<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Darknet - The Darkside &#187; forensics-tools</title>
	<atom:link href="http://www.darknet.org.uk/tag/forensics-tools/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.darknet.org.uk</link>
	<description>Ethical Hacking, Penetration Testing &#38; Computer Security</description>
	<lastBuildDate>Tue, 07 Feb 2012 18:34:17 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Weaknet Linux &#8211; Penetration Testing &amp; Forensic Analysis Linux Distribution</title>
		<link>http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/</link>
		<comments>http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/#comments</comments>
		<pubDate>Tue, 03 Aug 2010 10:32:07 +0000</pubDate>
		<dc:creator>Darknet</dc:creator>
				<category><![CDATA[Database Hacking]]></category>
		<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Hacking Tools]]></category>
		<category><![CDATA[Linux Hacking]]></category>
		<category><![CDATA[forensics-tools]]></category>
		<category><![CDATA[hacking-live-cd]]></category>
		<category><![CDATA[hacking-livecd]]></category>
		<category><![CDATA[linux forensics distro]]></category>
		<category><![CDATA[linux forensics livecd]]></category>
		<category><![CDATA[pen testing tools]]></category>
		<category><![CDATA[penetration testing linux distro]]></category>
		<category><![CDATA[penetration testing livecd]]></category>
		<category><![CDATA[security-distro]]></category>
		<category><![CDATA[security-livecd]]></category>
		<category><![CDATA[weakerthan]]></category>
		<category><![CDATA[weaknet]]></category>
		<category><![CDATA[weaknet linux]]></category>

		<guid isPermaLink="false">http://www.darknet.org.uk/?p=2791</guid>
		<description><![CDATA[WeakNet Linux is designed primarily for penetration testing, forensic analysis and other security tasks. WeakNet Linux IV was built from Ubuntu 9.10 which is a Debian based distro. All references to Ubuntu have been removed as the author completely re-compiled the kernel, removed all Ubuntu specific software which would cause the ISO to bloat, and [...]]]></description>
			<content:encoded><![CDATA[<p></p>
<p>WeakNet Linux is designed primarily for penetration testing, forensic analysis and other security tasks. WeakNet Linux IV was built from Ubuntu 9.10 which is a Debian based distro. All references to Ubuntu have been removed as the author completely re-compiled the kernel, removed all Ubuntu specific software which would cause the ISO to bloat, and used a non-Ubuntu-traditional Window Manager, with no DM. To start X11 (Fluxbox) simply type “startx” at the command line as root.</p>
<p>The tools selected are those that the developer feels are used most often in pen-tests. A sample of those included are:</p>
<ul>
<li>BRuWRT-FORSSE v2.0</li>
<li>
Easy-SSHd</li>
<li>Web-Hacking-Portal v2.0</li>
<li>Perlwd</li>
<li>
Netgh0st v3.0</li>
<li>YouTube-Thief!</li>
<li>Netgh0st v2.2</li>
<li>DomainScan</li>
<li>ADtrace</li>
<li>
Admin-Tool</li>
<li>Tartarus v0.1</li>
</ul>
<p>A full list of applications is here:</p>
<p><a href="http://weaknetlabs.com/main/?page_id=276">WeakNet Linux Applications List</a></p>
<p>You can also get the guide here:</p>
<p><a href="http://weaknetlabs.com/multimedia/papers/WNLA_SAg.pdf">Official WeakNet Linux WEAKERTHAN System Administration Guide</a> [PDF]</p>
<p><strong>Hardware Requirements</strong></p>
<p>This distro boots to a command line by default, so they are quite minimal. For Fluxbox, the recommended specs are:</p>
<ul>
<li>256 MiB of system memory (RAM)</li>
<li>2 GB of disk space</li>
<li>Graphics card and monitor capable of 800×600 resolution</li>
</ul>
<p>You can download Weaknet Linux here:</p>
<p><a href="http://weaknetlabs.com/linux/releases/WEAKERTHAN4.1k.ISO">WEAKERTHAN4.1k.ISO</a></p>
<p></p>
<p>Or read more <a href="http://weaknetlabs.com/main/?page_id=18">here</a>.</p>
<div class="tweetthis" style="text-align:left;"><p> <a class="tt" href="http://twitter.com/intent/tweet?text=Weaknet+Linux+%E2%80%93+Penetration+Testing+%26+Forensic+Analysis+Linux+Distribution+http%3A%2F%2Fdarknet.org.uk%2F%3Fp%3D2791+from+%40THEdarknet" title="Post to Twitter"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter-micro3.png" alt="Post to Twitter" /></a> <a class="tt" href="http://www.facebook.com/share.php?u=http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/&amp;t=Weaknet+Linux+%E2%80%93+Penetration+Testing+%26+Forensic+Analysis+Linux+Distribution" title="Post to Facebook"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/facebook/tt-facebook-micro3.png" alt="Post to Facebook" /></a> <a class="tt" href="http://www.google.com/buzz/post?url=http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/&amp;imageurl=" title="Post to Google Buzz"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/gbuzz/tt-gbuzz-micro3.png" alt="Post to Google Buzz" /></a> <a class="tt" href="http://delicious.com/post?url=http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/&amp;title=Weaknet+Linux+%E2%80%93+Penetration+Testing+%26+Forensic+Analysis+Linux+Distribution" title="Post to Delicious"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/delicious/tt-delicious-micro3.png" alt="Post to Delicious" /></a> <a class="tt" href="http://digg.com/submit?url=http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/&amp;title=Weaknet+Linux+%E2%80%93+Penetration+Testing+%26+Forensic+Analysis+Linux+Distribution" title="Post to Digg"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/digg/tt-digg-micro3.png" alt="Post to Digg" /></a> <a class="tt" href="http://reddit.com/submit?url=http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/&amp;title=Weaknet+Linux+%E2%80%93+Penetration+Testing+%26+Forensic+Analysis+Linux+Distribution" title="Post to Reddit"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/reddit/tt-reddit-micro3.png" alt="Post to Reddit" /></a> <a class="tt" href="http://stumbleupon.com/submit?url=http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/&amp;title=Weaknet+Linux+%E2%80%93+Penetration+Testing+%26+Forensic+Analysis+Linux+Distribution" title="Post to StumbleUpon"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/su/tt-su-micro3.png" alt="Post to StumbleUpon" /></a></p></div><div class="AWD_like_button "><iframe src="http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.darknet.org.uk%2F2010%2F08%2Fweaknet-linux-penetration-testing-forensic-analysis-linux-distribution%2F&amp;send=false&amp;layout=standard&amp;width=&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font=arial&amp;height=40" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:px; height:40px;" allowTransparency="true"></iframe></div>]]></content:encoded>
