SecurityWizardry.com
Directory
Anti Forensic Tools
This page has raised a few eyebrows in it's time because it details products that could thwart a forensic investigation. The information isn't provided to assist anyone in avoiding prosecution, but to help forensic tool developers build better products and to assist forensic investigators in understanding what they may be up against. Before publishing this page advice was sought from the UK National High Tech Crime Unit (NHTCU), They felt that many of the rogues who may benefit from the products on this page were already aware of them. We therefore see this page as no different than publishing vulnerabilities and exploits for applications and operating systems that are already on the street
The Defiler's Toolkit
Visit the Product SiteThe file system (supposedly) contains a record of file I/O activity on a computer and forensic analysts attempt to extract this record for examination. Aside from their forensic tools incorrectly reporting on the data, these tools are useless if the data ...
srm
Visit the Product Sitesrm is a secure replacement for rm(1). Unlike the standard rm, it overwrites the data in the target files before unlinking them. This prevents command-line recovery of the data by examining the raw block device. It may also help frustrate physical examina ...
wipe
Visit the Product Siteya-wipe is a tool that effectively degausses the surface of a hard disk, making it virtually impossible to retrieve the data that was stored on it. This tool is designed to make sure that sensitive data is completely erased from magnetic media.
fwipe
Visit the Product Sitefwipe0 reads a list of filenames on standard input, each one followed by a 0-byte. If a filename refers to a regular file, then fwipe0 attempts to overwrite the file n times with 0's and 1's. If successful, fwipe0 attempts to delete the file. After each p ...
overwrite
Visit the Product SiteOverwrite is a UNIX utility that try to make harder data recovering. What overwrite does is to overwrite files using random patterns and deterministic patterns, as suggested in the Peter Gutmann's paper "Secure Deletion of Data from Magnetic and Solid-Sta ...
Runefs
Visit the Product SiteThe first inode that can allocate block resources on a ext2 file system is in fact the bad blocks inode (inode 1) -- *not* the root inode (inode 2). Because of this mis-implementation of the ext2fs it is possible to store data on blocks allocated to the b ...
grind
Visit the Product Sitegrind overwrites files with certain byte patterns and random data in order to make it impossible to recover the file from magnetic disks. It's based on a paper by Peter Gutmann located at: http://rootprompt.org/article.php3?article=473
DBAN
Visit the Product SiteDarik's Boot and Nuke ("DBAN") is a self-contained boot floppy that securely wipes the hard disks of most computers. DBAN will automatically and completely delete the contents of any hard disk that it can detect, which makes it an appropriate utility for ...
Diskzapper
Visit the Product SiteDiskzapper Dangerous automatically begins erasing all the disks as soon as the booting process is completed. No user action is required. This was intended to be used on computers for which it is not convenient to plug in a keyboard and monitor.
bcwipe
Visit the Product SiteBCWipe can be run from My Computer as well as from a command-line prompt. BCWipe v.3 is a powerful set of utilities which complies with the US DoD 5200.28-STD standard and Peter Gutmann wiping scheme. You can also create and use you own customized wiping ...
Many Assorted Tools...
Visit the Product SiteIncludes file encryption tools that can encrypt with either 3-DES or IDEA.
SecureIT
Visit the Product SiteSecure IT 2000 is an easy to use, feature packed, file and folder encryption program based on 448-bit strong encryption using the Blowfish algorithm. It includes a customizable file shredder, and the ability to generate self decrypting email attachments.
CryptoMite
Visit the Product SiteCryptoMite enables you to encrypt, decrypt, and wipe files and folders of any type. It supports various encryption engines, along with ZIP compression. Functions to build self-extracting encrypted ZIP files and e-mail capabilities are also included.
Evidence Eliminator
Visit the Product SiteEvidence Eliminator destroys: Windows SWAP file, Windows Application logs, Windows Temporary Files, Windows Recycle Bin, Windows Registry Backups, Windows Clipboard Data, Start Menu Recent Documents history, Start Menu Run history, Start Menu Find Files ...
Steganos Security Suite
Visit the Product SiteSteganos Safe protects your sensitive data - it serves as your encrypted hard disk. You open the safe with a password, USB stick or your ActiveSync-capable SmartPhone: via Bluetooth or even wireless. Laptop lost or stolen? With Steganos AntiTheft, you in ...
Tracks Eraser Pro
Visit the Product SiteTracks Eraser Pro is designed to protect you by cleaning up all the tracks of Internet activities on your computer. With only one click, Tracks Eraser allows you to erase the cache, cookies, history, typed URLs, autocomplete memory, index.dat from your br ...
Declasfy
Visit the Product SiteThe program is designed to "wipe" hard disks to meet Department of Defense standards from the Rainbow series concerning declassification (wiping) of hard disks and cleansing of floppy disks. Declasfy writes the entire disk with hex 0s, then 1s (0xff), the ...
Invisible Secrets
Visit the Product SiteInvisible Secrets 4 not only encrypts your data and files for safe keeping or for secure transfer across the net, it also hides them in places that on the surface appear totally innocent, such as picture or sound files, or web pages. These types of files ...
Please visit our sponsors!
