Skip to main content
5 votes
Accepted

Malware scanner for websites code?

Try the following scanners to detect potentially malicious PHP files: phpscanner; PHP scanner written in Python for identifying PHP backdoors and php malicious code. This tool is mainly reusing ...
kenorb's user avatar
  • 3,143
5 votes

Software to password-protect individual folder(s) on Windows 7

Compressing the folder using a free tools such as 7zip seems like it would work. Add a password. Folder will have a visible icon, but any attempt to look inside will require a password. Good luck.
user27388's user avatar
5 votes
Accepted

Maximum security web browser

Tor Browser is slow because of the overhead of the Tor anonymizing overlay network, so it is probably not what you are looking for. Brave is an open source, cross-platform web browser for Windows, ...
karel's user avatar
  • 1,636
4 votes

Detecting suspicious ultrasound emitters

I think that the SilverDog chrome extension could well fit your user case - at the moment it is a proof of concept that blocks ultrasonic signals from your browser by placing a audio cut off filter in ...
Steve Barnes's user avatar
  • 31.8k
4 votes

Java equivalent to Ruby's SecureRandom?

tl;dr Integer.toHexString( new SecureRandom().nextInt() ) bd594090 JRuby Run your Ruby code on a JVM with JRuby. java.security.SecureRandom Java includes SecureRandom, a cryptographically ...
Basil Bourque's user avatar
3 votes

Small utility to generate SSHA passwords?

I know this question is fairly old, but I reached it by looking for a tool with those specific requirements. I ended up at this web implementation: https://iguana.alerque.com/slappasswd.html It's ...
Alpha's user avatar
  • 141
3 votes

deleted files secure eraser

You can't find such portable tool. More precisely, it can be portable as "no installation required" but it can't be portable as "no administrator privileges required". Direct disk access requires ...
Qwertiy's user avatar
  • 165
3 votes

Software Licensing in Hostile/Sensitive Environment

We were using a hardware + software solution from Wibu. While we used WibuKey, the proper solution would probably be Codemeter. Codemeter comes with an SDK that you can integrate into your ...
Thomas Weller's user avatar
3 votes

Language/Library to use for unsafe/untrusted code hosted by python

Your use of "safe", "security", and "unsafe" is somewhat vague. But if by security compromising code you are pointing to functionalities that interact with your system's files, processes, ...
psychob's user avatar
  • 61
3 votes

Static Application Security Testing (SAST) Tool for JavaScript

I think sonarqube could be a nice fit. It's meant to integrate with CI and spots certain security problems in javascript.
Andreas Meyer's user avatar
3 votes

Which free antivirus app supports manual scanner only mode without turning off microsoft defender?

I use Clamwin for this. It runs on Windows but is purely manual. It will only scan a file when you tell it to. It does not scan files on access in real time, you can leave that to Defender if you ...
Chenmunka's user avatar
  • 1,785
2 votes

'Fast Zero Write' secure hard disk deletion / wipe software

You drive is small and failing, so I doubt that you will be reusing it. I would suggest a "hardware wipe", which is always quicker than software. Suggestions: a magnet a Black & Decker drill a ...
Mawg's user avatar
  • 9,110
2 votes

Offline passphrase generator for Linux

Ipsum I also wanted a random word generator for creating passwords and couldn't find anything, so I created Ipsum. It is a bash script (intended to be used from the terminal). Ipsum satisfies these ...
NonlinearFruit's user avatar
2 votes

Testing a server for security vulnerabilities

Vulnerability scanners Web penetration testing tools (scanners/crawls): WebCruiser Web Vulnerability Scanner - an effective web penetration testing tool that will aid you in auditing your website. ...
kenorb's user avatar
  • 3,143
2 votes

Private/privacy conscious calendar app for Android (and maybe contact manager) to replace Flock

I know this question is old, but I just came across it and thought I'd share. I think EteSync is exactly what you are looking for. Your Data, Yours Only. Secure, end-to-end encrypted and ...
fbwnd's user avatar
  • 121
2 votes