			<wfw:commentRss>http://www.darknet.org.uk/2010/08/weaknet-linux-penetration-testing-forensic-analysis-linux-distribution/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Foremost &#8211; Recover Files From Drive or Drive Image AKA Carving</title>
		<link>http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/</link>
		<comments>http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/#comments</comments>
		<pubDate>Mon, 17 Sep 2007 19:57:09 +0000</pubDate>
		<dc:creator>Darknet</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[data-recovery]]></category>
		<category><![CDATA[dd]]></category>
		<category><![CDATA[encase]]></category>
		<category><![CDATA[file-forensics]]></category>
		<category><![CDATA[foremost]]></category>
		<category><![CDATA[forensics-tools]]></category>
		<category><![CDATA[free-forensics]]></category>
		<category><![CDATA[open-source-forensics]]></category>
		<category><![CDATA[recover-files]]></category>
		<category><![CDATA[safeback]]></category>

		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/</guid>
		<description><![CDATA[Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly referred to as data carving. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers can be specified by a [...]]]></description>
			<content:encoded><![CDATA[<p></p>
<p>Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly referred to as data carving. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive.</p>
<p>The headers and footers can be specified by a configuration file or you can use command line switches to specify built-in file types. These built-in types look at the data structures of a given file format allowing for a more reliable and faster recovery.</p>
<p>Originally developed by the United States Air Force Office of Special Investigations and The Center for Information Systems Security Studies and Research , foremost has been opened to the general public.</p>
<p>You can download the latest version here:</p>
<p><a href="http://foremost.sourceforge.net/pkg/foremost-1.5.tar.gz">foremost-1.5.tar.gz</a></p>
<p></p>
<p>Or read more <a href="http://foremost.sourceforge.net/">here</a>.</p>
<div class="tweetthis" style="text-align:left;"><p> <a class="tt" href="http://twitter.com/intent/tweet?text=Foremost+%E2%80%93+Recover+Files+From+Drive+or+Drive+Image+AKA+Carving+http%3A%2F%2Fdarknet.org.uk%2F%3Fp%3D690+from+%40THEdarknet" title="Post to Twitter"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter-micro3.png" alt="Post to Twitter" /></a> <a class="tt" href="http://www.facebook.com/share.php?u=http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/&amp;t=Foremost+%E2%80%93+Recover+Files+From+Drive+or+Drive+Image+AKA+Carving" title="Post to Facebook"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/facebook/tt-facebook-micro3.png" alt="Post to Facebook" /></a> <a class="tt" href="http://www.google.com/buzz/post?url=http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/&amp;imageurl=" title="Post to Google Buzz"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/gbuzz/tt-gbuzz-micro3.png" alt="Post to Google Buzz" /></a> <a class="tt" href="http://delicious.com/post?url=http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/&amp;title=Foremost+%E2%80%93+Recover+Files+From+Drive+or+Drive+Image+AKA+Carving" title="Post to Delicious"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/delicious/tt-delicious-micro3.png" alt="Post to Delicious" /></a> <a class="tt" href="http://digg.com/submit?url=http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/&amp;title=Foremost+%E2%80%93+Recover+Files+From+Drive+or+Drive+Image+AKA+Carving" title="Post to Digg"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/digg/tt-digg-micro3.png" alt="Post to Digg" /></a> <a class="tt" href="http://reddit.com/submit?url=http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/&amp;title=Foremost+%E2%80%93+Recover+Files+From+Drive+or+Drive+Image+AKA+Carving" title="Post to Reddit"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/reddit/tt-reddit-micro3.png" alt="Post to Reddit" /></a> <a class="tt" href="http://stumbleupon.com/submit?url=http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/&amp;title=Foremost+%E2%80%93+Recover+Files+From+Drive+or+Drive+Image+AKA+Carving" title="Post to StumbleUpon"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/su/tt-su-micro3.png" alt="Post to StumbleUpon" /></a></p></div><div class="AWD_like_button "><iframe src="http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.darknet.org.uk%2F2007%2F09%2Fforemost-recover-files-from-drive-or-drive-image-aka-carving%2F&amp;send=false&amp;layout=standard&amp;width=&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font=arial&amp;height=40" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:px; height:40px;" allowTransparency="true"></iframe></div>]]></content:encoded>
			<wfw:commentRss>http://www.darknet.org.uk/2007/09/foremost-recover-files-from-drive-or-drive-image-aka-carving/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

