ToolWar | Information Security (InfoSec) Tools: Frameworks

Samurai Web Testing Framework :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Samurai Web Testing Framework" border="0" height="240" src="http://www.security-database.com/toolswatch/IMG/jpg/samurai.jpg" title="Samurai Web Testing Framework " width="320" /></div>
<div style="text-align: justify;">
The <b>Samurai Web Testing Framework</b> is a free open source live linux distribution that has been pre-configured to function                 as a web or web application pen-testing environment.  The CD contains the best of the open source and free tools that focus on                 testing and attacking websites.  In developing this environment, we have based our tool selection on the                 tools we use in our security practice.  We have included the tools used in all four steps of a web pen-test.</div>
<div style="text-align: justify;">
Starting with reconnaissance, we have included tools  such as the<i> Fierce domain scanner </i>and <i>Maltego</i>.  For mapping,                 we have included tools such  <i>WebScarab and ratproxy.</i>  We  then chose tools for discovery.  These would include w3af                 and burp.  For exploitation, the final stage, we  included BeEF, AJAXShell and much more.  This CD also includes a                 pre-configured wiki, set up to be the central  information store during your pen-test.</div>
<div style="text-align: justify;">
Most penetration tests are focused on either network attacks or web  application attacks. Given this separation,                 many pen testers themselves have understandably followed  suit, specializing in one type of test or the other. While                 such specialization is a sign of a vibrant, healthy  penetration testing industry, tests focused on only one of these                 aspects of a target environment often miss the real  business risks of vulnerabilities discovered and exploited by                 determined and skilled attackers. By combining web app  attacks such as SQL injection, Cross-Site Scripting, and                 Remote File Includes with network attacks such as port  scanning, service compromise, and client-side exploitation,                 the bad guys are significantly more lethal. Penetration  testers and the enterprises who use their services need to                 understand these blended attacks and how to measure  whether they are vulnerable to them. This session provides                 practical examples of penetration tests that combine  such attack vectors, and real-world advice for conducting                 such tests against your own organization.<br />
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="400" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/x85Yqn9erk0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="100%"></iframe></div>
<div style="text-align: center;">
<b> </b></div>
<div style="text-align: left;">
<br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/samurai/files/SamuraiWTF%202.0%20Branch/SamuraiWTF-2.1.vmware.zip/download" target="_blank">SamuraiWTF 2.1</a><b> </b></div>
<div style="text-align: left;">
<b>Official Website ::</b> http://samurai.inguardians.com/</div>
</div>

Samurai Web Testing Framework :: Distribution

The Samurai Web Testing Framework is a free open source live linux distribution that has been pre-configured to function ...

BeEF - The Browser Exploitation Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="BeEF :: ToolWar" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRqA6lAeEBtnECHiOUGy1EH2_Ki9Apvah4cIlAlMmdRSugrvJbrmu6hzSYsgH9g57iNcBod4YAwTY0kVIVoNqFIl_RwwgsSUek-wDJb4Ggqlo2cVCiKPTjRbW9G9FJqVSGYRHBZ3yFvAXa/s1600/beef.png" title="BeEF :: Framework " /></div>
<div style="text-align: justify;">
<b>BeEF</b> is short for<b> The Browser Exploitation Framework</b>. It is a    penetration testing tool that focuses on the web browser.    </div>
<div style="text-align: justify;">
Amid growing concerns about web-borne attacks against clients, including    mobile clients, <b>BeEF</b> allows the professional penetration tester to    assess the actual security posture of a target environment by using    client-side attack vectors. Unlike other security frameworks, <b>BeEF</b> looks    past the hardened network perimeter and client system, and examines    exploitability within the context of the one open door: the web browser.    <b>BeEF</b> will hook one or more web browsers and use them as beachheads for    launching directed command modules and further attacks against the    system from within the browser context.<br />
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/xdbvU_U42kY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: left;">
<br />
<b>Download Here</b><b> ::</b> <a href="https://github.com/beefproject/beef/archive/beef-0.4.4.7.zip" target="_blank">BeEF 0.4.4.7</a></div>
<div style="text-align: left;">
<b>Source </b><b>::</b> http://beefproject.com/</div>
</div>

BeEF - The Browser Exploitation Framework

BeEF is short for The Browser Exploitation Framework . It is a penetration testing tool that focuses on the web browser. Amid ...