Tool to find hard-coded passwords in source code

Sonar Secrets is a plugin to SonarQube. It can recognize passwords, API keys, AWS credentials, tokens, etc. from source code. You can read a nice introduction to it in https://medium.com/@...
John Mayor's user avatar
2 votes

Looking for a CLI e-mail sender that supports OAUTH 2.0

I just came by your thread and might not understand your requirement correctly. But if I understood correctly, I think you can use git to send emails with Google Oauth2. $ git send-email --smtp-pass ...
tmh1999's user avatar
  • 21
2 votes

Alert if a process has uploaded more than X bytes over the last Y seconds

NetWorx (gratis) can do this. In the Notifications settings you can set X data within Y time:
laggingreflex's user avatar
2 votes

Tool to determine if any HTTP bookmarks can be replaced with HTTPS equivalents (Firefox)

HTTPS Everywhere is a Firefox plugin is free changes called URLS on the fly from HTTP to HTTPS if possible It does not convert the bookmarks - but as long as you don't want to export your ...
Thomas Weller's user avatar
2 votes

Software to password-protect individual folder(s) on Windows 7

I can suggest a few options that will meet your requirements (or partially). To clarify: My answer will meet your requirement of: needing a password to view the data My answer will not keep the "...
DankyNanky's user avatar
  • 1,522
2 votes
Accepted

Simple, fast, secure KDE Linux distribution

Kubuntu is free, well maintained and has the KDE interface, has a very supportive developer/user community, etc. - I like it a lot and have yet to see any builtin adware, pay-per-whatever and I am ...
Steve Barnes's user avatar
  • 31.8k
2 votes

Non-Google "Find My Phone" for Android devices?

Lookout Security may be a good fit for what you want. The free version will give you: ►FIND MY PHONE • Locate & Scream: Map the location of your device and make it sound an alarm - even ...
Yisroel Tech's user avatar
  • 1,602
2 votes
Accepted

Random, truly memorable password generator

I've settled for the latest version of den4b's RandPass in passphrase mode with a large word list because the generated passphrases are easily memorable and are extremely secure according to every ...
mythofechelon's user avatar
2 votes

Random, truly memorable password generator

Mandatory XKCD reference: Why not just use a dictionary program and choose 4 random words? Probably because while you could remember the passwords, you wouldn't remember which belongs to which ...
Mawg's user avatar
  • 9,110
2 votes

Free Windows Firewall Control Alternative

There is still an answer for your question if someone else needs a very slim alternative: You can use the "Windows Firewall Notifier" (https://github.com/wokhansoft/WFN/releases or from several ...
user3471872's user avatar
2 votes

Store logon data for different types of systems, and apply to GDPR

KeePass can store not only username/password tokens, but many other things. See https://keepass.info/features.html : You can attach files to password entries (useful to store PGP signature files in ...
Patrick Mevzek's user avatar
2 votes

What are my options to encrypt a file before writing it on Python?

First off, avoid 3DES encryption. It exists only as a stop-gap created because of the panic after regular DES was broken but before people had any reasonable alternative. It's only marginally more ...
Austin Hemmelgarn's user avatar
2 votes
Accepted

Tools for checking Spectre (both variants) system vulnerabilities on Windows 10?

SpecuCheck (portable executable, CLI) Website (GitHub); Download page Example image on my computer (green means, you're doing OK): SpeculationControl (PowerShell module, CLI) Website (Microsoft - ...
Vlastimil Burián's user avatar
2 votes

Git file encryption to support file/folder based permission to protect the source code from theft

The encryption of git repository is designed to protect files from the theft from 3rd parties (e.g. when hosted on external servers such as GitHub or S3 Bucket, or by using Keybase), not from the ...
kenorb's user avatar
  • 3,143
2 votes

Pen Testing for REST API

The free alternative that you can look at is SoapUI. For broadly understood security testing I'd consider a stack (eg. consisting of w3af, mitmproxy) rather than one single thing. SPOCK supports ...
bldr's user avatar
  • 76

Only top scored, non community-wiki answers of a minimum length are eligible