Network Security Toolkit (NST 42)

Welcome to the Network Security Toolkit (NST). This bootable ISO live USB Flash Drive (NST Live) is based on Fedora. The toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86_64 systems.

The main intent of developing this toolkit was to provide the security professional and network administrator with a comprehensive set of Open Source Network Security Tools. The majority of tools published in the article: Top 125 Security Tools by INSECURE.ORG are available in the toolkit. An advanced Web User Interface (WUI) is provided for system/network administration, navigation, automation, network monitoring, host geolocation, network analysis and configuration of many network and security applications found within the NST distribution. In the virtual world, NST can be used as a network security analysis validation and monitoring tool on enterprise virtual servers hosting virtual machines.

2025-Jun-01

We are pleased to announce the latest NST release: "NST 42 SVN:14476". This release is based on Fedora 42 using Linux Kernel: "kernel-6.14.8-300.fc42.x86_64". This release brings the NST distribution on par with Fedora 42.

This is mostly a maintenance release with improved NST WUI functionality. Below is a summary of some of the feature improvements included in this release:

The NST WUI Network Packet Capture pages have integrated ntop nDPI (Deep Packet Inspection) tools for post capture analysis. The image below: ntopng nDPI graphic and a q text as data query demonstrate example nDPI capabilities. The RGraph Charting Library is used to generate the nDPI graphic using output from the ndpiReader testing tool. The command line nDPI analysis displays packet protocols using the q - Text as Data tool in an NST Shell Console.
ntopng has be refactored and now is run as a docker container.
Added a new NST WUI page for network speed testing: LibreSpeed.
Added a new NST WUI page for Node-RED as a docker container. This design tool is for the creation of event-driven applications by wiring together hardware devices, APIs and online services in new and interesting ways.
A new Environmental Science menu has been added featuring access to earth weather, space weather and earthquake seismology. An enhanced NST WUI page for viewing up to 4 simultaneous Blitzortung Lightning Signals has also been developed.
As always, the networking and security applications included have been updated to their latest version which can be found in the manifest.
For more details related to the code changes for this release, refer to the "Change Log" page or review the change log for an individual RPM package.

NST 42 Release - ntopng nDPI with a q text as data query

2024-May-12

We are pleased to announce the latest NST release: "NST 40 SVN:13973". This release is based on Fedora 40 using Linux Kernel: "kernel-6.8.9-300.fc40.x86_64". This release brings the NST distribution on par with Fedora 40.

This is mostly a maintenance release with improved NST WUI functionality. Below is a summary of the feature improvements included in this release:

Access to the Spiderfoot reconnaissance tool that automatically queries over 100 public data sources (OSINT) to gather intelligence on IPv4 Addresses, Domain Names, E-mail Addresses, Names and more can be run as a docker container. The graphic below: Spiderfoot - NST 38 System Scan was a summary result to determine open exposed ports using this tool.
Access to the Metasploit Framework (MSF) for developing and executing exploit code against a remote target machine can be run as a docker container.
Added the Portainer application, for docker container management, as a docker container.
As always, the networking and security applications included have been updated to their latest version which can be found in the manifest.
For more details related to the code changes for this release, refer to the "Change Log" page or review the change log for an individual RPM package.

NST 40 Release - Spiderfoot Scan of a NST 38 System

EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME PARTS OF THE WORLD. WHEN YOU IMPORT THE PREBUILT NST ISO TO YOUR COUNTRY, RE-DISTRIBUTE IT FROM THERE OR EVEN JUST EMAIL TECHNICAL SUGGESTIONS OR EVEN SOURCE PATCHES TO THE AUTHOR OR OTHER PEOPLE YOU ARE STRONGLY ADVISED TO PAY CLOSE ATTENTION TO ANY EXPORT/IMPORT AND/OR USE LAWS WHICH APPLY TO YOU. THE AUTHORS OF NST ARE NOT LIABLE FOR ANY VIOLATIONS YOU MAKE.

News

Geolocation and Graphic Tool Matrix