Navigation



SARA – Security Auditor’s Research Assistant – Network Analysis Tool

Last updated: September 9, 2015 | 11,770 views

The New Acunetix V12 Engine


This tool has been around for a LONG time in some form or another, some of you old-skool guys may remember a package called SATAN, this was the best semi-automatic security analysis tool around back then. From SATAN and it’s development came SARA, which is now in it’s 3rd generation.

Advanced Research’s philosophy relies heavily on software re-use. Rather than inventing a new module, SARA is adapted to interface to other community products. For instance, SARA interfaces with the popular Nmap package for superior “Operating System fingerprinting”. Also, SARA provides a transparent interface to SAMBA for SMB security analysis.

A recent addition to SARA is the ability to operate on a Windows 200* and Windows XP platforms. SARA relies on Cooperative Linux to provide the proper operating environment to operate as Windows process. This product is called coSARA.

The Security Auditor’s Research Assistant (SARA) is a third generation network security analysis tool that is:

  1. Operates under Unix, Linux, MAC OS/X or Windows (through coLinux) OS’.
  2. Integrates the National Vulnerability Database (NVD).
  3. Performs SQL injection tests.
  4. Performs exhaustive XSS tests
  5. Can adapt to many firewalled environments.
  6. Support remote self scan and API facilities.
  7. Used for CIS benchmark initiatives
  8. Plug-in facility for third party apps
  9. CVE standards support
  10. Enterprise search module
  11. Standalone or daemon mode
  12. Free-use open SATAN oriented license
  13. Updated twice a month (we try)
  14. User extension support
  15. Based on the SATAN model

The first generation assistant, the Security Administrator’s Tool for Analyzing Networks (SATAN) was developed in early 1995. It became the benchmark for network security analysis for several years. However, few updates were provided and the tool slowly became obsolete in the growing threat environment.

You can download SARA here:

sara-7.8.4.tgz (Linux)
cosara-7.4.1.exe (Windows)

Or read more here.

Share2
Tweet
+11
Share
3 Shares
Posted in: Exploits/Vulnerabilities, Hacking Tools, Networking Hacking

, , , , ,


Latest Posts:


Malcom - Malware Communication Analyzer Malcom – Malware Communication Analyzer
Malcom is a Malware Communication Analyzer designed to analyze a system's network communication using graphical representations of network traffic.
November 29, 2018 - 155 Shares
WepAttack - WLAN 802.11 WEP Key Hacking Tool WepAttack – WLAN 802.11 WEP Key Hacking Tool
WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.
November 23, 2018 - 115 Shares
Eraser - Windows Secure Erase Hard Drive Wiper Eraser – Windows Secure Erase Hard Drive Wiper
Eraser is a hard drive wiper for Windows which allows you to run a secure erase and completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns.
November 14, 2018 - 119 Shares
Insecure software versions are a problem Web Security Stats Show XSS & Outdated Software Are Major Problems
Netsparker just published some anonymized Web Security Stats about the security vulnerabilities their online solution identified on their users’ web applications and web services during the last 3 years.
November 2, 2018 - 115 Shares
CTFR - Abuse Certificate Transparency Logs For HTTPS Subdomains CTFR – Abuse Certificate Transparency Logs For HTTPS Subdomains
CTFR is a Python-based tool to Abuse Certificate Transparency Logs to get subdomains from a HTTPS website in a few seconds.
October 29, 2018 - 152 Shares
testssl.sh - Test SSL Security Including Ciphers, Protocols & Detect Flaws testssl.sh – Test SSL Security Including Ciphers, Protocols & Detect Flaws
testssl.sh is a free command line tool to test SSL security, it checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws and more.
October 20, 2018 - 248 Shares


2 Responses to SARA – Security Auditor’s Research Assistant – Network Analysis Tool

  1. elpeor November 8, 2008 at 6:52 pm #

    nice app!
    installed and tested in 5 minutes, it works really well.

  2. shadowdevelopment May 17, 2009 at 1:44 am #

    hello i have just doen a bit of reaserch on satan

    ftp site and blogs buy cert and i was wondering which i am downloading at the minute sara co foundation based program based on satan and i would like any opinion of sara and any views that people might have used during the program as they have used it and the detial of the data that i gives on due passive scanning and would it be any good as the satamn program from the reviews i have heard that the satan program formulary intruduced in 1990 was the worlds best at its time then saint came over it and i was wondering if anyone could give me a bit of advice on were to get the program for download i had it in a book once but the book was sold and now most of the download links to the program have been either shutdown on ftp realese and i think that the company has woiped out most of the servers that i came from but would be appreciated if anyone could give me the views opf the summury of satan program on todays networks and would it still be as good today as it was then !!!!!! shadowdevelopment………