Projects

NJAMD: Malloc Debugger

NJAMD (Not Just Another Malloc Debugger) was a project I started after I realized memory issues in C were my biggest source of program bugs and the current solution at the time (Electric Fence) didn't have all the features I wanted. It eventually made it into RedHat, Debian, and a few other distributions, but fell by the wayside once Valgrind came on the scene. My last effort with the project was to rewrite it in C++, just to prove you could write something that low level successfully in C++ and have it still be just as fast, portable, and flexible as plain C. Unfortunately, I never polished or released the C++ code, but you can check it out of sourceforge.

TorCtl: Python Tor Control

TorCtl is a python Tor Controller Protocol library with extensions to support path building with various constraints on node and path selection, as well as statistics gathering. It is fully pydoced, and if I do say so myself is pretty damn spiffy, and supports interaction with Tor path selection at several different layers of abstraction.

CookieMonster: Cookie Hijacking

Cookiemonster is a proof of concept python-based cookie hijacking utility that is able to capture cookies of improperly secured HTTPS sites via the local network. In its default mode of operation, Cookiemonster tracks the HTTPS sites visited by a each local client IP and then automatically injects HTML elements for each HTTPS domain into subsequent regular HTTP requests to a particular client. This causes any insecure HTTPS cookies from the automatically collected target domains to be transmitted unencrypted for capture by Cookiemonster, which then writes them into Firefox 2.0 or 3.0 compatible cookie files.

Zummy: It's Alive!

Zummy is an IRC Q&A bot that used to answer FAQs in the EFnet IRC channel #LinuxOS near the end of the last millennium. He can learn from linking-verb based statements in a channel and subsequently answer questions using those definitions. He also has a keyword-based system that can be programmed by channel ops. Believe it or not, Zummy was actually even quoted in a publication as a consultant, thus passing an unofficial Turing test.

TorFlow: Tor Network Analysis

TorFlow is set of python scripts written to scan the Tor network for misbehaving, misconfigured, and overloaded Tor nodes. The ultimate goal is to build an automated, distributed reputation system that feeds into the Tor directory servers and provides them with information on the stability, capacity, and trustworthiness of routers, so that they can set flags that clients can use in routing decisions. This is admittedly a lofty goal. In the meantime it should be able to figure out a bunch of neat stuff about Tor.

Torbutton: Secure Tor Toggler

Torbutton is a Firefox extension that allows you to securely toggle your usage of the Tor Network on and off via a toolbar button. It provides a number of features to prevent IP address leaks and correlation of Tor and Non-Tor activity, including cookie isolation, history protection, cache management, timezone spoofing, useragent spoofing, and much more.

Syndicate content