I write software for a profession but as a hobby I also enjoy taking programs apart and finding out how they work, writing small utilities for various purposes and improving on other people's work by attempting to write smaller and faster code.
Here are several utilities that I thought I might share with the world. Please be aware though that some of these are now quite outdated, obsolete, abandoned or limited in functionality due to changes in Windows operating systems over the years.
Also included are links to many utilities I've written for Foundstone and McAfee during my long employment at those companies, and most recently for my current employer, CrowdStrike. Since these are buried deep within their respective sites they often don't get the attention they deserve.
The majority of the utilities here are 32 bit Windows based programs, with the latest also being 64 bit compatible, written in straight Win32 API using Microsoft Visual C++ and released as freeware.
Here are several utilities that I thought I might share with the world. Please be aware though that some of these are now quite outdated, obsolete, abandoned or limited in functionality due to changes in Windows operating systems over the years.
Also included are links to many utilities I've written for Foundstone and McAfee during my long employment at those companies, and most recently for my current employer, CrowdStrike. Since these are buried deep within their respective sites they often don't get the attention they deserve.
The majority of the utilities here are 32 bit Windows based programs, with the latest also being 64 bit compatible, written in straight Win32 API using Microsoft Visual C++ and released as freeware.
My own tools (some outdated/obsolete)
BossKey 2.00
CD 1.01
Emunge 1.01
Hash 1.04
IP2 1.04
K9 1.28
MD5File 1.00
Command line utility for showing a file's MD5 digest.
More...
More...
Neutron 1.07
ProgFont
ScripTrap 1.03
Shed 1.01
Timer 1.00
VSSCrack 1.00
A command line tool to crack Microsoft Visual SourceSafe passwords.
More...
More...
VStat 1.00
WotWeb 1.08
XIP 1.00
A command line tool for extracting IP addresses.
More...
More...
CrowdStrike tools I authored
CrowdInspect 1.0.0.1
CrowdInspect 1.0.0.1 - An advanced and enhanced network status reporter with multiple process and hostname reputation sources.
CrowdInspect 1.0.0.1 (external link)
CrowdInspect 1.0.0.1 (external link)
CrowdResponse 1.0.0.1
CrowdResponse 1.0.0.1 - A Windows console application intended to be used for digital forensics and incident response situations. The initial release includes modules for detailed directory enumeration including file hashes, certificate details etc, a comprehensive process listing feature and a fully fledged YARA scanning module to easily scan all process memory and associated binaries with rules of your choice. The package also includes a tool for easy conversion of the native XML output to CSV/TSV/HTML for easier consumption into other analysis tools such as Splunk. We will be releasing additional modules over the coming months so this is something to keep a constant eye on for updates.
CrowdResponse 1.0.0.1 (external link)
CrowdResponse 1.0.0.1 (external link)
CS Heartbleed Scanner 1.2.0.0
CS Heartbleed Scanner 1.2.0.0 - A Windows GUI application to scan the network for systems vulnerable to the infamous OpenSSL Heartbleed issue. Vulnerable systems can have the data extracted to disk for later perusal.
CS Heartbleed Scanner 1.2.0.0 (external link)
CS Heartbleed Scanner 1.2.0.0 (external link)
McAfee/Foundstone tools I authored
Attacker v3.0
BinText 3.03
BOPing
CIScan
Conficker Detection
Conficker Detection vulnerability in Microsoft Windows Server Service.
Conficker Detection (external link)
Conficker Detection (external link)
CSniffer v1.0.0.3
Scan your infrastructure to discover if you have unencrypted Perforce passwords which could be stolen and used to penetrate your source code library.
CSniffer v1.0.0.3 (external link)
CSniffer v1.0.0.3 (external link)
DDosPing
A network admin utility for remotely detecting the most common DDoS programs.
DDosPing (external link)
DDosPing (external link)
DSScan
FileWatch
FPipe 2.1
MessengerScan v1.05
Quickly and accurately identify Microsoft operating systems that are vulnerable to the messenger service buffer overflow released in the MS03-043 bulletin.
MessengerScan v1.05 (external link)
MessengerScan v1.05 (external link)
MS05-039 Scan
MS05-051 Scan
MydoomScanner
NetSchedScan
Night Dragon Vulnerability Detection Tool
Free utility that helps identify systems affected by the "Night Dragon" malware.
Night Dragon Vulnerability Detection Tool (external link)
Night Dragon Vulnerability Detection Tool (external link)
PatchIt v2.0
RPCScan
ScanLine
ShareScan v1.0.0.2
ShareScan is a free utility that enables IT security personnel to identify open Windows file shares available on the internal network.
ShareScan v1.0.0.2 (external link)
ShareScan v1.0.0.2 (external link)
ShoWin v2.0
SNScan
SuperScan
SuperScan v3.0
Trout
UDPFlood
To answer a common question I receive, I do not give out the source code to any of my programs except in exceptional circumstances, nor can I afford the time to answer questions about the source code. Google is your friend!