.

Galleta 1.0 Keywords

Galleta 1.0 Related Software

• 
  Finds Ascii, Unicode and Resource strings in a file.
• 
  Mydoom worm scanner
• 
  SNScan allows for the scanning of SNMP specific ports
• 
  A network admin utility for remotely detecting the most common DDoS programs.
• Hacme Shipping
  Foundstone Hacme Shipping is a web-based shipping application
• Hacme Bank
  Hacme Bank is designed to teach application developers
• 
  An Internet Explorer activity forensic analysis tool.
• Fport
  Identify unknown open ports and their associated applications
• 
  A scriptable, server stress testing tool.
• CredDigger
  A tool that attempts to gather data to assist with penetration
• WSDigger
  WSDigger is a free open source tool
• SiteDigger
  SiteDigger 2.0 searches Google’s cache to look for vulnerabilities
• RPCScan
  A utility that can quickly and accurately identify Microsoft operating systems
• CodeScout
  Foundstone CodeScout is a free tool
• FSCrack
  provide a graphical user interface (GUI) for access to most of JtR’s functions
• CookieDigger
  CookieDigger helps identify weak cookie generation
• Hacme Books
  Foundstone Hacme Books is a learning platform for secure software development
• Galleta
  A Internet Explorer Cookie Forensic Analysis Tool
• 
  UDP packet sender utility.
• 
  Show information about Windows. Reveal passwords etc.
• SiteScope
  Foundstone�s SiteScope creates a site map
• Attacker
  A TCP/UDP port listener.
• MessengerScan
  Vulnerability Detection Utility with Advanced Immediate Protection Capability!
• 
  A scanner for the infamous Back Orifice program.
• 
  A Recycle Bin Forensic Analysis Tool.
• Toolk
  Tools to help examine NTFS for unauthorized activity.
• PatchIt
  A binary file byte-patching program.
• 
  Cisco IOS IPv4 Remote Denial of Service Vulnerability Detection Utility
• 
  NTLast is specifically targeted for serious security and IIS administration.
• 
  Traceroute and Whois program.
• Carbonite
  Incident Response vs. Loadable Kernel Module Rootkits
• 
  An update of the highly popular Windows port scanning tool, SuperScan.
• 
  A small, quick TCP service stress test tool.
• 
  Microsoft UPnP MS05-039 Vulnerability Detection Utility
• Fpipe
  FPipe is a source port forwarder/redirector.
• fileWATCH
  A file change monitor. Used with BlackICE Defender.
• 
  Remote Task Scheduler scanner
• SSLDigger
  SSLDigger v1.02 is a tool to assess the strength of SSL servers
• IPv4Trace
  IPv4 fragment reassembly implementation.
• Vision
  Vision is a host based Forensic Utility
• HackPack
  Foundstone HackPack is a tool designed to aid security
• 
  Command line port scanner.
• Foundstone CredDigger
  Foundstone CredDigger is a tool that attempts to gather data to assist