Nsauditor Network Security Auditor
Nsauditor is a network security audit system designed to audit network and detect available security vulnerabilities
in the network. It also provides a set of tools performing a real-time traffic and protocol analysis, showing detailed
listings of all TCP and UDP endpoints on your system, including the owning process name, loaded modules, kernel objects,
memory details, remote address and state of TCP connections, host dns name, country where from, network class type,
service associated with connection, possible trojans associated with port and service description for monitoring.
The Auditor module of Nsauditor can audit network and automatically detect security vulnerabilities, it can also identify
possible security holes in your network, detect potential Trojans installed on users' workstations as well as make a
variety of attack probes, such as stealth port scans, CGI attacks, SMB probes. The NetBios Auditor module is discovering
network information, including NetBIOS Names, LANA, Shares, Security Policy and Information, Groups/Users. Tcp / Udp
scanner scans using all TCP header flags. It also allows protocol scanning and remote OS fingerprint creation.
- Windows 8/7/XP/Vista
- Internet Explorer 5.1 or higher
- Pentium or similar processor
- Stopping Personal Firewall software during scan.
- Administrator privileges on local computer
- 512 MB RAM
|Free to try, $69.00 to buy
- Network Monitoring
Network Monitor shows detailed listings of all TCP and UDP endpoints, including the owning process name and details,
remote address and state of TCP connections,as well as the host dns name,country ,network class,appropriate service
name and service description.
Network Auditor is a tool to discover the network services and to check them for discovering well known
vulnerabilities.This tool creates an audit report.
- NetBIOS Auditor
NetBios Auditor is a tool to discover NetBios names. NetBios names are the names of the Services and Machines.
NetBIOS Scanner is a powerful and a fast tool for exploring networks and scanning a network within a given range of
IP addresses and listing computers which offer NetBIOS resource sharing service as well as their name tables and
- Network Scanner
Network Scanner is a tool that detects if certain TCP/UDP ports are open and can accept connections.
TCP scanners are usually used to check if the remote computer runs services. A port scanner consists of
sending messages to the user-defined port list, and the kind of response received indicates whether the
ports are open. The Port Scanner has the following scan modes: connect scan, SYN stealth, FIN stealth,
Ping sweep, UDP scan, NULL scan, XMAS tree, IP protocol scan, ACK scan.
- Remote System OS detector
Remote OS detector is based on using well known TCP, UDP, ICMP packet probes and using the available OS fingerprints.
- Web Proxy Scanner
Web proxy scanner is a tool to check the vulnerabilities of web servers( this scanner can work as a port scanner if Check CGI Vulnerabilities is not enabled).CGI probes are sent against web servers. The tool provides an ability to turn them off and if the user is running an audit from a proxy server, he/she can configure the scanner to run CGI probes through that proxy.
- MS SQL Server Auditor
This tool allows to perform an audit on a machine running MS SQL server.
- SNMP auditor
The SNMP auditor is a tool that allows to walk through all SNMP MIBs of your nodes and to audit SNMP
community names using values stored in xml database.
- MS RPC Auditor
Audit MSRPC, is a Microsoft implementation of DCE RPC. The auditor dump is a list of named pipes that
are used by Windows RPC services as endpoints. The interface identifier associated with each named pipe
represents the service typically accessed when a given named pipe is used.
- Sun RPC Auditor
Audit Sun RPC uses ONCRPC (Sun RPC) protocols to access the Portmapper daemon/service that typically runs on
port 111 of UNIX or Linux machines.This tool includes a portmapper to dump where a list of all running registered
daemons are shown.
- Packet Filter ( the protocols count will be enhanced in next realizes )
The Packet Filter provides a real-time network packet filtering and analyzing. It filters the packet by all IP,
ICMP, TCP, UDP, NETBIOS-SSN packet header fields.
- LM/NTLM Spider
LM/NTLM Spider is a password audit and recovery tool.
- Intrusion Detection System based on security Events analyzer
Nsauditor Have incrusted intrusion detection system based on Security Event Log analyzing.
Security Event Log Monitor monitors the security event logs of Windows NT/2000/XP servers or
workstations and alerts the possible intrusions/attacks using E-mail,Net Send,Speech Recognation
method or playing user selected voice file.
- Packet Editor (the protocols count will be enhanced in next realizes )
The Packet Editor is a tool to decode IP, ICMP, TCP, UDP, NETBIOS-SSN packets.
- Trojan horses or backdoor software Detector
Port scanner will list all open ports. If the port is a well-known Trojan port, it will be displayed in RED.
Alerts when IP Address Table or Routing Table are changed using E-mail,Net Send,Speech Recognation method or
Playing User selected voice file.
Ping is a tool that provides an opportunity to verify that the specified IP address exists. This tool is used
to ensure that a host you are trying to reach is accessible. Ping also can be used with the host that is
reachable to see how long it takes to get the response back. Also you can get information about the operating
system of remote host .
- Trace Route
TraceRoute is a tool that traces the route (the specific gateway computers at each hop) from a client machine
to the remote host being contacted by reporting all the router IP addresses in between. It also calculates and
displays the amount of time each hop took. TraceRoute is a handy tool for both understanding where problems
exist in the Internet network and for getting a detailed sense of the Internet itself.
- DNS Lookup
DNS lookup converts IP addresses to hostnames and vice versa and obtain aliases. DNS lookup perform advanced
DNS queries, such as MX or CNAME. Full list of queries are A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS,
PTR, HINFO, MINFO,MX,TXT,AXFR,MAILB,MAILA,*.DNS Lookup supports checking if the host is in a Real-time Black
list for spammers Ã¢â‚¬Å“RBL Ã¢â‚¬Å“.
This tool will lookup information on a domain, IP address, or a name. You can select a specific WhoIs Server,
or you can use the 'Default' option to use the default server.
Finger is the tool for discovering user information by using well known finger service.
- Email Validate
The Email Validate Tool is a client utility for checking the validity of an email account.
- Enumerate Computers
Enumerate computers is a tool to enumerate computers in a domain.
- TCP/UDP Client/Server/Port Redirector
This is a useful tool for testing some services, firewall and intrusion detection systems.
This tool also can be used for debugging the program and configuring other network tools.
- Local IP, TCP, UDP and ICMP statistics
This tools shows the IP, TCP, UDP and ICMP statistics. Analyzing this statistics allows the detection of different
kinds of network treatments as well port scanning probes and network attacks.
- IP Routing, Net Table
IP Tables provides the tool to retrieve information releated interface IP address mapping table, IP routing table,
IP-to-physical address mapping table. This tool shows the details about each IP address in the table.The each part
of the table contains information about IP address including address, interface index, subnet mask, broadcast address, reasm size.
- Local Addressing information table
This tool shows the available network interfaces and their IP addresses, Network Mask, Broadcast addresses, PPP,
Multicast and Loopback modes.
- Local Net to media information table
This tool shows the available network adapters and their MAC address, Subnet mask, Gateways, DNS servers, WINS servers,
DHSPs, interface names and other useful information.
- Process Monitor
Process Monitor is a tool to display the list of the processes currently running on computer and shows the program name,
the unique process ID, full path to the program's executable file, name of the file manufacturer, and the name of modules
and kernel objects used by the selected process.
- IP/ASN Country
IP/ISN is a tool to determine which country an IP address or autonomous system number is assigned to.
This tool supports two ways to find the country; searching by IP address or autonomous system number.
- Expert Firewall Controls ( will be available in the next releases )
Personal firewall provides home users and small-business owners with the highest levels of protection.
It stops known and unknown Internet threats and blocks annoying ads.